{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat JBoss Core Services Apache HTTP Server 2.4.62 Service Pack 4 is now available.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products and packaged under Red Hat JBoss Core Services, to allow for faster distribution of updates and for a more consistent update experience.\n\nThis release of Red Hat JBoss Core Services Apache HTTP Server 2.4.62 Service Pack 4 serves as a replacement for Red Hat JBoss Core Services Apache HTTP Server 2.4.62 Service Pack 3, and includes bug fixes and enhancements, which are documented in the Release Notes linked to in the References section.\n\nSecurity Fix(es):\n\n* httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780)\n* jbcs-httpd24-httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975)\n* jbcs-httpd24-mod_http2: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975)\n* mod_proxy_ajp.so: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032)\n* mod_proxy_ajp.so: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059)\n* mod_authn_socache.so: NULL pointer dereference can cause a child process crash (CVE-2026-33007)\n* mod_proxy_ajp.so: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857)\n* mod_dav_lock.so: NULL pointer dereference via specially crafted request (CVE-2026-29169)\n* jbcs-httpd24-mod_md: unrestricted OCSP response leads to resource exhaustion (CVE-2026-29168)\n* jbcs-httpd24-httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase (CVE-2025-53020)\n* nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination (CVE-2026-27135)\n* jbcs-httpd24-openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group (CVE-2026-2673)\n* libexpat-2.dll: denial of service via crafted XML input (CVE-2026-45186)\n* openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key (CVE-2026-31790)\n\nA Red Hat Security Bulletin which addresses further details about this flaw is available in the References section.\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:27201",
        "url": "https://access.redhat.com/errata/RHSA-2026:27201"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_jboss_core_services/2.4.62/html/red_hat_jboss_core_services_apache_http_server_2.4.62_service_pack_4_release_notes/index",
        "url": "https://docs.redhat.com/en/documentation/red_hat_jboss_core_services/2.4.62/html/red_hat_jboss_core_services_apache_http_server_2.4.62_service_pack_4_release_notes/index"
      },
      {
        "category": "external",
        "summary": "2379343",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2379343"
      },
      {
        "category": "external",
        "summary": "2447327",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447327"
      },
      {
        "category": "external",
        "summary": "2448754",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448754"
      },
      {
        "category": "external",
        "summary": "2451094",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451094"
      },
      {
        "category": "external",
        "summary": "2464940",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464940"
      },
      {
        "category": "external",
        "summary": "2464952",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464952"
      },
      {
        "category": "external",
        "summary": "2464953",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464953"
      },
      {
        "category": "external",
        "summary": "2465296",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2465296"
      },
      {
        "category": "external",
        "summary": "2465299",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2465299"
      },
      {
        "category": "external",
        "summary": "2466753",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466753"
      },
      {
        "category": "external",
        "summary": "2466913",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466913"
      },
      {
        "category": "external",
        "summary": "2468575",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2468575"
      },
      {
        "category": "external",
        "summary": "2485371",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485371"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27201.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP4 security update",
    "tracking": {
      "current_release_date": "2026-06-24T20:38:08+00:00",
      "generator": {
        "date": "2026-06-24T20:38:08+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.0.0"
        }
      },
      "id": "RHSA-2026:27201",
      "initial_release_date": "2026-06-22T15:13:13+00:00",
      "revision_history": [
        {
          "date": "2026-06-22T15:13:13+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-22T15:13:13+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-24T20:38:08+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Core Services 2.4.62.SP4",
                "product": {
                  "name": "Red Hat JBoss Core Services 2.4.62.SP4",
                  "product_id": "Red Hat JBoss Core Services 2.4.62.SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_core_services:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Core Services"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-53020",
      "cwe": {
        "id": "CWE-401",
        "name": "Missing Release of Memory after Effective Lifetime"
      },
      "discovery_date": "2025-07-10T18:00:46.989628+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2379343"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache HTTP Server. This late release of memory after effective lifetime vulnerability allows a remote, unauthenticated attacker to cause a denial of service (DoS). The vulnerability can lead to resource exhaustion, making the server unavailable to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mod_http2: Apache HTTP Server: HTTP/2 DoS by Memory Increase",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 2.4.62.SP4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-53020"
        },
        {
          "category": "external",
          "summary": "RHBZ#2379343",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2379343"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-53020",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-53020"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-53020",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-53020"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2025-07-10T16:59:06.340000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-22T15:13:13+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:27201"
        },
        {
          "category": "workaround",
          "details": "The attack surface can be reduced by disabling HTTP/2 support in Apache.\nFollow the guidance in Red Hat KCS article to:\n- Remove h2 and h2c from the Protocols directive\n- Disable mod_http2 and mod_proxy_http2 modules (if not required)\n\nhttps://access.redhat.com/node/7056356",
          "product_ids": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mod_http2: Apache HTTP Server: HTTP/2 DoS by Memory Increase"
    },
    {
      "cve": "CVE-2026-2673",
      "cwe": {
        "id": "CWE-325",
        "name": "Missing Cryptographic Step"
      },
