Security update for apache2 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:2450-1 Final 1 1 2020-09-02T09:48:12Z current 2020-09-02T09:48:12Z 2020-09-02T09:48:12Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for apache2 This update for apache2 fixes the following issues: - CVE-2020-9490: Fixed a crash caused by a specially crafted value for the 'Cache-Digest' header in a HTTP/2 request (bsc#1175071). - CVE-2020-11985: IP address spoofing when proxying using mod_remoteip and mod_rewrite (bsc#1175072). - CVE-2020-11993: When trace/debug was enabled for the HTTP/2 module logging statements were made on the wrong connection (bsc#1175070). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). HPE-Helion-OpenStack-8-2020-2450,SUSE-2020-2450,SUSE-OpenStack-Cloud-7-2020-2450,SUSE-OpenStack-Cloud-8-2020-2450,SUSE-OpenStack-Cloud-9-2020-2450,SUSE-OpenStack-Cloud-Crowbar-8-2020-2450,SUSE-OpenStack-Cloud-Crowbar-9-2020-2450,SUSE-SLE-SAP-12-SP2-2020-2450,SUSE-SLE-SAP-12-SP3-2020-2450,SUSE-SLE-SAP-12-SP4-2020-2450,SUSE-SLE-SDK-12-SP5-2020-2450,SUSE-SLE-SERVER-12-SP2-2020-2450,SUSE-SLE-SERVER-12-SP2-BCL-2020-2450,SUSE-SLE-SERVER-12-SP3-2020-2450,SUSE-SLE-SERVER-12-SP3-BCL-2020-2450,SUSE-SLE-SERVER-12-SP4-LTSS-2020-2450,SUSE-SLE-SERVER-12-SP5-2020-2450,SUSE-Storage-5-2020-2450 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20202450-1/ Link for SUSE-SU-2020:2450-1 https://lists.suse.com/pipermail/sle-security-updates/2020-September/007331.html E-Mail link for SUSE-SU-2020:2450-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1175070 SUSE Bug 1175070 https://bugzilla.suse.com/1175071 SUSE Bug 1175071 https://bugzilla.suse.com/1175072 SUSE Bug 1175072 https://www.suse.com/security/cve/CVE-2020-11985/ SUSE CVE CVE-2020-11985 page https://www.suse.com/security/cve/CVE-2020-11993/ SUSE CVE CVE-2020-11993 page https://www.suse.com/security/cve/CVE-2020-9490/ SUSE CVE CVE-2020-9490 page HPE Helion OpenStack 8 SUSE Enterprise Storage 5 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 apache2-2.4.23-29.63.1 apache2-doc-2.4.23-29.63.1 apache2-example-pages-2.4.23-29.63.1 apache2-prefork-2.4.23-29.63.1 apache2-utils-2.4.23-29.63.1 apache2-worker-2.4.23-29.63.1 apache2-devel-2.4.23-29.63.1 apache2-event-2.4.23-29.63.1 apache2-2.4.23-29.63.1 as a component of HPE Helion OpenStack 8 apache2-doc-2.4.23-29.63.1 as a component of HPE Helion OpenStack 8 apache2-example-pages-2.4.23-29.63.1 as a component of HPE Helion OpenStack 8 apache2-prefork-2.4.23-29.63.1 as a component of HPE Helion OpenStack 8 apache2-utils-2.4.23-29.63.1 as a component of HPE Helion OpenStack 8 apache2-worker-2.4.23-29.63.1 as a component of HPE Helion OpenStack 8 apache2-2.4.23-29.63.1 as a component of SUSE Enterprise Storage 5 apache2-doc-2.4.23-29.63.1 as a component of SUSE Enterprise Storage 5 apache2-example-pages-2.4.23-29.63.1 as a component of SUSE Enterprise Storage 5 apache2-prefork-2.4.23-29.63.1 as a component of SUSE Enterprise Storage 5 apache2-utils-2.4.23-29.63.1 as a component of SUSE Enterprise Storage 5 apache2-worker-2.4.23-29.63.1 as a component of SUSE Enterprise Storage 5 apache2-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL apache2-doc-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL apache2-example-pages-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL apache2-prefork-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL apache2-utils-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL apache2-worker-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL apache2-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS apache2-doc-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS apache2-example-pages-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS apache2-prefork-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS apache2-utils-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS apache2-worker-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS apache2-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL apache2-doc-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL apache2-example-pages-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL apache2-prefork-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL apache2-utils-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL apache2-worker-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL apache2-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS apache2-doc-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS apache2-example-pages-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS apache2-prefork-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS apache2-utils-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS apache2-worker-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS apache2-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS apache2-doc-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS apache2-example-pages-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS apache2-prefork-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS apache2-utils-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS apache2-worker-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS apache2-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP5 apache2-doc-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP5 apache2-example-pages-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP5 apache2-prefork-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP5 apache2-utils-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP5 apache2-worker-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server 12 SP5 apache2-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 apache2-doc-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 