critique
openSUSE-SU-2022:0091-1
Security update for apache2
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
Aucune source ne donne de score CVSS.
Le label propre à Trivy est CRITICAL. Critique selon SUSE.
Description
This update for apache2 fixes the following issues: Apache2 was updated to the current stable version 2.4.51 (jsc#SLE-22733 jsc#SLE-22849) It fixes all CVEs and selected bugs represented by patches found between 2.4.23 and 2.4.51. See https://downloads.apache.org/httpd/CHANGES_2.4 for a complete change log. Also fixed: - CVE-2021-44224: Fixed NULL dereference or SSRF in forward proxy configurations (bsc#1193943) - CVE-2021-44790: Fixed buffer overflow when parsing multipart content in mod_lua (bsc#1193942)
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| openSUSE Leap 15.3 | apache2, apache2-devel, apache2-doc et 7 autres | 2.4.51-3.37.1 et 1 autres |
Afficher les 10 entrées d'une source
| Source | Paquet | Corrigé en |
|---|---|---|
| openSUSE Leap 15.3 | apache2 | 2.4.51-3.37.1 |
| openSUSE Leap 15.3 | apache2-devel | 2.4.51-3.37.1 |
| openSUSE Leap 15.3 | apache2-doc | 2.4.51-3.37.1 |
| openSUSE Leap 15.3 | apache2-event | 2.4.51-3.37.1 |
| openSUSE Leap 15.3 | apache2-example-pages | 2.4.51-3.37.1 |
| openSUSE Leap 15.3 | apache2-prefork | 2.4.51-3.37.1 |
| openSUSE Leap 15.3 | apache2-utils | 2.4.51-3.37.1 |
| openSUSE Leap 15.3 | apache2-worker | 2.4.51-3.37.1 |
| openSUSE Leap 15.3 | chromedriver | 99.0.4844.84-bp153.2.75.1 |
| openSUSE Leap 15.3 | chromium | 99.0.4844.84-bp153.2.75.1 |
Références
- https://bugzilla.suse.com/1193942
- https://bugzilla.suse.com/1193943
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LQX4BVMFKUTV6DOPDTL26H5DQJJFUPXZ/
- https://www.suse.com/security/cve/CVE-2021-44224/
- https://www.suse.com/security/cve/CVE-2021-44790/
- https://www.suse.com/support/security/rating/