      "discovery_date": "2026-03-13T14:01:14.098405+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2447327"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A key group selection preference flaw has been discovered in OpenSSL. An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default by using the \"DEFAULT\" keyword. A less preferred key exchange may be used even when a more preferred group is supported by both client and server, if the group was not included among the client\u0027s initial predicated keyshares. This will sometimes be the case with the new hybrid post-quantum groups, if the client chooses to defer their use until specifically requested by the server. No OpenSSL FIPS modules are affected by this issue, the code in question lies outside the FIPS boundary.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The impact of this flaw is limited to the choice of key agreement groups in a specific TLS connection. While a less a preferred key agreement group may allow for a connection to lack post-quantum protection, it is important to know that the connection will still be encrypted with a secure classical cipher and that the degradation of the cipher is limited to the active connection and is not a persistent degradation. Groups which the server operator has disallowed will not be used and it may be the case that the client and server fail to agree upon a key exchange group which would prevent the offending client from constructing a TLS connection.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 2.4.62.SP4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-2673"
        },
        {
          "category": "external",
          "summary": "RHBZ#2447327",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447327"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-2673",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-2673"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-2673",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2673"
        },
        {
          "category": "external",
          "summary": "https://github.com/openssl/openssl/commit/2157c9d81f7b0bd7dfa25b960e928ec28e8dd63f",
          "url": "https://github.com/openssl/openssl/commit/2157c9d81f7b0bd7dfa25b960e928ec28e8dd63f"
        },
        {
          "category": "external",
          "summary": "https://github.com/openssl/openssl/commit/85977e013f32ceb96aa034c0e741adddc1a05e34",
          "url": "https://github.com/openssl/openssl/commit/85977e013f32ceb96aa034c0e741adddc1a05e34"
        },
        {
          "category": "external",
          "summary": "https://openssl-library.org/news/secadv/20260313.txt",
          "url": "https://openssl-library.org/news/secadv/20260313.txt"
        }
      ],
      "release_date": "2026-03-13T13:23:00.376000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-22T15:13:13+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:27201"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group"
    },
    {
      "cve": "CVE-2026-27135",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "discovery_date": "2026-03-18T19:02:13.823002+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2448754"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in nghttp2. Due to missing internal state validation, the library continues to process incoming data even after a session has been terminated. A remote attacker could exploit this by sending a specially crafted HTTP/2 frame, leading to an assertion failure and a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 2.4.62.SP4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-27135"
        },
        {
          "category": "external",
          "summary": "RHBZ#2448754",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448754"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-27135",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-27135"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27135",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27135"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1",
          "url": "https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6",
          "url": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6"
        }
      ],
      "release_date": "2026-03-18T17:59:02.045000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-22T15:13:13+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:27201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination"
    },
    {
      "cve": "CVE-2026-28780",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-05-05T22:01:12.666022+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2466913"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in mod_proxy_ajp of Apache HTTP Server. This heap-based buffer overflow vulnerability allows a remote attacker, by connecting to a malicious AJP (Apache JServ Protocol) server, to send a specially crafted message. This message can cause mod_proxy_ajp to write attacker-controlled data beyond a heap-based buffer, potentially leading to arbitrary code execution or a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 2.4.62.SP4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-28780"
        },
        {
          "category": "external",
          "summary": "RHBZ#2466913",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466913"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-28780",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-28780"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28780",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28780"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2026-05-05T21:29:41.527000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-22T15:13:13+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:27201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow"
    },
    {
      "cve": "CVE-2026-29168",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-05-05T14:01:25.519480+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2466753"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the mod_md module of httpd. When processing OCSP (Online Certificate Status Protocol) responses from a malicious or compromised OCSP responder, the module fails to enforce proper size limits on the incoming data. This issue leads to memory exhaustion and a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_md: unrestricted OCSP response leads to resource exhaustion",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, the Apache HTTP Server must query an untrusted or compromised OCSP responder, limiting its exposure. Due to this reason, this vulnerability has been rated with a moderate severity.\n\nThis flaw only affects configurations with mod_md loaded and being used. This module can be disabled via the configuration file if its functionality is not being used.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 2.4.62.SP4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-29168"
        },
        {
          "category": "external",
          "summary": "RHBZ#2466753",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466753"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-29168",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-29168"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29168",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29168"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2026-05-05T13:10:05.656000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-22T15:13:13+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:27201"
