OPENSUSE-SU-2022:0091-1: apache2&distro=openSUSE Leap 15.3
Vulnerability summary
OPENSUSE-SU-2022:0091-1 is a vulnerability in apache2&distro=openSUSE Leap 15.3 with no CVSS score yet.
Advisory lineage
Upstream 2 · Downstream 0 · Related 2Timeline
- 17-01-2022PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for apache2 This update for apache2 fixes the following issues: Apache2 was updated to the current stable version 2.4.51 (jsc#SLE-22733 jsc#SLE-22849) It fixes all CVEs and selected bugs represented by patches found between 2.4.23 and 2.4.51. See https://downloads.apache.org/httpd/CHANGES_2.4 for a complete change log. Also fixed: - CVE-2021-44224: Fixed NULL dereference or SSRF in forward proxy configurations (bsc#1193943) - CVE-2021-44790: Fixed buffer overflow when parsing multipart content in mod_lua (bsc#1193942)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Opensuse2 products
- apache2&distro=openSUSE Leap 15.3< 2.4.51-3.37.1
- chromium&distro=openSUSE Leap 15.3< 99.0.4844.84-bp153.2.75.1
Suse1 product
- chromium&distro=SUSE Package Hub 15 SP3< 99.0.4844.84-bp153.2.75.1
2 vendors · 3 products
References
5 links- lists.opensuse.org/archives/…Advisory