{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8375A8C8-38EB-4F32-97FD-0841D57C1971",
              "versionEndIncluding": "2.4.46",
              "versionStartIncluding": "2.4.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
              "matchCriteriaId": "A930E247-0B43-43CB-98FF-6CE7B8189835",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
              "matchCriteriaId": "80E516C0-98A4-4ADE-B69F-66A772E2BAAA",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "B095CC03-7077-4A58-AB25-CC5380CDCE5A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "82EA4BA7-C38B-4AF3-8914-9E3D089EBDD4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "B9C9BC66-FA5F-4774-9BDA-7AB88E2839C4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F69B9A5-F21B-4904-9F27-95C0F7A628E3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:secure_backup:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C01E8B82-71C7-4A4A-A70A-7B147524AB4A",
              "versionEndExcluding": "18.1.0.1.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "D3E503FB-6279-4D4A-91D8-E237ECF9D2B0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5C2089EE-5D7F-47EC-8EA5-0F69790564C4",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow"
    },
    {
      "lang": "es",
      "value": "Apache HTTP Server versiones 2.4.0 a 2.4.46 , un par\u00e1metro SessionHeader especialmente dise\u00f1ado enviado por un servidor de origen podr\u00eda causar un desbordamiento de pila"
    }
  ],
  "id": "CVE-2021-26691",
  "lastModified": "2024-11-21T05:56:41.067",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2021-06-10T07:15:07.580",
  "references": [
    {
      "source": "security@apache.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://httpd.apache.org/security/vulnerabilities_24.html"
    },
    {
      "source": "security@apache.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2021/06/10/7"
    },
    {
      "source": "security@apache.org",
      "url": "https://lists.apache.org/thread.html/r50cae1b71f1e7421069036b213c26da7d8f47dd59874e3bd956959fe%40%3Cannounce.httpd.apache.org%3E"
    },
    {
      "source": "security@apache.org",
      "url": "https://lists.apache.org/thread.html/r7f2b70b621651548f4b6f027552f1dd91705d7111bb5d15cda0a68dd%40%3Cdev.httpd.apache.org%3E"
    },
    {
      "source": "security@apache.org",
      "tags": [
        "Mailing List",
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://lists.apache.org/thread.html/re026d3da9d7824bd93b9f871c0fdda978d960c7e62d8c43cba8d0bf3%40%3Ccvs.httpd.apache.org%3E"
    },
    {
      "source": "security@apache.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00006.html"
    },
    {
      "source": "security@apache.org",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/"
    },
    {
      "source": "security@apache.org",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/"
    },
    {
      "source": "security@apache.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.gentoo.org/glsa/202107-38"
    },
    {
      "source": "security@apache.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.netapp.com/advisory/ntap-20210702-0001/"
    },
    {
      "source": "security@apache.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "https://www.debian.org/security/2021/dsa-4937"
    },
    {
      "source": "security@apache.org",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://www.oracle.com/security-alerts/cpujan2022.html"
    },
    {
      "source": "security@apache.org",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://httpd.apache.org/security/vulnerabilities_24.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2021/06/10/7"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.apache.org/thread.html/r50cae1b71f1e7421069036b213c26da7d8f47dd59874e3bd956959fe%40%3Cannounce.httpd.apache.org%3E"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.apache.org/thread.html/r7f2b70b621651548f4b6f027552f1dd91705d7111bb5d15cda0a68dd%40%3Cdev.httpd.apache.org%3E"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://lists.apache.org/thread.html/re026d3da9d7824bd93b9f871c0fdda978d960c7e62d8c43cba8d0bf3%40%3Ccvs.httpd.apache.org%3E"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00006.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.gentoo.org/glsa/202107-38"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.netapp.com/advisory/ntap-20210702-0001/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "https://www.debian.org/security/2021/dsa-4937"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://www.oracle.com/security-alerts/cpujan2022.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
    }
  ],
  "sourceIdentifier": "security@apache.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-122"
        }
      ],
      "source": "security@apache.org",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2021-26691"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-787"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2021-06-10T07:15:00Z",
    "severity": "CRITICAL"
  },
  "details": "In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow",
  "id": "GHSA-j3ww-p97m-gh9x",
  "modified": "2022-05-24T19:04:55Z",
  "published": "2022-05-24T19:04:55Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26691"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r50cae1b71f1e7421069036b213c26da7d8f47dd59874e3bd956959fe@%3Cannounce.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r7f2b70b621651548f4b6f027552f1dd91705d7111bb5d15cda0a68dd@%3Cdev.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/re026d3da9d7824bd93b9f871c0fdda978d960c7e62d8c43cba8d0bf3%40%3Ccvs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00006.html"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R"
    },
    {
      "type": "WEB",
      "url": "https://security.gentoo.org/glsa/202107-38"
    },
    {
      "type": "WEB",
      "url": "https://security.netapp.com/advisory/ntap-20210702-0001"
    },
    {
      "type": "WEB",
      "url": "https://www.debian.org/security/2021/dsa-4937"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/security-alerts/cpujan2022.html"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
    },
    {
      "type": "WEB",
      "url": "http://httpd.apache.org/security/vulnerabilities_24.html"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2021/06/10/7"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2021-26691",
    "description": "In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow",
    "id": "GSD-2021-26691",
    "references": [
      "https://www.suse.com/security/cve/CVE-2021-26691.html",
      "https://www.debian.org/security/2021/dsa-4937",
      "https://access.redhat.com/errata/RHSA-2022:0143",
      "https://access.redhat.com/errata/RHSA-2021:4614",
      "https://access.redhat.com/errata/RHSA-2021:4613",
      "https://access.redhat.com/errata/RHSA-2021:3816",
      "https://ubuntu.com/security/CVE-2021-26691",
      "https://advisories.mageia.org/CVE-2021-26691.html",
      "https://security.archlinux.org/CVE-2021-26691",
      "https://alas.aws.amazon.com/cve/html/CVE-2021-26691.html",
      "https://linux.oracle.com/cve/CVE-2021-26691.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2021-26691"
      ],
      "details": "In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow",
      "id": "GSD-2021-26691",
      "modified": "2023-12-13T01:23:33.087974Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security@apache.org",
        "ID": "CVE-2021-26691",
        "STATE": "PUBLIC",
        "TITLE": "Apache HTTP Server mod_session response handling heap overflow"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Apache HTTP Server",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.46"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.43"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.41"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.39"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.38"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.37"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.35"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.34"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.33"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.29"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.28"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.27"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.26"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.25"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.23"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.20"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.18"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.17"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.16"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.12"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.10"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.9"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.7"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.6"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.4"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.3"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.2"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.1"
                        },
                        {
                          "version_affected": "=",
                          "version_name": "2.4",
                          "version_value": "2.4.0"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Apache Software Foundation"
            }
          ]
        }
      },
      "credit": [
        {
          "lang": "eng",
          "value": "Discovered internally Christophe Jaillet"
        }
      ],
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow"
          }
        ]
      },
      "generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "impact": [
        {
          "other": "low"
        }
      ],
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "CWE-122 Heap-based Buffer Overflow"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://httpd.apache.org/security/vulnerabilities_24.html",
            "refsource": "MISC",
            "url": "http://httpd.apache.org/security/vulnerabilities_24.html"
          },
          {
            "name": "https://lists.apache.org/thread.html/re026d3da9d7824bd93b9f871c0fdda978d960c7e62d8c43cba8d0bf3%40%3Ccvs.httpd.apache.org%3E",
            "refsource": "MISC",
            "url": "https://lists.apache.org/thread.html/re026d3da9d7824bd93b9f871c0fdda978d960c7e62d8c43cba8d0bf3%40%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-announce] 20210609 CVE-2021-26691: mod_session response handling heap overflow",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/r50cae1b71f1e7421069036b213c26da7d8f47dd59874e3bd956959fe@%3Cannounce.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-dev] 20210610 Re: svn commit: r1890598 - in /httpd/site/trunk/content/security/json: CVE-2019-17567.json CVE-2020-13938.json CVE-2020-13950.json CVE-2020-35452.json CVE-2021-26690.json CVE-2021-26691.json CVE-2021-30641.json CVE-2021-31618.json",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/r7f2b70b621651548f4b6f027552f1dd91705d7111bb5d15cda0a68dd@%3Cdev.httpd.apache.org%3E"
          },
          {
            "name": "[oss-security] 20210609 CVE-2021-26691: Apache httpd: mod_session response handling heap overflow",
            "refsource": "MLIST",
            "url": "http://www.openwall.com/lists/oss-security/2021/06/10/7"
          },
          {
            "name": "[debian-lts-announce] 20210709 [SECURITY] [DLA 2706-1] apache2 security update",
            "refsource": "MLIST",
            "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00006.html"
          },
          {
            "name": "DSA-4937",
            "refsource": "DEBIAN",
            "url": "https://www.debian.org/security/2021/dsa-4937"
          },
          {
            "name": "GLSA-202107-38",
            "refsource": "GENTOO",
            "url": "https://security.gentoo.org/glsa/202107-38"
          },
          {
            "name": "FEDORA-2021-dce7e7738e",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/"
          },
          {
            "name": "FEDORA-2021-e3f6dd670d",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/"
          },
          {
            "name": "https://www.oracle.com/security-alerts/cpuoct2021.html",
            "refsource": "MISC",
            "url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
          },
          {
            "name": "https://security.netapp.com/advisory/ntap-20210702-0001/",
            "refsource": "CONFIRM",
            "url": "https://security.netapp.com/advisory/ntap-20210702-0001/"
          },
          {
            "name": "https://www.oracle.com/security-alerts/cpujan2022.html",
            "refsource": "MISC",
            "url": "https://www.oracle.com/security-alerts/cpujan2022.html"
          }
        ]
      },
      "source": {
        "discovery": "UNKNOWN"
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "2.4.46",
                "versionStartIncluding": "2.4.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:secure_backup:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "18.1.0.1.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "security@apache.org",
