Oval Definition:	oval:org.opensuse.security:def:6211
Revision Date: 2021-10-26 Version: 1 Title: Security update for apache2 (Important) Description: This update for apache2 fixes the following issues: - CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703) - CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702) - CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666) - CVE-2021-34798: Fixed a NULL pointer dereference via malformed requests. (bsc#1190669) Family: unix Class: patch Status: Reference(s): 1190666 1190669 1190702 1190703 CVE-2009-2666 CVE-2009-5044 CVE-2009-5080 CVE-2009-5081 CVE-2010-1167 CVE-2011-1761 CVE-2011-1947 CVE-2011-2054 CVE-2011-3389 CVE-2012-1152 CVE-2012-3482 CVE-2013-2492 CVE-2013-3571 CVE-2013-4143 CVE-2013-4233 CVE-2013-4234 CVE-2013-6393 CVE-2014-0019 CVE-2014-0107 CVE-2014-0467 CVE-2014-1932 CVE-2014-2525 CVE-2014-8169 CVE-2014-9116 CVE-2014-9130 CVE-2016-1856 CVE-2016-1857 CVE-2016-4590 CVE-2016-4591 CVE-2016-4622 CVE-2016-4624 CVE-2016-4692 CVE-2016-4743 CVE-2016-7586 CVE-2016-7587 CVE-2016-7589 CVE-2016-7592 CVE-2016-7598 CVE-2016-7599 CVE-2016-7610 CVE-2016-7623 CVE-2016-7632 CVE-2016-7635 CVE-2016-7639 CVE-2016-7641 CVE-2016-7645 CVE-2016-7652 CVE-2016-7654 CVE-2016-7656 CVE-2017-1000121 CVE-2017-1000122 CVE-2017-13788 CVE-2017-13798 CVE-2017-13803 CVE-2017-13856 CVE-2017-13866 CVE-2017-13870 CVE-2017-13884 CVE-2017-13885 CVE-2017-15638 CVE-2017-16818 CVE-2017-2350 CVE-2017-2354 CVE-2017-2355 CVE-2017-2356 CVE-2017-2362 CVE-2017-2363 CVE-2017-2364 CVE-2017-2365 CVE-2017-2366 CVE-2017-2369 CVE-2017-2371 CVE-2017-2373 CVE-2017-2496 CVE-2017-2510 CVE-2017-2538 CVE-2017-2539 CVE-2017-2885 CVE-2017-5715 CVE-2017-5753 CVE-2017-6369 CVE-2017-7006 CVE-2017-7011 CVE-2017-7012 CVE-2017-7018 CVE-2017-7019 CVE-2017-7020 CVE-2017-7030 CVE-2017-7034 CVE-2017-7037 CVE-2017-7038 CVE-2017-7039 CVE-2017-7040 CVE-2017-7041 CVE-2017-7042 CVE-2017-7043 CVE-2017-7046 CVE-2017-7048 CVE-2017-7049 CVE-2017-7052 CVE-2017-7055 CVE-2017-7056 CVE-2017-7059 CVE-2017-7061 CVE-2017-7064 CVE-2017-7081 CVE-2017-7087 CVE-2017-7089 CVE-2017-7090 CVE-2017-7091 CVE-2017-7092 CVE-2017-7093 CVE-2017-7094 CVE-2017-7095 CVE-2017-7096 CVE-2017-7098 CVE-2017-7099 CVE-2017-7100 CVE-2017-7102 CVE-2017-7104 CVE-2017-7107 CVE-2017-7109 CVE-2017-7111 CVE-2017-7117 CVE-2017-7120 CVE-2017-7142 CVE-2017-7153 CVE-2017-7156 CVE-2017-7157 CVE-2017-7160 CVE-2017-7161 CVE-2017-7165 CVE-2018-10861 CVE-2018-1128 CVE-2018-1129 CVE-2018-11646 CVE-2018-11712 CVE-2018-11713 CVE-2018-12910 CVE-2018-12911 CVE-2018-14349 CVE-2018-14350 CVE-2018-14351 CVE-2018-14352 CVE-2018-14353 CVE-2018-14354 CVE-2018-14355 CVE-2018-14356 CVE-2018-14357 CVE-2018-14358 CVE-2018-14359 CVE-2018-14360 CVE-2018-14361 CVE-2018-14362 CVE-2018-14363 CVE-2018-4088 CVE-2018-4096 CVE-2018-4101 CVE-2018-4113 CVE-2018-4114 CVE-2018-4117 CVE-2018-4118 CVE-2018-4119 CVE-2018-4120 CVE-2018-4121 CVE-2018-4122 CVE-2018-4125 CVE-2018-4127 CVE-2018-4128 CVE-2018-4129 CVE-2018-4133 CVE-2018-4146 CVE-2018-4161 CVE-2018-4162 CVE-2018-4163 CVE-2018-4165 CVE-2018-4190 CVE-2018-4199 CVE-2018-4200 CVE-2018-4204 CVE-2018-4218 CVE-2018-4222 CVE-2018-4232 CVE-2018-4233 CVE-2018-4246 CVE-2018-7262 CVE-2021-34798 CVE-2021-36160 CVE-2021-39275 CVE-2021-40438 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree openSUSE 13.2 openSUSE 13.2 NonFree openSUSE Leap 42.1 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Build System Kit 12 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP5 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Live Patching 12 SP3 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for High Performance Computing 12 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND kernel-zfcpdump-3.12.55-52.42 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND kernel-zfcpdump-3.12.51-60.25 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND Package Information libreoffice-5.3.3.2-40.5 is installed OR libreoffice-sdk-5.3.3.2-40.5 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND Package Information libreoffice-5.3.5.2-43.5 is installed OR libreoffice-sdk-5.3.5.2-43.5 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP4 is installed AND kernel-zfcpdump-4.12.14-95.