SUSE Package Hub - SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-1963

Update Info

SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-1963

Security update for apache2

Type: security

Severity: important

Issued: 2024-06-10

Description:

This update for apache2 fixes the following issues:

- CVE-2023-38709: Fixed HTTP response splitting (bsc#1222330).
- CVE-2024-24795: Fixed HTTP response splitting in multiple modules (bsc#1222332).
- CVE-2024-27316: Fixed HTTP/2 CONTINUATION frames can be utilized for DoS attacks (bsc#1221401).

References

CVE: CVE-2024-27316
CVE: CVE-2024-24795
CVE: CVE-2023-38709
Bugzilla: 1222332 VUL-0: CVE-2024-24795: apache2: HTTP Response Splitting in multiple modules
Bugzilla: 1222330 VUL-0: CVE-2023-38709: apache2: HTTP response splitting
Bugzilla: 1221401 VUL-0: CVE-2024-27316: apache2: VU#421644: HTTP/2 CONTINUATION frames can be utilized for DoS attacks

Packages

apache2-2.4.58-150600.5.3.1

apache2-event-2.4.58-150600.5.3.1