suse-su-2025:02684-1
Vulnerability from csaf_suse
Published
2025-08-04 15:07
Modified
2025-08-04 15:07
Summary
Security update for apache2
Notes
Title of the patch
Security update for apache2
Description of the patch
This update for apache2 fixes the following issues:
- CVE-2024-42516: Fixed HTTP response splitting. (bsc#1246477)
- CVE-2024-43204: Fixed a SSRF when mod_proxy is loaded that allows an attacker to send outbound proxy requests to a URL controlled by them. (bsc#1246305)
- CVE-2024-47252: Fixed insufficient escaping of user-supplied data in mod_ssl allows an untrusted SSL/TLS client to insert escape characters into log file. (bsc#1246303)
- CVE-2025-23048: Fixed access control bypass by trusted clients through TLS 1.3 session resumption in some mod_ssl configurations. (bsc#1246302)
- CVE-2025-49630: Fixed denial of service can be triggered by untrusted clients causing an assertion in mod_proxy_http2. (bsc#1246307)
- CVE-2025-49812: Fixed Opossum Attack Application Layer Desynchronization using Opportunistic TLS. (bsc#1246169)
- CVE-2025-53020: Fixed HTTP/2 denial of service due to late release of memory after effective lifetime. (bsc#1246306)
Patchnames
SUSE-2025-2684,SUSE-SLE-Module-Basesystem-15-SP6-2025-2684,SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-2684,SUSE-SLE-Module-Server-Applications-15-SP6-2025-2684,openSUSE-SLE-15.6-2025-2684
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for apache2",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for apache2 fixes the following issues:\n\n- CVE-2024-42516: Fixed HTTP response splitting. (bsc#1246477)\n- CVE-2024-43204: Fixed a SSRF when mod_proxy is loaded that allows an attacker to send outbound proxy requests to a URL controlled by them. (bsc#1246305)\n- CVE-2024-47252: Fixed insufficient escaping of user-supplied data in mod_ssl allows an untrusted SSL/TLS client to insert escape characters into log file. (bsc#1246303)\n- CVE-2025-23048: Fixed access control bypass by trusted clients through TLS 1.3 session resumption in some mod_ssl configurations. (bsc#1246302)\n- CVE-2025-49630: Fixed denial of service can be triggered by untrusted clients causing an assertion in mod_proxy_http2. (bsc#1246307)\n- CVE-2025-49812: Fixed Opossum Attack Application Layer Desynchronization using Opportunistic TLS. (bsc#1246169)\n- CVE-2025-53020: Fixed HTTP/2 denial of service due to late release of memory after effective lifetime. (bsc#1246306)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2025-2684,SUSE-SLE-Module-Basesystem-15-SP6-2025-2684,SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-2684,SUSE-SLE-Module-Server-Applications-15-SP6-2025-2684,openSUSE-SLE-15.6-2025-2684",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_02684-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:02684-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-202502684-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:02684-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2025-August/041071.html"
},
{
"category": "self",
"summary": "SUSE Bug 1246169",
"url": "https://bugzilla.suse.com/1246169"
},
{
"category": "self",
"summary": "SUSE Bug 1246302",
"url": "https://bugzilla.suse.com/1246302"
},
{
"category": "self",
"summary": "SUSE Bug 1246303",
"url": "https://bugzilla.suse.com/1246303"
},
{
"category": "self",
"summary": "SUSE Bug 1246305",
"url": "https://bugzilla.suse.com/1246305"
},
{
"category": "self",
"summary": "SUSE Bug 1246306",
"url": "https://bugzilla.suse.com/1246306"
},
{
"category": "self",
"summary": "SUSE Bug 1246307",
"url": "https://bugzilla.suse.com/1246307"
},
{
"category": "self",
"summary": "SUSE Bug 1246477",
"url": "https://bugzilla.suse.com/1246477"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-42516 page",
"url": "https://www.suse.com/security/cve/CVE-2024-42516/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-43204 page",
"url": "https://www.suse.com/security/cve/CVE-2024-43204/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-47252 page",
"url": "https://www.suse.com/security/cve/CVE-2024-47252/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-23048 page",
"url": "https://www.suse.com/security/cve/CVE-2025-23048/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49630 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49630/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-49812 page",
"url": "https://www.suse.com/security/cve/CVE-2025-49812/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-53020 page",
"url": "https://www.suse.com/security/cve/CVE-2025-53020/"
}
],
"title": "Security update for apache2",
"tracking": {
"current_release_date": "2025-08-04T15:07:21Z",
"generator": {
"date": "2025-08-04T15:07:21Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:02684-1",
"initial_release_date": "2025-08-04T15:07:21Z",
"revision_history": [
{
"date": "2025-08-04T15:07:21Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "apache2-2.4.58-150600.5.35.1.aarch64",