          "ID": "CVE-2021-26691"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-787"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "N/A",
              "refsource": "CONFIRM",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://httpd.apache.org/security/vulnerabilities_24.html"
            },
            {
              "name": "N/A",
              "refsource": "CONFIRM",
              "tags": [
                "Mailing List",
                "Release Notes",
                "Vendor Advisory"
              ],
              "url": "https://lists.apache.org/thread.html/re026d3da9d7824bd93b9f871c0fdda978d960c7e62d8c43cba8d0bf3%40%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-dev] 20210610 Re: svn commit: r1890598 - in /httpd/site/trunk/content/security/json: CVE-2019-17567.json CVE-2020-13938.json CVE-2020-13950.json CVE-2020-35452.json CVE-2021-26690.json CVE-2021-26691.json CVE-2021-30641.json CVE-2021-31618.json",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Vendor Advisory"
              ],
              "url": "https://lists.apache.org/thread.html/r7f2b70b621651548f4b6f027552f1dd91705d7111bb5d15cda0a68dd@%3Cdev.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-announce] 20210609 CVE-2021-26691: mod_session response handling heap overflow",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Vendor Advisory"
              ],
              "url": "https://lists.apache.org/thread.html/r50cae1b71f1e7421069036b213c26da7d8f47dd59874e3bd956959fe@%3Cannounce.httpd.apache.org%3E"
            },
            {
              "name": "[oss-security] 20210609 CVE-2021-26691: Apache httpd: mod_session response handling heap overflow",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://www.openwall.com/lists/oss-security/2021/06/10/7"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20210702-0001/",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://security.netapp.com/advisory/ntap-20210702-0001/"
            },
            {
              "name": "[debian-lts-announce] 20210709 [SECURITY] [DLA 2706-1] apache2 security update",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00006.html"
            },
            {
              "name": "DSA-4937",
              "refsource": "DEBIAN",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://www.debian.org/security/2021/dsa-4937"
            },
            {
              "name": "GLSA-202107-38",
              "refsource": "GENTOO",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://security.gentoo.org/glsa/202107-38"
            },
            {
              "name": "FEDORA-2021-dce7e7738e",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/"
            },
            {
              "name": "FEDORA-2021-e3f6dd670d",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuoct2021.html",
              "refsource": "MISC",
              "tags": [
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpujan2022.html",
              "refsource": "MISC",
              "tags": [
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://www.oracle.com/security-alerts/cpujan2022.html"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2022-03-25T18:32Z",
      "publishedDate": "2021-06-10T07:15Z"
    }
  }
}

{
  "document": {
    "acknowledgments": [
      {
        "organization": "Mitsubishi Electric",
        "summary": "notifying CISA of these vulnerabilities"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://us-cert.cisa.gov/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov",
        "title": "CISA Disclaimer"
      },
      {
        "category": "legal_disclaimer",
        "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
        "title": "Legal Notice"
      },
      {
        "category": "summary",
        "text": "Successful exploitation of these vulnerabilities could result in a denial-of-service condition, malicious program execution, information disclosure, information tampering, or authentication bypass.",
        "title": "Risk evaluation"
      },
      {
        "category": "other",
        "text": "Critical Manufacturing",
        "title": "Critical infrastructure sectors"
      },
      {
        "category": "other",
        "text": "Worldwide",
        "title": "Countries/areas deployed"
      },
      {
        "category": "other",
        "text": "Japan",
        "title": "Company headquarters location"
      },
      {
        "category": "general",
        "text": "CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.\nCISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage on cisa.gov in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.\nOrganizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      },
      {
        "category": "other",
        "text": "No known public exploits specifically target these vulnerabilities.",
        "title": "Exploitability"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-22-132-02 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2022/icsa-22-132-02.json"
      },
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-22-132-02 Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-22-132-02"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
      }
    ],
    "title": "Mitsubishi Electric MELSOFT iQ AppPortal",
    "tracking": {
      "current_release_date": "2022-05-12T00:00:00.000000Z",
      "generator": {
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSA-22-132-02",
      "initial_release_date": "2022-05-12T00:00:00.000000Z",
      "revision_history": [
        {
          "date": "2022-05-12T00:00:00.000000Z",
          "legacy_version": "Initial",
          "number": "1",
          "summary": "ICSA-22-132-02 Mitsubishi Electric MELSOFT iQ AppPortal"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e= 1.00A | \u003c= 1.26C",
                "product": {
                  "name": "MELSOFT iQ AppPortal (SW1DND-IQAPL-M): Versions 1.00A through 1.26C",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "MELSOFT iQ AppPortal (SW1DND-IQAPL-M)"
          }
        ],
        "category": "vendor",
        "name": "Mitsubishi Electric"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-13938",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Apache HTTP Server Versions 2.4.0 to 2.4.46 allow unprivileged local users to stop httpd on Windows.CVE-2020-13938 has been assigned to this vulnerability. A CVSS v3 base score of 5.5 has been assigned; the CVSS vector string is (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-13938"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Update to 1.29F or later. Unzip the downloaded file (zip format) and execute the file \u201csetup.exe.\u201d",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.mitsubishielectric.com/fa/#software"
        },
        {
          "category": "mitigation",
          "details": "Restrict network access to the computer running this product so it can be accessed only from trusted networks or hosts.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "Minimize user privilege for product users.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "Install an antivirus software in the personal computer that runs this product.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "Please follow the safety precautions in the operating manual for the product.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "For more information see Mitsubishi Electric\u0027s advisory 2022-003",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-003_en.pdf"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-26691",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "In Apache HTTP Server Versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow.CVE-2021-26691 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-26691"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Update to 1.29F or later. Unzip the downloaded file (zip format) and execute the file \u201csetup.exe.\u201d",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.mitsubishielectric.com/fa/#software"
        },
        {
          "category": "mitigation",
          "details": "Restrict network access to the computer running this product so it can be accessed only from trusted networks or hosts.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "Minimize user privilege for product users.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "Install an antivirus software in the personal computer that runs this product.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "Please follow the safety precautions in the operating manual for the product.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "For more information see Mitsubishi Electric\u0027s advisory 2022-003",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-003_en.pdf"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-34798",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server Versions 2.4.48 and earlier.CVE-2021-34798 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-34798"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Update to 1.29F or later. Unzip the downloaded file (zip format) and execute the file \u201csetup.exe.\u201d",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.mitsubishielectric.com/fa/#software"
        },
        {
          "category": "mitigation",
          "details": "Restrict network access to the computer running this product so it can be accessed only from trusted networks or hosts.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "Minimize user privilege for product users.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "Install an antivirus software in the personal computer that runs this product.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "Please follow the safety precautions in the operating manual for the product.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "For more information see Mitsubishi Electric\u0027s advisory 2022-003",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-003_en.pdf"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-3711",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An attacker who can present SM2 content for decryption to an application could cause data to overflow the buffer up to a maximum of 62 bytes, altering the contents of other data held after the buffer or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1 (Affected 1.1.1-1.1.1k). This issue is detailed further in CVE-2021-3711.CVE-2021-3711 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-3711"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Update to 1.29F or later. Unzip the downloaded file (zip format) and execute the file \u201csetup.exe.\u201d",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.mitsubishielectric.com/fa/#software"
        },
        {
          "category": "mitigation",
          "details": "Restrict network access to the computer running this product so it can be accessed only from trusted networks or hosts.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "Minimize user privilege for product users.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "Install an antivirus software in the personal computer that runs this product.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "Please follow the safety precautions in the operating manual for the product.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "For more information see Mitsubishi Electric\u0027s advisory 2022-003",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-003_en.pdf"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2021-44790",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for this vulnerability, though it might be possible to craft one. This issue affects Apache HTTP Server Versions 2.4.51 and earlier.CVE-2021-44790 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-44790"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Update to 1.29F or later. Unzip the downloaded file (zip format) and execute the file \u201csetup.exe.\u201d",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.mitsubishielectric.com/fa/#software"
        },
        {
          "category": "mitigation",
          "details": "Restrict network access to the computer running this product so it can be accessed only from trusted networks or hosts.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "Minimize user privilege for product users.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "Install an antivirus software in the personal computer that runs this product.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "Please follow the safety precautions in the operating manual for the product.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "For more information see Mitsubishi Electric\u0027s advisory 2022-003",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-003_en.pdf"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-22720",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Apache HTTP Server Versions 2.4.52 and earlier fail to close inbound connections when errors are encountered discarding the request body, exposing the server to HTTP request smuggling.CVE-2022-22720 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-22720"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Update to 1.29F or later. Unzip the downloaded file (zip format) and execute the file \u201csetup.exe.\u201d",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.mitsubishielectric.com/fa/#software"
        },
        {
          "category": "mitigation",
