Oval Definition:oval:org.opensuse.security:def:69166
Revision Date:2022-01-17Version:1
Title:Security update for apache2 (Important)
Description:

This update for apache2 fixes the following issues:

Apache2 was updated to the current stable version 2.4.51 (jsc#SLE-22733 jsc#SLE-22849)

It fixes all CVEs and selected bugs represented by patches found between 2.4.23 and 2.4.51.

See https://downloads.apache.org/httpd/CHANGES_2.4 for a complete change log.

Also fixed:

- CVE-2021-44224: Fixed NULL dereference or SSRF in forward proxy configurations (bsc#1193943) - CVE-2021-44790: Fixed buffer overflow when parsing multipart content in mod_lua (bsc#1193942)

Family:unixClass:patch
Status:Reference(s):1103203
1115375
1141780
1141782
1141783
1141784
1141785
1141786
1141787
1141789
1160467
1160468
1193942
1193943
CVE-2019-14896
CVE-2019-14897
CVE-2019-2745
CVE-2019-2762
CVE-2019-2766
CVE-2019-2769
CVE-2019-2786
CVE-2019-2816
CVE-2019-2842
CVE-2019-7317
CVE-2021-44224
CVE-2021-44790
SUSE-SU-2019:2021-1
SUSE-SU-2022:0091-1
Platform(s):SUSE Linux Enterprise High Performance Computing 15 SP3
SUSE Linux Enterprise Module for Legacy Software 15 SP1
SUSE Linux Enterprise Module for Live Patching 15 SP1
SUSE Linux Enterprise Module for Server Applications 15 SP3
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server for SAP Applications 15 SP3
SUSE Manager Proxy 4.2
SUSE Manager Server 4.2
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed
  • AND Package Information
  • kernel-livepatch-4_12_14-197_10-default-5-2 is installed
  • OR kernel-livepatch-SLE15-SP1_Update_3-5-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Legacy Software 15 SP1 is installed
  • AND Package Information
  • java-1_8_0-openjdk-1.8.0.222-3.24 is installed
  • OR java-1_8_0-openjdk-demo-1.8.0.222-3.24 is installed
  • OR java-1_8_0-openjdk-devel-1.8.0.222-3.24 is installed
  • OR java-1_8_0-openjdk-headless-1.8.0.222-3.24 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 SP3 is installed
  • AND Package Information
  • apache2-devel-2.4.51-3.37.1 is installed
  • OR apache2-doc-2.4.51-3.37.1 is installed
  • OR apache2-worker-2.4.51-3.37.1 is installed
  • BACK