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information bytefx-data-mysql-2.6.7-0.9.1 is installed OR ibm-data-db2-2.6.7-0.9.1 is installed OR mono-core-2.6.7-0.9.1 is installed OR mono-data-2.6.7-0.9.1 is installed OR mono-data-firebird-2.6.7-0.9.1 is installed OR mono-data-oracle-2.6.7-0.9.1 is installed OR mono-data-postgresql-2.6.7-0.9.1 is installed OR mono-data-sqlite-2.6.7-0.9.1 is installed OR mono-data-sybase-2.6.7-0.9.1 is installed OR mono-devel-2.6.7-0.9.1 is installed OR mono-extras-2.6.7-0.9.1 is installed OR mono-jscript-2.6.7-0.9.1 is installed OR mono-locale-extras-2.6.7-0.9.1 is installed OR mono-nunit-2.6.7-0.9.1 is installed OR mono-wcf-2.6.7-0.9.1 is installed OR mono-web-2.6.7-0.9.1 is installed OR mono-winforms-2.6.7-0.9.1 is installed OR monodoc-core-2.6.7-0.9.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-24.5.0esr-0.8.1 is installed OR MozillaFirefox-branding-SLED-24-0.7.36 is installed OR MozillaFirefox-translations-24.5.0esr-0.8.1 is installed OR libfreebl3-3.16-0.8.1 is installed OR libfreebl3-32bit-3.16-0.8.1 is installed OR libsoftokn3-3.16-0.8.1 is installed OR libsoftokn3-32bit-3.16-0.8.1 is installed OR mozilla-nspr-4.10.4-0.3.1 is installed OR mozilla-nspr-32bit-4.10.4-0.3.1 is installed OR mozilla-nss-3.16-0.8.1 is installed OR mozilla-nss-32bit-3.16-0.8.1 is installed OR mozilla-nss-tools-3.16-0.8.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information gnutls-3.2.15-4 is installed OR libgnutls28-3.2.15-4 is installed OR libgnutls28-32bit-3.2.15-4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND socat-1.7.2.4-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND xlockmore-5.43-5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND SuSEfirewall2-3.6.312.333-3.13 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 is installed AND Package Information kgraft-patch-3_12_60-52_49-default-7-2 is installed OR kgraft-patch-3_12_60-52_49-xen-7-2 is installed OR kgraft-patch-SLE12_Update_14-7-2 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND Package Information compat-openssl098-0.9.8j-102.1 is installed OR libopenssl0_9_8-0.9.8j-102.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND haproxy-1.6.5-5 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP5 is installed AND lighttpd-1.4.35-3 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND apache2-mod_jk-1.2.40-7.3 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 is installed AND Package Information kgraft-patch-3_12_51-52_39-default-2-2 is installed OR kgraft-patch-3_12_51-52_39-xen-2-2 is installed OR kgraft-patch-SLE12_Update_11-2-2 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP3 is installed AND Package Information kgraft-patch-4_4_82-6_3-default-1-2 is installed OR kgraft-patch-SLE12-SP3_Update_1-1-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed AND Package Information puppet-3.8.5-15.9 is installed OR puppet-server-3.8.5-15.9 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 12 is installed AND Package Information sles12-docker-image-1.1.2-20160727 is installed OR sles12sp1-docker-image-1.0.5-20160727 is installed Definition Synopsis SUSE Linux Enterprise Module for High Performance Computing 12 is installed AND Package Information libpmi0-17.02.10-6.16 is installed OR libslurm31-17.02.10-6.16 