File _patchinfo of Package patchinfo.27541

<patchinfo incident="27541">
  <issue tracker="cve" id="2022-37436"/>
  <issue tracker="cve" id="2006-20001"/>
  <issue tracker="cve" id="2022-36760"/>
  <issue tracker="bnc" id="1207247">VUL-0: CVE-2006-20001: apache2: mod_dav out of bounds read, or write of zero byte</issue>
  <issue tracker="bnc" id="1207250">VUL-0: CVE-2022-36760: apache2: mod_proxy_ajp Possible request smuggling</issue>
  <issue tracker="bnc" id="1207251">VUL-0: CVE-2022-37436: apache2: mod_proxy backend HTTP response splitting</issue>
  <packager>david.anes</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for apache2</summary>
  <description>This update for apache2 fixes the following issues:

- CVE-2022-37436: Fixed an issue in mod_proxy where a malicious
  backend could cause the response headers to be truncated early,
  resulting in some headers being incorporated into the response body
  (bsc#1207251).
- CVE-2022-36760: Fixed an issue in mod_proxy_ajp that could allow
  request smuggling attacks (bsc#1207250).
- CVE-2006-20001: Fixed an issue in mod_proxy_ajp where a request
  header could cause memory corruption (bsc#1207247).
</description>
</patchinfo>