          "details": "Restrict network access to the computer running this product so it can be accessed only from trusted networks or hosts.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "Minimize user privilege for product users.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "Install an antivirus software in the personal computer that runs this product.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "Please follow the safety precautions in the operating manual for the product.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "For more information see Mitsubishi Electric\u0027s advisory 2022-003",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-003_en.pdf"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-23943",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An out-of-bounds write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 Versions 2.4.52 and earlier.CVE-2022-23943 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-23943"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Update to 1.29F or later. Unzip the downloaded file (zip format) and execute the file \u201csetup.exe.\u201d",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.mitsubishielectric.com/fa/#software"
        },
        {
          "category": "mitigation",
          "details": "Restrict network access to the computer running this product so it can be accessed only from trusted networks or hosts.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "Minimize user privilege for product users.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "Install an antivirus software in the personal computer that runs this product.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "Please follow the safety precautions in the operating manual for the product.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "For more information see Mitsubishi Electric\u0027s advisory 2022-003",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-003_en.pdf"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2022-0778",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop for non-prime moduli. An attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue, which is further detailed in CVE-2022-0778, affects OpenSSL Versions 1.0.2, 1.1.1, and 3.0.xxxCVE-2022-0778 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-0778"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Update to 1.29F or later. Unzip the downloaded file (zip format) and execute the file \u201csetup.exe.\u201d",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.mitsubishielectric.com/fa/#software"
        },
        {
          "category": "mitigation",
          "details": "Restrict network access to the computer running this product so it can be accessed only from trusted networks or hosts.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "Minimize user privilege for product users.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "Install an antivirus software in the personal computer that runs this product.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "Please follow the safety precautions in the operating manual for the product.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "For more information see Mitsubishi Electric\u0027s advisory 2022-003",
          "product_ids": [
            "CSAFPID-0001"
          ],
          "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-003_en.pdf"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001"
          ]
        }
      ]
    }
  ]
}

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2021-26691 Apache HTTP Server mod_session response handling heap overflow - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2021/msrc_cve-2021-26691.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Apache HTTP Server mod_session response handling heap overflow",
    "tracking": {
      "current_release_date": "2021-12-16T00:00:00.000Z",
      "generator": {
        "date": "2025-12-27T18:48:22.354Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2021-26691",
      "initial_release_date": "2021-06-02T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2021-06-23T00:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        },
        {
          "date": "2021-12-16T00:00:00.000Z",
          "legacy_version": "1.1",
          "number": "2",
          "summary": "Added httpd to CBL-Mariner 2.0"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "1.0",
                "product": {
                  "name": "CBL Mariner 1.0",
                  "product_id": "16820"
                }
              },
              {
                "category": "product_version",
                "name": "2.0",
                "product": {
                  "name": "CBL Mariner 2.0",
                  "product_id": "17086"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003ccm1 httpd 2.4.46-5",
                "product": {
                  "name": "\u003ccm1 httpd 2.4.46-5",
                  "product_id": "2"
                }
              },
              {
                "category": "product_version",
                "name": "cm1 httpd 2.4.46-5",
                "product": {
                  "name": "cm1 httpd 2.4.46-5",
                  "product_id": "19037"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 httpd 2.4.46-10",
                "product": {
                  "name": "\u003ccbl2 httpd 2.4.46-10",
                  "product_id": "1"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 httpd 2.4.46-10",
                "product": {
                  "name": "cbl2 httpd 2.4.46-10",
                  "product_id": "19038"
                }
              }
            ],
            "category": "product_name",
            "name": "httpd"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccm1 httpd 2.4.46-5 as a component of CBL Mariner 1.0",
          "product_id": "16820-2"
        },
        "product_reference": "2",
        "relates_to_product_reference": "16820"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cm1 httpd 2.4.46-5 as a component of CBL Mariner 1.0",
          "product_id": "19037-16820"
        },
        "product_reference": "19037",
        "relates_to_product_reference": "16820"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 httpd 2.4.46-10 as a component of CBL Mariner 2.0",
          "product_id": "17086-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 httpd 2.4.46-10 as a component of CBL Mariner 2.0",
          "product_id": "19038-17086"
        },
        "product_reference": "19038",
        "relates_to_product_reference": "17086"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-26691",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "general",
          "text": "apache",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "fixed": [
          "19037-16820",
          "19038-17086"
        ],
        "known_affected": [
          "16820-2",
          "17086-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2021-26691 Apache HTTP Server mod_session response handling heap overflow - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2021/msrc_cve-2021-26691.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-06-23T00:00:00.000Z",
          "details": "2.4.46-5:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "16820-2"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2021-06-23T00:00:00.000Z",
          "details": "2.4.46-10:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17086-1"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "environmentalsScore": 0.0,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 9.8,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "16820-2",
            "17086-1"
          ]
        }
      ],
      "title": "Apache HTTP Server mod_session response handling heap overflow"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for apache2",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for apache2 fixes the following issues:\n\n- fixed CVE-2021-30641 [bsc#1187174]: MergeSlashes regression\n- fixed CVE-2021-31618 [bsc#1186924]: NULL pointer dereference on specially crafted HTTP/2 request\n- fixed CVE-2020-13950 [bsc#1187040]: mod_proxy NULL pointer dereference\n- fixed CVE-2020-35452 [bsc#1186922]: Single zero byte stack overflow in mod_auth_digest \n- fixed CVE-2021-26690 [bsc#1186923]: mod_session NULL pointer dereference in parser\n- fixed CVE-2021-26691 [bsc#1187017]: Heap overflow in mod_session\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2021-908",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_0908-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2021:0908-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F32WQ7K6A45WOBEDFMGMRXDC2F2SL3IF/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2021:0908-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F32WQ7K6A45WOBEDFMGMRXDC2F2SL3IF/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1186922",
        "url": "https://bugzilla.suse.com/1186922"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1186923",
        "url": "https://bugzilla.suse.com/1186923"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1186924",
        "url": "https://bugzilla.suse.com/1186924"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1187017",
        "url": "https://bugzilla.suse.com/1187017"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1187040",
        "url": "https://bugzilla.suse.com/1187040"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1187174",
        "url": "https://bugzilla.suse.com/1187174"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-13950 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-13950/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-35452 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-35452/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-26690 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-26690/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-26691 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-26691/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-30641 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-30641/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-31618 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-31618/"
      }
    ],
    "title": "Security update for apache2",
    "tracking": {
      "current_release_date": "2021-06-24T09:52:47Z",
      "generator": {
        "date": "2021-06-24T09:52:47Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2021:0908-1",
      "initial_release_date": "2021-06-24T09:52:47Z",
      "revision_history": [
        {
          "date": "2021-06-24T09:52:47Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-2.4.43-lp152.2.15.1.i586",
                "product": {
                  "name": "apache2-2.4.43-lp152.2.15.1.i586",
                  "product_id": "apache2-2.4.43-lp152.2.15.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-devel-2.4.43-lp152.2.15.1.i586",
                "product": {
                  "name": "apache2-devel-2.4.43-lp152.2.15.1.i586",
                  "product_id": "apache2-devel-2.4.43-lp152.2.15.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-event-2.4.43-lp152.2.15.1.i586",
                "product": {
                  "name": "apache2-event-2.4.43-lp152.2.15.1.i586",
                  "product_id": "apache2-event-2.4.43-lp152.2.15.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-example-pages-2.4.43-lp152.2.15.1.i586",
                "product": {
                  "name": "apache2-example-pages-2.4.43-lp152.2.15.1.i586",
                  "product_id": "apache2-example-pages-2.4.43-lp152.2.15.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-prefork-2.4.43-lp152.2.15.1.i586",
                "product": {
                  "name": "apache2-prefork-2.4.43-lp152.2.15.1.i586",
                  "product_id": "apache2-prefork-2.4.43-lp152.2.15.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-utils-2.4.43-lp152.2.15.1.i586",
                "product": {
                  "name": "apache2-utils-2.4.43-lp152.2.15.1.i586",
                  "product_id": "apache2-utils-2.4.43-lp152.2.15.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-worker-2.4.43-lp152.2.15.1.i586",
                "product": {
                  "name": "apache2-worker-2.4.43-lp152.2.15.1.i586",
                  "product_id": "apache2-worker-2.4.43-lp152.2.15.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-doc-2.4.43-lp152.2.15.1.noarch",
                "product": {
                  "name": "apache2-doc-2.4.43-lp152.2.15.1.noarch",
                  "product_id": "apache2-doc-2.4.43-lp152.2.15.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-2.4.43-lp152.2.15.1.x86_64",
                "product": {
                  "name": "apache2-2.4.43-lp152.2.15.1.x86_64",
                  "product_id": "apache2-2.4.43-lp152.2.15.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-devel-2.4.43-lp152.2.15.1.x86_64",
                "product": {
                  "name": "apache2-devel-2.4.43-lp152.2.15.1.x86_64",
                  "product_id": "apache2-devel-2.4.43-lp152.2.15.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-event-2.4.43-lp152.2.15.1.x86_64",
                "product": {
                  "name": "apache2-event-2.4.43-lp152.2.15.1.x86_64",
                  "product_id": "apache2-event-2.4.43-lp152.2.15.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-example-pages-2.4.43-lp152.2.15.1.x86_64",
