Security update for apache2 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:1885-2 Final 1 1 2015-10-01T14:20:47Z current 2015-10-01T14:20:47Z 2015-10-01T14:20:47Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for apache2 Apache was updated to fix one security vulnerability and two bugs. Following security issue was fixed. - Fix the chunked transfer coding implementation in the Apache (bsc#938728, CVE-2015-3183) Bugs fixed: - add SSLSessionTickets directive (bsc#941676) - hardcode modules %files (bsc#444878) - only enable the port 443 for TCP protocol, not UDP. (bsc#931002) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp3-apache2-12181,sdksp4-apache2-12181,slessp3-apache2-12181,slessp4-apache2-12181,slestso13-apache2-12181 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20151885-2/ Link for SUSE-SU-2015:1885-2 https://lists.suse.com/pipermail/sle-security-updates/2015-November/001662.html E-Mail link for SUSE-SU-2015:1885-2 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/444878 SUSE Bug 444878 https://bugzilla.suse.com/931002 SUSE Bug 931002 https://bugzilla.suse.com/938728 SUSE Bug 938728 https://bugzilla.suse.com/941676 SUSE Bug 941676 https://www.suse.com/security/cve/CVE-2015-3183/ SUSE CVE CVE-2015-3183 page SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP3 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Studio Onsite 1.3 apache2-2.2.12-59.1 apache2-devel-2.2.12-59.1 apache2-doc-2.2.12-59.1 apache2-example-pages-2.2.12-59.1 apache2-prefork-2.2.12-59.1 apache2-utils-2.2.12-59.1 apache2-worker-2.2.12-59.1 apache2-2.2.12-59.1 as a component of SUSE Linux Enterprise Server 11 SP3 apache2-doc-2.2.12-59.1 as a component of SUSE Linux Enterprise Server 11 SP3 apache2-example-pages-2.2.12-59.1 as a component of SUSE Linux Enterprise Server 11 SP3 apache2-prefork-2.2.12-59.1 as a component of SUSE Linux Enterprise Server 11 SP3 apache2-utils-2.2.12-59.1 as a component of SUSE Linux Enterprise Server 11 SP3 apache2-worker-2.2.12-59.1 as a component of SUSE Linux Enterprise Server 11 SP3 apache2-2.2.12-59.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA apache2-doc-2.2.12-59.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA apache2-example-pages-2.2.12-59.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA apache2-prefork-2.2.12-59.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA apache2-utils-2.2.12-59.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA apache2-worker-2.2.12-59.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA apache2-2.2.12-59.1 as a component of SUSE Linux Enterprise Server 11 SP4 apache2-doc-2.2.12-59.1 as a component of SUSE Linux Enterprise Server 11 SP4 apache2-example-pages-2.2.12-59.1 as a component of SUSE Linux Enterprise Server 11 SP4 apache2-prefork-2.2.12-59.1 as a component of SUSE Linux Enterprise Server 11 SP4 apache2-utils-2.2.12-59.1 as a component of SUSE Linux Enterprise Server 11 SP4 apache2-worker-2.2.12-59.1 as a component of SUSE Linux Enterprise Server 11 SP4 apache2-2.2.12-59.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 apache2-doc-2.2.12-59.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 apache2-example-pages-2.2.12-59.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 apache2-prefork-2.2.12-59.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 apache2-utils-2.2.12-59.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 apache2-worker-2.2.12-59.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 apache2-2.2.12-59.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 apache2-doc-2.2.12-59.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 apache2-example-pages-2.2.12-59.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 apache2-prefork-2.2.12-59.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 apache2-utils-2.2.12-59.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 apache2-worker-2.2.12-59.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 apache2-2.2.12-59.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 apache2-devel-2.2.12-59.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 apache2-doc-2.2.12-59.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 apache2-example-pages-2.2.12-59.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 apache2-prefork-2.2.12-59.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 apache2-utils-2.2.12-59.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 apache2-worker-2.2.12-59.