File _patchinfo of Package patchinfo.14720

<patchinfo incident="14720">
  <issue tracker="bnc" id="1168404">VUL-1: CVE-2020-1934: apache2: mod_proxy_ftp use of uninitialized value</issue>
  <issue tracker="bnc" id="1169066">VUL-0: CVE-2020-1938: apache2: mod_aj_proxy:  Ghostcat - Apache Tomcat AJP File Read/Inclusion Vulnerability (CNVD-2020-10487)</issue>
  <issue tracker="bnc" id="1168407">VUL-1: CVE-2020-1927: apache2: mod_rewrite configurations vulnerable to open redirect</issue>
  <issue tracker="cve" id="2020-1927"/>
  <issue tracker="cve" id="2020-1934"/>
  <issue tracker="cve" id="2020-1938"/>
  <packager>pgajdos</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for apache2</summary>
  <description>This update for apache2 fixes the following issues:

- CVE-2020-1934: mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server (bsc#1168404).
- CVE-2020-1927: mod_rewrite configurations vulnerable to open redirect (bsc#1168407).
- CVE-2020-1938: mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy AJP13 authentication (bsc#1169066).
</description>
</patchinfo>