Oval Definition:	oval:org.opensuse.security:def:45309
Revision Date: 2020-12-01 Version: 1 Title: Recommended update for apache2 (Moderate) Description: This update for apache2 fixes several issues. These security issues were fixed: - CVE-2017-9789: When under stress (closing many connections) the HTTP/2 handling code would sometimes access memory after it has been freed, resulting in potentially erratic behaviour (bsc#1048575). - CVE-2017-7659: A maliciously constructed HTTP/2 request could cause mod_http2 to dereference a NULL pointer and crash the server process (bsc#1045160). These non-security issues were fixed: - Use the full path to a2enmod and a2dismod in the apache-22-24-upgrade script (bsc#1042037) - Fall back to 'localhost' as hostname in gensslcert (bsc#1057406) Family: unix Class: patch Status: Reference(s): 1016715 1042037 1045160 1048575 1055857 1057406 1059893 1068664 1101797 1104826 1111331 1120281 1120943 1137443 1139083 1145559 1145604 1151021 1156402 1159208 1159623 1160770 1165439 1166484 1169740 1171355 1171475 1171847 1172105 1172116 1172121 1172651 1173334 1174910 1174913 985657 CVE-2012-0876 CVE-2016-0718 CVE-2016-3189 CVE-2016-4472 CVE-2016-4975 CVE-2016-6328 CVE-2016-8743 CVE-2016-9063 CVE-2017-1000158 CVE-2017-18379 CVE-2017-7544 CVE-2017-7659 CVE-2017-9233 CVE-2017-9789 CVE-2018-1000845 CVE-2018-10906 CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2018-20030 CVE-2018-8956 CVE-2019-11091 CVE-2019-11500 CVE-2019-12735 CVE-2019-12900 CVE-2019-14835 CVE-2019-2201 CVE-2019-9278 CVE-2020-0093 CVE-2020-11868 CVE-2020-12767 CVE-2020-13112 CVE-2020-13113 CVE-2020-13114 CVE-2020-13817 CVE-2020-14361 CVE-2020-14362 CVE-2020-15025 CVE-2020-1747 CVE-2020-1760 SUSE-SU-2018:0261-1 SUSE-SU-2018:3219-1 SUSE-SU-2019:0179-1 SUSE-SU-2019:1954-1 SUSE-SU-2019:1955-1 SUSE-SU-2019:2972-1 SUSE-SU-2020:0497-1 SUSE-SU-2020:1805-1 SUSE-SU-2020:2401-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 42.3 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Legacy Software 15 SUSE Linux Enterprise Module for Legacy Software 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Python2 packages 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Web Scripting 15 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP3-BCL SUSE Linux Enterprise Server for SAP Applications 12 SP3-ESPOS SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP4-ESPOS SUSE Linux Enterprise Server for SAP Applications 12 SP4-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND libjansson4-2.9-lp150.1 is installed Definition Synopsis openSUSE Leap 42.3 is installed AND Package Information colord-1.3.3-4 is installed OR colord-gtk-lang-0.1.26-6 is installed OR colord-lang-1.3.3-4 is installed OR libcolord-gtk1-0.1.26-6 is installed OR libcolord2-1.3.3-4 is installed OR libcolorhug2-1.3.3-4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information MozillaFirefox-10.0.10-0.3 is installed OR MozillaFirefox-translations-10.0.10-0.3 is installed OR mozilla-nspr-4.9.3-0.2 is installed OR mozilla-nspr-32bit-4.9.3-0.2 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information gnome-keyring-3.10.1-4 is installed OR gnome-keyring-32bit-3.10.1-4 is installed OR gnome-keyring-lang-3.10.1-4 is installed OR gnome-keyring-pam-3.10.1-4 is installed OR gnome-keyring-pam-32bit-3.10.1-4 is installed OR libgck-modules-gnome-keyring-3.10.1-4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information coreutils-8.22-9 is installed OR coreutils-lang-8.22-9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information NetworkManager-1.0.12-8 is installed OR NetworkManager-lang-1.0.12-8 is installed OR libnm-glib-vpn1-1.0.12-8 is installed OR libnm-glib4-1.0.12-8 is installed OR libnm-util2-1.0.12-8 is installed OR libnm0-1.0.12-8 is installed OR typelib-1_0-NM-1_0-1.0.12-8 is installed OR typelib-1_0-NMClient-1_0-1.0.12-8 is installed OR typelib-1_0-NetworkManager-1_0-1.0.12-8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libfreebl3-3.29.5-57 