        },
        {
          "category": "workaround",
          "details": "Disabling mod_md and restarting httpd will mitigate this flaw.",
          "product_ids": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_md: unrestricted OCSP response leads to resource exhaustion"
    },
    {
      "cve": "CVE-2026-29169",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2026-05-04T15:01:18.611919+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2465296"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the mod_dav_lock module of httpd. This vulnerability allows a remote unauthenticated attacker to crash the server due to a NULL pointer dereference via a specially crafted request.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: NULL pointer dereference via specially crafted request",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue allows an unauthenticated remote attacker to crash the server via a specially crafted request. However, the mod_dav_lock module is obsolete and rarely enabled in modern environments. The only known use-case for the module was mod_dav_svn from Apache Subversion earlier than version 1.2.0. Due to this reason, this vulnerability has been rated with a low severity.\n\nThis flaw only affects configurations with mod_dav_lock loaded and being used. This module can be disabled via the configuration file if its functionality is not being used.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 2.4.62.SP4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-29169"
        },
        {
          "category": "external",
          "summary": "RHBZ#2465296",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2465296"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-29169",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-29169"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29169",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29169"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2026-05-04T14:48:29.832000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-22T15:13:13+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:27201"
        },
        {
          "category": "workaround",
          "details": "Disabling mod_dav_lock and restarting httpd will mitigate this flaw.",
          "product_ids": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: NULL pointer dereference via specially crafted request"
    },
    {
      "cve": "CVE-2026-31790",
      "cwe": {
        "id": "CWE-824",
        "name": "Access of Uninitialized Pointer"
      },
      "discovery_date": "2026-03-25T02:59:10.179000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451094"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in openssl. Applications that use RSASVE key encapsulation, a method for securely exchanging encryption keys, may inadvertently expose sensitive data. This vulnerability arises when an application processes a malicious, invalid RSA public key provided by an attacker without proper validation. Consequently, the application might send the contents of an uninitialized memory buffer, which could contain confidential information, to the attacker.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Moderate impact. This flaw affects applications utilizing RSASVE key encapsulation, where an attacker-supplied invalid RSA public key is used with EVP_PKEY_encapsulate() without prior validation. This can lead to the disclosure of sensitive, uninitialized memory buffer contents to a malicious peer.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 2.4.62.SP4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-31790"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451094",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451094"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-31790",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-31790"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-31790",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31790"
        },
        {
          "category": "external",
          "summary": "https://openssl-library.org/news/secadv/20260407.txt",
          "url": "https://openssl-library.org/news/secadv/20260407.txt"
        }
      ],
      "release_date": "2026-04-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-22T15:13:13+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:27201"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key"
    },
    {
      "cve": "CVE-2026-33007",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2026-05-04T15:01:24.989510+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2465299"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the mod_authn_socache module of httpd. This vulnerability allows an unauthenticated remote user to crash a child process due to a NULL pointer dereference when the server is operating in a caching forward proxy configuration.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue allows an unauthenticated remote attacker to cause a crash in a child process. However, the main parent process remains active and functional. Due to this reason, this flaw has been rated with a moderate severity.\n\nThis flaw only affects configurations with mod_authn_socache loaded and being used. This module can be disabled via the configuration file if its functionality is not being used.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 2.4.62.SP4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33007"
        },
        {
          "category": "external",
          "summary": "RHBZ#2465299",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2465299"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33007",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33007"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33007",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33007"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2026-05-04T14:41:27.520000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-22T15:13:13+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:27201"
        },
        {
          "category": "workaround",
          "details": "Disabling mod_authn_socache and restarting httpd will mitigate this flaw.",
          "product_ids": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash"
    },
    {
      "cve": "CVE-2026-33857",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-05-04T14:01:10.810459+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2464953"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the mod_proxy_ajp module of httpd. When processing AJP (Apache JServ Protocol) messages, the AJP getter functions attempt to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause an out-of-bounds read. This issue leads to a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, the Apache HTTP Server must be configured to connect to an untrusted or compromised AJP backend server, limiting its exposure. Due to this reason, this flaw has been rated with a moderate severity.\n\nThis flaw only affects configurations with mod_proxy_ajp loaded and being used. This module can be disabled via the configuration file if its functionality is not being used.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 2.4.62.SP4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33857"