                "product": {
                  "name": "apache2-example-pages-2.4.43-lp152.2.15.1.x86_64",
                  "product_id": "apache2-example-pages-2.4.43-lp152.2.15.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-prefork-2.4.43-lp152.2.15.1.x86_64",
                "product": {
                  "name": "apache2-prefork-2.4.43-lp152.2.15.1.x86_64",
                  "product_id": "apache2-prefork-2.4.43-lp152.2.15.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-utils-2.4.43-lp152.2.15.1.x86_64",
                "product": {
                  "name": "apache2-utils-2.4.43-lp152.2.15.1.x86_64",
                  "product_id": "apache2-utils-2.4.43-lp152.2.15.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-worker-2.4.43-lp152.2.15.1.x86_64",
                "product": {
                  "name": "apache2-worker-2.4.43-lp152.2.15.1.x86_64",
                  "product_id": "apache2-worker-2.4.43-lp152.2.15.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.2",
                "product": {
                  "name": "openSUSE Leap 15.2",
                  "product_id": "openSUSE Leap 15.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-2.4.43-lp152.2.15.1.i586 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.i586"
        },
        "product_reference": "apache2-2.4.43-lp152.2.15.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-2.4.43-lp152.2.15.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.x86_64"
        },
        "product_reference": "apache2-2.4.43-lp152.2.15.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-devel-2.4.43-lp152.2.15.1.i586 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.i586"
        },
        "product_reference": "apache2-devel-2.4.43-lp152.2.15.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-devel-2.4.43-lp152.2.15.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.x86_64"
        },
        "product_reference": "apache2-devel-2.4.43-lp152.2.15.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-doc-2.4.43-lp152.2.15.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:apache2-doc-2.4.43-lp152.2.15.1.noarch"
        },
        "product_reference": "apache2-doc-2.4.43-lp152.2.15.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-event-2.4.43-lp152.2.15.1.i586 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.i586"
        },
        "product_reference": "apache2-event-2.4.43-lp152.2.15.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-event-2.4.43-lp152.2.15.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.x86_64"
        },
        "product_reference": "apache2-event-2.4.43-lp152.2.15.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-example-pages-2.4.43-lp152.2.15.1.i586 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.i586"
        },
        "product_reference": "apache2-example-pages-2.4.43-lp152.2.15.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-example-pages-2.4.43-lp152.2.15.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.x86_64"
        },
        "product_reference": "apache2-example-pages-2.4.43-lp152.2.15.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-prefork-2.4.43-lp152.2.15.1.i586 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.i586"
        },
        "product_reference": "apache2-prefork-2.4.43-lp152.2.15.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-prefork-2.4.43-lp152.2.15.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.x86_64"
        },
        "product_reference": "apache2-prefork-2.4.43-lp152.2.15.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-utils-2.4.43-lp152.2.15.1.i586 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.i586"
        },
        "product_reference": "apache2-utils-2.4.43-lp152.2.15.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-utils-2.4.43-lp152.2.15.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.x86_64"
        },
        "product_reference": "apache2-utils-2.4.43-lp152.2.15.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-worker-2.4.43-lp152.2.15.1.i586 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.i586"
        },
        "product_reference": "apache2-worker-2.4.43-lp152.2.15.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-worker-2.4.43-lp152.2.15.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.x86_64"
        },
        "product_reference": "apache2-worker-2.4.43-lp152.2.15.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-13950",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-13950"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers, leading to a Denial of Service",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-doc-2.4.43-lp152.2.15.1.noarch",
          "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-13950",
          "url": "https://www.suse.com/security/cve/CVE-2020-13950"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1187040 for CVE-2020-13950",
          "url": "https://bugzilla.suse.com/1187040"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-doc-2.4.43-lp152.2.15.1.noarch",
            "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-doc-2.4.43-lp152.2.15.1.noarch",
            "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-06-24T09:52:47Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-13950"
    },
    {
      "cve": "CVE-2020-35452",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-35452"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP Server team could create one, though some particular compiler and/or compilation option might make it possible, with limited consequences anyway due to the size (a single byte) and the value (zero byte) of the overflow",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-doc-2.4.43-lp152.2.15.1.noarch",
          "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-35452",
          "url": "https://www.suse.com/security/cve/CVE-2020-35452"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1186922 for CVE-2020-35452",
          "url": "https://bugzilla.suse.com/1186922"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1187933 for CVE-2020-35452",
          "url": "https://bugzilla.suse.com/1187933"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-doc-2.4.43-lp152.2.15.1.noarch",
            "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-doc-2.4.43-lp152.2.15.1.noarch",
            "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-06-24T09:52:47Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-35452"
    },
    {
      "cve": "CVE-2021-26690",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-26690"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL pointer dereference and crash, leading to a possible Denial Of Service",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-doc-2.4.43-lp152.2.15.1.noarch",
          "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-26690",
          "url": "https://www.suse.com/security/cve/CVE-2021-26690"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1186923 for CVE-2021-26690",
          "url": "https://bugzilla.suse.com/1186923"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1187933 for CVE-2021-26690",
          "url": "https://bugzilla.suse.com/1187933"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-doc-2.4.43-lp152.2.15.1.noarch",
            "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-doc-2.4.43-lp152.2.15.1.noarch",
            "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-06-24T09:52:47Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-26690"
    },
    {
      "cve": "CVE-2021-26691",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-26691"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-doc-2.4.43-lp152.2.15.1.noarch",
          "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-26691",
          "url": "https://www.suse.com/security/cve/CVE-2021-26691"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1187017 for CVE-2021-26691",
          "url": "https://bugzilla.suse.com/1187017"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1187933 for CVE-2021-26691",
          "url": "https://bugzilla.suse.com/1187933"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-doc-2.4.43-lp152.2.15.1.noarch",
            "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-doc-2.4.43-lp152.2.15.1.noarch",
            "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-06-24T09:52:47Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-26691"
    },
    {
      "cve": "CVE-2021-30641",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-30641"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with \u0027MergeSlashes OFF\u0027",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-doc-2.4.43-lp152.2.15.1.noarch",
          "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-30641",
          "url": "https://www.suse.com/security/cve/CVE-2021-30641"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1187174 for CVE-2021-30641",
          "url": "https://bugzilla.suse.com/1187174"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-doc-2.4.43-lp152.2.15.1.noarch",
            "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-doc-2.4.43-lp152.2.15.1.noarch",
            "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-06-24T09:52:47Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-30641"
    },
    {
      "cve": "CVE-2021-31618",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-31618"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Apache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations as configured for the server and used for the HTTP/1 protocol as well. On violation of these restrictions and HTTP response is sent to the client with a status code indicating why the request was rejected. This rejection response was not fully initialised in the HTTP/2 protocol handler if the offending header was the very first one received or appeared in a a footer. This led to a NULL pointer dereference on initialised memory, crashing reliably the child process. Since such a triggering HTTP/2 request is easy to craft and submit, this can be exploited to DoS the server. This issue affected mod_http2 1.15.17 and Apache HTTP Server version 2.4.47 only. Apache HTTP Server 2.4.47 was never released.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-doc-2.4.43-lp152.2.15.1.noarch",
          "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.x86_64",
          "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.i586",
          "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-31618",
          "url": "https://www.suse.com/security/cve/CVE-2021-31618"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1186924 for CVE-2021-31618",
          "url": "https://bugzilla.suse.com/1186924"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1187933 for CVE-2021-31618",
          "url": "https://bugzilla.suse.com/1187933"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-doc-2.4.43-lp152.2.15.1.noarch",
            "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-devel-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-doc-2.4.43-lp152.2.15.1.noarch",
            "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-event-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-example-pages-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-prefork-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-utils-2.4.43-lp152.2.15.1.x86_64",
            "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.i586",
            "openSUSE Leap 15.2:apache2-worker-2.4.43-lp152.2.15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-06-24T09:52:47Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-31618"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for apache2",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for apache2 fixes the following issues:\n\n- fixed CVE-2021-30641 [bsc#1187174]: MergeSlashes regression\n- fixed CVE-2021-31618 [bsc#1186924]: NULL pointer dereference on specially crafted HTTP/2 request\n- fixed CVE-2020-13950 [bsc#1187040]: mod_proxy NULL pointer dereference\n- fixed CVE-2020-35452 [bsc#1186922]: Single zero byte stack overflow in mod_auth_digest \n- fixed CVE-2021-26690 [bsc#1186923]: mod_session NULL pointer dereference in parser\n- fixed CVE-2021-26691 [bsc#1187017]: Heap overflow in mod_session\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-SLE-15.3-2021-2127",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_2127-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2021:2127-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KAQGPGA6ZQQT3VO5WOYFSSTZFH57MPWK/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2021:2127-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KAQGPGA6ZQQT3VO5WOYFSSTZFH57MPWK/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1186922",
        "url": "https://bugzilla.suse.com/1186922"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1186923",
        "url": "https://bugzilla.suse.com/1186923"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1186924",
        "url": "https://bugzilla.suse.com/1186924"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1187017",
        "url": "https://bugzilla.suse.com/1187017"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1187040",
        "url": "https://bugzilla.suse.com/1187040"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1187174",