is installed OR libfreebl3-32bit-3.29.5-57 is installed OR libsoftokn3-3.29.5-57 is installed OR libsoftokn3-32bit-3.29.5-57 is installed OR mozilla-nss-3.29.5-57 is installed OR mozilla-nss-32bit-3.29.5-57 is installed OR mozilla-nss-certs-3.29.5-57 is installed OR mozilla-nss-certs-32bit-3.29.5-57 is installed OR mozilla-nss-sysinit-3.29.5-57 is installed OR mozilla-nss-sysinit-32bit-3.29.5-57 is installed OR mozilla-nss-tools-3.29.5-57 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information bluez-5.13-5.4 is installed OR bluez-cups-5.13-5.4 is installed OR libbluetooth3-5.13-5.4 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 is installed AND Package Information cifs-utils-6.5-1 is installed OR cifs-utils-devel-6.5-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND Package Information libXfixes-devel-5.0.3-1 is installed OR libXfixes3-5.0.3-1 is installed OR libXfixes3-32bit-5.0.3-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed AND Package Information NetworkManager-1.10.6-5.3 is installed OR NetworkManager-devel-1.10.6-5.3 is installed OR libnm-glib-vpn1-1.10.6-5.3 is installed OR libnm-glib4-1.10.6-5.3 is installed OR libnm-util2-1.10.6-5.3 is installed OR typelib-1_0-NMClient-1_0-1.10.6-5.3 is installed OR typelib-1_0-NetworkManager-1_0-1.10.6-5.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 is installed AND Package Information kernel-docs-4.12.14-150.38 is installed OR kernel-obs-build-4.12.14-150.38 is installed OR kernel-source-4.12.14-150.38 is installed OR kernel-syms-4.12.14-150.38 is installed OR kernel-vanilla-4.12.14-150.38 is installed OR kernel-vanilla-base-4.12.14-150.38 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed AND Package Information perl-5.26.1-7.12 is installed OR perl-doc-5.26.1-7.12 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 is installed AND Package Information openldap2-2.4.46-7 is installed OR openldap2-back-meta-2.4.46-7 is installed OR openldap2-back-perl-2.4.46-7 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 SP1 is installed AND Package Information java-1_8_0-ibm-1.8.0_sr6.5-3.33 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr6.5-3.33 is installed OR java-1_8_0-ibm-devel-1.8.0_sr6.5-3.33 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr6.5-3.33 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-25_19-default-7-2 is installed OR kernel-livepatch-SLE15_Update_5-7-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed AND Package Information libntfs-3g-devel-2016.2.22-3.3 is installed OR ntfs-3g_ntfsprogs-2016.2.22-3.3 is installed OR ntfsprogs-extra-2016.2.22-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information cluster-md-kmp-azure-4.12.14-5.30 is installed OR dlm-kmp-azure-4.12.14-5.30 is installed OR gfs2-kmp-azure-4.12.14-5.30 is installed OR kernel-azure-4.12.14-5.30 is installed OR kernel-azure-base-4.12.14-5.30 is installed OR kernel-azure-devel-4.12.14-5.30 is installed OR kernel-azure-extra-4.12.14-5.30 is installed OR kernel-azure-livepatch-4.12.14-5.30 is installed OR kernel-devel-azure-4.12.14-5.30 is installed OR kernel-source-azure-4.12.14-5.30 is installed OR kernel-syms-azure-4.12.14-5.30 is installed OR kselftests-kmp-azure-4.12.14-5.30 is installed OR ocfs2-kmp-azure-4.12.14-5.30 is installed OR reiserfs-kmp-azure-4.12.14-5.30 is installed Definition Synopsis SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed AND Package Information libsamba-policy0-4.9.5+git.317.6d82fb3918b-3.35 is installed OR samba-4.9.5+git.317.6d82fb3918b-3.35 is installed OR samba-ad-dc-4.9.5+git.317.6d82fb3918b-3.35 is installed OR samba-dsdb-modules-4.9.5+git.317.6d82fb3918b-3.35 is installed OR samba-libs-python-4.9.5+git.317.6d82fb3918b-3.35 is installed OR samba-python-4.9.5+git.317.6d82fb3918b-3.35 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information xen-4.10.1_08-3.6 is installed OR xen-devel-4.10.1_08-3.6 is