Revision Date: | 2021-10-26 | Version: | 1 |
Title: | Security update for apache2 (Important) |
Description: |
This update for apache2 fixes the following issues:
- CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703) - CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702) - CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666) - CVE-2021-34798: Fixed a NULL pointer dereference via malformed requests. (bsc#1190669)
|
Family: | unix | Class: | patch |
Status: | | Reference(s): | 1010979 1010980 1020451 1020456 1020458 1020460 1045450 1057152 1088278 1114498 1115637 1117328 1120805 1120807 1170826 1175132 1176031 1190666 1190669 1190702 1190703 CVE-2016-9398 CVE-2016-9399 CVE-2017-14132 CVE-2017-5499 CVE-2017-5503 CVE-2017-5504 CVE-2017-5505 CVE-2017-9782 CVE-2018-18873 CVE-2018-19139 CVE-2018-19543 CVE-2018-20570 CVE-2018-20622 CVE-2018-9252 CVE-2020-24553 CVE-2021-34798 CVE-2021-36160 CVE-2021-39275 CVE-2021-40438 SUSE-SU-2020:2689-1 SUSE-SU-2020:2776-1 SUSE-SU-2021:3522-1
|
Platform(s): | SUSE Linux Enterprise Desktop 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Storage 7 SUSE Manager Proxy 4.1 SUSE Manager Server 4.1
| Product(s): | |
Definition Synopsis |
SUSE Linux Enterprise Module for Development Tools 15 SP2 is installed AND Package Information
go1.15-1.15.2-1.3 is installed
OR go1.15-doc-1.15.2-1.3 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed
AND Package Information
jasper-2.0.14-3.16 is installed
OR libjasper4-2.0.14-3.16 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed
AND Package Information
apache2-2.4.43-3.32.1 is installed
OR apache2-prefork-2.4.43-3.32.1 is installed
OR apache2-utils-2.4.43-3.32.1 is installed
|