        },
        {
          "category": "external",
          "summary": "RHBZ#2464953",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464953"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33857",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33857"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33857",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33857"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2026-05-04T13:07:30.753000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-22T15:13:13+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:27201"
        },
        {
          "category": "workaround",
          "details": "Disabling mod_proxy_ajp and restarting httpd will mitigate this flaw.",
          "product_ids": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions"
    },
    {
      "cve": "CVE-2026-34032",
      "cwe": {
        "id": "CWE-170",
        "name": "Improper Null Termination"
      },
      "discovery_date": "2026-05-04T14:01:07.000400+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2464952"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the mod_proxy_ajp module of httpd. When processing AJP (Apache JServ Protocol) messages, the server fails to properly check if a string is null-terminated before attempting to read it, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue potentially leads to memory disclosure and a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, the Apache HTTP Server must be configured to connect to an untrusted or compromised AJP backend server, limiting its exposure. Due to this reason, this flaw has been rated with a moderate severity.\n\nThis flaw only affects configurations with mod_proxy_ajp loaded and being used. This module can be disabled via the configuration file if its functionality is not being used.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 2.4.62.SP4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34032"
        },
        {
          "category": "external",
          "summary": "RHBZ#2464952",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464952"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34032",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34032"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34032",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34032"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2026-05-04T12:54:54.383000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-22T15:13:13+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:27201"
        },
        {
          "category": "workaround",
          "details": "Disabling mod_proxy_ajp and restarting httpd will mitigate this flaw.",
          "product_ids": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check"
    },
    {
      "cve": "CVE-2026-34059",
      "cwe": {
        "id": "CWE-126",
        "name": "Buffer Over-read"
      },
      "discovery_date": "2026-05-04T13:01:08.557596+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2464940"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the mod_proxy_ajp module of httpd. When processing AJP (Apache JServ Protocol) messages, the ajp_parse_data function attempts to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue potentially leads to memory disclosure and a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, the Apache HTTP Server must be configured to connect to an untrusted or compromised AJP backend server, limiting its exposure. Due to this reason, this flaw has been rated with a moderate severity.\n\nThis flaw only affects configurations with mod_proxy_ajp loaded and being used. This module can be disabled via the configuration file if its functionality is not being used.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 2.4.62.SP4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34059"
        },
        {
          "category": "external",
          "summary": "RHBZ#2464940",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464940"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34059",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34059"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34059",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34059"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2026-05-04T12:39:42.273000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-22T15:13:13+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:27201"
        },
        {
          "category": "workaround",
          "details": "Disabling mod_proxy_ajp and restarting httpd will mitigate this flaw.",
          "product_ids": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()"
    },
    {
      "cve": "CVE-2026-45186",
      "cwe": {
        "id": "CWE-407",
        "name": "Inefficient Algorithmic Complexity"
      },
      "discovery_date": "2026-05-10T07:00:47.768180+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2468575"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libexpat. When processing a specially crafted XML input containing a specific pattern of attributes, the parsing time increases quadratically due to checks for attribute name collisions. This consumes excessive CPU resources and eventually results in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libexpat: denial of service via crafted XML input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to be able to process a specially crafted XML file or input with an application linked to the libexpat library. Also, the only security impact of this flaw is a high consumption of CPU resources that can eventually cause a denial of service. Due to this reason, this vulnerability has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 2.4.62.SP4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-45186"
        },
        {
          "category": "external",
          "summary": "RHBZ#2468575",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2468575"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-45186",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-45186"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45186",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45186"
        },
        {
          "category": "external",
          "summary": "https://github.com/libexpat/libexpat/pull/1216",
          "url": "https://github.com/libexpat/libexpat/pull/1216"
        }
      ],
      "release_date": "2026-05-10T06:36:16.927000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-22T15:13:13+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:27201"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, restrict the maximum size of incoming XML payloads. It is especially critical to limit the decompressed size if the application accepts compressed XML files. Also, consider running the application inside a container or a restricted environment to ensure that the high consumption of CPU resources does not affect the host system.",
          "product_ids": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libexpat: denial of service via crafted XML input"
    },
    {
      "cve": "CVE-2026-49975",
      "cwe": {
        "id": "CWE-409",
