Update Info

SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-1868


Security update for apache2


Type: security
Severity: important
Issued: 2024-05-30
Description:
This update for apache2 fixes the following issues:

- CVE-2023-38709: Fixed faulty input validation inside the HTTP response splitting code (bsc#1222330).
- CVE-2024-24795: Fixed handling of malicious HTTP splitting response headers in multiple modules (bsc#1222332).
- CVE-2024-27316: Fixed HTTP/2 CONTINUATION frames that could have been utilized for DoS attacks (bsc#1221401).


              

Packages


  • apache2-2.4.51-150400.6.17.1