Oval Definition:oval:org.opensuse.security:def:58022
Revision Date:2021-10-06Version:1
Title:Security update for apache2 (Important)
Description:

This update for apache2 fixes the following issues:

- CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703) - CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666) - CVE-2021-34798: Fixed a NULL pointer dereference via malformed requests. (bsc#1190669)
Family:unixClass:patch
Status:Reference(s):1013533
1013604
1055857
1059893
1077358
1090638
1095218
1095219
1097410
1099510
1101288
1106873
1109961
1111331
1119069
1119105
1119947
1120943
1129231
1131291
1131493
1138872
1141780
1141782
1141783
1141785
1141789
1147021
1160770
1160968
1171475
1171847
1172031
1172105
1172116
1172121
1172225
1190666
1190669
1190703
925502
995352
CVE-2015-2775
CVE-2016-6328
CVE-2016-6893
CVE-2016-9576
CVE-2016-9794
CVE-2017-17833
CVE-2017-7544
CVE-2018-0495
CVE-2018-0618
CVE-2018-11233
CVE-2018-11235
CVE-2018-11763
CVE-2018-12126
CVE-2018-12127
CVE-2018-12130
CVE-2018-12384
CVE-2018-12404
CVE-2018-12405
CVE-2018-13796
CVE-2018-16884
CVE-2018-17466
CVE-2018-18492
CVE-2018-18493
CVE-2018-18494
CVE-2018-18498
CVE-2018-20030
CVE-2018-5950
CVE-2019-11091
CVE-2019-11708
CVE-2019-11771
CVE-2019-11775
CVE-2019-20807
CVE-2019-2762
CVE-2019-2766
CVE-2019-2769
CVE-2019-2816
CVE-2019-4473
CVE-2019-5953
CVE-2019-7317
CVE-2019-9278
CVE-2020-0093
CVE-2020-12767
CVE-2020-13112
CVE-2020-13113
CVE-2020-13114
CVE-2020-2583
CVE-2020-2590
CVE-2020-2593
CVE-2020-2601
CVE-2020-2604
CVE-2020-2654
CVE-2020-2659
CVE-2021-34798
CVE-2021-39275
CVE-2021-40438
SUSE-SU-2016:3146-1
SUSE-SU-2018:1566-1
SUSE-SU-2018:2779-1
SUSE-SU-2018:3582-1
SUSE-SU-2018:4236-1
SUSE-SU-2018:4296-1
SUSE-SU-2019:0736-1
SUSE-SU-2019:0956-1
SUSE-SU-2019:1136-1
SUSE-SU-2019:1235-1
SUSE-SU-2019:1684-1
SUSE-SU-2019:2336-1
SUSE-SU-2020:0261-1
SUSE-SU-2020:1534-1
SUSE-SU-2020:1550-1
Platform(s):openSUSE Leap 15.0
openSUSE Leap 15.1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud 9
SUSE OpenStack Cloud Crowbar 8
Product(s):
Definition Synopsis
  • openSUSE Leap 15.0 is installed
  • AND libXcursor1-1.1.15-lp150.1 is installed
    • Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • liblxc-devel-3.2.1-lp151.4.5 is installed
  • OR liblxc1-3.2.1-lp151.4.5 is installed
  • OR lxc-3.2.1-lp151.4.5 is installed
  • OR lxc-bash-completion-3.2.1-lp151.4.5 is installed
  • OR pam_cgfs-3.2.1-lp151.4.5 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1-LTSS is installed
  • AND Package Information
  • kgraft-patch-3_12_74-60_64_85-default-11-2 is installed
  • OR kgraft-patch-3_12_74-60_64_85-xen-11-2 is installed
  • OR kgraft-patch-SLE12-SP1_Update_26-11-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • kernel-default-4.4.21-90 is installed
  • OR kernel-default-base-4.4.21-90 is installed
  • OR kernel-default-devel-4.4.21-90 is installed
  • OR kernel-default-man-4.4.21-90 is installed
  • OR kernel-devel-4.4.21-90 is installed
  • OR kernel-macros-4.4.21-90 is installed
  • OR kernel-source-4.4.21-90 is installed
  • OR kernel-syms-4.4.21-90 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-BCL is installed
  • AND Package Information
  • MozillaFirefox-60.4.0esr-109.55 is installed
  • OR MozillaFirefox-devel-60.4.0esr-109.55 is installed
