Vulnerability CVE-2021-44224 - CERT Civis.Net

Vulnerability Name:

CVE-2021-44224 (CCN-215719)

Assigned:

2021-12-07

Published:

2021-12-07

Updated:

2022-11-02

Summary:

A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).

CVSS v3 Severity:

8.2 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H)
7.1 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): High

8.2 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H)
7.1 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): Low Availibility (A): High

7.1 High (REDHAT CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H)
6.2 Medium (REDHAT Temporal CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Adjacent Attack Complexity (AC): High Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): High

CVSS v2 Severity:

6.4 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): Partial

8.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Partial Availibility (A): Complete

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2021-44224

Source: MISC
Type: Vendor Advisory
http://httpd.apache.org/security/vulnerabilities_24.html

Source: FULLDISC
Type: Mailing List, Third Party Advisory
20220516 APPLE-SA-2022-05-16-4 Security Update 2022-004 Catalina

Source: FULLDISC
Type: Mailing List, Third Party Advisory
20220516 APPLE-SA-2022-05-16-3 macOS Big Sur 11.6.6

Source: FULLDISC
Type: Mailing List, Third Party Advisory
20220516 APPLE-SA-2022-05-16-2 macOS Monterey 12.4

Source: MLIST
Type: Mailing List, Third Party Advisory
[oss-security] 20211220 CVE-2021-44224: Apache HTTP Server: Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier

Source: XF
Type: UNKNOWN
apache-cve202144224-dos(215719)

Source: CCN
Type: Apache Web site
Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier

Source: FEDORA
Type: Mailing List, Third Party Advisory
FEDORA-2021-29a536c2ae

Source: FEDORA
Type: Mailing List, Third Party Advisory
FEDORA-2022-b4103753e9

Source: FEDORA
Type: Mailing List, Third Party Advisory
FEDORA-2022-78e3211c55

Source: FEDORA
Type: Mailing List, Third Party Advisory
FEDORA-2022-21264ec6db

Source: CCN
Type: oss-sec Mailing List, Mon, 20 Dec 2021 09:49:21 +0000
CVE-2021-44224: Apache HTTP Server: Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier

Source: GENTOO
Type: Third Party Advisory
GLSA-202208-20

Source: CONFIRM
Type: Third Party Advisory
https://security.netapp.com/advisory/ntap-20211224-0001/

Source: CCN
Type: Apple security document HT213255
About the security content of Security Update 2022-004 Catalina

Source: CCN
Type: Apple security document HT213256
About the security content of macOS Big Sur 11.6.6

Source: CCN
Type: Apple security document HT213257
About the security content of macOS Monterey 12.4

Source: CONFIRM
Type: Third Party Advisory
https://support.apple.com/kb/HT213255

Source: CONFIRM
Type: Third Party Advisory
https://support.apple.com/kb/HT213256

Source: CONFIRM
Type: Third Party Advisory
https://support.apple.com/kb/HT213257

Source: DEBIAN
Type: Third Party Advisory
DSA-5035

Source: CCN
Type: IBM Security Bulletin 6540288 (HTTP Server)
Multiple vulnerabilities in IBM HTTP Server used by IBM WebSphere Application Server

Source: CCN
Type: IBM Security Bulletin 6541326 (Rational Build Forge)
IBM Rational Build Forge 8.0.x is affected by Apache HTTP Server version used in it. (CVE-2021-44224)

Source: CCN
Type: IBM Security Bulletin 6560266 (i)
IBM HTTP Server (powered by Apache) for i is vulnerable to CVE-2021-44224

Source: CCN
Type: IBM Security Bulletin 6591347 (Security SiteProtector System)
IBM Security SiteProtector System is affected by multiple Apache HTTP Server Vulnerabilities

Source: CCN
Type: IBM Security Bulletin 6840311 (Power HMC)
Vulnerabilities in Apache HTTP (CVE-2021-33193 and CVE-2021-44224) affects Power HMC

Source: CCN
Type: Oracle CPUApr2022
Oracle Critical Patch Update Advisory - April 2022