installed OR xen-tools-4.10.1_08-3.6 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 is installed AND Package Information nodejs8-8.17.0-3.28 is installed OR nodejs8-devel-8.17.0-3.28 is installed OR nodejs8-docs-8.17.0-3.28 is installed OR npm8-8.17.0-3.28 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information libXi-1.7.4-17 is installed OR libXi6-1.7.4-17 is installed OR libXi6-32bit-1.7.4-17 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information java-1_7_1-ibm-1.7.1_sr4.25-38.23 is installed OR java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23 is installed OR java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23 is installed OR java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23 is installed OR java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND shadow-4.2.1-27.9 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_103-92_53-default-7-2 is installed OR kgraft-patch-SLE12-SP2_Update_16-7-2 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3 is installed AND apache2-2.4.23-29.13 is installed OR apache2-doc-2.4.23-29.13 is installed OR apache2-example-pages-2.4.23-29.13 is installed OR apache2-prefork-2.4.23-29.13 is installed OR apache2-utils-2.4.23-29.13 is installed OR apache2-worker-2.4.23-29.13 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed AND apache2-2.4.23-29.13 is installed OR apache2-doc-2.4.23-29.13 is installed OR apache2-example-pages-2.4.23-29.13 is installed OR apache2-prefork-2.4.23-29.13 is installed OR apache2-utils-2.4.23-29.13 is installed OR apache2-worker-2.4.23-29.13 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND dnsmasq-2.76-17 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-BCL is installed AND libjpeg-turbo-1.5.3-31.19 is installed OR libjpeg62-62.2.0-31.19 is installed OR libjpeg62-32bit-62.2.0-31.19 is installed OR libjpeg62-turbo-1.5.3-31.19 is installed OR libjpeg8-8.1.2-31.19 is installed OR libjpeg8-32bit-8.1.2-31.19 is installed OR libturbojpeg0-8.1.2-31.19 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-BCL is installed AND libjpeg-turbo-1.5.3-31.19 is installed OR libjpeg62-62.2.0-31.19 is installed OR libjpeg62-32bit-62.2.0-31.19 is installed OR libjpeg62-turbo-1.5.3-31.19 is installed OR libjpeg8-8.1.2-31.19 is installed OR libjpeg8-32bit-8.1.2-31.19 is installed OR libturbojpeg0-8.1.2-31.19 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND kgraft-patch-4_4_156-94_64-default-7-2 is installed OR kgraft-patch-SLE12-SP3_Update_20-7-2 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-ESPOS is installed AND kgraft-patch-4_4_156-94_64-default-7-2 is installed OR kgraft-patch-SLE12-SP3_Update_20-7-2 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND apache2-2.4.23-29.24 is installed OR apache2-doc-2.4.23-29.24 is installed OR apache2-example-pages-2.4.23-29.24 is installed OR apache2-prefork-2.4.23-29.24 is installed OR apache2-utils-2.4.23-29.24 is installed OR apache2-worker-2.4.23-29.24 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA is installed AND apache2-2.4.23-29.24 is installed OR apache2-doc-2.4.23-29.24 is installed OR apache2-example-pages-2.4.23-29.24 is installed OR apache2-prefork-2.4.23-29.24 is installed OR apache2-utils-2.4.23-29.24 is installed OR apache2-worker-2.4.23-29.24 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information gvim-7.4.326-17.3 is installed OR vim-7.4.326-17.3 is installed OR vim-data-7.4.326-17.3 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4 is installed AND avahi-0.6.32-32.3 is installed OR avahi-glib2-0.6.32-32.3 is installed OR avahi-lang-0.6.32-32.3 is installed OR avahi-utils-0.6.32-32.3 is installed OR libavahi-client3-0.6.32-32.3 is installed OR libavahi-client3-32bit-0.6.32-32.3 is installed OR libavahi-common3-0.6.32-32.3 is installed OR libavahi-common3-32bit-0.6.32-32.3 is installed OR libavahi-core7-0.6.32-32.3 is installed OR libavahi-glib1-0.6.32-32.3 is installed OR