"product": {
"name": "apache2-2.4.58-150600.5.35.1.aarch64",
"product_id": "apache2-2.4.58-150600.5.35.1.aarch64"
}
},
{
"category": "product_version",
"name": "apache2-devel-2.4.58-150600.5.35.1.aarch64",
"product": {
"name": "apache2-devel-2.4.58-150600.5.35.1.aarch64",
"product_id": "apache2-devel-2.4.58-150600.5.35.1.aarch64"
}
},
{
"category": "product_version",
"name": "apache2-event-2.4.58-150600.5.35.1.aarch64",
"product": {
"name": "apache2-event-2.4.58-150600.5.35.1.aarch64",
"product_id": "apache2-event-2.4.58-150600.5.35.1.aarch64"
}
},
{
"category": "product_version",
"name": "apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"product": {
"name": "apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"product_id": "apache2-prefork-2.4.58-150600.5.35.1.aarch64"
}
},
{
"category": "product_version",
"name": "apache2-utils-2.4.58-150600.5.35.1.aarch64",
"product": {
"name": "apache2-utils-2.4.58-150600.5.35.1.aarch64",
"product_id": "apache2-utils-2.4.58-150600.5.35.1.aarch64"
}
},
{
"category": "product_version",
"name": "apache2-worker-2.4.58-150600.5.35.1.aarch64",
"product": {
"name": "apache2-worker-2.4.58-150600.5.35.1.aarch64",
"product_id": "apache2-worker-2.4.58-150600.5.35.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "apache2-2.4.58-150600.5.35.1.i586",
"product": {
"name": "apache2-2.4.58-150600.5.35.1.i586",
"product_id": "apache2-2.4.58-150600.5.35.1.i586"
}
},
{
"category": "product_version",
"name": "apache2-devel-2.4.58-150600.5.35.1.i586",
"product": {
"name": "apache2-devel-2.4.58-150600.5.35.1.i586",
"product_id": "apache2-devel-2.4.58-150600.5.35.1.i586"
}
},
{
"category": "product_version",
"name": "apache2-event-2.4.58-150600.5.35.1.i586",
"product": {
"name": "apache2-event-2.4.58-150600.5.35.1.i586",
"product_id": "apache2-event-2.4.58-150600.5.35.1.i586"
}
},
{
"category": "product_version",
"name": "apache2-prefork-2.4.58-150600.5.35.1.i586",
"product": {
"name": "apache2-prefork-2.4.58-150600.5.35.1.i586",
"product_id": "apache2-prefork-2.4.58-150600.5.35.1.i586"
}
},
{
"category": "product_version",
"name": "apache2-utils-2.4.58-150600.5.35.1.i586",
"product": {
"name": "apache2-utils-2.4.58-150600.5.35.1.i586",
"product_id": "apache2-utils-2.4.58-150600.5.35.1.i586"
}
},
{
"category": "product_version",
"name": "apache2-worker-2.4.58-150600.5.35.1.i586",
"product": {
"name": "apache2-worker-2.4.58-150600.5.35.1.i586",
"product_id": "apache2-worker-2.4.58-150600.5.35.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "apache2-manual-2.4.58-150600.5.35.1.noarch",
"product": {
"name": "apache2-manual-2.4.58-150600.5.35.1.noarch",
"product_id": "apache2-manual-2.4.58-150600.5.35.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "apache2-2.4.58-150600.5.35.1.ppc64le",
"product": {
"name": "apache2-2.4.58-150600.5.35.1.ppc64le",
"product_id": "apache2-2.4.58-150600.5.35.1.ppc64le"
}
},
{
"category": "product_version",
"name": "apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"product": {
"name": "apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"product_id": "apache2-devel-2.4.58-150600.5.35.1.ppc64le"
}
},
{
"category": "product_version",
"name": "apache2-event-2.4.58-150600.5.35.1.ppc64le",
"product": {
"name": "apache2-event-2.4.58-150600.5.35.1.ppc64le",
"product_id": "apache2-event-2.4.58-150600.5.35.1.ppc64le"
}
},
{
"category": "product_version",
"name": "apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"product": {
"name": "apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"product_id": "apache2-prefork-2.4.58-150600.5.35.1.ppc64le"
}
},
{
"category": "product_version",
"name": "apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"product": {
"name": "apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"product_id": "apache2-utils-2.4.58-150600.5.35.1.ppc64le"
}
},
{
"category": "product_version",
"name": "apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"product": {
"name": "apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"product_id": "apache2-worker-2.4.58-150600.5.35.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "apache2-2.4.58-150600.5.35.1.s390x",
"product": {
"name": "apache2-2.4.58-150600.5.35.1.s390x",
"product_id": "apache2-2.4.58-150600.5.35.1.s390x"
}
},
{
"category": "product_version",
"name": "apache2-devel-2.4.58-150600.5.35.1.s390x",
"product": {
"name": "apache2-devel-2.4.58-150600.5.35.1.s390x",
"product_id": "apache2-devel-2.4.58-150600.5.35.1.s390x"
}
},
{
"category": "product_version",
"name": "apache2-event-2.4.58-150600.5.35.1.s390x",
"product": {
"name": "apache2-event-2.4.58-150600.5.35.1.s390x",
"product_id": "apache2-event-2.4.58-150600.5.35.1.s390x"
}
},
{
"category": "product_version",
"name": "apache2-prefork-2.4.58-150600.5.35.1.s390x",
"product": {
"name": "apache2-prefork-2.4.58-150600.5.35.1.s390x",
"product_id": "apache2-prefork-2.4.58-150600.5.35.1.s390x"
}
},
{
"category": "product_version",
"name": "apache2-utils-2.4.58-150600.5.35.1.s390x",
"product": {