        "name": "Improper Handling of Highly Compressed Data (Data Amplification)"
      },
      "discovery_date": "2026-06-05T06:04:44.009000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2485371"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2, affecting various web servers. A remote attacker can exploit this vulnerability by combining an HPACK compression bomb with a zero-byte flow-control window. This technique allows a small amount of data to expand into large memory allocations on the server, which are then held, leading to a denial of service (DoS) by rendering the server inaccessible.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Apache\u0027s `httpd` HTTP/2 protocol implementation has a denial-of-service (DoS) vulnerability that is rated as Important. An unauthenticated remote attacker can exploit this flaw by combining HPACK compression with flow control manipulation, leading to significant server memory exhaustion and rendering the service inaccessible. This vulnerability exists in default HTTP/2 configurations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 2.4.62.SP4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-49975"
        },
        {
          "category": "external",
          "summary": "RHBZ#2485371",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485371"
        },
        {
          "category": "external",
          "summary": "RHSB-2026-007",
          "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-007"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-49975",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-49975"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-49975",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-49975"
        },
        {
          "category": "external",
          "summary": "https://blog.calif.io/p/codex-discovered-a-hidden-http2-bomb",
          "url": "https://blog.calif.io/p/codex-discovered-a-hidden-http2-bomb"
        }
      ],
      "release_date": "2026-06-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-22T15:13:13+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:27201"
        },
        {
          "category": "workaround",
          "details": "See the security bulletin for a detailed mitigation procedure.",
          "product_ids": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 2.4.62.SP4"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for apache2",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for apache2 fixes the following issues\n\n- CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957).\n- CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935).\n- CVE-2026-28780: heap buffer overflow in `mod_proxy_ajp` via `ajp_msg_check_header()` (bsc#1264163).\n- CVE-2026-29168: allocation of resources without limits in `mod_md` via OCSP response (bsc#1264150).\n- CVE-2026-29169: NULL pointer dereference in `mod_dav_lock` allows server crash via malicious requests (bsc#1263956).\n- CVE-2026-33006: `mod_auth_digest` timing attack allows bypass of Digest authentication (bsc#1263955).\n- CVE-2026-33007: NULL pointer dereference in `mod_authn_socache` allows unauthenticated remote user to crash a child\n  processes (bsc#1263954).\n- CVE-2026-33523: HTTP response splitting forwarding malicious status line (bsc#1263953).\n- CVE-2026-33857: off-by-one OOB reads in AJP getter functions (bsc#1263952).\n- CVE-2026-34032: heap buffer overread in `mod_proxy_ajp` due to missing null-termination check (bsc#1263951).\n- CVE-2026-34059: heap buffer overread and memory disclosure via `ajp_parse_data()` (bsc#1263950).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2026-2103,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-2103,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-2103",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_2103-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:2103-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20262103-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:2103-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2026-May/046853.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1263935",
        "url": "https://bugzilla.suse.com/1263935"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1263950",
        "url": "https://bugzilla.suse.com/1263950"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1263951",
        "url": "https://bugzilla.suse.com/1263951"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1263952",
        "url": "https://bugzilla.suse.com/1263952"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1263953",
        "url": "https://bugzilla.suse.com/1263953"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1263954",
        "url": "https://bugzilla.suse.com/1263954"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1263955",
        "url": "https://bugzilla.suse.com/1263955"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1263956",
        "url": "https://bugzilla.suse.com/1263956"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1263957",
        "url": "https://bugzilla.suse.com/1263957"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264150",
        "url": "https://bugzilla.suse.com/1264150"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264163",
        "url": "https://bugzilla.suse.com/1264163"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-23918 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-23918/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-24072 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-24072/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-28780 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-28780/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-29168 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-29168/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-29169 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-29169/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33006 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33006/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33007 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33007/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33523 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33523/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33857 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33857/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-34032 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-34032/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-34059 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-34059/"
      }
    ],
    "title": "Security update for apache2",
    "tracking": {
      "current_release_date": "2026-05-28T12:34:09Z",
      "generator": {
        "date": "2026-05-28T12:34:09Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:2103-1",
      "initial_release_date": "2026-05-28T12:34:09Z",
      "revision_history": [
        {
          "date": "2026-05-28T12:34:09Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-2.4.66-150600.5.52.1.aarch64",
                "product": {
                  "name": "apache2-2.4.66-150600.5.52.1.aarch64",
                  "product_id": "apache2-2.4.66-150600.5.52.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-devel-2.4.66-150600.5.52.1.aarch64",
                "product": {
