Oval Definition:	oval:org.opensuse.security:def:4936
Revision Date: 2020-12-02 Version: 1 Title: Security update for apache2 (Moderate) Description: This update for apache2 fixes the following issues: - CVE-2020-9490: Fixed a crash caused by a specially crafted value for the 'Cache-Digest' header in a HTTP/2 request (bsc#1175071). - CVE-2020-11984: Fixed an information disclosure bug in mod_proxy_uwsgi (bsc#1175074). - CVE-2020-11993: When trace/debug was enabled for the HTTP/2 module logging statements were made on the wrong connection (bsc#1175070). - Solve a crash in mod_proxy_uwsgi for empty values of environment variables. (bsc#1174052) Family: unix Class: patch Status: Reference(s): 1012382 1013712 1046299 1046303 1046305 1050242 1050244 1050536 1050545 1051510 1053043 1055186 1056787 1058115 1061840 1063638 1064802 1065600 1065729 1066129 1068546 1071995 1073513 1075020 1082387 1082635 1083647 1085535 1086323 1087092 1089644 1090631 1091764 1093205 1096254 1097375 1097401 1097404 1097583 1097584 1097585 1097586 1097587 1097588 1098291 1099658 1101674 1103992 1104353 1104427 1106011 1106284 1108193 1108838 1108937 1109158 1110946 1111666 1111696 1112063 1112178 1113722 1113994 1114279 1114427 1115688 1117158 1117561 1117665 1118139 1119461 1119465 1119843 1120091 1120423 1120566 1120843 1120902 1122776 1123034 1123080 1123454 1123663 1124503 1124839 1126356 1127616 1128052 1128904 1128979 1129138 1129273 1129497 1129693 1129770 1130579 1130699 1130972 1131326 1131451 1131488 1131565 1131673 1132044 1133140 1133176 1133188 1133190 1133320 1133612 1133616 1134160 1134162 1134199 1134200 1134201 1134202 1134203 1134204 1134205 1134303 1134354 1134393 1134459 1134460 1134461 1134537 1134597 1134651 1134671 1134760 1134806 1134810 1134813 1134848 1134936 1135006 1135007 1135008 1135056 1135100 1135120 1135278 1135281 1135309 1135312 1135314 1135315 1135316 1135320 1135323 1135330 1135492 1135542 1135556 1135603 1135642 1135661 1135758 1135854 1135873 1135967 1136206 1136424 1136428 1136430 1136432 1136434 1136435 1136438 1136439 1136477 1136478 1136573 1136586 1136881 1136935 1136990 1137040 1137151 1137152 1137153 1137162 1137372 1137444 1137586 1137739 1137752 1137799 1137861 1138190 1139073 1140090 1140729 1140845 1140883 1141600 1142635 1142667 1143706 1144338 1144375 1144449 1144903 1145099 1146612 1148410 1149119 1149853 1149943 1149944 1150452 1150457 1150465 1150875 1151508 1151807 1152033 1152624 1152665 1152685 1152696 1152697 1152788 1152790 1152791 1153112 1153158 1153236 1153263 1153476 1153509 1153607 1153646 1153681 1153713 1153717 1153718 1153719 1153811 1153969 1154108 1154189 1154242 1154268 1154354 1154372 1154521 1154578 1154607 1154608 1154610 1154611 1154651 1154737 1154747 1154848 1154858 1154905 1154956 1155061 1155178 1155179 1155184 1155186 1155671 1158194 1173674 1174052 1175070 1175071 1175074 802154 814594 919448 987367 998153 CVE-2009-0159 CVE-2009-0696 CVE-2009-0945 CVE-2009-0946 CVE-2009-1252 CVE-2009-1892 CVE-2009-4022 CVE-2010-2156 CVE-2010-2497 CVE-2010-2805 CVE-2010-3053 CVE-2010-3054 CVE-2010-3311 CVE-2010-3611 CVE-2010-3613 CVE-2010-3614 CVE-2010-3615 CVE-2010-3616 CVE-2010-3814 CVE-2011-0226 CVE-2011-0413 CVE-2011-0414 CVE-2011-0997 CVE-2011-1907 CVE-2011-1910 CVE-2011-2464 CVE-2011-2748 CVE-2011-2749 CVE-2011-3193 CVE-2011-3922 CVE-2011-4313 CVE-2011-4539 CVE-2011-4868 CVE-2012-1667 CVE-2012-3570 CVE-2012-3571 CVE-2012-3817 CVE-2012-3868 CVE-2012-3954 CVE-2012-3955 CVE-2012-4244 CVE-2012-4929 CVE-2012-5166 CVE-2012-5668 CVE-2012-5669 CVE-2012-5670 CVE-2012-5688 CVE-2012-5689 CVE-2012-6093 CVE-2013-0254 CVE-2013-1991 CVE-2013-2000 CVE-2013-2266 CVE-2013-2266 CVE-2013-4549 CVE-2013-4854 CVE-2013-5211 CVE-2013-6393 CVE-2014-0190 CVE-2014-0591 CVE-2014-2525 CVE-2016-9798 CVE-2018-1000168 