Security update for apache2 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:2004-1 Final 1 1 2021-06-17T16:03:59Z current 2021-06-17T16:03:59Z 2021-06-17T16:03:59Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for apache2 This update for apache2 fixes the following issues: - CVE-2021-30641: Fixed MergeSlashes regression (bsc#1187174) - CVE-2021-31618: Fixed NULL pointer dereference on specially crafted HTTP/2 request (bsc#1186924) - CVE-2020-35452: Fixed Single zero byte stack overflow in mod_auth_digest (bsc#1186922) - CVE-2021-26690: Fixed mod_session NULL pointer dereference in parser (bsc#1186923) - CVE-2021-26691: Fixed Heap overflow in mod_session (bsc#1187017) - Fixed potential content spoofing with default error pages (bsc#1182703) - Fixed for an issue when 'gensslcert' does not set CA:True. (bsc#1180530) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-SP1-SAPCAL-Azure-2021-2004,Image SLES15-SP1-SAPCAL-EC2-HVM-2021-2004,Image SLES15-SP1-SAPCAL-GCE-2021-2004,SUSE-2021-2004,SUSE-SLE-Product-HPC-15-2021-2004,SUSE-SLE-Product-HPC-15-SP1-ESPOS-2021-2004,SUSE-SLE-Product-HPC-15-SP1-LTSS-2021-2004,SUSE-SLE-Product-SLES-15-2021-2004,SUSE-SLE-Product-SLES-15-SP1-BCL-2021-2004,SUSE-SLE-Product-SLES-15-SP1-LTSS-2021-2004,SUSE-SLE-Product-SLES_SAP-15-2021-2004,SUSE-SLE-Product-SLES_SAP-15-SP1-2021-2004,SUSE-SLE-Product-SUSE-Manager-Proxy-4.0-2021-2004,SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.0-2021-2004,SUSE-SLE-Product-SUSE-Manager-Server-4.0-2021-2004,SUSE-Storage-6-2021-2004 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20212004-1/ Link for SUSE-SU-2021:2004-1 https://lists.suse.com/pipermail/sle-security-updates/2021-June/009030.html E-Mail link for SUSE-SU-2021:2004-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1145740 SUSE Bug 1145740 https://bugzilla.suse.com/1180530 SUSE Bug 1180530 https://bugzilla.suse.com/1182703 SUSE Bug 1182703 https://bugzilla.suse.com/1186922 SUSE Bug 1186922 https://bugzilla.suse.com/1186923 SUSE Bug 1186923 https://bugzilla.suse.com/1186924 SUSE Bug 1186924 https://bugzilla.suse.com/1187017 SUSE Bug 1187017 https://bugzilla.suse.com/1187174 SUSE Bug 1187174 https://www.suse.com/security/cve/CVE-2019-10092/ SUSE CVE CVE-2019-10092 page https://www.suse.com/security/cve/CVE-2020-35452/ SUSE CVE CVE-2020-35452 page https://www.suse.com/security/cve/CVE-2021-26690/ SUSE CVE CVE-2021-26690 page https://www.suse.com/security/cve/CVE-2021-26691/ SUSE CVE CVE-2021-26691 page https://www.suse.com/security/cve/CVE-2021-30641/ SUSE CVE CVE-2021-30641 page https://www.suse.com/security/cve/CVE-2021-31618/ SUSE CVE CVE-2021-31618 page Image SLES15-SP1-SAPCAL-Azure Image SLES15-SP1-SAPCAL-EC2-HVM Image SLES15-SP1-SAPCAL-GCE SUSE Enterprise Storage 6 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Server 15 SP1-BCL SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Manager Proxy 4.0 SUSE Manager Retail Branch Server 4.0 SUSE Manager Server 4.0 apache2-2.4.33-3.50.1 apache2-prefork-2.4.33-3.50.1 apache2-utils-2.4.33-3.50.1 apache2-devel-2.4.33-3.50.1 apache2-doc-2.4.33-3.50.1 apache2-event-2.4.33-3.50.1 apache2-example-pages-2.4.33-3.50.1 apache2-worker-2.4.33-3.50.1 apache2-2.4.33-3.50.1 as a component of Image SLES15-SP1-SAPCAL-Azure apache2-prefork-2.4.33-3.50.1 as a component of Image SLES15-SP1-SAPCAL-Azure apache2-utils-2.4.33-3.50.1 as a component of Image SLES15-SP1-SAPCAL-Azure apache2-2.4.33-3.50.1 as a component of Image SLES15-SP1-SAPCAL-EC2-HVM apache2-prefork-2.4.33-3.50.1 as a component of Image SLES15-SP1-SAPCAL-EC2-HVM apache2-utils-2.4.33-3.50.1 as a component of Image SLES15-SP1-SAPCAL-EC2-HVM apache2-2.4.33-3.50.1 as a component of Image SLES15-SP1-SAPCAL-GCE apache2-prefork-2.4.33-3.50.1 as a component of Image SLES15-SP1-SAPCAL-GCE apache2-utils-2.4.33-3.50.1 as a component of Image SLES15-SP1-SAPCAL-GCE apache2-2.4.33-3.50.1 as a component of SUSE Enterprise Storage 6 apache2-devel-2.4.33-3.50.1 as a component of SUSE Enterprise Storage 6 apache2-doc-2.4.33-3.50.1 as a component of SUSE Enterprise Storage 6 apache2-prefork-2.4.33-3.50.1 as a component of SUSE Enterprise Storage 6 apache2-utils-2.4.33-3.50.1 as a component of SUSE Enterprise Storage 6 apache2-worker-2.4.33-3.50.1 as a component of SUSE Enterprise Storage 6 apache2-2.4.33-3.50.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS apache2-devel-2.4.33-3.50.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS apache2-doc-2.4.33-3.50.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS apache2-prefork-2.4.33-3.50.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS apache2-utils-2.4.33-3.50.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS apache2-worker-2.4.33-3.50.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS apache2-2.4.33-3.50.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS apache2-devel-2.4.33-3.50.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS apache2-doc-2.4.33-3.50.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS apache2-prefork-2.4.33-3.50.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS apache2-utils-2.4.33-3.50.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS apache2-worker-2.4.33-3.50.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS apache2-2.4.33-3.50.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS apache2-devel-2.4.33-3.50.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS apache2-doc-2.4.33-3.50.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS apache2-prefork-2.4.33-3.50.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS apache2-utils-2.4.33-3.50.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS apache2-worker-2.4.33-3.50.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS apache2-2.4.33-3.50.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS apache2-devel-2.4.33-3.50.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS apache2-doc-2.4.33-3.50.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS apache2-prefork-2.4.33-3.50.