Oval Definition:oval:org.opensuse.security:def:6205
Revision Date:2022-03-21Version:1
Title:Security update for apache2 (Important)
Description:

This update for apache2 fixes the following issues:

- CVE-2022-23943: heap out-of-bounds write in mod_sed (bsc#1197098). - CVE-2022-22720: HTTP request smuggling due to incorrect error handling (bsc#1197095). - CVE-2022-22719: use of uninitialized value of in r:parsebody in mod_lua (bsc#1197091). - CVE-2022-22721: possible buffer overflow with very large or unlimited LimitXMLRequestBody (bsc#1197096).

Also TLS 1.3 support and openssl 1.1.1 usage was disabled again as it caused regressions in various usage scenarios due to the combination between openssl 1.0.2 and 1.1.1 linkage without correct symbol versions by other libraries / tools. (bsc#1197301 bsc#1197177 bsc#1196249)

Family:unixClass:patch
Status:Reference(s):1178236
1188921
1196249
1197091
1197095
1197096
1197098
1197177
1197301
CVE-2008-1686
CVE-2009-0035
CVE-2009-0696
CVE-2009-1886
CVE-2009-1888
CVE-2009-2813
CVE-2009-2906
CVE-2009-2948
CVE-2009-4022
CVE-2009-4029
CVE-2010-0547
CVE-2010-0728
CVE-2010-0787
CVE-2010-0926
CVE-2010-1635
CVE-2010-1642
CVE-2010-2063
CVE-2010-2935
CVE-2010-2936
CVE-2010-3069
CVE-2010-3613
CVE-2010-3614
CVE-2010-3615
CVE-2011-0414
CVE-2011-0719
CVE-2011-1097
CVE-2011-1907
CVE-2011-1910
CVE-2011-2464
CVE-2011-2522
CVE-2011-2694
CVE-2011-4313
CVE-2012-0035
CVE-2012-0817
CVE-2012-0870
CVE-2012-1182
CVE-2012-1667
CVE-2012-2111
CVE-2012-3817
CVE-2012-3868
CVE-2012-4244
CVE-2012-5166
CVE-2012-5688
CVE-2012-5689
CVE-2012-6150
CVE-2013-0172
CVE-2013-0213
CVE-2013-0214
CVE-2013-0454
CVE-2013-1863
CVE-2013-2266
CVE-2013-4124
CVE-2013-4408
CVE-2013-4475
CVE-2013-4476
CVE-2013-4496
CVE-2013-4854
CVE-2013-6442
CVE-2014-0107
CVE-2014-0178
CVE-2014-0239
CVE-2014-0244
CVE-2014-0247
CVE-2014-0591
CVE-2014-2855
CVE-2014-3421
CVE-2014-3422
CVE-2014-3423
CVE-2014-3424
CVE-2014-3493
CVE-2014-3524
CVE-2014-3560
CVE-2014-3575
CVE-2014-3693
CVE-2014-7300
CVE-2014-8143
CVE-2014-8146
CVE-2014-8147
CVE-2014-8500
CVE-2014-9093
CVE-2014-9638
CVE-2014-9639
CVE-2014-9640
CVE-2015-0240
CVE-2015-1191
CVE-2015-1349
CVE-2015-3223
CVE-2015-4551
CVE-2015-4620
CVE-2015-5212
CVE-2015-5213
CVE-2015-5214
CVE-2015-5252
CVE-2015-5296
CVE-2015-5299
CVE-2015-5330
CVE-2015-5370
CVE-2015-5477
CVE-2015-5722
CVE-2015-6749
CVE-2015-7560
CVE-2015-8000
CVE-2015-8467
CVE-2015-8543
CVE-2015-8704
CVE-2016-0771
CVE-2016-0794
CVE-2016-0795
CVE-2016-10327
CVE-2016-1285
CVE-2016-1286
CVE-2016-1601
CVE-2016-2110
CVE-2016-2111
CVE-2016-2112
CVE-2016-2113
CVE-2016-2115
CVE-2016-2118
CVE-2016-2119
CVE-2016-2123
CVE-2016-2125
CVE-2016-2126
CVE-2016-2775
CVE-2016-2776
CVE-2016-4324
CVE-2016-5824
CVE-2016-5827
CVE-2016-6170
CVE-2016-8864
CVE-2016-9131
CVE-2016-9147
CVE-2016-9444
CVE-2016-9584
CVE-2017-11103
CVE-2017-12150
CVE-2017-12151
CVE-2017-12163
CVE-2017-13738
CVE-2017-13739
CVE-2017-13740
CVE-2017-13741
CVE-2017-13743
CVE-2017-13744
CVE-2017-14746
CVE-2017-15275
CVE-2017-2619
CVE-2017-3135
CVE-2017-3136
CVE-2017-3137
CVE-2017-3138
CVE-2017-3142
CVE-2017-3143
CVE-2017-3145
CVE-2017-3157
CVE-2017-7494
CVE-2017-7870
CVE-2017-7882
CVE-2017-8358
CVE-2018-10119
CVE-2018-10120
CVE-2018-1050
CVE-2018-1055
CVE-2018-1057
CVE-2018-10583
CVE-2018-10858
CVE-2018-10860
CVE-2018-10919
CVE-2018-11440
CVE-2018-11577
CVE-2018-11683
CVE-2018-11684
CVE-2018-11685
CVE-2018-12085
CVE-2018-6871
CVE-2021-37600
CVE-2022-22719
CVE-2022-22720
CVE-2022-22721
CVE-2022-23943
SUSE-SU-2022:0928-1
Platform(s):openSUSE 13.1
openSUSE 13.1 NonFree
openSUSE 13.2
openSUSE 13.2 NonFree
openSUSE Leap 42.1
SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5
SUSE Linux Enterprise Build System Kit 12
SUSE Linux Enterprise Build System Kit 12 SP1
SUSE Linux Enterprise Build System Kit 12 SP2
SUSE Linux Enterprise Build System Kit 12 SP3
SUSE Linux Enterprise Build System Kit 12 SP4
SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise for SAP 12