                  "name": "apache2-devel-2.4.66-150600.5.52.1.aarch64",
                  "product_id": "apache2-devel-2.4.66-150600.5.52.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-event-2.4.66-150600.5.52.1.aarch64",
                "product": {
                  "name": "apache2-event-2.4.66-150600.5.52.1.aarch64",
                  "product_id": "apache2-event-2.4.66-150600.5.52.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-prefork-2.4.66-150600.5.52.1.aarch64",
                "product": {
                  "name": "apache2-prefork-2.4.66-150600.5.52.1.aarch64",
                  "product_id": "apache2-prefork-2.4.66-150600.5.52.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-utils-2.4.66-150600.5.52.1.aarch64",
                "product": {
                  "name": "apache2-utils-2.4.66-150600.5.52.1.aarch64",
                  "product_id": "apache2-utils-2.4.66-150600.5.52.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-worker-2.4.66-150600.5.52.1.aarch64",
                "product": {
                  "name": "apache2-worker-2.4.66-150600.5.52.1.aarch64",
                  "product_id": "apache2-worker-2.4.66-150600.5.52.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-2.4.66-150600.5.52.1.i586",
                "product": {
                  "name": "apache2-2.4.66-150600.5.52.1.i586",
                  "product_id": "apache2-2.4.66-150600.5.52.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-devel-2.4.66-150600.5.52.1.i586",
                "product": {
                  "name": "apache2-devel-2.4.66-150600.5.52.1.i586",
                  "product_id": "apache2-devel-2.4.66-150600.5.52.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-event-2.4.66-150600.5.52.1.i586",
                "product": {
                  "name": "apache2-event-2.4.66-150600.5.52.1.i586",
                  "product_id": "apache2-event-2.4.66-150600.5.52.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-prefork-2.4.66-150600.5.52.1.i586",
                "product": {
                  "name": "apache2-prefork-2.4.66-150600.5.52.1.i586",
                  "product_id": "apache2-prefork-2.4.66-150600.5.52.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-utils-2.4.66-150600.5.52.1.i586",
                "product": {
                  "name": "apache2-utils-2.4.66-150600.5.52.1.i586",
                  "product_id": "apache2-utils-2.4.66-150600.5.52.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-worker-2.4.66-150600.5.52.1.i586",
                "product": {
                  "name": "apache2-worker-2.4.66-150600.5.52.1.i586",
                  "product_id": "apache2-worker-2.4.66-150600.5.52.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-manual-2.4.66-150600.5.52.1.noarch",
                "product": {
                  "name": "apache2-manual-2.4.66-150600.5.52.1.noarch",
                  "product_id": "apache2-manual-2.4.66-150600.5.52.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-2.4.66-150600.5.52.1.ppc64le",
                "product": {
                  "name": "apache2-2.4.66-150600.5.52.1.ppc64le",
                  "product_id": "apache2-2.4.66-150600.5.52.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-devel-2.4.66-150600.5.52.1.ppc64le",
                "product": {
                  "name": "apache2-devel-2.4.66-150600.5.52.1.ppc64le",
                  "product_id": "apache2-devel-2.4.66-150600.5.52.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-event-2.4.66-150600.5.52.1.ppc64le",
                "product": {
                  "name": "apache2-event-2.4.66-150600.5.52.1.ppc64le",
                  "product_id": "apache2-event-2.4.66-150600.5.52.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
                "product": {
                  "name": "apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
                  "product_id": "apache2-prefork-2.4.66-150600.5.52.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-utils-2.4.66-150600.5.52.1.ppc64le",
                "product": {
                  "name": "apache2-utils-2.4.66-150600.5.52.1.ppc64le",
                  "product_id": "apache2-utils-2.4.66-150600.5.52.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-worker-2.4.66-150600.5.52.1.ppc64le",
                "product": {
                  "name": "apache2-worker-2.4.66-150600.5.52.1.ppc64le",
                  "product_id": "apache2-worker-2.4.66-150600.5.52.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-2.4.66-150600.5.52.1.s390x",
                "product": {
                  "name": "apache2-2.4.66-150600.5.52.1.s390x",
                  "product_id": "apache2-2.4.66-150600.5.52.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-devel-2.4.66-150600.5.52.1.s390x",
                "product": {
                  "name": "apache2-devel-2.4.66-150600.5.52.1.s390x",
                  "product_id": "apache2-devel-2.4.66-150600.5.52.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-event-2.4.66-150600.5.52.1.s390x",
                "product": {
                  "name": "apache2-event-2.4.66-150600.5.52.1.s390x",
                  "product_id": "apache2-event-2.4.66-150600.5.52.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-prefork-2.4.66-150600.5.52.1.s390x",
                "product": {
                  "name": "apache2-prefork-2.4.66-150600.5.52.1.s390x",
                  "product_id": "apache2-prefork-2.4.66-150600.5.52.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-utils-2.4.66-150600.5.52.1.s390x",
                "product": {
                  "name": "apache2-utils-2.4.66-150600.5.52.1.s390x",
                  "product_id": "apache2-utils-2.4.66-150600.5.52.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-worker-2.4.66-150600.5.52.1.s390x",
                "product": {
                  "name": "apache2-worker-2.4.66-150600.5.52.1.s390x",
                  "product_id": "apache2-worker-2.4.66-150600.5.52.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-2.4.66-150600.5.52.1.x86_64",
                "product": {
                  "name": "apache2-2.4.66-150600.5.52.1.x86_64",
                  "product_id": "apache2-2.4.66-150600.5.52.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-devel-2.4.66-150600.5.52.1.x86_64",
                "product": {
                  "name": "apache2-devel-2.4.66-150600.5.52.1.x86_64",
                  "product_id": "apache2-devel-2.4.66-150600.5.52.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-event-2.4.66-150600.5.52.1.x86_64",
                "product": {
                  "name": "apache2-event-2.4.66-150600.5.52.1.x86_64",
                  "product_id": "apache2-event-2.4.66-150600.5.52.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-prefork-2.4.66-150600.5.52.1.x86_64",
                "product": {
                  "name": "apache2-prefork-2.4.66-150600.5.52.1.x86_64",
                  "product_id": "apache2-prefork-2.4.66-150600.5.52.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-utils-2.4.66-150600.5.52.1.x86_64",
                "product": {
                  "name": "apache2-utils-2.4.66-150600.5.52.1.x86_64",
                  "product_id": "apache2-utils-2.4.66-150600.5.52.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-worker-2.4.66-150600.5.52.1.x86_64",
                "product": {
                  "name": "apache2-worker-2.4.66-150600.5.52.1.x86_64",