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS apache2-utils-2.4.33-3.50.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS apache2-worker-2.4.33-3.50.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS apache2-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL apache2-devel-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL apache2-doc-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL apache2-prefork-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL apache2-utils-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL apache2-worker-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL apache2-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS apache2-devel-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS apache2-doc-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS apache2-prefork-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS apache2-utils-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS apache2-worker-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS apache2-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server 15-LTSS apache2-devel-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server 15-LTSS apache2-doc-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server 15-LTSS apache2-prefork-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server 15-LTSS apache2-utils-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server 15-LTSS apache2-worker-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server 15-LTSS apache2-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 apache2-devel-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 apache2-doc-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 apache2-prefork-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 apache2-utils-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 apache2-worker-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 apache2-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 apache2-devel-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 apache2-doc-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 apache2-prefork-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 apache2-utils-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 apache2-worker-2.4.33-3.50.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 apache2-2.4.33-3.50.1 as a component of SUSE Manager Proxy 4.0 apache2-devel-2.4.33-3.50.1 as a component of SUSE Manager Proxy 4.0 apache2-doc-2.4.33-3.50.1 as a component of SUSE Manager Proxy 4.0 apache2-prefork-2.4.33-3.50.1 as a component of SUSE Manager Proxy 4.0 apache2-utils-2.4.33-3.50.1 as a component of SUSE Manager Proxy 4.0 apache2-worker-2.4.33-3.50.1 as a component of SUSE Manager Proxy 4.0 apache2-2.4.33-3.50.1 as a component of SUSE Manager Retail Branch Server 4.0 apache2-devel-2.4.33-3.50.1 as a component of SUSE Manager Retail Branch Server 4.0 apache2-doc-2.4.33-3.50.1 as a component of SUSE Manager Retail Branch Server 4.0 apache2-prefork-2.4.33-3.50.1 as a component of SUSE Manager Retail Branch Server 4.0 apache2-utils-2.4.33-3.50.1 as a component of SUSE Manager Retail Branch Server 4.0 apache2-worker-2.4.33-3.50.1 as a component of SUSE Manager Retail Branch Server 4.0 apache2-2.4.33-3.50.1 as a component of SUSE Manager Server 4.0 apache2-devel-2.4.33-3.50.1 as a component of SUSE Manager Server 4.0 apache2-doc-2.4.33-3.50.1 as a component of SUSE Manager Server 4.0 apache2-prefork-2.4.33-3.50.1 as a component of SUSE Manager Server 4.0 apache2-utils-2.4.33-3.50.1 as a component of SUSE Manager Server 4.0 apache2-worker-2.4.33-3.50.1 as a component of SUSE Manager Server 4.0 In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This would only be exploitable where a server was set up with proxying enabled but was misconfigured in such a way that the Proxy Error page was displayed. CVE-2019-10092 Image SLES15-SP1-SAPCAL-Azure:apache2-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-Azure:apache2-prefork-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-Azure:apache2-utils-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-EC2-HVM:apache2-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-EC2-HVM:apache2-prefork-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-EC2-HVM:apache2-utils-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-GCE:apache2-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-GCE:apache2-prefork-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-GCE:apache2-utils-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-devel-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-doc-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-prefork-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-utils-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-worker-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-devel-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-doc-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-prefork-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-utils-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-worker-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-devel-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-doc-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-prefork-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-utils-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-worker-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-devel-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-doc-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-prefork-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-utils-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-worker-2.4.33-3.50.