gpp_maybe Security update for apache2

SUSE-SLE-Module-Server-Applications-15-SP6-2024-2597

This update for apache2 fixes the following issues: - CVE-2024-36387: Fixed DoS by null pointer in websocket over HTTP/2 (bsc#1227272) - CVE-2024-38475: Fixed improper escaping of output in mod_rewrite (bsc#1227268) - CVE-2024-38476: Fixed server may use exploitable/malicious backend application output to run local handlers via internal redirect (bsc#1227269)

• Release Date
  Jul 23 2024
• References
  Bugzilla: 1227268, 1227269, 1227272
  CVEs: CVE-2024-36387, CVE-2024-38475, CVE-2024-38476
• Type
  security
• Severity
  important

cloud_download Downloads

Server Applications Module 15.6 aarch64

• Packages
  apache2-devel
  The Apache HTTPD Server

  2.4.58-150600.5.18.1 lock rpm lock src

  apache2-utils
  The Apache HTTPD Server

  2.4.58-150600.5.18.1 lock rpm lock src

  apache2-worker
  The Apache HTTPD Server

  2.4.58-150600.5.18.1 lock rpm lock src

Server Applications Module 15.6 s390x

• Packages
  apache2-devel
  The Apache HTTPD Server

  2.4.58-150600.5.18.1 lock rpm lock src

  apache2-utils
  The Apache HTTPD Server

  2.4.58-150600.5.18.1 lock rpm lock src

  apache2-worker
  The Apache HTTPD Server

  2.4.58-150600.5.18.1 lock rpm lock src

Server Applications Module 15.6 ppc64le

• Packages
  apache2-devel
  The Apache HTTPD Server

  2.4.58-150600.5.18.1 lock rpm lock src

  apache2-utils
  The Apache HTTPD Server

  2.4.58-150600.5.18.1 lock rpm lock src

  apache2-worker
  The Apache HTTPD Server

  2.4.58-150600.5.18.1 lock rpm lock src

Server Applications Module 15.6 x86_64

• Packages
  apache2-devel
  The Apache HTTPD Server

  2.4.58-150600.5.18.1 lock rpm lock src

  apache2-utils
  The Apache HTTPD Server

  2.4.58-150600.5.18.1 lock rpm lock src

  apache2-worker
  The Apache HTTPD Server

  2.4.58-150600.5.18.1 lock rpm lock src