gpp_maybe Security update for apache2

SUSE-SLE-SAP-12-SP1-2020-1111

This update for apache2 fixes the following issues: - CVE-2020-1934: mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server (bsc#1168404). - CVE-2020-1927: mod_rewrite configurations vulnerable to open redirect (bsc#1168407). - CVE-2020-1938: mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy AJP13 authentication (bsc#1169066).

• Release Date
  Apr 24 2020
• References
  Bugzilla: 1168404, 1169066, 1168407
  CVEs: CVE-2020-1938, CVE-2020-1927, CVE-2020-1934
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.1 x86_64

• Packages
  apache2
  The Apache Web Server Version 2.4

  2.4.16-20.29.1

  lock rpm

  lock src

  apache2-doc
  Additional Package Documentation

  2.4.16-20.29.1

  lock rpm

  apache2-example-pages
  Example Pages for the Apache 2 Web Server

  2.4.16-20.29.1

  lock rpm

  apache2-prefork
  Apache 2 "prefork" MPM (Multi-Processing Module)

  2.4.16-20.29.1

  lock rpm

  apache2-utils
  Apache 2 utilities

  2.4.16-20.29.1

  lock rpm

  apache2-worker
  Apache 2 worker MPM (Multi-Processing Module)

  2.4.16-20.29.1

  lock rpm