apache2-example-pages-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 apache2-prefork-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 apache2-utils-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 apache2-worker-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 apache2-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 apache2-doc-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 apache2-example-pages-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 apache2-prefork-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 apache2-utils-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 apache2-worker-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 apache2-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 apache2-doc-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 apache2-example-pages-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 apache2-prefork-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 apache2-utils-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 apache2-worker-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 apache2-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 apache2-doc-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 apache2-example-pages-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 apache2-prefork-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 apache2-utils-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 apache2-worker-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 apache2-devel-2.4.23-29.63.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 apache2-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud 7 apache2-doc-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud 7 apache2-example-pages-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud 7 apache2-prefork-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud 7 apache2-utils-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud 7 apache2-worker-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud 7 apache2-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud 8 apache2-doc-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud 8 apache2-example-pages-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud 8 apache2-prefork-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud 8 apache2-utils-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud 8 apache2-worker-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud 8 apache2-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud 9 apache2-doc-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud 9 apache2-example-pages-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud 9 apache2-prefork-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud 9 apache2-utils-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud 9 apache2-worker-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud 9 apache2-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud Crowbar 8 apache2-doc-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud Crowbar 8 apache2-example-pages-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud Crowbar 8 apache2-prefork-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud Crowbar 8 apache2-utils-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud Crowbar 8 apache2-worker-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud Crowbar 8 apache2-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud Crowbar 9 apache2-doc-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud Crowbar 9 apache2-example-pages-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud Crowbar 9 apache2-prefork-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud Crowbar 9 apache2-utils-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud Crowbar 9 apache2-worker-2.4.23-29.63.1 as a component of SUSE OpenStack Cloud Crowbar 9 IP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using proxying with mod_remoteip and certain mod_rewrite rules, an attacker could spoof their IP address for logging and PHP scripts. Note this issue was fixed in Apache HTTP Server 2.4.24 but was retrospectively allocated a low severity CVE in 2020. CVE-2020-11985 HPE Helion OpenStack 8:apache2-2.4.23-29.63.1 HPE Helion OpenStack 8:apache2-doc-2.4.23-29.63.1 HPE Helion OpenStack 8:apache2-example-pages-2.4.23-29.63.1 HPE Helion OpenStack 8:apache2-prefork-2.4.23-29.63.1 HPE Helion OpenStack 8:apache2-utils-2.4.23-29.63.1 HPE Helion OpenStack 8:apache2-worker-2.4.23-29.63.1 SUSE Enterprise Storage 5:apache2-2.4.23-29.63.1 SUSE Enterprise Storage 5:apache2-doc-2.4.23-29.63.1 SUSE Enterprise Storage 5:apache2-example-pages-2.4.23-29.63.1 SUSE Enterprise Storage 5:apache2-prefork-2.4.23-29.63.1 SUSE Enterprise Storage 5:apache2-utils-2.4.23-29.63.1 SUSE Enterprise Storage 5:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-BCL:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-BCL:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-BCL:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-BCL:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-BCL:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-BCL:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-LTSS:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-LTSS:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-LTSS:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-LTSS:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-LTSS:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-LTSS:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP4-LTSS:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP4-LTSS:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP4-LTSS:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP4-LTSS:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP4-LTSS:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP4-LTSS:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP5:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP5:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP5:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP5:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP5:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP5:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Software