Lucene search

K
suseSuseSUSE-SU-2014:1082-1
HistorySep 02, 2014 - 9:04 p.m.

Security update for apache2 (important)

2014-09-0221:04:17
lists.opensuse.org
18

0.963 High

EPSS

Percentile

99.4%

This apache2 update fixes the following security issues:

   * log_cookie mod_log_config.c remote denial of service (CVE-2014-0098,
     bnc#869106)
   * mod_dav denial of service (CVE-2013-6438, bnc#869105)
   * mod_cgid denial of service (CVE-2014-0231, bnc#887768)
   * mod_status heap-based buffer overflow (CVE-2014-0226, bnc#887765)
   * mod_rewrite: escape logdata to avoid terminal escapes
     (CVE-2013-1862, bnc#829057)
   * mod_dav: segfault in merge request (CVE-2013-1896, bnc#829056)

Security Issues:

   * CVE-2014-0098
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0098">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0098</a>&gt;
   * CVE-2013-6438
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6438">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6438</a>&gt;
   * CVE-2014-0226
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0226">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0226</a>&gt;
   * CVE-2014-0231
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0231">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0231</a>&gt;
   * CVE-2013-1862
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1862">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1862</a>&gt;
   * CVE-2013-1896
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1896">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1896</a>&gt;