CVE-2018-12207 CVE-2018-7161 CVE-2018-7167 CVE-2018-7191 CVE-2019-10124 CVE-2019-10220 CVE-2019-11085 CVE-2019-11135 CVE-2019-11477 CVE-2019-11478 CVE-2019-11479 CVE-2019-11486 CVE-2019-11487 CVE-2019-11815 CVE-2019-11833 CVE-2019-11884 CVE-2019-12382 CVE-2019-16232 CVE-2019-16233 CVE-2019-16234 CVE-2019-16995 CVE-2019-17056 CVE-2019-17133 CVE-2019-17666 CVE-2019-19451 CVE-2019-3846 CVE-2019-5489 CVE-2019-9854 CVE-2019-9855 CVE-2020-11984 CVE-2020-11993 CVE-2020-15503 CVE-2020-9490 SUSE-SU-2018:1918-1 SUSE-SU-2019:1529-1 SUSE-SU-2019:2686-1 SUSE-SU-2019:3046-1 SUSE-SU-2019:3391-1 SUSE-SU-2020:2029-1 SUSE-SU-2020:2311-1 Platform(s): SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise High Availability 12 SUSE Linux Enterprise High Availability 12 SP1 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Live Patching 12 SP3 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Toolchain 12 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Module for Web Scripting 15 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for Rasperry Pi 12 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE OpenStack Cloud 5 Product(s): Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information dhcp-4.2.4.P2-0.24.1 is installed OR dhcp-client-4.2.4.P2-0.24.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information bind-libs-9.9.5P1-1 is installed OR bind-libs-32bit-9.9.5P1-1 is installed OR bind-utils-9.9.5P1-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information DirectFB-1.7.1-4 is installed OR lib++dfb-1_7-1-1.7.1-4 is installed OR libdirectfb-1_7-1-1.7.1-4 is installed OR libdirectfb-1_7-1-32bit-1.7.1-4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND argyllcms-1.6.3-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND dnsmasq-2.76-17 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information e2fsprogs-1.43.8-1 is installed OR libcom_err2-1.43.8-1 is installed OR libcom_err2-32bit-1.43.8-1 is installed OR libext2fs2-1.43.8-1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 is installed AND Package Information conntrack-tools-1.4.2-5.2 is installed OR libnetfilter_cthelper-1.0.0-7.1 is installed OR libnetfilter_cthelper0-1.0.0-7.1 is installed OR libnetfilter_cttimeout-1.0.0-9.1 is installed OR libnetfilter_cttimeout1-1.0.0-9.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP1 is installed AND Package Information ctdb-4.2.4-16.1 is installed OR samba-4.2.4-16.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND Package Information cluster-md-kmp-default-4.4.21-84.1 is installed OR cluster-network-kmp-default-4.4.21-84.1 is installed OR dlm-kmp-default-4.4.21-84.1 is installed OR gfs2-kmp-default-4.4.21-84.1 is installed OR kernel-default-4.4.21-84.1 is installed OR ocfs2-kmp-default-4.4.21-84.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP3 is installed AND Package Information ctdb-4.6.7+git.51.327af8d0a11-3.12.1 is installed OR samba-4.6.7+git.51.327af8d0a11-3.12.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND Package Information corosync-2.3.6-9.13 is installed OR libcorosync4-2.3.6-9.13 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information MozillaFirefox-68.1.0-109.92 is installed OR MozillaFirefox-translations-common-68.1.0-109.92 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 is installed AND Package Information kgraft-patch-3_12_39-47-default-1-2.1 is installed OR kgraft-patch-3_12_39-47-xen-1-2.1 is installed OR kgraft-patch-SLE12_Update_4-1-2.1 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP3 is installed AND Package Information kgraft-patch-4_4_73-5-default-2-2.3.2 is installed OR kgraft-patch-SLE12-SP3_Update_0-2-2.3.2 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 12 is installed AND python-setuptools-1.1.7-7.