Development Kit 12 SP5:apache2-devel-2.4.23-29.63.1 SUSE OpenStack Cloud 7:apache2-2.4.23-29.63.1 SUSE OpenStack Cloud 7:apache2-doc-2.4.23-29.63.1 SUSE OpenStack Cloud 7:apache2-example-pages-2.4.23-29.63.1 SUSE OpenStack Cloud 7:apache2-prefork-2.4.23-29.63.1 SUSE OpenStack Cloud 7:apache2-utils-2.4.23-29.63.1 SUSE OpenStack Cloud 7:apache2-worker-2.4.23-29.63.1 SUSE OpenStack Cloud 8:apache2-2.4.23-29.63.1 SUSE OpenStack Cloud 8:apache2-doc-2.4.23-29.63.1 SUSE OpenStack Cloud 8:apache2-example-pages-2.4.23-29.63.1 SUSE OpenStack Cloud 8:apache2-prefork-2.4.23-29.63.1 SUSE OpenStack Cloud 8:apache2-utils-2.4.23-29.63.1 SUSE OpenStack Cloud 8:apache2-worker-2.4.23-29.63.1 SUSE OpenStack Cloud 9:apache2-2.4.23-29.63.1 SUSE OpenStack Cloud 9:apache2-doc-2.4.23-29.63.1 SUSE OpenStack Cloud 9:apache2-example-pages-2.4.23-29.63.1 SUSE OpenStack Cloud 9:apache2-prefork-2.4.23-29.63.1 SUSE OpenStack Cloud 9:apache2-utils-2.4.23-29.63.1 SUSE OpenStack Cloud 9:apache2-worker-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 8:apache2-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 8:apache2-doc-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 8:apache2-example-pages-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 8:apache2-prefork-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 8:apache2-utils-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 8:apache2-worker-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 9:apache2-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 9:apache2-doc-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 9:apache2-example-pages-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 9:apache2-prefork-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 9:apache2-utils-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 9:apache2-worker-2.4.23-29.63.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202450-1/ https://www.suse.com/security/cve/CVE-2020-11985.html CVE-2020-11985 https://bugzilla.suse.com/1175072 SUSE Bug 1175072 Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of mod_http2 above "info" will mitigate this vulnerability for unpatched servers. CVE-2020-11993 HPE Helion OpenStack 8:apache2-2.4.23-29.63.1 HPE Helion OpenStack 8:apache2-doc-2.4.23-29.63.1 HPE Helion OpenStack 8:apache2-example-pages-2.4.23-29.63.1 HPE Helion OpenStack 8:apache2-prefork-2.4.23-29.63.1 HPE Helion OpenStack 8:apache2-utils-2.4.23-29.63.1 HPE Helion OpenStack 8:apache2-worker-2.4.23-29.63.1 SUSE Enterprise Storage 5:apache2-2.4.23-29.63.1 SUSE Enterprise Storage 5:apache2-doc-2.4.23-29.63.1 SUSE Enterprise Storage 5:apache2-example-pages-2.4.23-29.63.1 SUSE Enterprise Storage 5:apache2-prefork-2.4.23-29.63.1 SUSE Enterprise Storage 5:apache2-utils-2.4.23-29.63.1 SUSE Enterprise Storage 5:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-BCL:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-BCL:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-BCL:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-BCL:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-BCL:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-BCL:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-LTSS:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-LTSS:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-LTSS:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-LTSS:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-LTSS:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-LTSS:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP4-LTSS:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP4-LTSS:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP4-LTSS:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP4-LTSS:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP4-LTSS:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP4-LTSS:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP5:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP5:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP5:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP5:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP5:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP5:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Software Development Kit 12 SP5:apache2-devel-2.4.23-29.63.1 SUSE OpenStack Cloud 7:apache2-2.4.23-29.63.1 SUSE OpenStack Cloud 7:apache2-doc-2.4.23-29.63.1 SUSE OpenStack Cloud 7:apache2-example-pages-2.4.23-29.63.1 SUSE OpenStack Cloud 7:apache2-prefork-2.4.23-29.63.1 SUSE OpenStack Cloud 7:apache2-utils-2.4.23-29.63.1 SUSE OpenStack Cloud 7:apache2-worker-2.4.23-29.63.1 SUSE OpenStack Cloud 8:apache2-2.4.23-29.63.1 SUSE OpenStack Cloud 8:apache2-doc-2.4.23-29.63.1 SUSE OpenStack Cloud 8:apache2-example-pages-2.4.23-29.63.1 SUSE OpenStack Cloud 8:apache2-prefork-2.4.23-29.63.1 SUSE OpenStack Cloud 8:apache2-utils-2.4.23-29.63.1 SUSE OpenStack Cloud 8:apache2-worker-2.4.23-29.63.1 SUSE OpenStack Cloud 9:apache2-2.4.23-29.63.1 SUSE OpenStack Cloud 9:apache2-doc-2.4.23-29.63.1 SUSE OpenStack Cloud 9:apache2-example-pages-2.4.23-29.63.1 SUSE OpenStack Cloud 9:apache2-prefork-2.4.23-29.63.1 SUSE OpenStack Cloud 9:apache2-utils-2.4.23-29.63.1 SUSE OpenStack Cloud 9:apache2-worker-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 8:apache2-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 8:apache2-doc-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 8:apache2-example-pages-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 8:apache2-prefork-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 8:apache2-utils-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 8:apache2-worker-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 9:apache2-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 9:apache2-doc-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 9:apache2-example-pages-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 9:apache2-prefork-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 9:apache2-utils-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 9:apache2-worker-2.4.23-29.63.