SUSE Linux Enterprise for SAP 12 SP1
SUSE Linux Enterprise High Availability 12 SP5
SUSE Linux Enterprise High Performance Computing 12 SP5
SUSE Linux Enterprise Live Patching 12
SUSE Linux Enterprise Live Patching 12 SP3
SUSE Linux Enterprise Module for Advanced Systems Management 12
SUSE Linux Enterprise Module for Containers 12
SUSE Linux Enterprise Module for High Performance Computing 12
SUSE Linux Enterprise Module for Legacy Software 12
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3
SUSE Linux Enterprise Module for Public Cloud 12
SUSE Linux Enterprise Server 11 SP1
SUSE Linux Enterprise Server 11 SP2
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 11 SP4
SUSE Linux Enterprise Server 11-SECURITY
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
SUSE Linux Enterprise Server for SAP Applications 12 SP2
SUSE Linux Enterprise Server for SAP Applications 12 SP3
SUSE Linux Enterprise Server for SAP Applications 12 SP5
SUSE Linux Enterprise Server for VMWare 11 SP3
SUSE Linux Enterprise Software Development Kit 11 SP2
SUSE Linux Enterprise Software Development Kit 11 SP3
SUSE Linux Enterprise Software Development Kit 11 SP4
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Software Development Kit 12 SP1
SUSE Linux Enterprise Software Development Kit 12 SP2
SUSE Linux Enterprise Software Development Kit 12 SP3
SUSE Linux Enterprise Software Development Kit 12 SP4
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Build System Kit 12 is installed
  • AND kernel-zfcpdump-3.12.60-52.49 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Build System Kit 12 SP1 is installed
  • AND kernel-zfcpdump-3.12.51-60.20 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Build System Kit 12 SP2 is installed
  • AND kernel-zfcpdump-4.4.90-92.50 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Build System Kit 12 SP3 is installed
  • AND Package Information
  • krb5-mini-1.12.5-40.13 is installed
  • OR krb5-mini-devel-1.12.5-40.13 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Build System Kit 12 SP4 is installed
  • AND Package Information
  • libpodofo-devel-0.9.2-3.6 is installed
  • OR podofo-0.9.2-3.6 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP2 is installed
  • AND Package Information
  • ImageMagick-6.4.3.6-7.26.1 is installed
  • OR libMagick++1-6.4.3.6-7.26.1 is installed
  • OR libMagickCore1-6.4.3.6-7.26.1 is installed
  • OR libMagickCore1-32bit-6.4.3.6-7.26.1 is installed
  • OR libMagickWand1-6.4.3.6-7.26.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP3 is installed
  • AND Package Information
  • MozillaFirefox-24.6.0esr-0.8.1 is installed
  • OR MozillaFirefox-branding-SLED-24-0.7.48 is installed
  • OR MozillaFirefox-translations-24.6.0esr-0.8.1 is installed
  • OR libfreebl3-3.16.1-0.8.1 is installed
  • OR libfreebl3-32bit-3.16.1-0.8.1 is installed
  • OR libsoftokn3-3.16.1-0.8.1 is installed
  • OR libsoftokn3-32bit-3.16.1-0.8.1 is installed
  • OR mozilla-nspr-4.10.6-0.3.1 is installed
  • OR mozilla-nspr-32bit-4.10.6-0.3.1 is installed
  • OR mozilla-nss-3.16.1-0.8.1 is installed
  • OR mozilla-nss-32bit-3.16.1-0.8.1 is installed
  • OR mozilla-nss-tools-3.16.1-0.8.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND Package Information
  • dbus-1-1.8.12-6 is installed
  • OR dbus-1-x11-1.8.12-6 is installed
  • OR libdbus-1-3-1.8.12-6 is installed
  • OR libdbus-1-3-32bit-1.8.12-6 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND rsync-3.1.0-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND xalan-j2-2.7.0-264 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND Package Information
  • alsa-1.0.27.2-15 is installed
  • OR libasound2-1.0.27.2-15 is installed
  • OR libasound2-32bit-1.0.27.2-15 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise for SAP 12 is installed
  • AND Package Information
  • qemu-2.0.2-48.31 is installed
  • OR qemu-block-curl-2.0.2-48.31 is installed
  • OR qemu-block-rbd-2.0.2-48.31 is installed