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information compat-openssl098-0.9.8j-66.3 is installed OR libopenssl0_9_8-0.9.8j-66.3 is installed OR libopenssl0_9_8-32bit-0.9.8j-66.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 12 is installed AND python-setuptools-1.1.7-7.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP2 is installed AND Package Information apache2-2.4.43-3.5 is installed OR apache2-devel-2.4.43-3.5 is installed OR apache2-doc-2.4.43-3.5 is installed OR apache2-worker-2.4.43-3.5 is installed Definition Synopsis SUSE Linux Enterprise Module for Toolchain 12 is installed AND Package Information cpp5-5.3.1+r233831-9.1 is installed OR gcc5-5.3.1+r233831-9.1 is installed OR gcc5-32bit-5.3.1+r233831-9.1 is installed OR gcc5-ada-5.3.1+r233831-9.1 is installed OR gcc5-ada-32bit-5.3.1+r233831-9.1 is installed OR gcc5-c++-5.3.1+r233831-9.1 is installed OR gcc5-c++-32bit-5.3.1+r233831-9.1 is installed OR gcc5-fortran-5.3.1+r233831-9.1 is installed OR gcc5-fortran-32bit-5.3.1+r233831-9.1 is installed OR gcc5-info-5.3.1+r233831-9.1 is installed OR gcc5-locale-5.3.1+r233831-9.1 is installed OR libada5-5.3.1+r233831-9.1 is installed OR libada5-32bit-5.3.1+r233831-9.1 is installed OR libffi-devel-gcc5-5.3.1+r233831-9.1 is installed OR libffi-devel-gcc5-32bit-5.3.1+r233831-9.1 is installed OR libffi-gcc5-5.3.1+r233831-9.1 is installed OR libstdc++6-devel-gcc5-5.3.1+r233831-9.1 is installed OR libstdc++6-devel-gcc5-32bit-5.3.1+r233831-9.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 is installed AND Package Information nodejs8-8.11.3-3.5 is installed OR nodejs8-devel-8.11.3-3.5 is installed OR nodejs8-docs-8.11.3-3.5 is installed OR npm8-8.11.3-3.5 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND tgt-0.9.10-0.15.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND libxml2-2.7.6-0.37.1 is installed OR libxml2-32bit-2.7.6-0.37.1 is installed OR libxml2-doc-2.7.6-0.37.1 is installed OR libxml2-python-2.7.6-0.37.4 is installed OR libxml2-x86-2.7.6-0.37.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND libxml2-2.7.6-0.37.1 is installed OR libxml2-32bit-2.7.6-0.37.1 is installed OR libxml2-doc-2.7.6-0.37.1 is installed OR libxml2-python-2.7.6-0.37.4 is installed OR libxml2-x86-2.7.6-0.37.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information apache2-mod_php53-5.3.17-0.13.7 is installed OR php53-5.3.17-0.13.7 is installed OR php53-bcmath-5.3.17-0.13.7 is installed OR php53-bz2-5.3.17-0.13.7 is installed OR php53-calendar-5.3.17-0.13.7 is installed OR php53-ctype-5.3.17-0.13.7 is installed OR php53-curl-5.3.17-0.13.7 is installed OR php53-dba-5.3.17-0.13.7 is installed OR php53-dom-5.3.17-0.13.7 is installed OR php53-exif-5.3.17-0.13.7 is installed OR php53-fastcgi-5.3.17-0.13.7 is installed OR php53-fileinfo-5.3.17-0.13.7 is installed OR php53-ftp-5.3.17-0.13.7 is installed OR php53-gd-5.3.17-0.13.7 is installed OR php53-gettext-5.3.17-0.13.7 is installed OR php53-gmp-5.3.17-0.13.7 is installed OR php53-iconv-5.3.17-0.13.7 is installed OR php53-intl-5.3.17-0.13.7 is installed OR php53-json-5.3.17-0.13.7 is installed OR php53-ldap-5.3.17-0.13.7 is installed OR php53-mbstring-5.3.17-0.13.7 is installed OR php53-mcrypt-5.3.17-0.13.7 is installed OR php53-mysql-5.3.17-0.13.7 is installed OR php53-odbc-5.3.17-0.13.7 is installed OR php53-openssl-5.3.17-0.13.7 is installed OR php53-pcntl-5.3.17-0.13.7 is installed OR php53-pdo-5.3.17-0.13.7 is installed OR php53-pear-5.3.17-0.13.7 is installed OR php53-pgsql-5.3.17-0.13.7 is installed OR php53-pspell-5.3.17-0.13.7 is installed OR php53-shmop-5.3.17-0.13.7 is installed OR php53-snmp-5.3.17-0.13.7 is installed OR php53-soap-5.3.17-0.13.7 is installed OR php53-suhosin-5.3.17-0.13.7 is installed OR php53-sysvmsg-5.3.17-0.13.7 is installed OR php53-sysvsem-5.3.17-0.13.7 is installed OR php53-sysvshm-5.3.17-0.13.7 is installed OR php53-tokenizer-5.3.17-0.13.7 is installed OR php53-wddx-5.3.17-0.13.7 is installed OR php53-xmlreader-5.3.17-0.13.7 is installed OR php53-xmlrpc-5.3.17-0.13.7 is installed OR php53-xmlwriter-5.3.17-0.13.7 is installed OR php53-xsl-5.3.17-0.13.7 is installed OR php53-zip-5.3.17-0.13.7 is installed OR php53-zlib-5.3.17-0.13.7 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information cpio-2.11-29.1 is installed OR cpio-lang-2.11-29.