< back to search

gpp_maybe Security update for apache2
SUSE-SLE-Module-Server-Applications-15-SP7-2025-2682

This update for apache2 fixes the following issues: - CVE-2024-42516: Fixed HTTP response splitting. (bsc#1246477) - CVE-2024-43204: Fixed a SSRF when mod_proxy is loaded that allows an attacker to send outbound proxy requests to a URL controlled by them. (bsc#1246305) - CVE-2024-47252: Fixed insufficient escaping of user-supplied data in mod_ssl allows an untrusted SSL/TLS client to insert escape characters into log file. (bsc#1246303) - CVE-2025-23048: Fixed access control bypass by trusted clients through TLS 1.3 session resumption in some mod_ssl configurations. (bsc#1246302) - CVE-2025-49630: Fixed denial of service can be triggered by untrusted clients causing an assertion in mod_proxy_http2. (bsc#1246307) - CVE-2025-49812: Fixed Opossum Attack Application Layer Desynchronization using Opportunistic TLS. (bsc#1246169) - CVE-2025-53020: Fixed HTTP/2 denial of service due to late release of memory after effective lifetime. (bsc#1246306)

cloud_download Downloads

Server Applications Module 15.7 s390x
  • Packages
    apache2
    The Apache Web Server
    2.4.51-150400.6.46.1 lock src
    apache2-doc
    Additional Package Documentation
    2.4.51-150400.6.46.1 lock rpm
Server Applications Module 15.7 x86_64
  • Packages
    apache2
    The Apache Web Server
    2.4.51-150400.6.46.1 lock src
    apache2-doc
    Additional Package Documentation
    2.4.51-150400.6.46.1 lock rpm
Server Applications Module 15.7 ppc64le
  • Packages
    apache2
    The Apache Web Server
    2.4.51-150400.6.46.1 lock src
    apache2-doc
    Additional Package Documentation
    2.4.51-150400.6.46.1 lock rpm
Server Applications Module 15.7 aarch64
  • Packages
    apache2
    The Apache Web Server
    2.4.51-150400.6.46.1 lock src
    apache2-doc
    Additional Package Documentation
    2.4.51-150400.6.46.1 lock rpm