"name": "apache2-utils-2.4.58-150600.5.35.1.s390x",
"product_id": "apache2-utils-2.4.58-150600.5.35.1.s390x"
}
},
{
"category": "product_version",
"name": "apache2-worker-2.4.58-150600.5.35.1.s390x",
"product": {
"name": "apache2-worker-2.4.58-150600.5.35.1.s390x",
"product_id": "apache2-worker-2.4.58-150600.5.35.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "apache2-2.4.58-150600.5.35.1.x86_64",
"product": {
"name": "apache2-2.4.58-150600.5.35.1.x86_64",
"product_id": "apache2-2.4.58-150600.5.35.1.x86_64"
}
},
{
"category": "product_version",
"name": "apache2-devel-2.4.58-150600.5.35.1.x86_64",
"product": {
"name": "apache2-devel-2.4.58-150600.5.35.1.x86_64",
"product_id": "apache2-devel-2.4.58-150600.5.35.1.x86_64"
}
},
{
"category": "product_version",
"name": "apache2-event-2.4.58-150600.5.35.1.x86_64",
"product": {
"name": "apache2-event-2.4.58-150600.5.35.1.x86_64",
"product_id": "apache2-event-2.4.58-150600.5.35.1.x86_64"
}
},
{
"category": "product_version",
"name": "apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"product": {
"name": "apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"product_id": "apache2-prefork-2.4.58-150600.5.35.1.x86_64"
}
},
{
"category": "product_version",
"name": "apache2-utils-2.4.58-150600.5.35.1.x86_64",
"product": {
"name": "apache2-utils-2.4.58-150600.5.35.1.x86_64",
"product_id": "apache2-utils-2.4.58-150600.5.35.1.x86_64"
}
},
{
"category": "product_version",
"name": "apache2-worker-2.4.58-150600.5.35.1.x86_64",
"product": {
"name": "apache2-worker-2.4.58-150600.5.35.1.x86_64",
"product_id": "apache2-worker-2.4.58-150600.5.35.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Package Hub 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Module for Package Hub 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:packagehub:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-server-applications:15:sp6"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.6",
"product": {
"name": "openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.4.58-150600.5.35.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.aarch64"
},
"product_reference": "apache2-2.4.58-150600.5.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.4.58-150600.5.35.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.ppc64le"
},
"product_reference": "apache2-2.4.58-150600.5.35.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.4.58-150600.5.35.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.s390x"
},
"product_reference": "apache2-2.4.58-150600.5.35.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.4.58-150600.5.35.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.x86_64"
},
"product_reference": "apache2-2.4.58-150600.5.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.4.58-150600.5.35.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.aarch64"
},
"product_reference": "apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.4.58-150600.5.35.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le"
},
"product_reference": "apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.4.58-150600.5.35.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.s390x"
},
"product_reference": "apache2-prefork-2.4.58-150600.5.35.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.4.58-150600.5.35.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.x86_64"
},
"product_reference": "apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-event-2.4.58-150600.5.35.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.aarch64"
},
"product_reference": "apache2-event-2.4.58-150600.5.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-event-2.4.58-150600.5.35.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.ppc64le"
},
"product_reference": "apache2-event-2.4.58-150600.5.35.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-event-2.4.58-150600.5.35.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.s390x"
},
"product_reference": "apache2-event-2.4.58-150600.5.35.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-event-2.4.58-150600.5.35.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.x86_64"
},
"product_reference": "apache2-event-2.4.58-150600.5.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-devel-2.4.58-150600.5.35.1.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.aarch64"
},
"product_reference": "apache2-devel-2.4.58-150600.5.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-devel-2.4.58-150600.5.35.1.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.ppc64le"
},
"product_reference": "apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-devel-2.4.58-150600.5.35.1.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.s390x"
},
"product_reference": "apache2-devel-2.4.58-150600.5.35.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-devel-2.4.58-150600.5.35.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.x86_64"
},
"product_reference": "apache2-devel-2.4.58-150600.5.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.4.58-150600.5.35.1.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.aarch64"