                  "product_id": "apache2-worker-2.4.66-150600.5.52.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:15:sp6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:15:sp6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-2.4.66-150600.5.52.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64"
        },
        "product_reference": "apache2-2.4.66-150600.5.52.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-2.4.66-150600.5.52.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le"
        },
        "product_reference": "apache2-2.4.66-150600.5.52.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-2.4.66-150600.5.52.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x"
        },
        "product_reference": "apache2-2.4.66-150600.5.52.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-2.4.66-150600.5.52.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64"
        },
        "product_reference": "apache2-2.4.66-150600.5.52.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-devel-2.4.66-150600.5.52.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64"
        },
        "product_reference": "apache2-devel-2.4.66-150600.5.52.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-devel-2.4.66-150600.5.52.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le"
        },
        "product_reference": "apache2-devel-2.4.66-150600.5.52.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-devel-2.4.66-150600.5.52.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x"
        },
        "product_reference": "apache2-devel-2.4.66-150600.5.52.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-devel-2.4.66-150600.5.52.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64"
        },
        "product_reference": "apache2-devel-2.4.66-150600.5.52.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-manual-2.4.66-150600.5.52.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch"
        },
        "product_reference": "apache2-manual-2.4.66-150600.5.52.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-prefork-2.4.66-150600.5.52.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64"
        },
        "product_reference": "apache2-prefork-2.4.66-150600.5.52.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-prefork-2.4.66-150600.5.52.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le"
        },
        "product_reference": "apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-prefork-2.4.66-150600.5.52.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x"
        },
        "product_reference": "apache2-prefork-2.4.66-150600.5.52.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-prefork-2.4.66-150600.5.52.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64"
        },
        "product_reference": "apache2-prefork-2.4.66-150600.5.52.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-utils-2.4.66-150600.5.52.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64"
        },
        "product_reference": "apache2-utils-2.4.66-150600.5.52.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-utils-2.4.66-150600.5.52.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le"
        },
        "product_reference": "apache2-utils-2.4.66-150600.5.52.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-utils-2.4.66-150600.5.52.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x"
        },
        "product_reference": "apache2-utils-2.4.66-150600.5.52.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-utils-2.4.66-150600.5.52.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64"
        },
        "product_reference": "apache2-utils-2.4.66-150600.5.52.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-worker-2.4.66-150600.5.52.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64"
        },
        "product_reference": "apache2-worker-2.4.66-150600.5.52.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-worker-2.4.66-150600.5.52.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le"
        },
        "product_reference": "apache2-worker-2.4.66-150600.5.52.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-worker-2.4.66-150600.5.52.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x"
        },
        "product_reference": "apache2-worker-2.4.66-150600.5.52.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-worker-2.4.66-150600.5.52.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64"
        },
        "product_reference": "apache2-worker-2.4.66-150600.5.52.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-2.4.66-150600.5.52.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le"
        },
        "product_reference": "apache2-2.4.66-150600.5.52.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-2.4.66-150600.5.52.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64"
        },
        "product_reference": "apache2-2.4.66-150600.5.52.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-devel-2.4.66-150600.5.52.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le"
        },
        "product_reference": "apache2-devel-2.4.66-150600.5.52.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-devel-2.4.66-150600.5.52.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64"
        },
        "product_reference": "apache2-devel-2.4.66-150600.5.52.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-manual-2.4.66-150600.5.52.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch"
        },
        "product_reference": "apache2-manual-2.4.66-150600.5.52.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-prefork-2.4.66-150600.5.52.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le"
        },
        "product_reference": "apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-prefork-2.4.66-150600.5.52.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64"
        },
        "product_reference": "apache2-prefork-2.4.66-150600.5.52.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-utils-2.4.66-150600.5.52.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le"
        },
        "product_reference": "apache2-utils-2.4.66-150600.5.52.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-utils-2.4.66-150600.5.52.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64"
        },
        "product_reference": "apache2-utils-2.4.66-150600.5.52.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-worker-2.4.66-150600.5.52.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le"
        },
        "product_reference": "apache2-worker-2.4.66-150600.5.52.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-worker-2.4.66-150600.5.52.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
        },
        "product_reference": "apache2-worker-2.4.66-150600.5.52.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-23918",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-23918"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.\n\nThis issue affects Apache HTTP Server: 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-23918",
          "url": "https://www.suse.com/security/cve/CVE-2026-23918"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263957 for CVE-2026-23918",
          "url": "https://bugzilla.suse.com/1263957"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-28T12:34:09Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-23918"
