SUSE-SU-2021:2954-1
Security update for apache2
Severity by source
No source gives a CVSS score.
Trivy's own label is CRITICAL. Rated critical by SUSE.
Description
This update for apache2 fixes the following issues: - CVE-2021-33193: Fixed request splitting via HTTP/2 method injection and mod_proxy (bsc#1189387).
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 15.2 | apache2, apache2-devel, apache2-doc and 3 more | 2.4.43-3.25.1 |
| SUSE Linux Enterprise 15.3 | apache2, apache2-devel, apache2-doc and 4 more | 2.4.43-3.25.1 |
Show all 13 entries from 2 sources
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 15.2 | apache2 | 2.4.43-3.25.1 |
| SUSE Linux Enterprise 15.2 | apache2-devel | 2.4.43-3.25.1 |
| SUSE Linux Enterprise 15.2 | apache2-doc | 2.4.43-3.25.1 |
| SUSE Linux Enterprise 15.2 | apache2-prefork | 2.4.43-3.25.1 |
| SUSE Linux Enterprise 15.2 | apache2-utils | 2.4.43-3.25.1 |
| SUSE Linux Enterprise 15.2 | apache2-worker | 2.4.43-3.25.1 |
| SUSE Linux Enterprise 15.3 | apache2 | 2.4.43-3.25.1 |
| SUSE Linux Enterprise 15.3 | apache2-devel | 2.4.43-3.25.1 |
| SUSE Linux Enterprise 15.3 | apache2-doc | 2.4.43-3.25.1 |
| SUSE Linux Enterprise 15.3 | apache2-event | 2.4.43-3.25.1 |
| SUSE Linux Enterprise 15.3 | apache2-prefork | 2.4.43-3.25.1 |
| SUSE Linux Enterprise 15.3 | apache2-utils | 2.4.43-3.25.1 |
| SUSE Linux Enterprise 15.3 | apache2-worker | 2.4.43-3.25.1 |