Source: MISC
Type: Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2022.html

Source: MISC
Type: Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2022.html

Source: CONFIRM
Type: Third Party Advisory
https://www.tenable.com/security/tns-2022-01

Source: CONFIRM
Type: Third Party Advisory
https://www.tenable.com/security/tns-2022-03

Vulnerable Configuration:

Configuration 1:

cpe:/a:apache:http_server:*:*:*:*:*:*:*:* (Version >= 2.4.7 and < 2.4.52)

Configuration 2:

cpe:/o:fedoraproject:fedora:34:*:*:*:*:*:*:*

OR cpe:/o:fedoraproject:fedora:35:*:*:*:*:*:*:*

OR cpe:/o:fedoraproject:fedora:36:*:*:*:*:*:*:*

Configuration 3:

cpe:/o:debian:debian_linux:10.0:*:*:*:*:*:*:*

OR cpe:/o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Configuration 4:

cpe:/a:tenable:tenable.sc:*:*:*:*:*:*:*:* (Version >= 5.14.0 and < 5.20.0)

Configuration 5:

cpe:/a:tenable:tenable.sc:*:*:*:*:*:*:*:* (Version >= 5.16.0 and < 202201.1)

Configuration 6:

cpe:/a:oracle:http_server:12.2.1.3.0:*:*:*:*:*:*:*

OR cpe:/a:oracle:communications_operations_monitor:4.0:*:*:*:*:*:*:*

OR cpe:/a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*

OR cpe:/a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*

OR cpe:/a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*

OR cpe:/a:oracle:http_server:-:*:*:*:*:*:*:*

OR cpe:/a:oracle:http_server:12.2.1.4.0:*:*:*:*:*:*:*

OR cpe:/a:oracle:communications_operations_monitor:4.3:*:*:*:*:*:*:*

OR cpe:/a:oracle:communications_operations_monitor:4.4:*:*:*:*:*:*:*

OR cpe:/a:oracle:communications_element_manager:*:*:*:*:*:*:*:* (Version < 9.0)

OR cpe:/a:oracle:communications_operations_monitor:5.0:*:*:*:*:*:*:*

OR cpe:/a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:* (Version < 9.0)

OR cpe:/a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:* (Version < 9.0)

Configuration 7:

cpe:/o:apple:macos:*:*:*:*:*:*:*:* (Version < 10.15.7)

OR cpe:/o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.15.7:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.15.7:security_update_2021-003:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.15.7:security_update_2021-004:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.15.7:security_update_2021-005:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.15.7:security_update_2021-006:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.15.7:security_update_2022-001:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.15.7:security_update_2022-002:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.15.7:security_update_2021-007:*:*:*:*:*:*

OR cpe:/o:apple:macos:*:*:*:*:*:*:*:* (Version >= 12.0.0 and < 12.4)

OR cpe:/o:apple:mac_os_x:10.15.7:security_update_2021-008:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.15.7:security_update_2022-003:*:*:*:*:*:*

OR cpe:/o:apple:macos:*:*:*:*:*:*:*:* (Version >= 11.0 and < 11.6.6)

Configuration RedHat 1:

cpe:/a:redhat:enterprise_linux:8:*:*:*:*:*:*:*

Configuration RedHat 2:

cpe:/a:redhat:enterprise_linux:8::appstream:*:*:*:*:*

Configuration CCN 1:

cpe:/a:apache:http_server:2.4.7:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.8:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.9:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.10:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.12:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.18:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.20:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.17:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.23:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.29:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.33:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.30:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.25:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.26:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.27:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.28:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.34:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.35:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.36:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.37:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.38:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.38:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.39:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.16:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.41:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.43:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.46:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.48:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.49:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.50:*:*:*:*:*:*:*

OR cpe:/a:apache:http_server:2.4.51:*:*:*:*:*:*:*

AND

cpe:/a:ibm:rational_build_forge:8.0:*:*:*:*:*:*:*

OR cpe:/o:ibm:i:7.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:security_siteprotector_system:3.1.1:*:*:*:*:*:*:*