    },
    {
      "cve": "CVE-2026-24072",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-24072"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes this issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-24072",
          "url": "https://www.suse.com/security/cve/CVE-2026-24072"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263935 for CVE-2026-24072",
          "url": "https://bugzilla.suse.com/1263935"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-28T12:34:09Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-24072"
    },
    {
      "cve": "CVE-2026-28780",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-28780"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server.\nIf mod_proxy_ajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to mod_proxy_ajp and cause it to write 4 attacker controlled bytes after the end of a heap based buffer.\n\nThis issue affects Apache HTTP Server: through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-28780",
          "url": "https://www.suse.com/security/cve/CVE-2026-28780"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264163 for CVE-2026-28780",
          "url": "https://bugzilla.suse.com/1264163"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-28T12:34:09Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-28780"
    },
    {
      "cve": "CVE-2026-29168",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-29168"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server\u0027s   mod_md via OCSP response data.\n\nThis issue affects Apache HTTP Server: from 2.4.30 through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-29168",
          "url": "https://www.suse.com/security/cve/CVE-2026-29168"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264150 for CVE-2026-29168",
          "url": "https://bugzilla.suse.com/1264150"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-28T12:34:09Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-29168"
    },
    {
      "cve": "CVE-2026-29169",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-29169"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.mod_dav_lock is not used internally by mod_dav or mod_dav_fs.\n\nThe only known use-case for mod_dav_lock was mod_dav_svn from Apache Subversion earlier than version 1.2.0.\n\nUsers are recommended to upgrade to version 2.4.66, which fixes this issue, or remove mod_dav_lock.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-29169",
          "url": "https://www.suse.com/security/cve/CVE-2026-29169"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263956 for CVE-2026-29169",
          "url": "https://bugzilla.suse.com/1263956"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-28T12:34:09Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-29169"
    },
    {
      "cve": "CVE-2026-33006",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33006"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A timing attack against mod_auth_digest in Apache HTTP Server 2.4.66 allows a bypass of Digest authentication by a remote attacker.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes this issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33006",
          "url": "https://www.suse.com/security/cve/CVE-2026-33006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263955 for CVE-2026-33006",
          "url": "https://bugzilla.suse.com/1263955"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-28T12:34:09Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33006"
    },
    {
      "cve": "CVE-2026-33007",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33007"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A NULL pointer dereference in the mod_authn_socache in Apache HTTP Server 2.4.66 and earlier allows an unauthenticated remote user to crash a child process in a caching forward proxy configuration.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes this issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33007",
          "url": "https://www.suse.com/security/cve/CVE-2026-33007"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263954 for CVE-2026-33007",
          "url": "https://bugzilla.suse.com/1263954"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-28T12:34:09Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-33007"
    },
    {
      "cve": "CVE-2026-33523",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33523"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untrusted or compromised backend servers.\n\nThis issue affects Apache HTTP Server: from through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33523",
          "url": "https://www.suse.com/security/cve/CVE-2026-33523"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263953 for CVE-2026-33523",
          "url": "https://bugzilla.suse.com/1263953"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-28T12:34:09Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33523"
    },
    {
      "cve": "CVE-2026-33857",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33857"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out-of-bounds Read vulnerability in mod_proxy_ajp of \n\nApache HTTP Server.\n\nThis issue affects Apache HTTP Server: through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33857",
          "url": "https://www.suse.com/security/cve/CVE-2026-33857"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263952 for CVE-2026-33857",
          "url": "https://bugzilla.suse.com/1263952"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-28T12:34:09Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-33857"
    },
    {
      "cve": "CVE-2026-34032",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-34032"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.\n\nThis issue affects Apache HTTP Server: through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-34032",
          "url": "https://www.suse.com/security/cve/CVE-2026-34032"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263951 for CVE-2026-34032",
          "url": "https://bugzilla.suse.com/1263951"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-28T12:34:09Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-34032"
    },
    {
      "cve": "CVE-2026-34059",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-34059"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Buffer Over-read vulnerability in Apache HTTP Server.\n\nThis issue affects Apache HTTP Server: through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-34059",
          "url": "https://www.suse.com/security/cve/CVE-2026-34059"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263950 for CVE-2026-34059",
          "url": "https://bugzilla.suse.com/1263950"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-worker-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-devel-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-manual-2.4.66-150600.5.52.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-prefork-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-utils-2.4.66-150600.5.52.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-worker-2.4.66-150600.5.52.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-28T12:34:09Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-34059"
    }
  ]
}