        "url": "https://bugzilla.suse.com/1187174"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-13950 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-13950/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-35452 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-35452/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-26690 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-26690/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-26691 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-26691/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-30641 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-30641/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-31618 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-31618/"
      }
    ],
    "title": "Security update for apache2",
    "tracking": {
      "current_release_date": "2021-07-10T13:52:30Z",
      "generator": {
        "date": "2021-07-10T13:52:30Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2021:2127-1",
      "initial_release_date": "2021-07-10T13:52:30Z",
      "revision_history": [
        {
          "date": "2021-07-10T13:52:30Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-2.4.43-3.22.1.aarch64",
                "product": {
                  "name": "apache2-2.4.43-3.22.1.aarch64",
                  "product_id": "apache2-2.4.43-3.22.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-devel-2.4.43-3.22.1.aarch64",
                "product": {
                  "name": "apache2-devel-2.4.43-3.22.1.aarch64",
                  "product_id": "apache2-devel-2.4.43-3.22.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-event-2.4.43-3.22.1.aarch64",
                "product": {
                  "name": "apache2-event-2.4.43-3.22.1.aarch64",
                  "product_id": "apache2-event-2.4.43-3.22.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-example-pages-2.4.43-3.22.1.aarch64",
                "product": {
                  "name": "apache2-example-pages-2.4.43-3.22.1.aarch64",
                  "product_id": "apache2-example-pages-2.4.43-3.22.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-prefork-2.4.43-3.22.1.aarch64",
                "product": {
                  "name": "apache2-prefork-2.4.43-3.22.1.aarch64",
                  "product_id": "apache2-prefork-2.4.43-3.22.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-utils-2.4.43-3.22.1.aarch64",
                "product": {
                  "name": "apache2-utils-2.4.43-3.22.1.aarch64",
                  "product_id": "apache2-utils-2.4.43-3.22.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-worker-2.4.43-3.22.1.aarch64",
                "product": {
                  "name": "apache2-worker-2.4.43-3.22.1.aarch64",
                  "product_id": "apache2-worker-2.4.43-3.22.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-doc-2.4.43-3.22.1.noarch",
                "product": {
                  "name": "apache2-doc-2.4.43-3.22.1.noarch",
                  "product_id": "apache2-doc-2.4.43-3.22.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-2.4.43-3.22.1.ppc64le",
                "product": {
                  "name": "apache2-2.4.43-3.22.1.ppc64le",
                  "product_id": "apache2-2.4.43-3.22.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-devel-2.4.43-3.22.1.ppc64le",
                "product": {
                  "name": "apache2-devel-2.4.43-3.22.1.ppc64le",
                  "product_id": "apache2-devel-2.4.43-3.22.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-event-2.4.43-3.22.1.ppc64le",
                "product": {
                  "name": "apache2-event-2.4.43-3.22.1.ppc64le",
                  "product_id": "apache2-event-2.4.43-3.22.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-example-pages-2.4.43-3.22.1.ppc64le",
                "product": {
                  "name": "apache2-example-pages-2.4.43-3.22.1.ppc64le",
                  "product_id": "apache2-example-pages-2.4.43-3.22.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-prefork-2.4.43-3.22.1.ppc64le",
                "product": {
                  "name": "apache2-prefork-2.4.43-3.22.1.ppc64le",
                  "product_id": "apache2-prefork-2.4.43-3.22.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-utils-2.4.43-3.22.1.ppc64le",
                "product": {
                  "name": "apache2-utils-2.4.43-3.22.1.ppc64le",
                  "product_id": "apache2-utils-2.4.43-3.22.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-worker-2.4.43-3.22.1.ppc64le",
                "product": {
                  "name": "apache2-worker-2.4.43-3.22.1.ppc64le",
                  "product_id": "apache2-worker-2.4.43-3.22.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-2.4.43-3.22.1.s390x",
                "product": {
                  "name": "apache2-2.4.43-3.22.1.s390x",
                  "product_id": "apache2-2.4.43-3.22.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-devel-2.4.43-3.22.1.s390x",
                "product": {
                  "name": "apache2-devel-2.4.43-3.22.1.s390x",
                  "product_id": "apache2-devel-2.4.43-3.22.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-event-2.4.43-3.22.1.s390x",
                "product": {
                  "name": "apache2-event-2.4.43-3.22.1.s390x",
                  "product_id": "apache2-event-2.4.43-3.22.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-example-pages-2.4.43-3.22.1.s390x",
                "product": {
                  "name": "apache2-example-pages-2.4.43-3.22.1.s390x",
                  "product_id": "apache2-example-pages-2.4.43-3.22.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-prefork-2.4.43-3.22.1.s390x",
                "product": {
                  "name": "apache2-prefork-2.4.43-3.22.1.s390x",
                  "product_id": "apache2-prefork-2.4.43-3.22.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-utils-2.4.43-3.22.1.s390x",
                "product": {
                  "name": "apache2-utils-2.4.43-3.22.1.s390x",
                  "product_id": "apache2-utils-2.4.43-3.22.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-worker-2.4.43-3.22.1.s390x",
                "product": {
                  "name": "apache2-worker-2.4.43-3.22.1.s390x",
                  "product_id": "apache2-worker-2.4.43-3.22.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "apache2-2.4.43-3.22.1.x86_64",
                "product": {
                  "name": "apache2-2.4.43-3.22.1.x86_64",
                  "product_id": "apache2-2.4.43-3.22.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-devel-2.4.43-3.22.1.x86_64",
                "product": {
                  "name": "apache2-devel-2.4.43-3.22.1.x86_64",
                  "product_id": "apache2-devel-2.4.43-3.22.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-event-2.4.43-3.22.1.x86_64",
                "product": {
                  "name": "apache2-event-2.4.43-3.22.1.x86_64",
                  "product_id": "apache2-event-2.4.43-3.22.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-example-pages-2.4.43-3.22.1.x86_64",
                "product": {
                  "name": "apache2-example-pages-2.4.43-3.22.1.x86_64",
                  "product_id": "apache2-example-pages-2.4.43-3.22.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-prefork-2.4.43-3.22.1.x86_64",
                "product": {
                  "name": "apache2-prefork-2.4.43-3.22.1.x86_64",
                  "product_id": "apache2-prefork-2.4.43-3.22.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-utils-2.4.43-3.22.1.x86_64",
                "product": {
                  "name": "apache2-utils-2.4.43-3.22.1.x86_64",
                  "product_id": "apache2-utils-2.4.43-3.22.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "apache2-worker-2.4.43-3.22.1.x86_64",
                "product": {
                  "name": "apache2-worker-2.4.43-3.22.1.x86_64",
                  "product_id": "apache2-worker-2.4.43-3.22.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.3",
                "product": {
                  "name": "openSUSE Leap 15.3",
                  "product_id": "openSUSE Leap 15.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-2.4.43-3.22.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.aarch64"
        },
        "product_reference": "apache2-2.4.43-3.22.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-2.4.43-3.22.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.ppc64le"
        },
        "product_reference": "apache2-2.4.43-3.22.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-2.4.43-3.22.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.s390x"
        },
        "product_reference": "apache2-2.4.43-3.22.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-2.4.43-3.22.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.x86_64"
        },
        "product_reference": "apache2-2.4.43-3.22.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-devel-2.4.43-3.22.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.aarch64"
        },
        "product_reference": "apache2-devel-2.4.43-3.22.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-devel-2.4.43-3.22.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.ppc64le"
        },
        "product_reference": "apache2-devel-2.4.43-3.22.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-devel-2.4.43-3.22.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.s390x"
        },
        "product_reference": "apache2-devel-2.4.43-3.22.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-devel-2.4.43-3.22.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.x86_64"
        },
        "product_reference": "apache2-devel-2.4.43-3.22.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-doc-2.4.43-3.22.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-doc-2.4.43-3.22.1.noarch"
        },
        "product_reference": "apache2-doc-2.4.43-3.22.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-event-2.4.43-3.22.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.aarch64"
        },
        "product_reference": "apache2-event-2.4.43-3.22.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-event-2.4.43-3.22.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.ppc64le"
        },
        "product_reference": "apache2-event-2.4.43-3.22.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-event-2.4.43-3.22.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.s390x"
        },
        "product_reference": "apache2-event-2.4.43-3.22.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-event-2.4.43-3.22.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.x86_64"
        },
        "product_reference": "apache2-event-2.4.43-3.22.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-example-pages-2.4.43-3.22.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.aarch64"
        },
        "product_reference": "apache2-example-pages-2.4.43-3.22.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-example-pages-2.4.43-3.22.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.ppc64le"
        },
        "product_reference": "apache2-example-pages-2.4.43-3.22.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-example-pages-2.4.43-3.22.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.s390x"
        },
        "product_reference": "apache2-example-pages-2.4.43-3.22.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-example-pages-2.4.43-3.22.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.x86_64"
        },
        "product_reference": "apache2-example-pages-2.4.43-3.22.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-prefork-2.4.43-3.22.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.aarch64"
        },
        "product_reference": "apache2-prefork-2.4.43-3.22.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-prefork-2.4.43-3.22.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.ppc64le"
        },
        "product_reference": "apache2-prefork-2.4.43-3.22.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-prefork-2.4.43-3.22.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.s390x"
        },
        "product_reference": "apache2-prefork-2.4.43-3.22.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-prefork-2.4.43-3.22.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.x86_64"
        },
        "product_reference": "apache2-prefork-2.4.43-3.22.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-utils-2.4.43-3.22.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.aarch64"
        },
        "product_reference": "apache2-utils-2.4.43-3.22.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-utils-2.4.43-3.22.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.ppc64le"
        },
        "product_reference": "apache2-utils-2.4.43-3.22.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-utils-2.4.43-3.22.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.s390x"
        },
        "product_reference": "apache2-utils-2.4.43-3.22.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-utils-2.4.43-3.22.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.x86_64"
        },
        "product_reference": "apache2-utils-2.4.43-3.22.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-worker-2.4.43-3.22.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.aarch64"
        },