  • OR qemu-guest-agent-2.0.2-48.31 is installed
  • OR qemu-ipxe-1.0.0-48.31 is installed
  • OR qemu-kvm-2.0.2-48.31 is installed
  • OR qemu-lang-2.0.2-48.31 is installed
  • OR qemu-seabios-1.7.4-48.31 is installed
  • OR qemu-sgabios-8-48.31 is installed
  • OR qemu-tools-2.0.2-48.31 is installed
  • OR qemu-vgabios-1.7.4-48.31 is installed
  • OR qemu-x86-2.0.2-48.31 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise for SAP 12 SP1 is installed
  • AND Package Information
  • compat-openssl098-0.9.8j-102.1 is installed
  • OR libopenssl0_9_8-0.9.8j-102.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP5 is installed
  • AND ctdb-4.10.5+git.129.35f7bb6e177-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Performance Computing 12 SP5 is installed
  • AND ant-1.9.4-3.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Live Patching 12 is installed
  • AND Package Information
  • kgraft-patch-3_12_43-52_6-default-5-2 is installed
  • OR kgraft-patch-3_12_43-52_6-xen-5-2 is installed
  • OR kgraft-patch-SLE12_Update_5-5-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Live Patching 12 SP3 is installed
  • AND Package Information
  • kgraft-patch-4_4_73-5-default-2-2.3 is installed
  • OR kgraft-patch-SLE12-SP3_Update_0-2-2.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed
  • AND Package Information
  • puppet-3.8.5-15.3 is installed
  • OR puppet-server-3.8.5-15.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Containers 12 is installed
  • AND Package Information
  • containerd-0.2.4+gitr565_0366d7e-9 is installed
  • OR docker-1.12.3-81 is installed
  • OR ruby2.1-rubygem-docker-api-1.31.0-11 is installed
  • OR ruby2.1-rubygem-excon-0.52.0-9 is installed
  • OR rubygem-docker-api-1.31.0-11 is installed
  • OR rubygem-excon-0.52.0-9 is installed
  • OR runc-0.1.1+gitr2816_02f8fa7-9 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for High Performance Computing 12 is installed
  • AND Package Information
  • libslurm29-16.05.8.1-5 is installed
  • OR perl-slurm-16.05.8.1-5 is installed
  • OR slurm-16.05.8.1-5 is installed
  • OR slurm-auth-none-16.05.8.1-5 is installed
  • OR slurm-devel-16.05.8.1-5 is installed
  • OR slurm-doc-16.05.8.1-5 is installed
  • OR slurm-lua-16.05.8.1-5 is installed
  • OR slurm-munge-16.05.8.1-5 is installed
  • OR slurm-pam_slurm-16.05.8.1-5 is installed
  • OR slurm-plugins-16.05.8.1-5 is installed
  • OR slurm-sched-wiki-16.05.8.1-5 is installed
  • OR slurm-slurmdbd-16.05.8.1-5 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Legacy Software 12 is installed
  • AND Package Information
  • java-1_6_0-ibm-1.6.0_sr16.2-8 is installed
  • OR java-1_6_0-ibm-fonts-1.6.0_sr16.2-8 is installed
  • OR java-1_6_0-ibm-jdbc-1.6.0_sr16.2-8 is installed
  • OR java-1_6_0-ibm-plugin-1.6.0_sr16.2-8 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Public Cloud 12 is installed
  • AND Package Information
  • kernel-ec2-3.12.32-33 is installed
  • OR kernel-ec2-devel-3.12.32-33 is installed
  • OR kernel-ec2-extra-3.12.32-33 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP1 is installed
  • AND ipsec-tools-0.7.3-1.1.93 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP2 is installed
  • AND Package Information
  • MozillaFirefox-10.0-0.3.2 is installed
  • OR MozillaFirefox-translations-10.0-0.3.2 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND
  • grub2-2.00-0.49.2 is installed
  • OR grub2-x86_64-efi-2.00-0.49.2 is installed
  • OR grub2-x86_64-xen-2.00-0.49.2 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server for VMWare 11 SP3 is installed
  • AND
  • grub2-2.00-0.49.2 is installed
  • OR grub2-x86_64-efi-2.00-0.49.2 is installed
  • OR grub2-x86_64-xen-2.00-0.49.2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND Package Information
  • libpoppler-glib4-0.12.3-1.8.1 is installed
  • OR libpoppler-qt4-3-0.12.3-1.8.1 is installed
  • OR libpoppler5-0.12.3-1.8.1 is installed
  • OR poppler-tools-0.12.3-1.8.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP4 is installed