},
"product_reference": "apache2-utils-2.4.58-150600.5.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.4.58-150600.5.35.1.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.ppc64le"
},
"product_reference": "apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.4.58-150600.5.35.1.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.s390x"
},
"product_reference": "apache2-utils-2.4.58-150600.5.35.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.4.58-150600.5.35.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.x86_64"
},
"product_reference": "apache2-utils-2.4.58-150600.5.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.4.58-150600.5.35.1.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.aarch64"
},
"product_reference": "apache2-worker-2.4.58-150600.5.35.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.4.58-150600.5.35.1.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.ppc64le"
},
"product_reference": "apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.4.58-150600.5.35.1.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.s390x"
},
"product_reference": "apache2-worker-2.4.58-150600.5.35.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.4.58-150600.5.35.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.x86_64"
},
"product_reference": "apache2-worker-2.4.58-150600.5.35.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.4.58-150600.5.35.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.aarch64"
},
"product_reference": "apache2-2.4.58-150600.5.35.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.4.58-150600.5.35.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.ppc64le"
},
"product_reference": "apache2-2.4.58-150600.5.35.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.4.58-150600.5.35.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.s390x"
},
"product_reference": "apache2-2.4.58-150600.5.35.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-2.4.58-150600.5.35.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.x86_64"
},
"product_reference": "apache2-2.4.58-150600.5.35.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-devel-2.4.58-150600.5.35.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.aarch64"
},
"product_reference": "apache2-devel-2.4.58-150600.5.35.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-devel-2.4.58-150600.5.35.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.ppc64le"
},
"product_reference": "apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-devel-2.4.58-150600.5.35.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.s390x"
},
"product_reference": "apache2-devel-2.4.58-150600.5.35.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-devel-2.4.58-150600.5.35.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.x86_64"
},
"product_reference": "apache2-devel-2.4.58-150600.5.35.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-event-2.4.58-150600.5.35.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.aarch64"
},
"product_reference": "apache2-event-2.4.58-150600.5.35.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-event-2.4.58-150600.5.35.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.ppc64le"
},
"product_reference": "apache2-event-2.4.58-150600.5.35.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-event-2.4.58-150600.5.35.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.s390x"
},
"product_reference": "apache2-event-2.4.58-150600.5.35.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-event-2.4.58-150600.5.35.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.x86_64"
},
"product_reference": "apache2-event-2.4.58-150600.5.35.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-manual-2.4.58-150600.5.35.1.noarch as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:apache2-manual-2.4.58-150600.5.35.1.noarch"
},
"product_reference": "apache2-manual-2.4.58-150600.5.35.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.4.58-150600.5.35.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.aarch64"
},
"product_reference": "apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.4.58-150600.5.35.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le"
},
"product_reference": "apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.4.58-150600.5.35.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.s390x"
},
"product_reference": "apache2-prefork-2.4.58-150600.5.35.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-prefork-2.4.58-150600.5.35.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.x86_64"
},
"product_reference": "apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.4.58-150600.5.35.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.aarch64"
},
"product_reference": "apache2-utils-2.4.58-150600.5.35.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.4.58-150600.5.35.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.ppc64le"
},
