gpp_maybe
Security update for apache2
SUSE-SLE-SAP-12-SP4-2022-2099
This update for apache2 fixes the following issues: - CVE-2022-26377: Fixed possible request smuggling in mod_proxy_ajp (bsc#1200338) - CVE-2022-28614: Fixed read beyond bounds via ap_rwrite() (bsc#1200340) - CVE-2022-28615: Fixed read beyond bounds in ap_strcmp_match() (bsc#1200341) - CVE-2022-29404: Fixed denial of service in mod_lua r:parsebody (bsc#1200345) - CVE-2022-30556: Fixed information disclosure in mod_lua with websockets (bsc#1200350) - CVE-2022-30522: Fixed mod_sed denial of service (bsc#1200352) - CVE-2022-31813: Fixed mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism (bsc#1200348)
-
Release DateJun 16 2022
-
ReferencesBugzilla: 1200350, 1200345, 1200352, 1200340, 1200338, 1200348, 1200341
CVEs: CVE-2022-29404, CVE-2022-30556, CVE-2022-28615, CVE-2022-26377, CVE-2022-31813, CVE-2022-30522, CVE-2022-28614 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Enterprise Server for SAP Applications 12.4 x86_64
-
Packagesapache2
The Apache Web Server Version 2.4apache2-doc2.4.23-29.91.1lock rpmlock src
Additional Package Documentationapache2-example-pages2.4.23-29.91.1lock rpm
Example Pages for the Apache 2 Web Serverapache2-prefork2.4.23-29.91.1lock rpm
Apache 2 "prefork" MPM (Multi-Processing Module)apache2-utils2.4.23-29.91.1lock rpm
Apache 2 utilitiesapache2-worker2.4.23-29.91.1lock rpm
Apache 2 worker MPM (Multi-Processing Module)2.4.23-29.91.1lock rpm
SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le
-
Packagesapache2
The Apache Web Server Version 2.4apache2-doc2.4.23-29.91.1lock rpmlock src
Additional Package Documentationapache2-example-pages2.4.23-29.91.1lock rpm
Example Pages for the Apache 2 Web Serverapache2-prefork2.4.23-29.91.1lock rpm
Apache 2 "prefork" MPM (Multi-Processing Module)apache2-utils2.4.23-29.91.1lock rpm
Apache 2 utilitiesapache2-worker2.4.23-29.91.1lock rpm
Apache 2 worker MPM (Multi-Processing Module)2.4.23-29.91.1lock rpm