Lucene search
SuseOPENSUSE-SU-2020:0597-1HistoryMay 02, 2020 - 12:00 a.m.
Security update for apache2 (important)
2020-05-0200:00:00
lists.opensuse.org
154
0.974 High
EPSS
Percentile
99.9%
An update that fixes three vulnerabilities is now available.
Description:
This update for apache2 fixes the following issues:
- CVE-2020-1934: mod_proxy_ftp may use uninitialized memory when proxying
to a malicious FTP server (bsc#1168404). - CVE-2020-1927: mod_rewrite configurations vulnerable to open redirect
(bsc#1168407). - CVE-2020-1938: mod_proxy_ajp: Add “secret” parameter to proxy workers to
implement legacy AJP13 authentication (bsc#1169066).
This update was imported from the SUSE:SLE-15:Update update project.
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.
Alternatively you can run the command listed for your product:
-
openSUSE Leap 15.1:
zypper in -t patch openSUSE-2020-597=1
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE Leap | 15.1 | i586 | < - openSUSE Leap 15.1 (i586 x86_64): | - openSUSE Leap 15.1 (i586 x86_64):.i586.rpm | |
| openSUSE Leap | 15.1 | x86_64 | < - openSUSE Leap 15.1 (i586 x86_64): | - openSUSE Leap 15.1 (i586 x86_64):.x86_64.rpm | |
| openSUSE Leap | 15.1 | noarch | < - openSUSE Leap 15.1 (noarch): | - openSUSE Leap 15.1 (noarch):.noarch.rpm |
Related
nessus
nessus
SUSE SLES12 Security Update : apache2 (SUSE-SU-2020:1111-1)
2020-04-27 00:00:00
openSUSE Security Update : apache2 (openSUSE-2020-597)
2020-05-04 00:00:00
SUSE SLED15 / SLES15 Security Update : apache2 (SUSE-SU-2020:1126-1)
2020-04-29 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:1126-1)
2021-04-19 00:00:00
openSUSE: Security Advisory for apache2 (openSUSE-SU-2020:0597-1)
2020-05-02 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:1272-1)
2021-04-19 00:00:00
ibm
ibm
altlinux
altlinux
Security fix for the ALT Linux 8 package apache2 version 1:2.4.43-alt1
2020-04-09 00:00:00
Security fix for the ALT Linux 9 package apache2 version 1:2.4.43-alt1
2020-04-08 00:00:00
Security fix for the ALT Linux 10 package apache2 version 1:2.4.43-alt1
2020-04-06 00:00:00
mageia
mageia
Updated apache packages fix security vulnerabilities
2020-04-15 13:12:14
photon
photon
Moderate Photon OS Security Update - PHSA-2020-0079
2020-04-10 00:00:00
Moderate Photon OS Security Update - PHSA-2020-3.0-0079
2020-04-10 00:00:00
amazon
amazon
Low: httpd
2020-05-19 18:32:00
Low: httpd24
2020-05-22 20:57:00
kaspersky
kaspersky
KLA12367 Multiple vulnerabilities in Apache HTTP Server
2020-04-01 00:00:00
freebsd
freebsd
Apache -- Multiple vulnerabilities
2020-04-01 00:00:00
archlinux
archlinux
[ASA-202004-14] apache: multiple issues
2020-04-15 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: httpd-2.4.46-1.fc32
2020-08-31 15:50:53
[SECURITY] Fedora 31 Update: httpd-2.4.46-1.fc31
2020-09-03 16:27:14
[SECURITY] Fedora 32 Update: tomcat-9.0.31-2.fc32
2020-03-31 00:18:31
osv
osv
CVE-2020-1934
2020-04-01 20:15:15
BIT-apache-2020-1934
2024-03-06 10:56:53
apache2 - security update
2020-08-31 00:00:00
debian
debian
[SECURITY] [DSA 4757-1] apache2 security update
2020-08-31 15:10:58
[SECURITY] [DSA 4757-1] apache2 security update
2020-08-31 15:10:58
[SECURITY] [DLA 2706-1] apache2 security update
2021-07-09 08:50:21
prion
prion
Code injection
2020-04-01 20:15:00
Code injection
2020-04-02 00:15:00
Default configuration
2020-02-24 22:15:00
redhatcve
redhatcve
CVE-2020-1934
2020-04-03 21:01:35
CVE-2020-1927
2020-04-03 20:31:36
cvelist
cvelist
alpinelinux
alpinelinux
CVE-2020-1934
2020-04-01 20:15:15
CVE-2020-1927
2020-04-02 00:15:13
cve
cve
f5
f5
Apache mod_proxy_ftp vulnerability CVE-2020-1934
2021-03-10 19:35:00
K23153696 : Apache HTTPD vulnerability CVE-2020-1927
2020-08-26 00:00:00
K53254186 : Apache Tomcat vulnerability CVE-2020-1938
2020-03-04 00:00:00
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2020-08-13 00:00:00
veracode
veracode
Information Disclosure
2020-06-23 03:36:09
Open Redirection
2020-05-15 02:23:25
Authentication Bypass
2020-02-25 05:53:16
hackerone
hackerone
ubuntucve
ubuntucve
debiancve
debiancve
httpd
httpd
Apache Httpd < 2.4.42 : mod_proxy_ftp use of uninitialized value
2020-01-03 00:00:00
Apache Httpd < 2.4.42 : mod_rewrite CWE-601 open redirect
2019-12-05 00:00:00
nvd
nvd
centos
centos
httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update
2020-10-20 18:13:33
tomcat security update
2020-03-25 19:05:03
tomcat6 security update
2020-03-25 19:21:34
oraclelinux
oraclelinux
httpd security, bug fix, and enhancement update
2020-10-06 00:00:00
tomcat6 security update
2020-03-23 00:00:00
tomcat security update
2020-03-22 00:00:00
redhat
redhat
(RHSA-2020:3958) Moderate: httpd security, bug fix, and enhancement update
2020-09-29 07:46:42
(RHSA-2020:0912) Important: tomcat6 security update
2020-03-23 07:49:20
(RHSA-2020:2840) Important: tomcat security update
2020-07-07 08:35:21
cisa_kev
cisa_kev
Apache Tomcat Improper Privilege Management Vulnerability
2022-03-03 00:00:00
threatpost
threatpost
Users Urged to Uninstall WordPress Yuzo Plugin After Flaw Exploited
2019-04-11 17:19:40
Wipro Confirms Hack and Supply Chain Attacks on Customers
2019-04-16 18:01:54
Apache Tomcat Exploit Poised to Pounce, Stealing Files
2020-03-23 20:56:37
githubexploit
githubexploit
Exploit for CVE-2020-1938
2020-02-20 21:00:15
Exploit for Improper Privilege Management in Apache Tomcat
2021-04-27 14:57:30
Exploit for Improper Privilege Management in Apache Tomcat
2020-11-14 13:55:58
qualysblog
qualysblog
myhack58
myhack58
cgr
cgr
CVE-2020-1938 vulnerabilities
2024-05-19 03:07:16
huawei
huawei
Security Advisory - Apache Tomcat File Inclusion Vulnerability
2020-07-15 00:00:00
rapid7blog
rapid7blog
Metasploit Wrap-Up
2020-12-04 19:27:53
github
github
Improper Privilege Management in Tomcat
2020-06-15 18:51:21