is installed OR perl-slurm-17.02.10-6.16 is installed OR slurm-17.02.10-6.16 is installed OR slurm-auth-none-17.02.10-6.16 is installed OR slurm-devel-17.02.10-6.16 is installed OR slurm-doc-17.02.10-6.16 is installed OR slurm-lua-17.02.10-6.16 is installed OR slurm-munge-17.02.10-6.16 is installed OR slurm-pam_slurm-17.02.10-6.16 is installed OR slurm-plugins-17.02.10-6.16 is installed OR slurm-sched-wiki-17.02.10-6.16 is installed OR slurm-slurmdb-direct-17.02.10-6.16 is installed OR slurm-slurmdbd-17.02.10-6.16 is installed OR slurm-sql-17.02.10-6.16 is installed OR slurm-torque-17.02.10-6.16 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information compat-openssl098-0.9.8j-87 is installed OR libopenssl0_9_8-0.9.8j-87 is installed OR libopenssl0_9_8-32bit-0.9.8j-87 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 12 is installed AND python-requests-2.3.0-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND Package Information apache2-mod_php5-5.5.14-7 is installed OR php5-5.5.14-7 is installed OR php5-bcmath-5.5.14-7 is installed OR php5-bz2-5.5.14-7 is installed OR php5-calendar-5.5.14-7 is installed OR php5-ctype-5.5.14-7 is installed OR php5-curl-5.5.14-7 is installed OR php5-dba-5.5.14-7 is installed OR php5-dom-5.5.14-7 is installed OR php5-enchant-5.5.14-7 is installed OR php5-exif-5.5.14-7 is installed OR php5-fastcgi-5.5.14-7 is installed OR php5-fileinfo-5.5.14-7 is installed OR php5-fpm-5.5.14-7 is installed OR php5-ftp-5.5.14-7 is installed OR php5-gd-5.5.14-7 is installed OR php5-gettext-5.5.14-7 is installed OR php5-gmp-5.5.14-7 is installed OR php5-iconv-5.5.14-7 is installed OR php5-intl-5.5.14-7 is installed OR php5-json-5.5.14-7 is installed OR php5-ldap-5.5.14-7 is installed OR php5-mbstring-5.5.14-7 is installed OR php5-mcrypt-5.5.14-7 is installed OR php5-mysql-5.5.14-7 is installed OR php5-odbc-5.5.14-7 is installed OR php5-openssl-5.5.14-7 is installed OR php5-pcntl-5.5.14-7 is installed OR php5-pdo-5.5.14-7 is installed OR php5-pear-5.5.14-7 is installed OR php5-pgsql-5.5.14-7 is installed OR php5-pspell-5.5.14-7 is installed OR php5-shmop-5.5.14-7 is installed OR php5-snmp-5.5.14-7 is installed OR php5-soap-5.5.14-7 is installed OR php5-sockets-5.5.14-7 is installed OR php5-sqlite-5.5.14-7 is installed OR php5-suhosin-5.5.14-7 is installed OR php5-sysvmsg-5.5.14-7 is installed OR php5-sysvsem-5.5.14-7 is installed OR php5-sysvshm-5.5.14-7 is installed OR php5-tokenizer-5.5.14-7 is installed OR php5-wddx-5.5.14-7 is installed OR php5-xmlreader-5.5.14-7 is installed OR php5-xmlrpc-5.5.14-7 is installed OR php5-xmlwriter-5.5.14-7 is installed OR php5-xsl-5.5.14-7 is installed OR php5-zip-5.5.14-7 is installed OR php5-zlib-5.5.14-7 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1 is installed AND Package Information kdelibs4-4.3.5-0.2.46 is installed OR kdelibs4-core-4.3.5-0.2.46 is installed OR kdelibs4-doc-4.3.5-0.2.46 is installed OR libkde4-4.3.5-0.2.46 is installed OR libkde4-32bit-4.3.5-0.2.46 is installed OR libkde4-x86-4.3.5-0.2.46 is installed OR libkdecore4-4.3.5-0.2.46 is installed OR libkdecore4-32bit-4.3.5-0.2.46 is installed OR libkdecore4-x86-4.3.5-0.2.46 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND aaa_base-11-6.65.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND libicu-4.0-7.28.1 is installed OR libicu-32bit-4.0-7.28.1 is installed OR libicu-doc-4.0-7.28.1 is installed OR libicu-x86-4.0-7.28.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND libicu-4.0-7.28.1 is installed OR libicu-32bit-4.0-7.28.1 is installed OR libicu-doc-4.0-7.28.1 is installed OR libicu-x86-4.0-7.28.