        "product_reference": "apache2-worker-2.4.43-3.22.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-worker-2.4.43-3.22.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.ppc64le"
        },
        "product_reference": "apache2-worker-2.4.43-3.22.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-worker-2.4.43-3.22.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.s390x"
        },
        "product_reference": "apache2-worker-2.4.43-3.22.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache2-worker-2.4.43-3.22.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.x86_64"
        },
        "product_reference": "apache2-worker-2.4.43-3.22.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-13950",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-13950"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers, leading to a Denial of Service",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-doc-2.4.43-3.22.1.noarch",
          "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-13950",
          "url": "https://www.suse.com/security/cve/CVE-2020-13950"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1187040 for CVE-2020-13950",
          "url": "https://bugzilla.suse.com/1187040"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-doc-2.4.43-3.22.1.noarch",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-doc-2.4.43-3.22.1.noarch",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-07-10T13:52:30Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-13950"
    },
    {
      "cve": "CVE-2020-35452",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-35452"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP Server team could create one, though some particular compiler and/or compilation option might make it possible, with limited consequences anyway due to the size (a single byte) and the value (zero byte) of the overflow",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-doc-2.4.43-3.22.1.noarch",
          "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-35452",
          "url": "https://www.suse.com/security/cve/CVE-2020-35452"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1186922 for CVE-2020-35452",
          "url": "https://bugzilla.suse.com/1186922"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1187933 for CVE-2020-35452",
          "url": "https://bugzilla.suse.com/1187933"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-doc-2.4.43-3.22.1.noarch",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-doc-2.4.43-3.22.1.noarch",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-07-10T13:52:30Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-35452"
    },
    {
      "cve": "CVE-2021-26690",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-26690"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL pointer dereference and crash, leading to a possible Denial Of Service",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-doc-2.4.43-3.22.1.noarch",
          "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-26690",
          "url": "https://www.suse.com/security/cve/CVE-2021-26690"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1186923 for CVE-2021-26690",
          "url": "https://bugzilla.suse.com/1186923"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1187933 for CVE-2021-26690",
          "url": "https://bugzilla.suse.com/1187933"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-doc-2.4.43-3.22.1.noarch",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-doc-2.4.43-3.22.1.noarch",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-07-10T13:52:30Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-26690"
    },
    {
      "cve": "CVE-2021-26691",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-26691"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-doc-2.4.43-3.22.1.noarch",
          "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-26691",
          "url": "https://www.suse.com/security/cve/CVE-2021-26691"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1187017 for CVE-2021-26691",
          "url": "https://bugzilla.suse.com/1187017"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1187933 for CVE-2021-26691",
          "url": "https://bugzilla.suse.com/1187933"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-doc-2.4.43-3.22.1.noarch",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-doc-2.4.43-3.22.1.noarch",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-07-10T13:52:30Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-26691"
    },
    {
      "cve": "CVE-2021-30641",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-30641"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with \u0027MergeSlashes OFF\u0027",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-doc-2.4.43-3.22.1.noarch",
          "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-30641",
          "url": "https://www.suse.com/security/cve/CVE-2021-30641"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1187174 for CVE-2021-30641",
          "url": "https://bugzilla.suse.com/1187174"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-doc-2.4.43-3.22.1.noarch",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-doc-2.4.43-3.22.1.noarch",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-07-10T13:52:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-30641"
    },
    {
      "cve": "CVE-2021-31618",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-31618"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Apache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations as configured for the server and used for the HTTP/1 protocol as well. On violation of these restrictions and HTTP response is sent to the client with a status code indicating why the request was rejected. This rejection response was not fully initialised in the HTTP/2 protocol handler if the offending header was the very first one received or appeared in a a footer. This led to a NULL pointer dereference on initialised memory, crashing reliably the child process. Since such a triggering HTTP/2 request is easy to craft and submit, this can be exploited to DoS the server. This issue affected mod_http2 1.15.17 and Apache HTTP Server version 2.4.47 only. Apache HTTP Server 2.4.47 was never released.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-doc-2.4.43-3.22.1.noarch",
          "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.x86_64",
          "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.aarch64",
          "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.ppc64le",
          "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.s390x",
          "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-31618",
          "url": "https://www.suse.com/security/cve/CVE-2021-31618"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1186924 for CVE-2021-31618",
          "url": "https://bugzilla.suse.com/1186924"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1187933 for CVE-2021-31618",
          "url": "https://bugzilla.suse.com/1187933"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-doc-2.4.43-3.22.1.noarch",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-devel-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-doc-2.4.43-3.22.1.noarch",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-event-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-example-pages-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-prefork-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-utils-2.4.43-3.22.1.x86_64",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.aarch64",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.ppc64le",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.s390x",
            "openSUSE Leap 15.3:apache2-worker-2.4.43-3.22.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-07-10T13:52:30Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-31618"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.\n\nSecurity Fix(es):\n\n* httpd: mod_proxy: SSRF via a crafted request uri-path containing \"unix:\" (CVE-2021-40438)\n\n* httpd: mod_session: Heap overflow via a crafted SessionHeader value (CVE-2021-26691)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2021:3816",
        "url": "https://access.redhat.com/errata/RHSA-2021:3816"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1966732",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1966732"
      },
      {
        "category": "external",
        "summary": "2005117",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2005117"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3816.json"
      }
    ],
    "title": "Red Hat Security Advisory: httpd:2.4 security update",
    "tracking": {
      "current_release_date": "2026-05-14T22:31:33+00:00",
      "generator": {
        "date": "2026-05-14T22:31:33+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.0"
        }
      },
      "id": "RHSA-2021:3816",
      "initial_release_date": "2021-10-12T16:30:28+00:00",
      "revision_history": [
        {
          "date": "2021-10-12T16:30:28+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2021-10-12T16:30:29+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-05-14T22:31:33+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.4.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                "product": {
                  "name": "httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4)",
                  "product_id": "httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=aarch64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4)",
                  "product_id": "httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=aarch64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                "product": {
                  "name": "httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4)",
                  "product_id": "httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=aarch64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                "product": {
                  "name": "httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4)",
                  "product_id": "httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=aarch64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                "product": {
                  "name": "httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4)",
                  "product_id": "httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=aarch64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4)",
                  "product_id": "httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=aarch64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64 (httpd:2.4)",
                  "product_id": "mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2@1.15.7-3.module%2Bel8.4.0%2B8625%2Bd397f3da?arch=aarch64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64 (httpd:2.4)",
                  "product_id": "mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debuginfo@1.15.7-3.module%2Bel8.4.0%2B8625%2Bd397f3da?arch=aarch64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64 (httpd:2.4)",
                  "product_id": "mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debugsource@1.15.7-3.module%2Bel8.4.0%2B8625%2Bd397f3da?arch=aarch64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4)",
                  "product_id": "mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=aarch64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4)",
                  "product_id": "mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=aarch64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64 (httpd:2.4)",
                  "product_id": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=aarch64\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64 (httpd:2.4)",
                  "product_id": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debuginfo@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=aarch64\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64 (httpd:2.4)",
                  "product_id": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debugsource@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=aarch64\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4)",
                  "product_id": "mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=aarch64\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4)",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=aarch64\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4)",
                  "product_id": "mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=aarch64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4)",
                  "product_id": "mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=aarch64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4)",
                  "product_id": "mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=aarch64\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4)",
                  "product_id": "mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=aarch64\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.src::httpd:2.4",
                "product": {
                  "name": "httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.src (httpd:2.4)",
