| Revision Date: | 2021-09-13 | Version: | 1 |
| Title: | Security update for apache2-mod_auth_openidc (Moderate) |
| Description: |
This update for apache2-mod_auth_openidc fixes the following issues:
- CVE-2021-32785: format string bug via hiredis (bsc#1188638) - CVE-2021-32786: open redirect in logout functionality (bsc#1188639) - CVE-2021-32791: Hardcoded static IV and AAD with a reused key in AES GCM encryption (bsc#1188849) - CVE-2021-32792: XSS when using OIDCPreservePost On (bsc#1188848)
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1093536
1094462
1107874
1109845
1188638
1188639
1188848
1188849
CVE-2017-15108
CVE-2018-10811
CVE-2018-10811
CVE-2018-16151
CVE-2018-16151
CVE-2018-16152
CVE-2018-16152
CVE-2018-17540
CVE-2018-17540
CVE-2018-5388
CVE-2018-5388
CVE-2020-13249
CVE-2021-32785
CVE-2021-32786
CVE-2021-32791
CVE-2021-32792
SUSE-SU-2019:3056-1
SUSE-SU-2021:3020-1
|
| Platform(s): | SUSE Linux Enterprise Build System Kit 12
SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 15 SP2
SUSE Linux Enterprise High Availability 15
SUSE Linux Enterprise High Availability 15 SP1
SUSE Linux Enterprise High Performance Computing 15 SP2
SUSE Linux Enterprise High Performance Computing 15 SP3
SUSE Linux Enterprise Module for Basesystem 15 SP1
SUSE Linux Enterprise Module for Containers 15
SUSE Linux Enterprise Module for Desktop Applications 15
SUSE Linux Enterprise Module for Desktop Applications 15 SP1
SUSE Linux Enterprise Module for Desktop Applications 15 SP2
SUSE Linux Enterprise Module for Development Tools 15
SUSE Linux Enterprise Module for Development Tools 15 SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15
SUSE Linux Enterprise Module for Server Applications 15 SP2
SUSE Linux Enterprise Module for Server Applications 15 SP3
SUSE Linux Enterprise Module for Web Scripting 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server for SAP Applications 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15 SP3
SUSE Linux Enterprise Software Development Kit 11 SP3
SUSE Linux Enterprise Software Development Kit 11 SP4
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Storage 7
SUSE Linux Enterprise Storage 7.1
SUSE Linux Enterprise Workstation Extension 12 SP1
SUSE Linux Enterprise Workstation Extension 15
SUSE Manager Proxy 4.1
SUSE Manager Proxy 4.2
SUSE Manager Retail Branch Server 4.2
SUSE Manager Server 4.1
SUSE Manager Server 4.2
| Product(s): | |
| Definition Synopsis |
| SUSE Linux Enterprise Build System Kit 12 is installed AND kernel-zfcpdump-3.12.36-38.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP1 is installed
AND Package Information
libXRes1-1.0.7-3 is installed
OR libXRes1-32bit-1.0.7-3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP2 is installed
AND Package Information
NetworkManager-1.0.12-8 is installed
OR NetworkManager-lang-1.0.12-8 is installed
OR libnm-glib-vpn1-1.0.12-8 is installed
OR libnm-glib4-1.0.12-8 is installed
OR libnm-util2-1.0.12-8 is installed
OR libnm0-1.0.12-8 is installed
OR typelib-1_0-NM-1_0-1.0.12-8 is installed
OR typelib-1_0-NMClient-1_0-1.0.12-8 is installed
OR typelib-1_0-NetworkManager-1_0-1.0.12-8 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP3 is installed
AND Package Information
ImageMagick-6.8.8.1-70 is installed
OR libMagick++-6_Q16-3-6.8.8.1-70 is installed
OR libMagickCore-6_Q16-1-6.8.8.1-70 is installed
OR libMagickCore-6_Q16-1-32bit-6.8.8.1-70 is installed
OR libMagickWand-6_Q16-1-6.8.8.1-70 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP2 is installed
AND spice-vdagent-0.19.0-1.62 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise High Availability 15 is installed
AND Package Information
cluster-md-kmp-default-4.12.14-25.22 is installed
OR dlm-kmp-default-4.12.14-25.22 is installed
OR gfs2-kmp-default-4.12.14-25.22 is installed
OR kernel-default-4.12.14-25.22 is installed
OR ocfs2-kmp-default-4.12.14-25.22 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise High Availability 15 SP1 is installed
AND Package Information