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 apache2-2.2.12-59.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-devel-2.2.12-59.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-doc-2.2.12-59.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-example-pages-2.2.12-59.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-prefork-2.2.12-59.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-utils-2.2.12-59.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-worker-2.2.12-59.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 apache2-devel-2.2.12-59.1 as a component of SUSE Studio Onsite 1.3 The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remote attackers to conduct HTTP request smuggling attacks via a crafted request, related to mishandling of large chunk-size values and invalid chunk-extension characters in modules/http/http_filters.c. CVE-2015-3183 SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-2.2.12-59.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-doc-2.2.12-59.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-example-pages-2.2.12-59.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-prefork-2.2.12-59.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-utils-2.2.12-59.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:apache2-worker-2.2.12-59.1 SUSE Linux Enterprise Server 11 SP3:apache2-2.2.12-59.1 SUSE Linux Enterprise Server 11 SP3:apache2-doc-2.2.12-59.1 SUSE Linux Enterprise Server 11 SP3:apache2-example-pages-2.2.12-59.1 SUSE Linux Enterprise Server 11 SP3:apache2-prefork-2.2.12-59.1 SUSE Linux Enterprise Server 11 SP3:apache2-utils-2.2.12-59.1 SUSE Linux Enterprise Server 11 SP3:apache2-worker-2.2.12-59.1 SUSE Linux Enterprise Server 11 SP4:apache2-2.2.12-59.1 SUSE Linux Enterprise Server 11 SP4:apache2-doc-2.2.12-59.1 SUSE Linux Enterprise Server 11 SP4:apache2-example-pages-2.2.12-59.1 SUSE Linux Enterprise Server 11 SP4:apache2-prefork-2.2.12-59.1 SUSE Linux Enterprise Server 11 SP4:apache2-utils-2.2.12-59.1 SUSE Linux Enterprise Server 11 SP4:apache2-worker-2.2.12-59.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-2.2.12-59.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-doc-2.2.12-59.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-example-pages-2.2.12-59.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-prefork-2.2.12-59.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-utils-2.2.12-59.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:apache2-worker-2.2.12-59.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:apache2-2.2.12-59.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:apache2-doc-2.2.12-59.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:apache2-example-pages-2.2.12-59.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:apache2-prefork-2.2.12-59.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:apache2-utils-2.2.12-59.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:apache2-worker-2.2.12-59.1 SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-2.2.12-59.1 SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-devel-2.2.12-59.1 SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-doc-2.2.12-59.1 SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-example-pages-2.2.12-59.1 SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-prefork-2.2.12-59.1 SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-utils-2.2.12-59.1 SUSE Linux Enterprise Software Development Kit 11 SP3:apache2-worker-2.2.12-59.1 SUSE Linux Enterprise Software Development Kit 11 SP4:apache2-2.2.12-59.1 SUSE Linux Enterprise Software Development Kit 11 SP4:apache2-devel-2.2.12-59.1 SUSE Linux Enterprise Software Development Kit 11 SP4:apache2-doc-2.2.12-59.1 SUSE Linux Enterprise Software Development Kit 11 SP4:apache2-example-pages-2.2.12-59.1 SUSE Linux Enterprise Software Development Kit 11 SP4:apache2-prefork-2.2.12-59.1 SUSE Linux Enterprise Software Development Kit 11 SP4:apache2-utils-2.2.12-59.1 SUSE Linux Enterprise Software Development Kit 11 SP4:apache2-worker-2.2.12-59.1 SUSE Studio Onsite 1.3:apache2-devel-2.2.12-59.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151885-2/ https://www.suse.com/security/cve/CVE-2015-3183.html CVE-2015-3183 https://bugzilla.suse.com/938728 SUSE Bug 938728 https://bugzilla.suse.com/948325 SUSE Bug 948325 https://bugzilla.suse.com/949218 SUSE Bug 949218