OR cpe:/o:ibm:i:7.3:*:*:*:*:*:*:*

OR cpe:/a:oracle:http_server:12.2.1.3.0:*:*:*:*:*:*:*

OR cpe:/o:ibm:i:7.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:hardware_management_console:9.2.950.0:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:8025	P	jsoup-1.15.3-150200.3.11.1 on GA media (Moderate)	2023-06-20
oval:org.opensuse.security:def:8077	P	dpdk-19.11.10-150500.3.37 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7434	P	apache2-2.4.51-150400.6.11.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7505	P	ghostscript-9.52-150000.164.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:3752	P	Security update for aws-iam-authenticator (Important)	2022-07-29
oval:org.opensuse.security:def:3463	P	cups-1.7.5-20.23.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3589	P	libexempi3-2.2.1-5.7.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:95093	P	apache2-devel-2.4.51-150400.4.6 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:2862	P	apache2-2.4.51-150400.4.6 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:94701	P	libsamba-errors-devel-4.13.13+git.539.fdbc44a8598-3.20.2 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:94492	P	apache2-2.4.51-150400.4.6 on GA media (Moderate)	2022-06-22
oval:com.redhat.rhsa:def:20221915	P	RHSA-2022:1915: httpd:2.4 security and bug fix update (Moderate)	2022-05-10
oval:org.opensuse.security:def:102258	P	Security update for xen (Important)	2022-03-23
oval:org.opensuse.security:def:99227	P	(Moderate)	2022-03-15
oval:org.opensuse.security:def:5342	P	Security update for apache2 (Important)	2022-02-16
oval:org.opensuse.security:def:6160	P	Security update for apache2 (Important)	2022-02-16
oval:org.opensuse.security:def:118350	P	Security update for apache2 (Important)	2022-01-20
oval:org.opensuse.security:def:5997	P	Security update for java-1_8_0-ibm (Important)	2022-01-18
oval:org.opensuse.security:def:117594	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:1695	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:73800	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:100772	P	(Important)	2022-01-17
oval:org.opensuse.security:def:111879	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:67086	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:96106	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:99764	P	(Important)	2022-01-17
oval:org.opensuse.security:def:69166	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:108080	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:73963	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:101668	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:111950	P	apache2-2.4.52-1.1 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:102796	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:67394	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:976	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:100100	P	(Important)	2022-01-17
oval:org.opensuse.security:def:64678	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:118558	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:108924	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:76154	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:102106	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:99228	P	(Important)	2022-01-17
oval:org.opensuse.security:def:6305	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:68594	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:1542	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:100438	P	(Important)	2022-01-17
oval:org.opensuse.security:def:101414	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:64841	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:109462	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:76462	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:95545	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:102256	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:99502	P	(Important)	2022-01-17
oval:org.opensuse.security:def:69114	P	Security update for apache2 (Important)	2022-01-17
oval:org.opensuse.security:def:33795	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:59878	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:88277	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:29497	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:55995	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:83499	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:126970	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:31756	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:58113	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:86220	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:23780	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:51768	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:34055	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:88594	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:30172	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:56115	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:84295	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:127368	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:32290	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:58941	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:86754	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:24052	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:52040	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:82704	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:89273	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:30292	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:57199	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:84753	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:33118	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:59618	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:87582	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:55320	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:83379	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:89533	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:125807	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:31376	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:57579	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:85840	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:106803	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:92874	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:8921	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:70015	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:99032	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:106116	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:9875	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:92277	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:99824	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:60495	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:93424	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:9116	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:70566	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:106315	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:10426	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:92476	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:69617	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:100135	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:34672	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:105722	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:9477	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:70853	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:99426	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:26219	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:106514	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:10713	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:92675	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:8726	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:69816	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:105917	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:9676	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:92082	P	Security update for apache2 (Important) (in QA)	2022-01-10
oval:org.opensuse.security:def:99625	P	Security update for apache2 (Important) (in QA)	2022-01-10