Ubuntu Security Notice USN-5839-2
February 02, 2023
apache2 vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 16.04 ESM
Summary:
Several security issues were fixed in Apache HTTP Server.
Software Description:
– apache2: Apache HTTP server
Details:
USN-5839-1 fixed a vulnerability in Apache. This update provides
the corresponding update for Ubuntu 16.04 ESM.
Original advisory details:
Dimas Fariski Setyawan Putra discovered that the Apache HTTP Server
mod_proxy module incorrectly truncated certain response headers. This may
result in later headers not being interpreted by the client.
(CVE-2022-37436)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 16.04 ESM:
apache2 2.4.18-2ubuntu3.17+esm9
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5839-2
https://ubuntu.com/security/notices/USN-5839-1
CVE-2022-37436
