Oval Definition:	oval:org.opensuse.security:def:5871
Revision Date: 2021-10-26 Version: 1 Title: Security update for apache2 (Important) Description: This update for apache2 fixes the following issues: - CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703) - CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702) - CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666) - CVE-2021-34798: Fixed a NULL pointer dereference via malformed requests. (bsc#1190669) Family: unix Class: patch Status: Reference(s): 1190666 1190669 1190702 1190703 CVE-2009-0790 CVE-2010-2547 CVE-2010-2800 CVE-2010-2801 CVE-2010-2891 CVE-2011-1000 CVE-2011-4405 CVE-2012-2388 CVE-2013-1431 CVE-2013-2944 CVE-2013-4351 CVE-2013-4402 CVE-2013-5018 CVE-2013-6075 CVE-2013-6076 CVE-2013-7447 CVE-2014-0107 CVE-2014-2338 CVE-2014-4617 CVE-2014-8484 CVE-2014-8485 CVE-2014-8501 CVE-2014-8502 CVE-2014-8503 CVE-2014-8504 CVE-2014-8737 CVE-2014-8738 CVE-2014-9221 CVE-2015-1606 CVE-2015-1607 CVE-2015-3223 CVE-2015-4171 CVE-2015-5191 CVE-2015-5330 CVE-2015-7555 CVE-2015-8023 CVE-2016-1601 CVE-2016-3977 CVE-2016-6855 CVE-2016-7445 CVE-2016-8332 CVE-2016-9112 CVE-2016-9113 CVE-2016-9114 CVE-2016-9115 CVE-2016-9116 CVE-2016-9117 CVE-2016-9118 CVE-2016-9572 CVE-2016-9573 CVE-2016-9580 CVE-2016-9581 CVE-2017-6507 CVE-2017-9022 CVE-2017-9023 CVE-2021-34798 CVE-2021-36160 CVE-2021-39275 CVE-2021-40438 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree openSUSE 13.2 openSUSE 13.2 NonFree SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise for SAP 12 SP2 SUSE Linux Enterprise High Availability 12 SUSE Linux Enterprise High Availability 12 SP1 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Availability 12 SP5 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information cups-1.7.5-5 is installed OR cups-ddk-1.7.5-5 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND Package Information libudev-mini-devel-228-149 is installed OR libudev-mini1-228-149 is installed OR systemd-mini-228-149 is installed OR systemd-mini-devel-228-149 is installed OR udev-mini-228-149 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND python-pycrypto-2.6.1-10.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND libmspack0-0.4-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND xalan-j2-2.7.0-264 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information apparmor-docs-2.8.2-49 is installed OR apparmor-parser-2.8.2-49 is installed OR apparmor-profiles-2.8.2-49 is installed OR apparmor-utils-2.8.2-49 is installed OR libapparmor1-2.8.2-49 is installed OR libapparmor1-32bit-2.8.2-49 is installed OR pam_apparmor-2.8.2-49 is installed OR pam_apparmor-32bit-2.8.2-49 is installed OR perl-apparmor-2.8.2-49 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information bzip2-1.0.6-29 is installed OR libbz2-1-1.0.6-29 is installed OR libbz2-1-32bit-1.0.6-29 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 is installed AND Package Information kgraft-patch-3_12_51-52_39-default-4-2.2 is installed OR kgraft-patch-3_12_51-52_39-xen-4-2.2 is installed OR kgraft-patch-SLE12_Update_11-4-2.2 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND Package Information kgraft-patch-3_12_67-60_64_21-default-7-3.1 is installed OR kgraft-patch-3_12_67-60_64_21-xen-7-3.1 is installed OR kgraft-patch-SLE12-SP1_Update_10-7-3.1 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP2 is installed AND Package Information compat-openssl098-0.9.8j-105.1 is installed OR libopenssl0_9_8-0.9.8j-105.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 is installed AND python-requests-2.8.1-6.9 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP1 is installed AND Package Information libpacemaker3-1.1.13-20 is installed OR pacemaker-1.1.13-20 is installed OR pacemaker-cli-1.1.13-20 is installed OR pacemaker-cts-1.1.13-20 is installed OR pacemaker-remote-1.1.13-20 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND Package Information cluster-md-kmp-default-4.4.21-69 is installed OR cluster-network-kmp-default-4.4.21-69 is installed OR dlm-kmp-default-4.4.21-69 is installed OR gfs2-kmp-default-4.4.21-69 is installed OR ocfs2-kmp-default-4.4.21-69 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP3 is installed AND Package Information cluster-md-kmp-default-4.4.92-6.18 is installed OR dlm-kmp-default-4.4.92-6.18 is installed OR gfs2-kmp-default-4.4.92-6.18 is installed OR kernel-default-4.4.92-6.18 is installed OR ocfs2-kmp-default-4.4.92-6.18 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND conntrack-tools-1.4.2-5 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP5 is installed AND libpcreposix0-8.39-8.3 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND autofs-5.1.3-1 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 is installed AND Package Information kgraft-patch-3_12_43-52_6-default-3-2 is installed OR kgraft-patch-3_12_43-52_6-xen-3-2 is installed OR kgraft-patch-SLE12_Update_5-3-2 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1-LTSS is installed AND Package Information liblzo2-2-2.03-12.3.1 is installed OR liblzo2-2-32bit-2.03-12.3.