SUSE-SU-2022:0440-1
Security update for apache2
Kaynağa göre önem derecesi
Hiçbir kaynak CVSS puanı vermiyor.
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.
Açıklama
This update for apache2 fixes the following issues: - CVE-2021-44224: Fixed NULL dereference or SSRF in forward proxy configurations (bsc#1193943) - CVE-2021-44790: Fixed a buffer overflow when parsing multipart content in mod_lua (bsc#1193942) This update also enables TLS 1.3 support, by building against openssl 1.1 [jsc#SLE-18664]
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 12.5 | apache2, apache2-devel, apache2-doc ve 4 tane daha | 2.4.51-35.7.1 |
1 kaynaktaki 7 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 12.5 | apache2 | 2.4.51-35.7.1 |
| SUSE Linux Enterprise 12.5 | apache2-devel | 2.4.51-35.7.1 |
| SUSE Linux Enterprise 12.5 | apache2-doc | 2.4.51-35.7.1 |
| SUSE Linux Enterprise 12.5 | apache2-example-pages | 2.4.51-35.7.1 |
| SUSE Linux Enterprise 12.5 | apache2-prefork | 2.4.51-35.7.1 |
| SUSE Linux Enterprise 12.5 | apache2-utils | 2.4.51-35.7.1 |
| SUSE Linux Enterprise 12.5 | apache2-worker | 2.4.51-35.7.1 |
Referanslar
- https://bugzilla.suse.com/1193942
- https://bugzilla.suse.com/1193943
- https://lists.suse.com/pipermail/sle-security-updates/2022-February/010231.html
- https://www.suse.com/security/cve/CVE-2021-44224/
- https://www.suse.com/security/cve/CVE-2021-44790/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2022/suse-su-20220440-1/