SUSE-SU-2022:0119-1
Security update for apache2
Severity by source
No source gives a CVSS score.
Trivy's own label is CRITICAL. Rated critical by SUSE.
Description
This update for apache2 fixes the following issues: - CVE-2021-44224: Fixed NULL dereference or SSRF in forward proxy configurations. (bsc#1193943) - CVE-2021-44790: Fixed buffer overflow when parsing multipart content in mod_lua. (bsc#1193942)
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 15 | apache2, apache2-devel, apache2-doc and 3 more | 2.4.33-3.61.1 |
| SUSE Linux Enterprise 15.1 | apache2, apache2-devel, apache2-doc and 3 more | 2.4.33-3.61.1 |
Show all 12 entries from 2 sources
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 15 | apache2 | 2.4.33-3.61.1 |
| SUSE Linux Enterprise 15 | apache2-devel | 2.4.33-3.61.1 |
| SUSE Linux Enterprise 15 | apache2-doc | 2.4.33-3.61.1 |
| SUSE Linux Enterprise 15 | apache2-prefork | 2.4.33-3.61.1 |
| SUSE Linux Enterprise 15 | apache2-utils | 2.4.33-3.61.1 |
| SUSE Linux Enterprise 15 | apache2-worker | 2.4.33-3.61.1 |
| SUSE Linux Enterprise 15.1 | apache2 | 2.4.33-3.61.1 |
| SUSE Linux Enterprise 15.1 | apache2-devel | 2.4.33-3.61.1 |
| SUSE Linux Enterprise 15.1 | apache2-doc | 2.4.33-3.61.1 |
| SUSE Linux Enterprise 15.1 | apache2-prefork | 2.4.33-3.61.1 |
| SUSE Linux Enterprise 15.1 | apache2-utils | 2.4.33-3.61.1 |
| SUSE Linux Enterprise 15.1 | apache2-worker | 2.4.33-3.61.1 |
References
- https://bugzilla.suse.com/1193942
- https://bugzilla.suse.com/1193943
- https://lists.suse.com/pipermail/sle-security-updates/2022-January/010025.html
- https://www.suse.com/security/cve/CVE-2021-44224/
- https://www.suse.com/security/cve/CVE-2021-44790/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2022/suse-su-20220119-1/