Update Info

SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2021-3522


Security update for apache2


Type: security
Severity: important
Issued: 2021-10-26
Description:
This update for apache2 fixes the following issues:

- CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703)
- CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702)
- CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666)
- CVE-2021-34798: Fixed a NULL pointer dereference via malformed requests. (bsc#1190669)


              

Packages


  • apache2-2.4.43-3.32.1