< back to search

shield Security update for apache2
SUSE-SLE-SDK-12-SP3-2018-1970

This update for apache2 fixes the following issues: Security issues fixed: - CVE-2016-8743: Fixed liberal whitespace interpretation accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution. (bsc#1016715) - CVE-2016-4975: Fixed possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigated by changes which prohibit CR or LF injection into the "Location" or other outbound header key or value. (bsc#1104826)

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.3 aarch64
  • Packages
    apache2
    The Apache Web Server Version 2.4
    2.4.23-29.24.1
    lock src
    apache2-devel
    Apache 2 Header and Include Files
    2.4.23-29.24.1
    lock rpm
SUSE Linux Enterprise Software Development Kit 12.3 s390x
  • Packages
    apache2
    The Apache Web Server Version 2.4
    2.4.23-29.24.1
    lock src
    apache2-devel
    Apache 2 Header and Include Files
    2.4.23-29.24.1
    lock rpm
SUSE Linux Enterprise Software Development Kit 12.3 ppc64le
  • Packages
    apache2
    The Apache Web Server Version 2.4
    2.4.23-29.24.1
    lock src
    apache2-devel
    Apache 2 Header and Include Files
    2.4.23-29.24.1
    lock rpm
SUSE Linux Enterprise Software Development Kit 12.3 x86_64
  • Packages
    apache2
    The Apache Web Server Version 2.4
    2.4.23-29.24.1
    lock src
    apache2-devel
    Apache 2 Header and Include Files
    2.4.23-29.24.1
    lock rpm