< back to search

gpp_maybe Security update for apache2
SUSE-SLE-SAP-12-SP1-2019-888

This update for apache2 fixes the following issues: - CVE-2018-17199: A bug in Apache's "mod_session_cookie" lead to an issue where the module did not respect a cookie's expiry time. [bsc#1122839] * CVE-2019-0220: The Apache HTTP server did not use a consistent strategy for URL normalization throughout all of its components. In particular, consecutive slashes were not always collapsed. Attackers could potentially abuse these inconsistencies to by-pass access control mechanisms and thus gain unauthorized access to protected parts of the service. [bsc#1131241] * CVE-2019-0217: A race condition in Apache's "mod_auth_digest" when running in a threaded server could have allowed users with valid credentials to authenticate using another username, bypassing configured access control restrictions. [bsc#1131239]

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.1 x86_64
  • Packages
    apache2
    The Apache Web Server Version 2.4
    2.4.16-20.24.1 lock rpm lock src
    apache2-doc
    Additional Package Documentation
    2.4.16-20.24.1 lock rpm
    apache2-example-pages
    Example Pages for the Apache 2 Web Server
    2.4.16-20.24.1 lock rpm
    apache2-prefork
    Apache 2 "prefork" MPM (Multi-Processing Module)
    2.4.16-20.24.1 lock rpm
    apache2-utils
    Apache 2 utilities
    2.4.16-20.24.1 lock rpm
    apache2-worker
    Apache 2 worker MPM (Multi-Processing Module)
    2.4.16-20.24.1 lock rpm