                  "product_id": "httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.src::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=src\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.src::httpd:2.4",
                "product": {
                  "name": "mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.src (httpd:2.4)",
                  "product_id": "mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.src::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2@1.15.7-3.module%2Bel8.4.0%2B8625%2Bd397f3da?arch=src\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src::httpd:2.4",
                "product": {
                  "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src (httpd:2.4)",
                  "product_id": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=src\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-filesystem-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch::httpd:2.4",
                "product": {
                  "name": "httpd-filesystem-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch (httpd:2.4)",
                  "product_id": "httpd-filesystem-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-filesystem@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=noarch\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-manual-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch::httpd:2.4",
                "product": {
                  "name": "httpd-manual-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch (httpd:2.4)",
                  "product_id": "httpd-manual-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-manual@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=noarch\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                "product": {
                  "name": "httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4)",
                  "product_id": "httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=ppc64le\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4)",
                  "product_id": "httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=ppc64le\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                "product": {
                  "name": "httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4)",
                  "product_id": "httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=ppc64le\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                "product": {
                  "name": "httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4)",
                  "product_id": "httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=ppc64le\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                "product": {
                  "name": "httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4)",
                  "product_id": "httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=ppc64le\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4)",
                  "product_id": "httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=ppc64le\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le (httpd:2.4)",
                  "product_id": "mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2@1.15.7-3.module%2Bel8.4.0%2B8625%2Bd397f3da?arch=ppc64le\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le (httpd:2.4)",
                  "product_id": "mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debuginfo@1.15.7-3.module%2Bel8.4.0%2B8625%2Bd397f3da?arch=ppc64le\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le (httpd:2.4)",
                  "product_id": "mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debugsource@1.15.7-3.module%2Bel8.4.0%2B8625%2Bd397f3da?arch=ppc64le\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4)",
                  "product_id": "mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=ppc64le\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4)",
                  "product_id": "mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=ppc64le\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le (httpd:2.4)",
                  "product_id": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=ppc64le\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le (httpd:2.4)",
                  "product_id": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debuginfo@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=ppc64le\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le (httpd:2.4)",
                  "product_id": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debugsource@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=ppc64le\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4)",
                  "product_id": "mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=ppc64le\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4)",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=ppc64le\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4)",
                  "product_id": "mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=ppc64le\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4)",
                  "product_id": "mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=ppc64le\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4)",
                  "product_id": "mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=ppc64le\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4)",
                  "product_id": "mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=ppc64le\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                "product": {
                  "name": "httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4)",
                  "product_id": "httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=s390x\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4)",
                  "product_id": "httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=s390x\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                "product": {
                  "name": "httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4)",
                  "product_id": "httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=s390x\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                "product": {
                  "name": "httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4)",
                  "product_id": "httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=s390x\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                "product": {
                  "name": "httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4)",
                  "product_id": "httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=s390x\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4)",
                  "product_id": "httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=s390x\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
                "product": {
                  "name": "mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x (httpd:2.4)",
                  "product_id": "mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2@1.15.7-3.module%2Bel8.4.0%2B8625%2Bd397f3da?arch=s390x\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
                "product": {
                  "name": "mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x (httpd:2.4)",
                  "product_id": "mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debuginfo@1.15.7-3.module%2Bel8.4.0%2B8625%2Bd397f3da?arch=s390x\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
                "product": {
                  "name": "mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x (httpd:2.4)",
                  "product_id": "mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debugsource@1.15.7-3.module%2Bel8.4.0%2B8625%2Bd397f3da?arch=s390x\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                "product": {
                  "name": "mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4)",
                  "product_id": "mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=s390x\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4)",
                  "product_id": "mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=s390x\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
                "product": {
                  "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x (httpd:2.4)",
                  "product_id": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=s390x\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
                "product": {
                  "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x (httpd:2.4)",
                  "product_id": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debuginfo@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=s390x\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
                "product": {
                  "name": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x (httpd:2.4)",
                  "product_id": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debugsource@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=s390x\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                "product": {
                  "name": "mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4)",
                  "product_id": "mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=s390x\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4)",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=s390x\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                "product": {
                  "name": "mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4)",
                  "product_id": "mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=s390x\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4)",
                  "product_id": "mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=s390x\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                "product": {
                  "name": "mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4)",
                  "product_id": "mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=s390x\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4)",
                  "product_id": "mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=s390x\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                "product": {
                  "name": "httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4)",
                  "product_id": "httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=x86_64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4)",
                  "product_id": "httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=x86_64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                "product": {
                  "name": "httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4)",
                  "product_id": "httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=x86_64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                "product": {
                  "name": "httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4)",
                  "product_id": "httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=x86_64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                "product": {
                  "name": "httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4)",
                  "product_id": "httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=x86_64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4)",
                  "product_id": "httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=x86_64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64 (httpd:2.4)",
                  "product_id": "mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2@1.15.7-3.module%2Bel8.4.0%2B8625%2Bd397f3da?arch=x86_64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64 (httpd:2.4)",
                  "product_id": "mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debuginfo@1.15.7-3.module%2Bel8.4.0%2B8625%2Bd397f3da?arch=x86_64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64 (httpd:2.4)",
                  "product_id": "mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debugsource@1.15.7-3.module%2Bel8.4.0%2B8625%2Bd397f3da?arch=x86_64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4)",
                  "product_id": "mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=x86_64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4)",
                  "product_id": "mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=x86_64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64 (httpd:2.4)",
                  "product_id": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=x86_64\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64 (httpd:2.4)",
                  "product_id": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debuginfo@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=x86_64\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64 (httpd:2.4)",
                  "product_id": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debugsource@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=x86_64\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4)",
