This update for apache2 fixes the following issues:

- CVE-2024-38477: Fixed null pointer dereference in mod_proxy (bsc#1227270)
- CVE-2024-39573: Fixed potential SSRF in mod_rewrite (bsc#1227271)


              

References

---

• CVE: CVE-2024-39573
• CVE: CVE-2024-38477
• Bugzilla: 1227271 VUL-0: CVE-2024-39573: apache2,apache2-tls13: httpd: potential SSRF in mod_rewrite
• Bugzilla: 1227270 VUL-0: CVE-2024-38477: apache2,apache2-tls13: httpd: null pointer dereference in mod_proxy

Packages

---

• apache2-2.4.58-150600.5.11.1

• apache2-event-2.4.58-150600.5.11.1