"product_reference": "apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.4.58-150600.5.35.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.s390x"
},
"product_reference": "apache2-utils-2.4.58-150600.5.35.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-utils-2.4.58-150600.5.35.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.x86_64"
},
"product_reference": "apache2-utils-2.4.58-150600.5.35.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.4.58-150600.5.35.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.aarch64"
},
"product_reference": "apache2-worker-2.4.58-150600.5.35.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.4.58-150600.5.35.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.ppc64le"
},
"product_reference": "apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.4.58-150600.5.35.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.s390x"
},
"product_reference": "apache2-worker-2.4.58-150600.5.35.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "apache2-worker-2.4.58-150600.5.35.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.x86_64"
},
"product_reference": "apache2-worker-2.4.58-150600.5.35.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-42516",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-42516"
}
],
"notes": [
{
"category": "general",
"text": "HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type response headers of applications hosted or proxied by the server can split the HTTP response.\n\nThis vulnerability was described as CVE-2023-38709 but the patch included in Apache HTTP Server 2.4.59 did not address the issue.\n\nUsers are recommended to upgrade to version 2.4.64, which fixes this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-manual-2.4.58-150600.5.35.1.noarch",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-42516",
"url": "https://www.suse.com/security/cve/CVE-2024-42516"
},
{
"category": "external",
"summary": "SUSE Bug 1227268 for CVE-2024-42516",
"url": "https://bugzilla.suse.com/1227268"
},
{
"category": "external",
"summary": "SUSE Bug 1246477 for CVE-2024-42516",
"url": "https://bugzilla.suse.com/1246477"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-manual-2.4.58-150600.5.35.1.noarch",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-manual-2.4.58-150600.5.35.1.noarch",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-04T15:07:21Z",
"details": "moderate"
}
],
"title": "CVE-2024-42516"
},
{
"cve": "CVE-2024-43204",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-43204"
}
],
"notes": [
{
"category": "general",
"text": "SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled by the attacker. Requires an unlikely configuration where mod_headers is configured to modify the Content-Type request or response header with a value provided in the HTTP request.\n\nUsers are recommended to upgrade to version 2.4.64 which fixes this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-manual-2.4.58-150600.5.35.1.noarch",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-43204",
"url": "https://www.suse.com/security/cve/CVE-2024-43204"
},
{
"category": "external",
"summary": "SUSE Bug 1246305 for CVE-2024-43204",
"url": "https://bugzilla.suse.com/1246305"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-manual-2.4.58-150600.5.35.1.noarch",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-manual-2.4.58-150600.5.35.1.noarch",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-04T15:07:21Z",
"details": "moderate"
}
],
"title": "CVE-2024-43204"
},
{
"cve": "CVE-2024-47252",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-47252"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient escaping of user-supplied data in mod_ssl in Apache HTTP Server 2.4.63 and earlier allows an untrusted SSL/TLS client to insert escape characters into log files in some configurations.\n\nIn a logging configuration where CustomLog is used with \"%{varname}x\" or \"%{varname}c\" to log variables provided by mod_ssl such as SSL_TLS_SNI, no escaping is performed by either mod_log_config or mod_ssl and unsanitized data provided by the client may appear in log files.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-manual-2.4.58-150600.5.35.1.noarch",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-47252",
"url": "https://www.suse.com/security/cve/CVE-2024-47252"
},
{
"category": "external",
"summary": "SUSE Bug 1246303 for CVE-2024-47252",
"url": "https://bugzilla.suse.com/1246303"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-manual-2.4.58-150600.5.35.1.noarch",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-manual-2.4.58-150600.5.35.1.noarch",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-04T15:07:21Z",
"details": "moderate"
}
],
"title": "CVE-2024-47252"
},
{
"cve": "CVE-2025-23048",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-23048"
}
],
"notes": [
{
"category": "general",