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202450-1/ https://www.suse.com/security/cve/CVE-2020-11993.html CVE-2020-11993 https://bugzilla.suse.com/1175070 SUSE Bug 1175070 https://bugzilla.suse.com/1178074 SUSE Bug 1178074 https://bugzilla.suse.com/1180830 SUSE Bug 1180830 Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Configuring the HTTP/2 feature via "H2Push off" will mitigate this vulnerability for unpatched servers. CVE-2020-9490 HPE Helion OpenStack 8:apache2-2.4.23-29.63.1 HPE Helion OpenStack 8:apache2-doc-2.4.23-29.63.1 HPE Helion OpenStack 8:apache2-example-pages-2.4.23-29.63.1 HPE Helion OpenStack 8:apache2-prefork-2.4.23-29.63.1 HPE Helion OpenStack 8:apache2-utils-2.4.23-29.63.1 HPE Helion OpenStack 8:apache2-worker-2.4.23-29.63.1 SUSE Enterprise Storage 5:apache2-2.4.23-29.63.1 SUSE Enterprise Storage 5:apache2-doc-2.4.23-29.63.1 SUSE Enterprise Storage 5:apache2-example-pages-2.4.23-29.63.1 SUSE Enterprise Storage 5:apache2-prefork-2.4.23-29.63.1 SUSE Enterprise Storage 5:apache2-utils-2.4.23-29.63.1 SUSE Enterprise Storage 5:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-BCL:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-BCL:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-BCL:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-BCL:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-BCL:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-BCL:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-LTSS:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-LTSS:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-LTSS:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-LTSS:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-LTSS:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP3-LTSS:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP4-LTSS:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP4-LTSS:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP4-LTSS:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP4-LTSS:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP4-LTSS:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP4-LTSS:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP5:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP5:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP5:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP5:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP5:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server 12 SP5:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:apache2-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:apache2-doc-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:apache2-example-pages-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:apache2-prefork-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:apache2-utils-2.4.23-29.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:apache2-worker-2.4.23-29.63.1 SUSE Linux Enterprise Software Development Kit 12 SP5:apache2-devel-2.4.23-29.63.1 SUSE OpenStack Cloud 7:apache2-2.4.23-29.63.1 SUSE OpenStack Cloud 7:apache2-doc-2.4.23-29.63.1 SUSE OpenStack Cloud 7:apache2-example-pages-2.4.23-29.63.1 SUSE OpenStack Cloud 7:apache2-prefork-2.4.23-29.63.1 SUSE OpenStack Cloud 7:apache2-utils-2.4.23-29.63.1 SUSE OpenStack Cloud 7:apache2-worker-2.4.23-29.63.1 SUSE OpenStack Cloud 8:apache2-2.4.23-29.63.1 SUSE OpenStack Cloud 8:apache2-doc-2.4.23-29.63.1 SUSE OpenStack Cloud 8:apache2-example-pages-2.4.23-29.63.1 SUSE OpenStack Cloud 8:apache2-prefork-2.4.23-29.63.1 SUSE OpenStack Cloud 8:apache2-utils-2.4.23-29.63.1 SUSE OpenStack Cloud 8:apache2-worker-2.4.23-29.63.1 SUSE OpenStack Cloud 9:apache2-2.4.23-29.63.1 SUSE OpenStack Cloud 9:apache2-doc-2.4.23-29.63.1 SUSE OpenStack Cloud 9:apache2-example-pages-2.4.23-29.63.1 SUSE OpenStack Cloud 9:apache2-prefork-2.4.23-29.63.1 SUSE OpenStack Cloud 9:apache2-utils-2.4.23-29.63.1 SUSE OpenStack Cloud 9:apache2-worker-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 8:apache2-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 8:apache2-doc-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 8:apache2-example-pages-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 8:apache2-prefork-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 8:apache2-utils-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 8:apache2-worker-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 9:apache2-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 9:apache2-doc-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 9:apache2-example-pages-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 9:apache2-prefork-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 9:apache2-utils-2.4.23-29.63.1 SUSE OpenStack Cloud Crowbar 9:apache2-worker-2.4.23-29.63.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202450-1/ https://www.suse.com/security/cve/CVE-2020-9490.html CVE-2020-9490 https://bugzilla.suse.com/1175071 SUSE Bug 1175071 https://bugzilla.suse.com/1178074 SUSE Bug 1178074