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212004-1/ https://www.suse.com/security/cve/CVE-2019-10092.html CVE-2019-10092 https://bugzilla.suse.com/1145740 SUSE Bug 1145740 https://bugzilla.suse.com/1182703 SUSE Bug 1182703 Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP Server team could create one, though some particular compiler and/or compilation option might make it possible, with limited consequences anyway due to the size (a single byte) and the value (zero byte) of the overflow CVE-2020-35452 Image SLES15-SP1-SAPCAL-Azure:apache2-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-Azure:apache2-prefork-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-Azure:apache2-utils-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-EC2-HVM:apache2-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-EC2-HVM:apache2-prefork-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-EC2-HVM:apache2-utils-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-GCE:apache2-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-GCE:apache2-prefork-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-GCE:apache2-utils-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-devel-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-doc-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-prefork-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-utils-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-worker-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-devel-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-doc-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-prefork-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-utils-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-worker-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-devel-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-doc-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-prefork-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-utils-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-worker-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-devel-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-doc-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-prefork-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-utils-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-worker-2.4.33-3.50.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212004-1/ https://www.suse.com/security/cve/CVE-2020-35452.html CVE-2020-35452 https://bugzilla.suse.com/1186922 SUSE Bug 1186922 Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL pointer dereference and crash, leading to a possible Denial Of Service CVE-2021-26690 Image SLES15-SP1-SAPCAL-Azure:apache2-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-Azure:apache2-prefork-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-Azure:apache2-utils-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-EC2-HVM:apache2-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-EC2-HVM:apache2-prefork-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-EC2-HVM:apache2-utils-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-GCE:apache2-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-GCE:apache2-prefork-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-GCE:apache2-utils-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-devel-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-doc-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-prefork-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-utils-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-worker-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-devel-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-doc-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-prefork-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-utils-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-worker-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-devel-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-doc-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-prefork-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-utils-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-worker-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-devel-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-doc-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-prefork-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-utils-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-worker-2.4.33-3.50.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212004-1/ https://www.suse.com/security/cve/CVE-2021-26690.html CVE-2021-26690 https://bugzilla.suse.com/1186923 SUSE Bug 1186923 In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow CVE-2021-26691 Image SLES15-SP1-SAPCAL-Azure:apache2-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-Azure:apache2-prefork-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-Azure:apache2-utils-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-EC2-HVM:apache2-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-EC2-HVM:apache2-prefork-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-EC2-HVM:apache2-utils-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-GCE:apache2-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-GCE:apache2-prefork-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-GCE:apache2-utils-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-devel-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-doc-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-prefork-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-utils-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-worker-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-devel-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-doc-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-prefork-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-utils-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-worker-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-devel-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-doc-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-prefork-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-utils-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-worker-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-devel-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-doc-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-prefork-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-utils-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-worker-2.4.33-3.50.