SUSE-SU-2026:22564-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2026/suse-su-202622564-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22564-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2026:22564-1

Upstream

CVE (13)

CVE-2026-29167
CVE-2026-29170
CVE-2026-34355
CVE-2026-34356
CVE-2026-42535
CVE-2026-42536
CVE-2026-43951
CVE-2026-44119
CVE-2026-44185
CVE-2026-44186
CVE-2026-44631
CVE-2026-48913
CVE-2026-49975

Related

CVE (13)

CVE-2026-29167
CVE-2026-29170
CVE-2026-34355
CVE-2026-34356
CVE-2026-42535
CVE-2026-42536
CVE-2026-43951
CVE-2026-44119
CVE-2026-44185
CVE-2026-44186
CVE-2026-44631
CVE-2026-48913
CVE-2026-49975

Published

2026-07-06T20:21:36Z

Modified

2026-07-15T18:24:11Z

Summary

Security update for apache2

Details

This update for apache2 fixes the following issues

CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976).
CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977).
CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978).
CVE-2026-34356: malicious backend servers can lead to a heap-based buffer overflow (bsc#1267955).
CVE-2026-42535: malicious path manipulation can lead to child process crashes (bsc#1267956).
CVE-2026-42536: processing untrusted content can lead to a heap-based buffer overflow (bsc#1267962).
CVE-2026-43951: out-of-bound read in merge_response_headers can cause crash (bsc#1267963).
CVE-2026-44119: improper privilege management can lead to an unauthorized read (bsc#1267965).
CVE-2026-44185: Stack Buffer Over-Read in mod_ssl OCSP send_request (bsc#1267969).
CVE-2026-44186: responses from an attacker-controlled FTP backend can lead to resource exhaustion and a denial of service (bsc#1267970).
CVE-2026-44631: crafted regular expression can lead to a buffer underwrite (bsc#1267971).
CVE-2026-48913: file handle exhaustion during request processing in mod_http2 can lead to a use-after-free (bsc#1267972).
CVE-2026-49975: Fix cookie header accounting against LimitRequestFields (bsc#1267503).

References

Affected packages

SUSE:Linux Enterprise Server 16.0

apache2

Package

Name: apache2
Purl: pkg:rpm/suse/apache2&distro=SUSE%20Linux%20Enterprise%20Server%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.4.66-160000.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "apache2":  "2.4.66-160000.3.1",
            "apache2-devel":  "2.4.66-160000.3.1",
            "apache2-event":  "2.4.66-160000.3.1",
            "apache2-manual":  "2.4.66-160000.3.1",
            "apache2-prefork":  "2.4.66-160000.3.1",
            "apache2-utils":  "2.4.66-160000.3.1",
            "apache2-worker":  "2.4.66-160000.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22564-1.json"

apache2-devel

Package

Name: apache2-devel
Purl: pkg:rpm/suse/apache2-devel&distro=SUSE%20Linux%20Enterprise%20Server%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.4.66-160000.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "apache2":  "2.4.66-160000.3.1",
            "apache2-devel":  "2.4.66-160000.3.1",
            "apache2-event":  "2.4.66-160000.3.1",
            "apache2-manual":  "2.4.66-160000.3.1",
            "apache2-prefork":  "2.4.66-160000.3.1",
            "apache2-utils":  "2.4.66-160000.3.1",
            "apache2-worker":  "2.4.66-160000.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22564-1.json"

apache2-event

Package

Name: apache2-event
Purl: pkg:rpm/suse/apache2-event&distro=SUSE%20Linux%20Enterprise%20Server%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.4.66-160000.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "apache2":  "2.4.66-160000.3.1",
            "apache2-devel":  "2.4.66-160000.3.1",
            "apache2-event":  "2.4.66-160000.3.1",
            "apache2-manual":  "2.4.66-160000.3.1",
            "apache2-prefork":  "2.4.66-160000.3.1",
            "apache2-utils":  "2.4.66-160000.3.1",
            "apache2-worker":  "2.4.66-160000.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22564-1.json"

apache2-manual

Package

Name: apache2-manual
Purl: pkg:rpm/suse/apache2-manual&distro=SUSE%20Linux%20Enterprise%20Server%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.4.66-160000.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "apache2":  "2.4.66-160000.3.1",
            "apache2-devel":  "2.4.66-160000.3.1",
            "apache2-event":  "2.4.66-160000.3.1",
            "apache2-manual":  "2.4.66-160000.3.1",
            "apache2-prefork":  "2.4.66-160000.3.1",
            "apache2-utils":  "2.4.66-160000.3.1",
            "apache2-worker":  "2.4.66-160000.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22564-1.json"

apache2-prefork

Package

Name: apache2-prefork
Purl: pkg:rpm/suse/apache2-prefork&distro=SUSE%20Linux%20Enterprise%20Server%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.4.66-160000.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "apache2":  "2.4.66-160000.3.1",
            "apache2-devel":  "2.4.66-160000.3.1",
            "apache2-event":  "2.4.66-160000.3.1",
            "apache2-manual":  "2.4.66-160000.3.1",
            "apache2-prefork":  "2.4.66-160000.3.1",
            "apache2-utils":  "2.4.66-160000.3.1",
            "apache2-worker":  "2.4.66-160000.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22564-1.json"