  • AND Package Information
  • PackageKit-0.3.14-2.30.11 is installed
  • OR PackageKit-lang-0.3.14-2.30.11 is installed
  • OR hal-0.5.12-23.76.1 is installed
  • OR hal-32bit-0.5.12-23.76.1 is installed
  • OR hal-doc-0.5.12-23.76.1 is installed
  • OR hal-x86-0.5.12-23.76.1 is installed
  • OR libpackagekit-glib10-0.3.14-2.30.11 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11-SECURITY is installed
  • AND Package Information
  • libcurl4-openssl1-7.19.7-0.40.1 is installed
  • OR libcurl4-openssl1-32bit-7.19.7-0.40.1 is installed
  • OR libcurl4-openssl1-x86-7.19.7-0.40.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 is installed
  • AND Package Information
  • apache-commons-beanutils-1.9.2-1 is installed
  • OR apache-commons-beanutils-javadoc-1.9.2-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND Package Information
  • dbus-1-glib-0.100.2-3 is installed
  • OR dbus-1-glib-32bit-0.100.2-3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • apache-commons-daemon-1.0.15-4 is installed
  • OR apache-commons-daemon-javadoc-1.0.15-4 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND apache2-mod_nss-1.0.14-18 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • MozillaFirefox-52.9.0esr-109.38 is installed
  • OR MozillaFirefox-translations-52.9.0esr-109.38 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 12 SP5 is installed
  • AND
  • apache2-2.4.51-35.13.1 is installed
  • OR apache2-doc-2.4.51-35.13.1 is installed
  • OR apache2-example-pages-2.4.51-35.13.1 is installed
  • OR apache2-prefork-2.4.51-35.13.1 is installed
  • OR apache2-utils-2.4.51-35.13.1 is installed
  • OR apache2-worker-2.4.51-35.13.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed
  • AND
  • apache2-2.4.51-35.13.1 is installed
  • OR apache2-doc-2.4.51-35.13.1 is installed
  • OR apache2-example-pages-2.4.51-35.13.1 is installed
  • OR apache2-prefork-2.4.51-35.13.1 is installed
  • OR apache2-utils-2.4.51-35.13.1 is installed
  • OR apache2-worker-2.4.51-35.13.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed
  • AND pam_krb5-2.4.4-4 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed
  • AND Package Information
  • libpython3_4m1_0-3.4.6-25.29 is installed
  • OR python3-3.4.6-25.29 is installed
  • OR python3-base-3.4.6-25.29 is installed
  • OR python3-curses-3.4.6-25.29 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed
  • AND ucode-intel-20190618-13.47 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 11 SP2 is installed
  • AND Package Information
  • ImageMagick-6.4.3.6-7.26.1 is installed
  • OR ImageMagick-devel-6.4.3.6-7.26.1 is installed
  • OR libMagick++-devel-6.4.3.6-7.26.1 is installed
  • OR libMagick++1-6.4.3.6-7.26.1 is installed
  • OR libMagickWand1-6.4.3.6-7.26.1 is installed
  • OR libMagickWand1-32bit-6.4.3.6-7.26.1 is installed
  • OR perl-PerlMagick-6.4.3.6-7.26.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 11 SP3 is installed
  • AND Package Information
  • MozillaFirefox-31.8.0esr-0.10.1 is installed
  • OR MozillaFirefox-devel-31.8.0esr-0.10.1 is installed
  • OR mozilla-nspr-4.10.8-0.5.1 is installed
  • OR mozilla-nspr-devel-4.10.8-0.5.1 is installed
  • OR mozilla-nss-3.19.2_CKBI_1.98-0.10.1 is installed
  • OR mozilla-nss-devel-3.19.2_CKBI_1.98-0.10.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 11 SP4 is installed
  • AND PolicyKit-devel-0.9-14.43.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 is installed
  • AND apache2-devel-2.4.10-6 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP1 is installed
  • AND accountsservice-devel-0.6.35-3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP2 is installed
  • AND LibVNCServer-devel-0.9.9-16 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP3 is installed
  • AND apache-pdfbox-1.8.12-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP4 is installed
  • AND augeas-devel-1.2.0-17.3 is installed
    • BACK