Уведомление безопасности SUSE-SA:2006:043

Критичная (7.6)

(AV:N/AC:H/Au:N/C:C/I:C/A:C)

SUSE

apache2 (any) apache2-prefork (any) apache2-worker (any)

Уведомление безопасности об уязвимостях SLE SDK 10, SUSE LINUX 10.1, SUSE LINUX 10.0, SUSE LINUX 9.3, SUSE LINUX 9.2, SUSE SLES 10, SUSE SLES 9

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
openSUSE 10.0:
i586:
apache2 - 2.0.54-10.5
apache2-worker - 2.0.54-10.5
apache2-prefork - 2.0.54-10.5
openSUSE 10.1:
i586:
apache2-prefork - 2.2.0-21.7
apache2-worker - 2.2.0-21.7
apache2 - 2.2.0-21.7
openSUSE 9.3:
i586:
apache2-worker - 2.0.53-9.12
apache2-prefork - 2.0.53-9.12
apache2 - 2.0.53-9.12
openSUSE 9.2:
i586:
apache2-prefork - 2.0.50-7.14
apache2-worker - 2.0.50-7.14
apache2 - 2.0.50-7.14
SUSE Linux Enterprise Server 10:
x86_64:
apache2 - 2.2.0-21.7
apache2-prefork - 2.2.0-21.7
apache2-worker - 2.2.0-21.7
Novell Open Enterprise Server (OES), SUSE Linux Enterprise Server 9, Novell Linux Point of Service 9:
x86_64:
apache - 1.3.29-71.24
apache-devel - 1.3.29-71.24
mod_ssl - 2.8.16-71.24
apache2 - 2.0.49-27.59
apache2-prefork - 2.0.49-27.59
apache2-worker - 2.0.49-27.59
SUSE LINUX Enterprise Server 8:
s390x:
apache - 1.3.26-171
apache-devel - 1.3.26-171
mod_ssl - 2.8.10-171
SUSE Linux Enterprise Server 9:
x86_64:
apache - 1.3.29-71.21
mod_ssl - 2.8.16-71.21
apache2 - 2.0.49-27.51
apache2-prefork - 2.0.49-27.51
apache2-worker - 2.0.49-27.51
SUSE LINUX Standard Server 8, SUSE LINUX Enterprise Server 8, SUSE LINUX Openexchange Server 4.0, SUSE LINUX Retail Solution 8:
x86_64:
apache - 1.3.26-171
apache-devel - 1.3.26-171
mod_ssl - 2.8.10-171

https://www.suse.com/support/security/advisories/2006_43_apache.html

Источник: CVE
Наименование: CVE-2005-3352
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3352

Источник: CVE
Наименование: CVE-2006-3747
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3747