SUSE-SU-2023:4430-1

Опубликовано: 13 нояб. 2023

Источник: suse-cvrf

Описание

Security update for apache2

This update for apache2 fixes the following issues:

CVE-2023-31122: Fixed an out of bounds read in mod_macro (bsc#1216424).

Non-security fixes:

Fixed the content type handling in mod_proxy_http2 (bsc#1214357).
Fixed a floating point exception crash (bsc#1207399).

Список пакетов

Container bci/php-apache:latest

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

Container suse/manager/4.3/proxy-httpd:latest

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

Container suse/registry:latest

apache2-utils-2.4.51-150400.6.14.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

Image SLES15-SP4-Manager-Server-4-3

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

Image SLES15-SP4-Manager-Server-4-3-Azure-llc

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

Image SLES15-SP4-Manager-Server-4-3-Azure-ltd

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

Image SLES15-SP4-Manager-Server-4-3-BYOS

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

Image SLES15-SP4-Manager-Server-4-3-EC2-llc

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

Image SLES15-SP4-Manager-Server-4-3-EC2-ltd

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

Image SLES15-SP4-SAP

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

Image SLES15-SP4-SAP-Azure

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

Image SLES15-SP4-SAP-EC2

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

Image SLES15-SP4-SAP-GCE

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

Image SLES15-SP4-SAPCAL

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

Image SLES15-SP4-SAPCAL-Azure

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

Image SLES15-SP4-SAPCAL-EC2

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

Image SLES15-SP4-SAPCAL-GCE

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

Image SLES15-SP5-SAPCAL-Azure

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

Image SLES15-SP5-SAPCAL-EC2

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

Image SLES15-SP5-SAPCAL-GCE

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

SUSE Linux Enterprise Module for Basesystem 15 SP4

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

SUSE Linux Enterprise Module for Basesystem 15 SP5

apache2-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

SUSE Linux Enterprise Module for Package Hub 15 SP4

apache2-event-2.4.51-150400.6.14.1

SUSE Linux Enterprise Module for Package Hub 15 SP5

apache2-event-2.4.51-150400.6.14.1

SUSE Linux Enterprise Module for Server Applications 15 SP4

apache2-devel-2.4.51-150400.6.14.1

apache2-doc-2.4.51-150400.6.14.1

apache2-worker-2.4.51-150400.6.14.1

SUSE Linux Enterprise Module for Server Applications 15 SP5

apache2-devel-2.4.51-150400.6.14.1

apache2-doc-2.4.51-150400.6.14.1

apache2-worker-2.4.51-150400.6.14.1

openSUSE Leap 15.4

apache2-2.4.51-150400.6.14.1

apache2-devel-2.4.51-150400.6.14.1

apache2-doc-2.4.51-150400.6.14.1

apache2-event-2.4.51-150400.6.14.1

apache2-example-pages-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

apache2-worker-2.4.51-150400.6.14.1

openSUSE Leap 15.5

apache2-2.4.51-150400.6.14.1

apache2-devel-2.4.51-150400.6.14.1

apache2-doc-2.4.51-150400.6.14.1

apache2-event-2.4.51-150400.6.14.1

apache2-example-pages-2.4.51-150400.6.14.1

apache2-prefork-2.4.51-150400.6.14.1

apache2-utils-2.4.51-150400.6.14.1

apache2-worker-2.4.51-150400.6.14.1

Ссылки

https://www.suse.com/support/update/announcement/2023/suse-su-20234430-1/
Link for SUSE-SU-2023:4430-1
https://lists.suse.com/pipermail/sle-security-updates/2023-November/017026.html
E-Mail link for SUSE-SU-2023:4430-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1207399
SUSE Bug 1207399
https://bugzilla.suse.com/1214357
SUSE Bug 1214357
https://bugzilla.suse.com/1216424
SUSE Bug 1216424
https://www.suse.com/security/cve/CVE-2023-31122/
SUSE CVE CVE-2023-31122 page

Описание

Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.

Затронутые продукты

Container bci/php-apache:latest:apache2-2.4.51-150400.6.14.1

Container bci/php-apache:latest:apache2-prefork-2.4.51-150400.6.14.1

Container bci/php-apache:latest:apache2-utils-2.4.51-150400.6.14.1

Container suse/manager/4.3/proxy-httpd:latest:apache2-2.4.51-150400.6.14.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-31122.html
CVE-2023-31122
https://bugzilla.suse.com/1216424
SUSE Bug 1216424
https://bugzilla.suse.com/1217549
SUSE Bug 1217549

SUSE-SU-2023:4430-1

Описание

Список пакетов

Container bci/php-apache:latest

Container suse/manager/4.3/proxy-httpd:latest

Container suse/registry:latest

Image SLES15-SP4-Manager-Proxy-4-3-BYOS

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE

Image SLES15-SP4-Manager-Server-4-3

Image SLES15-SP4-Manager-Server-4-3-Azure-llc

Image SLES15-SP4-Manager-Server-4-3-Azure-ltd

Image SLES15-SP4-Manager-Server-4-3-BYOS

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

Image SLES15-SP4-Manager-Server-4-3-EC2-llc

Image SLES15-SP4-Manager-Server-4-3-EC2-ltd

Image SLES15-SP4-SAP

Image SLES15-SP4-SAP-Azure

Image SLES15-SP4-SAP-EC2

Image SLES15-SP4-SAP-GCE

Image SLES15-SP4-SAPCAL

Image SLES15-SP4-SAPCAL-Azure

Image SLES15-SP4-SAPCAL-EC2

Image SLES15-SP4-SAPCAL-GCE

Image SLES15-SP5-SAPCAL-Azure

Image SLES15-SP5-SAPCAL-EC2

Image SLES15-SP5-SAPCAL-GCE

SUSE Linux Enterprise Module for Basesystem 15 SP4

SUSE Linux Enterprise Module for Basesystem 15 SP5

SUSE Linux Enterprise Module for Package Hub 15 SP4

SUSE Linux Enterprise Module for Package Hub 15 SP5

SUSE Linux Enterprise Module for Server Applications 15 SP4

SUSE Linux Enterprise Module for Server Applications 15 SP5

openSUSE Leap 15.4

openSUSE Leap 15.5

Ссылки

Уязвимость: CVE-2023-31122

Описание

Затронутые продукты

Ссылки