ctdb-4.9.5+git.187.71edee57d5a-3.9 is installed
OR samba-4.9.5+git.187.71edee57d5a-3.9 is installed
|
| Definition Synopsis |
| Release Information
SUSE Linux Enterprise High Performance Computing 15 SP3 is installed
OR SUSE Linux Enterprise Module for Server Applications 15 SP3 is installed
OR SUSE Linux Enterprise Server 15 SP3 is installed
OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed
OR SUSE Linux Enterprise Storage 7.1 is installed
OR SUSE Manager Proxy 4.2 is installed
OR SUSE Manager Retail Branch Server 4.2 is installed
OR SUSE Manager Server 4.2 is installed
AND apache2-mod_auth_openidc-2.3.8-3.15.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed
AND Package Information
strongswan-5.6.0-4.3 is installed
OR strongswan-doc-5.6.0-4.3 is installed
OR strongswan-hmac-5.6.0-4.3 is installed
OR strongswan-ipsec-5.6.0-4.3 is installed
OR strongswan-libs0-5.6.0-4.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Containers 15 is installed
AND Package Information
containerd-1.1.2-5.3 is installed
OR docker-18.06.1_ce-6.8 is installed
OR docker-bash-completion-18.06.1_ce-6.8 is installed
OR docker-libnetwork-0.7.0.1+gitr2664_3ac297bc7fd0-4.3 is installed
OR docker-runc-1.0.0rc5+gitr3562_69663f0bd4b6-6.3 is installed
OR golang-github-docker-libnetwork-0.7.0.1+gitr2664_3ac297bc7fd0-4.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Desktop Applications 15 is installed
AND Package Information
ffmpeg-3.4.2-4.12 is installed
OR libavcodec57-3.4.2-4.12 is installed
OR libavutil-devel-3.4.2-4.12 is installed
OR libavutil55-3.4.2-4.12 is installed
OR libpostproc-devel-3.4.2-4.12 is installed
OR libpostproc54-3.4.2-4.12 is installed
OR libswresample-devel-3.4.2-4.12 is installed
OR libswresample2-3.4.2-4.12 is installed
OR libswscale-devel-3.4.2-4.12 is installed
OR libswscale4-3.4.2-4.12 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed
AND Package Information
wireshark-2.4.15-3.28 is installed
OR wireshark-devel-2.4.15-3.28 is installed
OR wireshark-ui-qt-2.4.15-3.28 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Development Tools 15 is installed
AND Package Information
glibc-2.26-13.3 is installed
OR glibc-devel-32bit-2.26-13.3 is installed
OR glibc-devel-static-2.26-13.3 is installed
OR glibc-utils-2.26-13.3 is installed
OR glibc-utils-src-2.26-13.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed
AND Package Information
ImageMagick-7.0.7.34-3.64 is installed
OR perl-PerlMagick-7.0.7.34-3.64 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed
AND Package Information
tomcat-9.0.10-3.7 is installed
OR tomcat-docs-webapp-9.0.10-3.7 is installed
OR tomcat-embed-9.0.10-3.7 is installed
OR tomcat-javadoc-9.0.10-3.7 is installed
OR tomcat-jsvc-9.0.10-3.7 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Server Applications 15 SP2 is installed
AND Package Information
libmariadb-devel-3.1.8-3.18 is installed
OR libmariadb_plugins-3.1.8-3.18 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Web Scripting 15 is installed
AND jakarta-commons-fileupload-1.1.1-4.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1 is installed
AND ppp-2.4.7-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2 is installed
AND yast2-3.1.206-37.1.2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Software Development Kit 12 is installed
AND Package Information
bash-devel-4.2-75.2 is installed
OR readline-devel-6.2-75.2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 12 SP1 is installed
AND Package Information
gcc48-gij-4.8.5-24.1 is installed
OR gcc48-gij-32bit-4.8.5-24.1 is installed
OR libgcj48-4.8.5-24.1 is installed
OR libgcj48-32bit-4.8.5-24.1 is installed
OR libgcj48-jar-4.8.5-24.1 is installed
OR libgcj_bc1-4.8.5-24.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 15 is installed
AND Package Information
ffmpeg-3.4.2-4.12 is installed
OR libavcodec-devel-3.4.2-4.12 is installed
OR libavformat-devel-3.4.2-4.12 is installed
OR libavformat57-3.4.2-4.12 is installed
OR libavresample-devel-3.4.2-4.12 is installed
OR libavresample3-3.4.2-4.12 is installed
|