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212004-1/ https://www.suse.com/security/cve/CVE-2021-26691.html CVE-2021-26691 https://bugzilla.suse.com/1187017 SUSE Bug 1187017 Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with 'MergeSlashes OFF' CVE-2021-30641 Image SLES15-SP1-SAPCAL-Azure:apache2-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-Azure:apache2-prefork-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-Azure:apache2-utils-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-EC2-HVM:apache2-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-EC2-HVM:apache2-prefork-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-EC2-HVM:apache2-utils-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-GCE:apache2-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-GCE:apache2-prefork-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-GCE:apache2-utils-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-devel-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-doc-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-prefork-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-utils-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-worker-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-devel-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-doc-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-prefork-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-utils-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-worker-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-devel-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-doc-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-prefork-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-utils-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-worker-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-devel-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-doc-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-prefork-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-utils-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-worker-2.4.33-3.50.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212004-1/ https://www.suse.com/security/cve/CVE-2021-30641.html CVE-2021-30641 https://bugzilla.suse.com/1187174 SUSE Bug 1187174 Apache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations as configured for the server and used for the HTTP/1 protocol as well. On violation of these restrictions and HTTP response is sent to the client with a status code indicating why the request was rejected. This rejection response was not fully initialised in the HTTP/2 protocol handler if the offending header was the very first one received or appeared in a a footer. This led to a NULL pointer dereference on initialised memory, crashing reliably the child process. Since such a triggering HTTP/2 request is easy to craft and submit, this can be exploited to DoS the server. This issue affected mod_http2 1.15.17 and Apache HTTP Server version 2.4.47 only. Apache HTTP Server 2.4.47 was never released. CVE-2021-31618 Image SLES15-SP1-SAPCAL-Azure:apache2-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-Azure:apache2-prefork-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-Azure:apache2-utils-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-EC2-HVM:apache2-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-EC2-HVM:apache2-prefork-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-EC2-HVM:apache2-utils-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-GCE:apache2-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-GCE:apache2-prefork-2.4.33-3.50.1 Image SLES15-SP1-SAPCAL-GCE:apache2-utils-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-devel-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-doc-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-prefork-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-utils-2.4.33-3.50.1 SUSE Enterprise Storage 6:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-BCL:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server 15 SP1-LTSS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server 15-LTSS:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:apache2-worker-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-devel-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-doc-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-prefork-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-utils-2.4.33-3.50.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-worker-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-devel-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-doc-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-prefork-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-utils-2.4.33-3.50.1 SUSE Manager Proxy 4.0:apache2-worker-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-devel-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-doc-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-prefork-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-utils-2.4.33-3.50.1 SUSE Manager Retail Branch Server 4.0:apache2-worker-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-devel-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-doc-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-prefork-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-utils-2.4.33-3.50.1 SUSE Manager Server 4.0:apache2-worker-2.4.33-3.50.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212004-1/ https://www.suse.com/security/cve/CVE-2021-31618.html CVE-2021-31618 https://bugzilla.suse.com/1186924 SUSE Bug 1186924