  • OR MozillaFirefox-translations-common-60.4.0esr-109.55 is installed
  • OR libfreebl3-3.40.1-58.18 is installed
  • OR libfreebl3-32bit-3.40.1-58.18 is installed
  • OR libsoftokn3-3.40.1-58.18 is installed
  • OR libsoftokn3-32bit-3.40.1-58.18 is installed
  • OR mozilla-nspr-4.20-19.6 is installed
  • OR mozilla-nspr-32bit-4.20-19.6 is installed
  • OR mozilla-nss-3.40.1-58.18 is installed
  • OR mozilla-nss-32bit-3.40.1-58.18 is installed
  • OR mozilla-nss-certs-3.40.1-58.18 is installed
  • OR mozilla-nss-certs-32bit-3.40.1-58.18 is installed
  • OR mozilla-nss-sysinit-3.40.1-58.18 is installed
  • OR mozilla-nss-sysinit-32bit-3.40.1-58.18 is installed
  • OR mozilla-nss-tools-3.40.1-58.18 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
  • AND Package Information
  • kgraft-patch-4_4_90-92_45-default-11-2 is installed
  • OR kgraft-patch-SLE12-SP2_Update_14-11-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-LTSS is installed
  • AND Package Information
  • git-2.12.3-27.14 is installed
  • OR git-core-2.12.3-27.14 is installed
  • OR git-doc-2.12.3-27.14 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND busybox-1.21.1-3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-BCL is installed
  • AND Package Information
  • libjpeg-turbo-1.5.3-31.19 is installed
  • OR libjpeg62-62.2.0-31.19 is installed
  • OR libjpeg62-32bit-62.2.0-31.19 is installed
  • OR libjpeg62-turbo-1.5.3-31.19 is installed
  • OR libjpeg8-8.1.2-31.19 is installed
  • OR libjpeg8-32bit-8.1.2-31.19 is installed
  • OR libturbojpeg0-8.1.2-31.19 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
  • AND Package Information
  • apache2-2.4.23-29.80.1 is installed
  • OR apache2-doc-2.4.23-29.80.1 is installed
  • OR apache2-example-pages-2.4.23-29.80.1 is installed
  • OR apache2-prefork-2.4.23-29.80.1 is installed
  • OR apache2-utils-2.4.23-29.80.1 is installed
  • OR apache2-worker-2.4.23-29.80.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND mailman-2.1.17-3.11 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND tcpdump-4.9.2-14.8 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND libyaml-0-2-0.1.6-7 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND Package Information
  • openslp-2.0.0-18.15 is installed
  • OR openslp-32bit-2.0.0-18.15 is installed
  • OR openslp-server-2.0.0-18.15 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 8 is installed
  • AND Package Information
  • ghostscript-9.27-23.28 is installed
  • OR ghostscript-x11-9.27-23.28 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 9 is installed
  • AND Package Information
  • xen-4.11.4_04-2.30 is installed
  • OR xen-doc-html-4.11.4_04-2.30 is installed
  • OR xen-libs-4.11.4_04-2.30 is installed
  • OR xen-libs-32bit-4.11.4_04-2.30 is installed
  • OR xen-tools-4.11.4_04-2.30 is installed
  • OR xen-tools-domU-4.11.4_04-2.30 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND Package Information
  • libmariadb3-3.0.3-3.3 is installed
  • OR mariadb-10.2.15-4.3 is installed
  • OR mariadb-client-10.2.15-4.3 is installed
  • OR mariadb-connector-c-3.0.3-3.3 is installed
  • OR mariadb-errormessages-10.2.15-4.3 is installed
  • OR mariadb-galera-10.2.15-4.3 is installed
  • OR mariadb-tools-10.2.15-4.3 is installed
  • OR xtrabackup-2.4.10-4.3 is installed
    • BACK