                  "product_id": "mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=x86_64\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4)",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=x86_64\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4)",
                  "product_id": "mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=x86_64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4)",
                  "product_id": "mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=x86_64\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4)",
                  "product_id": "mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=x86_64\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4)",
                  "product_id": "mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.37-39.module%2Bel8.4.0%2B12865%2Ba7065a39.1?arch=x86_64\u0026epoch=1\u0026rpmmod=httpd:2.4:8040020211008164252:522a0ee4"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4"
        },
        "product_reference": "httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4"
        },
        "product_reference": "httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4"
        },
        "product_reference": "httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.src (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.src::httpd:2.4"
        },
        "product_reference": "httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.src::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4"
        },
        "product_reference": "httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4"
        },
        "product_reference": "httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4"
        },
        "product_reference": "httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4"
        },
        "product_reference": "httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4"
        },
        "product_reference": "httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4"
        },
        "product_reference": "httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4"
        },
        "product_reference": "httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4"
        },
        "product_reference": "httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4"
        },
        "product_reference": "httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4"
        },
        "product_reference": "httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4"
        },
        "product_reference": "httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4"
        },
        "product_reference": "httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4"
        },
        "product_reference": "httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-filesystem-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch::httpd:2.4"
        },
        "product_reference": "httpd-filesystem-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-manual-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-manual-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch::httpd:2.4"
        },
        "product_reference": "httpd-manual-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4"
        },
        "product_reference": "httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4"
        },
        "product_reference": "httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4"
        },
        "product_reference": "httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4"
        },
        "product_reference": "httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4"
        },
        "product_reference": "mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4"
        },
        "product_reference": "mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.src (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.src::httpd:2.4"
        },
        "product_reference": "mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.src::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4"
        },
        "product_reference": "mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4"
        },
        "product_reference": "mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4"
        },
        "product_reference": "mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4"
        },
        "product_reference": "mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4"
        },
        "product_reference": "mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4"
        },
        "product_reference": "mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4"
        },
        "product_reference": "mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4"
        },
        "product_reference": "mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4"
        },
        "product_reference": "mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4"
        },
        "product_reference": "mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4"
        },
        "product_reference": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4"
        },
        "product_reference": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src::httpd:2.4"
        },
        "product_reference": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4"
        },
        "product_reference": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4"
        },
        "product_reference": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4"
        },
        "product_reference": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4"
        },
        "product_reference": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4"
        },
        "product_reference": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4"
        },
        "product_reference": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4"
        },
        "product_reference": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4"
        },
        "product_reference": "mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4"
        },
        "product_reference": "mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4"
        },
        "product_reference": "mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4"
        },
        "product_reference": "mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4"
        },
        "product_reference": "mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4"
        },
        "product_reference": "mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4"
        },
        "product_reference": "mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4"
        },
        "product_reference": "mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4"
        },
        "product_reference": "mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.4.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "the Apache project",
            "Christophe Jaillet"
          ]
        }
      ],
      "cve": "CVE-2021-26691",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2021-05-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1966732"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A heap overflow flaw was found In Apache httpd mod_session. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_session: Heap overflow via a crafted SessionHeader value",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw can result in a crash of the httpd child process when mod_session is used.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.src::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-manual-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.src::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-26691"
        },
        {
          "category": "external",
          "summary": "RHBZ#1966732",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1966732"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-26691",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-26691"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-26691",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26691"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2021-06-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-10-12T16:30:28+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.src::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-manual-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.src::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:3816"
        },
        {
          "category": "workaround",
          "details": "Only configurations which use the \"SessionEnv\" directive (which is not widely used) are vulnerable to this flaw. SessionEnv is not enabled in default configuration of httpd package shipped with Red Hat Products.",
          "product_ids": [
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.src::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-manual-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.src::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.src::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-manual-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.src::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_session: Heap overflow via a crafted SessionHeader value"
    },
    {
      "cve": "CVE-2021-40438",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2021-09-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2005117"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A Server-Side Request Forgery (SSRF) flaw was found in mod_proxy of httpd. This flaw allows a remote, unauthenticated attacker to make the httpd server forward requests to an arbitrary server. The attacker could get, modify, or delete resources on other services that may be behind a firewall and inaccessible otherwise. The impact of this flaw varies based on what services and resources are available on the httpd network.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_proxy: SSRF via a crafted request uri-path containing \"unix:\"",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Impact of the flaw set to Important because the actions an attacker can do varies a lot based on the kind of infrastructure in place, the kind of internal services and resources, and the available endpoints on those services. The attacker should also perform some kind of target-specific reconnaissance in order to find out all the above information.\n\nThe version of httpd as shipped in Red Hat Enterprise Linux 7 is affected by this flaw even if the upstream code was not, because the Unix Domain Socket support required to trigger the flaw was backported.\nThe version of httpd as shipped in Red hat Enterprise Linux 6 is not affected by this flaw because there is no support for Unix Domain Socket.\n\nThe flaw can be triggered only if mod_proxy is in use (e.g. ProxyPass, ReverseProxy is used in the httpd configuration files).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.src::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-manual-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.src::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
          "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-40438"
        },
        {
          "category": "external",
          "summary": "RHBZ#2005117",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2005117"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-40438",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-40438"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-40438",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-40438"
        },
        {
          "category": "external",
          "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        }
      ],
      "release_date": "2021-09-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-10-12T16:30:28+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.src::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-manual-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.src::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:3816"
        },
        {
          "category": "workaround",
          "details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
          "product_ids": [
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.src::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-manual-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.src::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.0,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.src::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-manual-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.noarch::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.src::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-3.module+el8.4.0+8625+d397f3da.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.aarch64::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.ppc64le::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.s390x::httpd:2.4",
            "AppStream-8.4.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-39.module+el8.4.0+12865+a7065a39.1.x86_64::httpd:2.4"
          ]
        }
      ],
      "threats": [
        {
          "category": "exploit_status",
          "date": "2021-12-01T00:00:00+00:00",
          "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        },
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "httpd: mod_proxy: SSRF via a crafted request uri-path containing \"unix:\""
    }
  ]
}