Recommended update for apache2

Announcement ID: SUSE-RU-2023:1816-1
Rating: moderate
References:
Affected Products:
  • SUSE Linux Enterprise High Performance Computing 12 SP5
  • SUSE Linux Enterprise Server 12 SP5
  • SUSE Linux Enterprise Server for SAP Applications 12 SP5
  • SUSE Linux Enterprise Software Development Kit 12 SP5

An update that contains two features and has six fixes can now be installed.

Description:

This update for apache2 fixes the following issues:

This update ships a parallel set of "apache2" packages, with the "tls13" suffix to enable TLS 1.3 support. (jsc#SLE-18664, jsc#SLE-18105, bsc#1187784)

The original apache2 packages will continue as-is, linking against openssl 1.0.2 and support TLS protocol versions up to and including TLS 1.2.

The additional new apache2-tls13 packages link against openssl 1.1.1 and so gain TLS 1.3 support additionaly.

Note that due to the mix between openssl 1.1.1 and 1.0.2 using those packages together with third party apache2 plugins might result in crashes, so SUSE recommends testing your module setups before deploying apache2-tls13.

To migrate from apache2 to apache2-tls13:

  • Create a backup your apache2 configuration (all files below the default location /etc/apache2)

  • Use zypper to migrate to tls13 flavors:

    zypper in apache2-tls13

Use the solution of:

"Solution 1: deinstallation of apache2-2.4.51-35.25.1.x86_64"

this will then remove apache2 packages and install the apache2-tls13 packages.

  • Restart the apache2 systemd service.

  • Verify everything still works.

If there are problems, you can migrate back to the apache2 packages by using "zypper in apache2" with the solution to deinstall apache2-tls13.

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • SUSE Linux Enterprise Software Development Kit 12 SP5
    zypper in -t patch SUSE-SLE-SDK-12-SP5-2023-1816=1
  • SUSE Linux Enterprise High Performance Computing 12 SP5
    zypper in -t patch SUSE-SLE-SERVER-12-SP5-2023-1816=1
  • SUSE Linux Enterprise Server 12 SP5
    zypper in -t patch SUSE-SLE-SERVER-12-SP5-2023-1816=1
  • SUSE Linux Enterprise Server for SAP Applications 12 SP5
    zypper in -t patch SUSE-SLE-SERVER-12-SP5-2023-1816=1

Package List:

  • SUSE Linux Enterprise Software Development Kit 12 SP5 (aarch64 ppc64le s390x x86_64)
    • apache2-debuginfo-2.4.51-35.32.1
    • apache2-devel-2.4.51-35.32.1
    • apache2-debugsource-2.4.51-35.32.1
    • apache2-tls13-debugsource-2.4.51-35.32.1
    • apache2-tls13-devel-2.4.51-35.32.1
    • apache2-tls13-debuginfo-2.4.51-35.32.1
  • SUSE Linux Enterprise High Performance Computing 12 SP5 (aarch64 x86_64)
    • apache2-debuginfo-2.4.51-35.32.1
    • apache2-tls13-2.4.51-35.32.1
    • apache2-debugsource-2.4.51-35.32.1
    • apache2-utils-2.4.51-35.32.1
    • apache2-worker-debuginfo-2.4.51-35.32.1
    • apache2-tls13-debugsource-2.4.51-35.32.1
    • apache2-tls13-prefork-debuginfo-2.4.51-35.32.1
    • apache2-worker-2.4.51-35.32.1
    • apache2-tls13-example-pages-2.4.51-35.32.1
    • apache2-prefork-2.4.51-35.32.1
    • apache2-tls13-utils-2.4.51-35.32.1
    • apache2-tls13-utils-debuginfo-2.4.51-35.32.1
    • apache2-prefork-debuginfo-2.4.51-35.32.1
    • apache2-2.4.51-35.32.1
    • apache2-tls13-worker-2.4.51-35.32.1
    • apache2-example-pages-2.4.51-35.32.1
    • apache2-tls13-worker-debuginfo-2.4.51-35.32.1
    • apache2-utils-debuginfo-2.4.51-35.32.1
    • apache2-tls13-debuginfo-2.4.51-35.32.1
    • apache2-tls13-prefork-2.4.51-35.32.1
  • SUSE Linux Enterprise High Performance Computing 12 SP5 (noarch)
    • apache2-tls13-doc-2.4.51-35.32.1
    • apache2-doc-2.4.51-35.32.1
  • SUSE Linux Enterprise Server 12 SP5 (aarch64 ppc64le s390x x86_64)
    • apache2-debuginfo-2.4.51-35.32.1
    • apache2-tls13-2.4.51-35.32.1
    • apache2-debugsource-2.4.51-35.32.1
    • apache2-utils-2.4.51-35.32.1
    • apache2-worker-debuginfo-2.4.51-35.32.1
    • apache2-tls13-debugsource-2.4.51-35.32.1
    • apache2-tls13-prefork-debuginfo-2.4.51-35.32.1
    • apache2-worker-2.4.51-35.32.1
    • apache2-tls13-example-pages-2.4.51-35.32.1
    • apache2-prefork-2.4.51-35.32.1
    • apache2-tls13-utils-2.4.51-35.32.1
    • apache2-tls13-utils-debuginfo-2.4.51-35.32.1
    • apache2-prefork-debuginfo-2.4.51-35.32.1
    • apache2-2.4.51-35.32.1
    • apache2-tls13-worker-2.4.51-35.32.1
    • apache2-example-pages-2.4.51-35.32.1
    • apache2-tls13-worker-debuginfo-2.4.51-35.32.1
    • apache2-utils-debuginfo-2.4.51-35.32.1
    • apache2-tls13-debuginfo-2.4.51-35.32.1
    • apache2-tls13-prefork-2.4.51-35.32.1
  • SUSE Linux Enterprise Server 12 SP5 (noarch)
    • apache2-tls13-doc-2.4.51-35.32.1
    • apache2-doc-2.4.51-35.32.1
  • SUSE Linux Enterprise Server for SAP Applications 12 SP5 (ppc64le x86_64)
    • apache2-debuginfo-2.4.51-35.32.1
    • apache2-tls13-2.4.51-35.32.1
    • apache2-debugsource-2.4.51-35.32.1
    • apache2-utils-2.4.51-35.32.1
    • apache2-worker-debuginfo-2.4.51-35.32.1
    • apache2-tls13-debugsource-2.4.51-35.32.1
    • apache2-tls13-prefork-debuginfo-2.4.51-35.32.1
    • apache2-worker-2.4.51-35.32.1
    • apache2-tls13-example-pages-2.4.51-35.32.1
    • apache2-prefork-2.4.51-35.32.1
    • apache2-tls13-utils-2.4.51-35.32.1
    • apache2-tls13-utils-debuginfo-2.4.51-35.32.1
    • apache2-prefork-debuginfo-2.4.51-35.32.1
    • apache2-2.4.51-35.32.1
    • apache2-tls13-worker-2.4.51-35.32.1
    • apache2-example-pages-2.4.51-35.32.1
    • apache2-tls13-worker-debuginfo-2.4.51-35.32.1
    • apache2-utils-debuginfo-2.4.51-35.32.1
    • apache2-tls13-debuginfo-2.4.51-35.32.1
    • apache2-tls13-prefork-2.4.51-35.32.1
  • SUSE Linux Enterprise Server for SAP Applications 12 SP5 (noarch)
    • apache2-tls13-doc-2.4.51-35.32.1
    • apache2-doc-2.4.51-35.32.1

References: