gpp_maybe Security update for apache2

SUSE-SLE-Module-Server-Applications-15-SP7-2025-2685

This update for apache2 fixes the following issues: - CVE-2024-42516: Fixed HTTP response splitting. (bsc#1246477) - CVE-2024-43204: Fixed a SSRF when mod_proxy is loaded that allows an attacker to send outbound proxy requests to a URL controlled by them. (bsc#1246305) - CVE-2024-47252: Fixed insufficient escaping of user-supplied data in mod_ssl allows an untrusted SSL/TLS client to insert escape characters into log file. (bsc#1246303) - CVE-2025-23048: Fixed access control bypass by trusted clients through TLS 1.3 session resumption in some mod_ssl configurations. (bsc#1246302) - CVE-2025-49630: Fixed denial of service can be triggered by untrusted clients causing an assertion in mod_proxy_http2. (bsc#1246307) - CVE-2025-49812: Fixed Opossum Attack Application Layer Desynchronization using Opportunistic TLS. (bsc#1246169) - CVE-2025-53020: Fixed HTTP/2 denial of service due to late release of memory after effective lifetime. (bsc#1246306)

• Release Date
  Aug 4 2025
• References
  Bugzilla: 1246305, 1246477, 1246303, 1246306, 1246169, 1246307, 1246302
  CVEs: CVE-2024-43204, CVE-2024-42516, CVE-2024-47252, CVE-2025-53020, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812
• Type
  security
• Severity
  important

cloud_download Downloads

Server Applications Module 15.7 aarch64

• Packages
  apache2-devel
  The Apache HTTPD Server

  2.4.62-150700.4.3.1 lock rpm lock src

  apache2-utils
  The Apache HTTPD Server

  2.4.62-150700.4.3.1 lock rpm lock src

  apache2-worker
  The Apache HTTPD Server

  2.4.62-150700.4.3.1 lock rpm lock src

Server Applications Module 15.7 s390x

• Packages
  apache2-devel
  The Apache HTTPD Server

  2.4.62-150700.4.3.1 lock rpm lock src

  apache2-utils
  The Apache HTTPD Server

  2.4.62-150700.4.3.1 lock rpm lock src

  apache2-worker
  The Apache HTTPD Server

  2.4.62-150700.4.3.1 lock rpm lock src

Server Applications Module 15.7 x86_64

• Packages
  apache2-devel
  The Apache HTTPD Server

  2.4.62-150700.4.3.1 lock rpm lock src

  apache2-utils
  The Apache HTTPD Server

  2.4.62-150700.4.3.1 lock rpm lock src

  apache2-worker
  The Apache HTTPD Server

  2.4.62-150700.4.3.1 lock rpm lock src

Server Applications Module 15.7 ppc64le

• Packages
  apache2-devel
  The Apache HTTPD Server

  2.4.62-150700.4.3.1 lock rpm lock src

  apache2-utils
  The Apache HTTPD Server

  2.4.62-150700.4.3.1 lock rpm lock src

  apache2-worker
  The Apache HTTPD Server

  2.4.62-150700.4.3.1 lock rpm lock src