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND xfsprogs-3.2.1-3.5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information avahi-0.6.32-30 is installed OR avahi-lang-0.6.32-30 is installed OR avahi-utils-0.6.32-30 is installed OR libavahi-client3-0.6.32-30 is installed OR libavahi-client3-32bit-0.6.32-30 is installed OR libavahi-common3-0.6.32-30 is installed OR libavahi-common3-32bit-0.6.32-30 is installed OR libavahi-core7-0.6.32-30 is installed OR libdns_sd-0.6.32-30 is installed OR libdns_sd-32bit-0.6.32-30 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information accountsservice-0.6.42-14 is installed OR accountsservice-lang-0.6.42-14 is installed OR libaccountsservice0-0.6.42-14 is installed OR typelib-1_0-AccountsService-1_0-0.6.42-14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information bind-9.11.2-1 is installed OR bind-chrootenv-9.11.2-1 is installed OR bind-doc-9.11.2-1 is installed OR bind-utils-9.11.2-1 is installed OR libbind9-160-9.11.2-1 is installed OR libdns169-9.11.2-1 is installed OR libirs160-9.11.2-1 is installed OR libisc166-9.11.2-1 is installed OR libisc166-32bit-9.11.2-1 is installed OR libisccc160-9.11.2-1 is installed OR libisccfg160-9.11.2-1 is installed OR liblwres160-9.11.2-1 is installed OR python-bind-9.11.2-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information kgraft-patch-3_12_60-52_54-default-2-2.2 is installed OR kgraft-patch-3_12_60-52_54-xen-2-2.2 is installed OR kgraft-patch-SLE12_Update_15-2-2.2 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information libblkid1-2.28-42 is installed OR libfdisk1-2.28-42 is installed OR libmount1-2.28-42 is installed OR libsmartcols1-2.28-42 is installed OR libuuid1-2.28-42 is installed OR python-libmount-2.28-42 is installed OR util-linux-2.28-42 is installed OR util-linux-lang-2.28-42 is installed OR util-linux-systemd-2.28-42 is installed OR uuidd-2.28-42 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information MozillaFirefox-38.6.1esr-34.1 is installed OR MozillaFirefox-devel-38.6.1esr-34.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information evince-devel-3.10.3-1 is installed OR typelib-1_0-EvinceDocument-3_0-3.10.3-1 is installed OR typelib-1_0-EvinceView-3_0-3.10.3-1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND accountsservice-devel-0.6.42-14 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND MozillaFirefox-devel-52.2.0esr-108 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information libjavascriptcoregtk-1_0-0-2.4.8-16.2 is installed OR libjavascriptcoregtk-1_0-0-32bit-2.4.8-16.2 is installed OR libwebkit2gtk-3_0-25-2.4.8-16.2 is installed OR libwebkitgtk-1_0-0-2.4.8-16.2 is installed OR libwebkitgtk-1_0-0-32bit-2.4.8-16.2 is installed OR libwebkitgtk2-lang-2.4.8-16.2 is installed OR typelib-1_0-JavaScriptCore-3_0-2.4.8-16.2 is installed OR typelib-1_0-WebKit-3_0-2.4.8-16.2 is installed OR webkitgtk-2.4.8-16.2 is installed OR webkitgtk3-2.4.8-16.2 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information kernel-default-4.12.14-150.22 is installed OR kernel-default-extra-4.12.14-150.22 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information kernel-default-4.12.14-197.26 is installed OR kernel-default-extra-4.12.14-197.26 is installed
BACK