kritik
SUSE-SU-2021:3335-1
Security update for apache2
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
Hiçbir kaynak CVSS puanı vermiyor.
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.
Açıklama
This update for apache2 fixes the following issues: - CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703) - CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702) - CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666) - CVE-2021-34798: Fixed a NULL pointer dereference via malformed requests. (bsc#1190669) - CVE-2021-33193: Fixed request splitting via HTTP/2 method injection and mod_proxy. (bsc#1189387)
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 15 | apache2, apache2-devel, apache2-doc ve 3 tane daha | 2.4.33-3.55.1 |
| SUSE Linux Enterprise 15.1 | apache2, apache2-devel, apache2-doc ve 3 tane daha | 2.4.33-3.55.1 |
2 kaynaktaki 12 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 15 | apache2 | 2.4.33-3.55.1 |
| SUSE Linux Enterprise 15 | apache2-devel | 2.4.33-3.55.1 |
| SUSE Linux Enterprise 15 | apache2-doc | 2.4.33-3.55.1 |
| SUSE Linux Enterprise 15 | apache2-prefork | 2.4.33-3.55.1 |
| SUSE Linux Enterprise 15 | apache2-utils | 2.4.33-3.55.1 |
| SUSE Linux Enterprise 15 | apache2-worker | 2.4.33-3.55.1 |
| SUSE Linux Enterprise 15.1 | apache2 | 2.4.33-3.55.1 |
| SUSE Linux Enterprise 15.1 | apache2-devel | 2.4.33-3.55.1 |
| SUSE Linux Enterprise 15.1 | apache2-doc | 2.4.33-3.55.1 |
| SUSE Linux Enterprise 15.1 | apache2-prefork | 2.4.33-3.55.1 |
| SUSE Linux Enterprise 15.1 | apache2-utils | 2.4.33-3.55.1 |
| SUSE Linux Enterprise 15.1 | apache2-worker | 2.4.33-3.55.1 |
Referanslar
- https://bugzilla.suse.com/1189387
- https://bugzilla.suse.com/1190666
- https://bugzilla.suse.com/1190669
- https://bugzilla.suse.com/1190702
- https://bugzilla.suse.com/1190703
- https://lists.suse.com/pipermail/sle-security-updates/2021-October/009564.html
- https://www.suse.com/security/cve/CVE-2021-33193/
- https://www.suse.com/security/cve/CVE-2021-34798/