openSUSE 安全更新：apache2 (openSUSE-SU-2014:1647-1)
medium Nessus 插件 ID 80043
语言：
简介
远程 openSUSE 主机缺少安全更新。描述
此 apache 版本更新修复了多种安全和非安全问题。- 2.2.29 的更新
- 2.2.22 和 2.2.29 之间的变化：
http://www.apache.org/dist/httpd/CHANGES_2.2
- 下列修补程序已不再需要并已删除：
- httpd-2.2.x-bnc798733-SNI_ignorecase.diff
- httpd-2.2.x-bnc806458-mod_imagemap-xss.diff
- httpd-2.2.x-bnc806458-mod_info_ap_get_server_name-xss.diff
- httpd-2.2.x-bnc806458-mod_proxy_ftp-xss.diff
- httpd-2.2.x-bnc806458-util_ldap_cache_mgr-xss.diff
- httpd-2.2.x-bnc807152-mod_balancer_handler_xss.diff
- httpd-mod_deflate_head.patch
- httpd-new_pcre.patch
- httpd-2.2.22-SSLCompression_CRIME_mitigation.patch
- httpd-2.2.19-linux3.patch
- httpd-2.2.x-bnc829056-CVE-2013-1896-pr1482522-mod_dav.diff
- httpd-2.2.x-bnc829057-CVE-2013-1862-mod_rewrite_terminal_escape_sequences.diff
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff
- httpd-2.2.x-bnc869106-CVE-2014-0098-log_cookie_c.diff
- httpd-2.2.x-bnc887765-CVE-2014-0226-mod_status_race.diff
- httpd-2.2.x-bnc887768-CVE-2014-0231_mod_cgid_DoS_via_no_stdin_read.diff
- httpd-2.2.x-bnc777260-CVE-2012-2687-mod_negotiation_filename_xss.diff
- httpd-2.2.x-CVE-2011-3368-server_protocl_c.diff
- 已为当前 Apache 版本更新以下修补程序：
- apache2-mod_ssl_npn.patch
- httpd-2.0.54-envvars.dif
- httpd-2.2.x-bnc690734.patch
- ssl-mode-release-buffers.patch
- bnc#871310 已在 Apache httpd 2.2.29 中修复
解决方案
更新受影响的 apache2 程序包。另见
http://www.apache.org/dist/httpd/CHANGES_2.2
https://bugzilla.opensuse.org/show_bug.cgi?id=871310
https://lists.opensuse.org/opensuse-updates/2014-12/msg00065.html
插件详情
严重性: Medium
ID: 80043
文件名: openSUSE-2014-770.nasl
版本: 1.8
类型: local
代理: unix
发布时间: 2014/12/16
最近更新时间: 2021/1/19
支持的传感器: Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus
风险信息
VPR
风险因素: Medium
分数: 6.7
CVSS v2
风险因素: Medium
基本分数: 6.8
矢量: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
漏洞信息
CPE: p-cpe:/a:novell:opensuse:apache2, p-cpe:/a:novell:opensuse:apache2-debuginfo, p-cpe:/a:novell:opensuse:apache2-debugsource, p-cpe:/a:novell:opensuse:apache2-devel, p-cpe:/a:novell:opensuse:apache2-event, p-cpe:/a:novell:opensuse:apache2-event-debuginfo, p-cpe:/a:novell:opensuse:apache2-example-pages, p-cpe:/a:novell:opensuse:apache2-itk, p-cpe:/a:novell:opensuse:apache2-itk-debuginfo, p-cpe:/a:novell:opensuse:apache2-prefork, p-cpe:/a:novell:opensuse:apache2-prefork-debuginfo, p-cpe:/a:novell:opensuse:apache2-utils, p-cpe:/a:novell:opensuse:apache2-utils-debuginfo, p-cpe:/a:novell:opensuse:apache2-worker, p-cpe:/a:novell:opensuse:apache2-worker-debuginfo, cpe:/o:novell:opensuse:12.3
必需的 KB 项: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu
补丁发布日期: 2014/12/3
参考资料信息
CVE: CVE-2011-3368, CVE-2012-2687, CVE-2013-1862, CVE-2013-1896, CVE-2013-6438, CVE-2014-0098, CVE-2014-0226, CVE-2014-0231