< back to search

gpp_maybe Security update for apache2

SUSE-SLE-Module-Server-Applications-15-SP6-2024-1868

This update for apache2 fixes the following issues: - CVE-2023-38709: Fixed faulty input validation inside the HTTP response splitting code (bsc#1222330). - CVE-2024-24795: Fixed handling of malicious HTTP splitting response headers in multiple modules (bsc#1222332). - CVE-2024-27316: Fixed HTTP/2 CONTINUATION frames that could have been utilized for DoS attacks (bsc#1221401).

Release Date

May 30 2024
References

Bugzilla: 1222330, 1221401, 1222332
CVEs: CVE-2024-27316, CVE-2024-24795, CVE-2023-38709
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Server Applications Module 15.6 ppc64le

Packages

apache2
The Apache Web Server

2.4.51-150400.6.17.1 lock src

apache2-doc
Additional Package Documentation

2.4.51-150400.6.17.1 lock rpm

Server Applications Module 15.6 aarch64

Packages

apache2
The Apache Web Server

2.4.51-150400.6.17.1 lock src

apache2-doc
Additional Package Documentation

2.4.51-150400.6.17.1 lock rpm

Server Applications Module 15.6 s390x

Packages

apache2
The Apache Web Server

2.4.51-150400.6.17.1 lock src

apache2-doc
Additional Package Documentation

2.4.51-150400.6.17.1 lock rpm

Server Applications Module 15.6 x86_64

Packages

apache2
The Apache Web Server

2.4.51-150400.6.17.1 lock src

apache2-doc
Additional Package Documentation

2.4.51-150400.6.17.1 lock rpm