libavahi-glib1-32bit-0.6.32-32.3 is installed OR libdns_sd-0.6.32-32.3 is installed OR libdns_sd-32bit-0.6.32-32.3 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed AND avahi-0.6.32-32.3 is installed OR avahi-glib2-0.6.32-32.3 is installed OR avahi-lang-0.6.32-32.3 is installed OR avahi-utils-0.6.32-32.3 is installed OR libavahi-client3-0.6.32-32.3 is installed OR libavahi-client3-32bit-0.6.32-32.3 is installed OR libavahi-common3-0.6.32-32.3 is installed OR libavahi-common3-32bit-0.6.32-32.3 is installed OR libavahi-core7-0.6.32-32.3 is installed OR libavahi-glib1-0.6.32-32.3 is installed OR libavahi-glib1-32bit-0.6.32-32.3 is installed OR libdns_sd-0.6.32-32.3 is installed OR libdns_sd-32bit-0.6.32-32.3 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4-ESPOS is installed AND apache2-2.4.23-29.63 is installed OR apache2-doc-2.4.23-29.63 is installed OR apache2-example-pages-2.4.23-29.63 is installed OR apache2-prefork-2.4.23-29.63 is installed OR apache2-utils-2.4.23-29.63 is installed OR apache2-worker-2.4.23-29.63 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4-ESPOS is installed AND apache2-2.4.23-29.63 is installed OR apache2-doc-2.4.23-29.63 is installed OR apache2-example-pages-2.4.23-29.63 is installed OR apache2-prefork-2.4.23-29.63 is installed OR apache2-utils-2.4.23-29.63 is installed OR apache2-worker-2.4.23-29.63 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4-LTSS is installed AND golang-github-prometheus-node_exporter-0.18.1-1.6 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4-LTSS is installed AND golang-github-prometheus-node_exporter-0.18.1-1.6 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP5 is installed AND dhcp-4.3.3-10.19 is installed OR dhcp-client-4.3.3-10.19 is installed OR dhcp-relay-4.3.3-10.19 is installed OR dhcp-server-4.3.3-10.19 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND dhcp-4.3.3-10.19 is installed OR dhcp-client-4.3.3-10.19 is installed OR dhcp-relay-4.3.3-10.19 is installed OR dhcp-server-4.3.3-10.19 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND squid-4.11-5.17 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information libvpx-1.6.1-6.3 is installed OR libvpx4-1.6.1-6.3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information flash-player-11.2.202.429-23 is installed OR flash-player-gnome-11.2.202.429-23 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information kernel-default-3.12.51-60.20 is installed OR kernel-default-extra-3.12.51-60.20 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information libmysqlclient_r18-10.0.30-25 is installed OR libmysqlclient_r18-32bit-10.0.30-25 is installed OR mariadb-10.0.30-25 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information bluez-5.13-5.4 is installed OR bluez-cups-5.13-5.4 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information libSoundTouch0-32bit-1.7.1-5.6 is installed OR soundtouch-1.7.1-5.6 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP5 is installed AND Package Information libqt4-4.8.7-8.13 is installed OR libqt4-sql-mysql-32bit-4.8.7-8.13 is installed OR libqt4-sql-plugins-4.8.7-8.13 is installed OR libqt4-sql-postgresql-4.8.7-8.13 is installed OR libqt4-sql-postgresql-32bit-4.8.7-8.13 is installed OR libqt4-sql-sqlite-32bit-4.8.7-8.13 is installed OR libqt4-sql-unixODBC-4.8.7-8.13 is installed OR libqt4-sql-unixODBC-32bit-4.8.7-8.13 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND transfig-3.2.6a-4.3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information pidgin-plugin-otr-4.0.2-1 is installed OR pidgin-plugin-otr-lang-4.0.2-1 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information libpython3_4m1_0-3.4.6-25.29 is installed OR python3-3.4.6-25.29 is installed OR python3-base-3.4.6-25.29 is installed OR python3-curses-3.4.6-25.29 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information ruby2.1-rubygem-loofah-2.0.2-3.8 is installed OR rubygem-loofah-2.0.2-3.8 is installed
BACK