gpp_maybe Security update for apache2

SUSE-SLE-SDK-12-SP4-2019-2329

This update for apache2 fixes the following issues: Security issues fixed: - CVE-2019-9517: Fixed HTTP/2 implementations that are vulnerable to unconstrained interal data buffering (bsc#1145575). - CVE-2019-10081: Fixed mod_http2 that is vulnerable to memory corruption on early pushes (bsc#1145742). - CVE-2019-10082: Fixed mod_http2 that is vulnerable to read-after-free in h2 connection shutdown (bsc#1145741). - CVE-2019-10092: Fixed limited cross-site scripting in mod_proxy (bsc#1145740). - CVE-2019-10098: Fixed mod_rewrite configuration vulnerablility to open redirect (bsc#1145738).

• Release Date
  Sep 6 2019
• References
  Bugzilla: 1145741, 1145575, 1145738, 1145740, 1145742
  CVEs: CVE-2019-10098, CVE-2019-10081, CVE-2019-10082, CVE-2019-9517, CVE-2019-10092
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.4 x86_64

• Packages
  apache2
  The Apache Web Server Version 2.4

  2.4.23-29.43.1

  lock src

  apache2-devel
  Apache 2 Header and Include Files

  2.4.23-29.43.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.4 aarch64

• Packages
  apache2
  The Apache Web Server Version 2.4

  2.4.23-29.43.1

  lock src

  apache2-devel
  Apache 2 Header and Include Files

  2.4.23-29.43.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.4 s390x

• Packages
  apache2
  The Apache Web Server Version 2.4

  2.4.23-29.43.1

  lock src

  apache2-devel
  Apache 2 Header and Include Files

  2.4.23-29.43.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.4 ppc64le

• Packages
  apache2
  The Apache Web Server Version 2.4

  2.4.23-29.43.1

  lock src

  apache2-devel
  Apache 2 Header and Include Files

  2.4.23-29.43.1

  lock rpm