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information libsamplerate-0.1.4-1.15 is installed OR libsamplerate-32bit-0.1.4-1.15 is installed OR libsamplerate-x86-0.1.4-1.15 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information ant-1.7.1-20.11.1 is installed OR ant-trax-1.7.1-16.11.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11-SECURITY is installed AND Package Information curl-openssl1-7.19.7-1.61.1 is installed OR libcurl4-openssl1-7.19.7-1.61.1 is installed OR libcurl4-openssl1-32bit-7.19.7-1.61.1 is installed OR libcurl4-openssl1-x86-7.19.7-1.61.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND apache2-mod_perl-2.0.8-8 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information ecryptfs-utils-103-5 is installed OR ecryptfs-utils-32bit-103-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information at-3.1.14-7 is installed OR flex-2.5.37-8 is installed OR flex-32bit-2.5.37-8 is installed OR libQtWebKit4-4.8.6+2.3.3-3 is installed OR libQtWebKit4-32bit-4.8.6+2.3.3-3 is installed OR libbonobo-2.32.1-16 is installed OR libbonobo-32bit-2.32.1-16 is installed OR libbonobo-doc-2.32.1-16 is installed OR libbonobo-lang-2.32.1-16 is installed OR libkde4-4.12.0-7 is installed OR libkde4-32bit-4.12.0-7 is installed OR libkdecore4-4.12.0-7 is installed OR libkdecore4-32bit-4.12.0-7 is installed OR libksuseinstall1-4.12.0-7 is installed OR libksuseinstall1-32bit-4.12.0-7 is installed OR libnetpbm11-10.66.3-4 is installed OR libnetpbm11-32bit-10.66.3-4 is installed OR netpbm-10.66.3-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information DirectFB-1.7.1-6 is installed OR lib++dfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information apache-commons-beanutils-1.9.2-1 is installed OR apache-commons-beanutils-javadoc-1.9.2-1 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND perl-HTML-Parser-3.71-1 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed AND Package Information postgresql94-9.4.24-21.25 is installed OR postgresql94-contrib-9.4.24-21.25 is installed OR postgresql94-docs-9.4.24-21.25 is installed OR postgresql94-plperl-9.4.24-21.25 is installed OR postgresql94-plpython-9.4.24-21.25 is installed OR postgresql94-pltcl-9.4.24-21.25 is installed OR postgresql94-server-9.4.24-21.25 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed AND Package Information java-1_8_0-openjdk-1.8.0.222-27.35 is installed OR java-1_8_0-openjdk-demo-1.8.0.222-27.35 is installed OR java-1_8_0-openjdk-devel-1.8.0.222-27.35 is installed OR java-1_8_0-openjdk-headless-1.8.0.222-27.35 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND apache2-mod_security2-2.7.1-0.2.14.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information MozillaFirefox-devel-24.6.0esr-0.8.1 is installed OR mozilla-nspr-devel-4.10.6-0.3.1 is installed OR mozilla-nss-devel-3.16.1-0.8.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information GraphicsMagick-1.2.5-4.33.1 is installed OR libGraphicsMagick2-1.2.5-4.33.1 is installed OR perl-GraphicsMagick-1.2.5-4.33.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND accountsservice-devel-0.6.35-1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information FastCGI-2.4.0-167 is installed OR perl-FastCGI-2.4.0-167 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information ant-1.9.4-1 is installed OR ant-jmf-1.9.4-1 is installed OR ant-scripts-1.9.4-1 is installed OR ant-swing-1.9.4-1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND Package Information avahi-compat-howl-devel-0.6.32-30 is installed OR avahi-compat-mDNSResponder-devel-0.6.32-30 is installed OR libavahi-devel-0.6.32-30 is installed OR libhowl0-0.6.32-30 is installed OR python-avahi-0.6.32-30 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND Package Information FastCGI-2.4.0-168 is installed OR FastCGI-devel-2.4.0-168 is installed OR perl-FastCGI-2.4.0-168 is installed
BACK