SUSE-SU-2022:0091-2

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2022:0091-2

Related

Published

2022-01-20T15:28:01Z

Modified

2022-01-20T15:28:01Z

Summary

Security update for apache2

Details

This update for apache2 fixes the following issues:

Apache2 was updated to the current stable version 2.4.51 (jsc#SLE-22733 jsc#SLE-22849)

It fixes all CVEs and selected bugs represented by patches found between 2.4.23 and 2.4.51.

See https://downloads.apache.org/httpd/CHANGES_2.4 for a complete change log.

Also fixed:

CVE-2021-44224: Fixed NULL dereference or SSRF in forward proxy configurations (bsc#1193943)
CVE-2021-44790: Fixed buffer overflow when parsing multipart content in mod_lua (bsc#1193942)

References

Affected packages

Name: apache2
Purl: purl:rpm/suse/apache2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP2

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.51-3.37.1

{
    "binaries": [
        {
            "apache2-event": "2.4.51-3.37.1"
        }
    ]
}