Update Info


Security update for apache2

Type: security
Severity: important
Issued: 2022-01-17
This update for apache2 fixes the following issues:

Apache2 was updated to the current stable version 2.4.51 (jsc#SLE-22733 jsc#SLE-22849)

It fixes all CVEs and selected bugs represented by patches found between 2.4.23 and 2.4.51.

See https://downloads.apache.org/httpd/CHANGES_2.4 for a complete change log.

Also fixed:

- CVE-2021-44224: Fixed NULL dereference or SSRF in forward proxy configurations (bsc#1193943)
- CVE-2021-44790: Fixed buffer overflow when parsing multipart content in mod_lua (bsc#1193942)



  • apache2-2.4.51-3.37.1