"text": "In some mod_ssl configurations on Apache HTTP Server 2.4.35 through to 2.4.63, an access control bypass by trusted clients is possible using TLS 1.3 session resumption.\n\nConfigurations are affected when mod_ssl is configured for multiple virtual hosts, with each restricted to a different set of trusted client certificates (for example with a different SSLCACertificateFile/Path setting). In such a case, a client trusted to access one virtual host may be able to access another virtual host, if SSLStrictSNIVHostCheck is not enabled in either virtual host.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-manual-2.4.58-150600.5.35.1.noarch",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-23048",
"url": "https://www.suse.com/security/cve/CVE-2025-23048"
},
{
"category": "external",
"summary": "SUSE Bug 1246302 for CVE-2025-23048",
"url": "https://bugzilla.suse.com/1246302"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-manual-2.4.58-150600.5.35.1.noarch",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-manual-2.4.58-150600.5.35.1.noarch",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-04T15:07:21Z",
"details": "important"
}
],
"title": "CVE-2025-23048"
},
{
"cve": "CVE-2025-49630",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49630"
}
],
"notes": [
{
"category": "general",
"text": "In certain proxy configurations, a denial of service attack against Apache HTTP Server versions 2.4.26 through to 2.4.63 can be triggered by untrusted clients causing an assertion in mod_proxy_http2.\n\nConfigurations affected are a reverse proxy is configured for an HTTP/2 backend, with ProxyPreserveHost set to \"on\".",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-manual-2.4.58-150600.5.35.1.noarch",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49630",
"url": "https://www.suse.com/security/cve/CVE-2025-49630"
},
{
"category": "external",
"summary": "SUSE Bug 1246307 for CVE-2025-49630",
"url": "https://bugzilla.suse.com/1246307"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-manual-2.4.58-150600.5.35.1.noarch",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-manual-2.4.58-150600.5.35.1.noarch",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-04T15:07:21Z",
"details": "important"
}
],
"title": "CVE-2025-49630"
},
{
"cve": "CVE-2025-49812",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-49812"
}
],
"notes": [
{
"category": "general",
"text": "In some mod_ssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack allows a man-in-the-middle attacker to hijack an HTTP session via a TLS upgrade.\n\nOnly configurations using \"SSLEngine optional\" to enable TLS upgrades are affected. Users are recommended to upgrade to version 2.4.64, which removes support for TLS upgrade.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-manual-2.4.58-150600.5.35.1.noarch",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-49812",
"url": "https://www.suse.com/security/cve/CVE-2025-49812"
},
{
"category": "external",
"summary": "SUSE Bug 1246161 for CVE-2025-49812",
"url": "https://bugzilla.suse.com/1246161"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-manual-2.4.58-150600.5.35.1.noarch",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-manual-2.4.58-150600.5.35.1.noarch",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-04T15:07:21Z",
"details": "important"
}
],
"title": "CVE-2025-49812"
},
{
"cve": "CVE-2025-53020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-53020"
}
],
"notes": [
{
"category": "general",
"text": "Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Server.\n\nThis issue affects Apache HTTP Server: from 2.4.17 up to 2.4.63.\n\nUsers are recommended to upgrade to version 2.4.64, which fixes the issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-manual-2.4.58-150600.5.35.1.noarch",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-53020",
"url": "https://www.suse.com/security/cve/CVE-2025-53020"
},
{
"category": "external",
"summary": "SUSE Bug 1246306 for CVE-2025-53020",
"url": "https://bugzilla.suse.com/1246306"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-manual-2.4.58-150600.5.35.1.noarch",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"SUSE Linux Enterprise Module for Server Applications 15 SP6:apache2-worker-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-devel-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-event-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-manual-2.4.58-150600.5.35.1.noarch",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-prefork-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-utils-2.4.58-150600.5.35.1.x86_64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.aarch64",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.ppc64le",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.s390x",
"openSUSE Leap 15.6:apache2-worker-2.4.58-150600.5.35.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-04T15:07:21Z",
"details": "moderate"
}
],
"title": "CVE-2025-53020"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…