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND libotr2-3.2.0-10.3.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND libotr2-3.2.0-10.3.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND Package Information apache2-2.2.12-1.28.1 is installed OR apache2-doc-2.2.12-1.28.1 is installed OR apache2-example-pages-2.2.12-1.28.1 is installed OR apache2-prefork-2.2.12-1.28.1 is installed OR apache2-utils-2.2.12-1.28.1 is installed OR apache2-worker-2.2.12-1.28.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND libssh2-1-1.2.9-4.2.4.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND libssh2-1-1.2.9-4.2.4.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information apache2-2.2.12-1.38.2 is installed OR apache2-doc-2.2.12-1.38.2 is installed OR apache2-example-pages-2.2.12-1.38.2 is installed OR apache2-prefork-2.2.12-1.38.2 is installed OR apache2-utils-2.2.12-1.38.2 is installed OR apache2-worker-2.2.12-1.38.2 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3-LTSS is installed AND Package Information java-1_6_0-ibm-1.6.0_sr16.25-69.1 is installed OR java-1_6_0-ibm-alsa-1.6.0_sr16.25-69.1 is installed OR java-1_6_0-ibm-devel-1.6.0_sr16.25-69.1 is installed OR java-1_6_0-ibm-fonts-1.6.0_sr16.25-69.1 is installed OR java-1_6_0-ibm-jdbc-1.6.0_sr16.25-69.1 is installed OR java-1_6_0-ibm-plugin-1.6.0_sr16.25-69.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information findutils-4.4.0-38.26.1 is installed OR findutils-locate-4.4.0-38.26.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information gdm-3.10.0.1-13 is installed OR gdm-branding-upstream-3.10.0.1-13 is installed OR gdm-lang-3.10.0.1-13 is installed OR gdmflexiserver-3.10.0.1-13 is installed OR libgdm1-3.10.0.1-13 is installed OR typelib-1_0-Gdm-1_0-3.10.0.1-13 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information apache-commons-daemon-1.0.15-4 is installed OR apache-commons-daemon-javadoc-1.0.15-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND apache2-mod_jk-1.2.40-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information DirectFB-1.7.1-6 is installed OR lib++dfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information openslp-2.0.0-18.17 is installed OR openslp-32bit-2.0.0-18.17 is installed OR openslp-server-2.0.0-18.17 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information alsa-1.0.27.2-11 is installed OR alsa-docs-1.0.27.2-11 is installed OR libasound2-1.0.27.2-11 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information kgraft-patch-3_12_74-60_64_110-default-6-2 is installed OR kgraft-patch-3_12_74-60_64_110-xen-6-2 is installed OR kgraft-patch-SLE12-SP1_Update_33-6-2 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed AND Package Information kgraft-patch-4_4_74-92_29-default-11-2 is installed OR kgraft-patch-SLE12-SP2_Update_10-11-2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information java-1_6_0-ibm-1.6.0_sr16.7-10.1 is installed OR java-1_6_0-ibm-devel-1.6.0_sr16.7-10.1 is installed OR java-1_6_0-ibm-fonts-1.6.0_sr16.7-10.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information OpenEXR-32bit-1.6.1-83.17.1 is installed OR OpenEXR-devel-1.6.1-83.17.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND apache2-devel-2.4.10-6 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND cyrus-sasl-devel-2.1.26-7 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND NetworkManager-devel-1.0.12-8 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND Package Information zlib-devel-1.2.11-1 is installed OR zlib-devel-32bit-1.2.11-1 is installed OR zlib-devel-static-1.2.11-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information ImageMagick-6.8.8.1-5 is installed OR libMagick++-6_Q16-3-6.8.8.1-5 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND cyrus-sasl-digestmd5-32bit-2.1.26-7 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information NetworkManager-1.0.12-8 is installed OR NetworkManager-lang-1.0.12-8 is installed OR typelib-1_0-NM-1_0-1.0.12-8 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information NetworkManager-1.0.12-12 is installed OR NetworkManager-lang-1.0.12-12 is installed OR typelib-1_0-NM-1_0-1.0.12-12 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information NetworkManager-1.0.12-13.6 is installed OR NetworkManager-lang-1.0.12-13.6 is installed OR typelib-1_0-NM-1_0-1.0.12-13.6 is installed
BACK