Security update for apache2

🗓️ 31 Jul 2025 06:27:07Reported by SuseType

Apache2 security update fixes CVEs for response splitting, SSRF, log escaping, TLS 1.3 resumption, HTTP/2 DoS, opportunistic encryption, and memory handling.

Reporter	Title	Published	Views	Family All 760
GithubExploit	Exploit for Missing Release of Memory after Effective Lifetime in Apache Http_Server	12 Jan 202608:14	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM HTTP Server, which is bundled with WebSphere Remote Server, is affected by multiple vulnerabilities due to the included Apache HTTP Server	22 Jul 202517:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	22 Dec 202509:22	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in httpd library (CVE-2024-47252, CVE-2025-23048, CVE-2025-49630) affect Power HMC.	20 Nov 202506:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities within WebSphere Application and IBM HTTP Server, affect IBM Tivoli Monitoring.	3 Oct 202516:18	–	ibm
IBM Security Bulletins	Security Bulletin:IBM HTTP Server shipped with IBM OpenPages is vulnerable to multiple vulnerabilities	21 Oct 202518:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which are vulnerable to CVEs.	3 Nov 202509:06	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability has been identified in IBM HTTP Server used by IBM Rational ClearQuest (CVE-2024-43204, CVE-2024-43394, CVE-2024-42516)	11 Aug 202513:09	–	ibm
IBM Security Bulletins	Security Bulletin: TSSC/IMC addresses multiple security vulnerabilities.	14 Nov 202510:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM DevOps Code ClearCase [CVE-2024-43204, CVE-2024-43394, CVE-2024-42516 , CVE-2025-54090]	18 Aug 202511:28	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
suse	12	aarch64	apache2	2.4.51	apache2-2.4.51-35.69.1.aarch64.rpm
suse	12	aarch64	apache2-debuginfo	2.4.51	apache2-debuginfo-2.4.51-35.69.1.aarch64.rpm
suse	12	aarch64	apache2-debugsource	2.4.51	apache2-debugsource-2.4.51-35.69.1.aarch64.rpm
suse	12	aarch64	apache2-devel	2.4.51	apache2-devel-2.4.51-35.69.1.aarch64.rpm
suse	12	aarch64	apache2-doc	2.4.51	apache2-doc-2.4.51-35.69.1.aarch64.rpm
suse	12	aarch64	apache2-example-pages	2.4.51	apache2-example-pages-2.4.51-35.69.1.aarch64.rpm
suse	12	aarch64	apache2-prefork	2.4.51	apache2-prefork-2.4.51-35.69.1.aarch64.rpm
suse	12	aarch64	apache2-prefork-debuginfo	2.4.51	apache2-prefork-debuginfo-2.4.51-35.69.1.aarch64.rpm
suse	12	aarch64	apache2-tls13	2.4.51	apache2-tls13-2.4.51-35.69.1.aarch64.rpm
suse	12	aarch64	apache2-tls13-debuginfo	2.4.51	apache2-tls13-debuginfo-2.4.51-35.69.1.aarch64.rpm

Source	Link
bugzilla	www.bugzilla.suse.com/show_bug.cgi
bugzilla	www.bugzilla.suse.com/show_bug.cgi
bugzilla	www.bugzilla.suse.com/show_bug.cgi
bugzilla	www.bugzilla.suse.com/show_bug.cgi
bugzilla	www.bugzilla.suse.com/show_bug.cgi
bugzilla	www.bugzilla.suse.com/show_bug.cgi
bugzilla	www.bugzilla.suse.com/show_bug.cgi
suse	www.suse.com/security/cve/CVE-2024-42516.html
suse	www.suse.com/security/cve/CVE-2024-43204.html
suse	www.suse.com/security/cve/CVE-2024-47252.html

31 Jul 2025 06:27Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.18.8

CVSS 48.3

EPSS0.04799