apache2-utils

Package

Name: apache2-utils
Purl: pkg:rpm/suse/apache2-utils&distro=SUSE%20Linux%20Enterprise%20Server%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.4.66-160000.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "apache2":  "2.4.66-160000.3.1",
            "apache2-devel":  "2.4.66-160000.3.1",
            "apache2-event":  "2.4.66-160000.3.1",
            "apache2-manual":  "2.4.66-160000.3.1",
            "apache2-prefork":  "2.4.66-160000.3.1",
            "apache2-utils":  "2.4.66-160000.3.1",
            "apache2-worker":  "2.4.66-160000.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22564-1.json"

apache2-worker

Package

Name: apache2-worker
Purl: pkg:rpm/suse/apache2-worker&distro=SUSE%20Linux%20Enterprise%20Server%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.4.66-160000.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "apache2":  "2.4.66-160000.3.1",
            "apache2-devel":  "2.4.66-160000.3.1",
            "apache2-event":  "2.4.66-160000.3.1",
            "apache2-manual":  "2.4.66-160000.3.1",
            "apache2-prefork":  "2.4.66-160000.3.1",
            "apache2-utils":  "2.4.66-160000.3.1",
            "apache2-worker":  "2.4.66-160000.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22564-1.json"

SUSE:Linux Enterprise Server for SAP applications 16.0

apache2

Package

Name: apache2
Purl: pkg:rpm/suse/apache2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.4.66-160000.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "apache2":  "2.4.66-160000.3.1",
            "apache2-devel":  "2.4.66-160000.3.1",
            "apache2-event":  "2.4.66-160000.3.1",
            "apache2-manual":  "2.4.66-160000.3.1",
            "apache2-prefork":  "2.4.66-160000.3.1",
            "apache2-utils":  "2.4.66-160000.3.1",
            "apache2-worker":  "2.4.66-160000.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22564-1.json"

apache2-devel

Package

Name: apache2-devel
Purl: pkg:rpm/suse/apache2-devel&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.4.66-160000.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "apache2":  "2.4.66-160000.3.1",
            "apache2-devel":  "2.4.66-160000.3.1",
            "apache2-event":  "2.4.66-160000.3.1",
            "apache2-manual":  "2.4.66-160000.3.1",
            "apache2-prefork":  "2.4.66-160000.3.1",
            "apache2-utils":  "2.4.66-160000.3.1",
            "apache2-worker":  "2.4.66-160000.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22564-1.json"

apache2-event

Package

Name: apache2-event
Purl: pkg:rpm/suse/apache2-event&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.4.66-160000.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "apache2":  "2.4.66-160000.3.1",
            "apache2-devel":  "2.4.66-160000.3.1",
            "apache2-event":  "2.4.66-160000.3.1",
            "apache2-manual":  "2.4.66-160000.3.1",
            "apache2-prefork":  "2.4.66-160000.3.1",
            "apache2-utils":  "2.4.66-160000.3.1",
            "apache2-worker":  "2.4.66-160000.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22564-1.json"

apache2-manual

Package

Name: apache2-manual
Purl: pkg:rpm/suse/apache2-manual&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.4.66-160000.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "apache2":  "2.4.66-160000.3.1",
            "apache2-devel":  "2.4.66-160000.3.1",
            "apache2-event":  "2.4.66-160000.3.1",
            "apache2-manual":  "2.4.66-160000.3.1",
            "apache2-prefork":  "2.4.66-160000.3.1",
            "apache2-utils":  "2.4.66-160000.3.1",
            "apache2-worker":  "2.4.66-160000.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22564-1.json"

apache2-prefork

Package

Name: apache2-prefork
Purl: pkg:rpm/suse/apache2-prefork&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.4.66-160000.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "apache2":  "2.4.66-160000.3.1",
            "apache2-devel":  "2.4.66-160000.3.1",
            "apache2-event":  "2.4.66-160000.3.1",
            "apache2-manual":  "2.4.66-160000.3.1",
            "apache2-prefork":  "2.4.66-160000.3.1",
            "apache2-utils":  "2.4.66-160000.3.1",
            "apache2-worker":  "2.4.66-160000.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22564-1.json"

apache2-utils

Package

Name: apache2-utils
Purl: pkg:rpm/suse/apache2-utils&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.4.66-160000.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "apache2":  "2.4.66-160000.3.1",
            "apache2-devel":  "2.4.66-160000.3.1",
            "apache2-event":  "2.4.66-160000.3.1",
            "apache2-manual":  "2.4.66-160000.3.1",
            "apache2-prefork":  "2.4.66-160000.3.1",
            "apache2-utils":  "2.4.66-160000.3.1",
            "apache2-worker":  "2.4.66-160000.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22564-1.json"

apache2-worker

Package

Name: apache2-worker
Purl: pkg:rpm/suse/apache2-worker&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.4.66-160000.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "apache2":  "2.4.66-160000.3.1",
            "apache2-devel":  "2.4.66-160000.3.1",
            "apache2-event":  "2.4.66-160000.3.1",
            "apache2-manual":  "2.4.66-160000.3.1",
            "apache2-prefork":  "2.4.66-160000.3.1",
            "apache2-utils":  "2.4.66-160000.3.1",
            "apache2-worker":  "2.4.66-160000.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22564-1.json"