<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:cvrf="http://www.icasi.org/CVRF/schema/cvrf/1.1">
  <DocumentTitle xml:lang="en">Security update for apache2</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2024:1788-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2024-05-27T13:27:12Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2024-05-27T13:27:12Z</InitialReleaseDate>
    <CurrentReleaseDate>2024-05-27T13:27:12Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for apache2</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update for apache2 fixes the following issues:

- CVE-2023-38709: Fixed faulty input validation inside the HTTP response splitting code (bsc#1222330).
- CVE-2024-24795: Fixed handling of malicious HTTP splitting response headers in multiple modules (bsc#1222332).
- CVE-2024-27316: Fixed HTTP/2 CONTINUATION frames that could have been utilized for DoS attacks (bsc#1221401).
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">Image SLES15-SP3-SAPCAL-Azure-2024-1788,Image SLES15-SP3-SAPCAL-EC2-HVM-2024-1788,Image SLES15-SP3-SAPCAL-GCE-2024-1788,SUSE-2024-1788,SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-1788,SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1788,SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-1788,SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1788,SUSE-SLE-Product-SLES_SAP-15-SP2-2024-1788,SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1788,SUSE-Storage-7.1-2024-1788</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2024/suse-su-20241788-1/</URL>
      <Description>Link for SUSE-SU-2024:1788-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-updates/2024-May/035366.html</URL>
      <Description>E-Mail link for SUSE-SU-2024:1788-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1221401</URL>
      <Description>SUSE Bug 1221401</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1222330</URL>
      <Description>SUSE Bug 1222330</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1222332</URL>
      <Description>SUSE Bug 1222332</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2023-38709/</URL>
      <Description>SUSE CVE CVE-2023-38709 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2024-24795/</URL>
      <Description>SUSE CVE CVE-2024-24795 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2024-27316/</URL>
      <Description>SUSE CVE CVE-2024-27316 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://www.icasi.org/CVRF/schema/prod/1.1">
    <Branch Type="Product Family" Name="Image SLES15-SP3-SAPCAL-Azure">
      <Branch Type="Product Name" Name="Image SLES15-SP3-SAPCAL-Azure">
        <FullProductName ProductID="Image SLES15-SP3-SAPCAL-Azure">Image SLES15-SP3-SAPCAL-Azure</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP3-SAPCAL-EC2-HVM">
      <Branch Type="Product Name" Name="Image SLES15-SP3-SAPCAL-EC2-HVM">
        <FullProductName ProductID="Image SLES15-SP3-SAPCAL-EC2-HVM">Image SLES15-SP3-SAPCAL-EC2-HVM</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP3-SAPCAL-GCE">
      <Branch Type="Product Name" Name="Image SLES15-SP3-SAPCAL-GCE">
        <FullProductName ProductID="Image SLES15-SP3-SAPCAL-GCE">Image SLES15-SP3-SAPCAL-GCE</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Enterprise Storage 7.1">
      <Branch Type="Product Name" Name="SUSE Enterprise Storage 7.1">
        <FullProductName ProductID="SUSE Enterprise Storage 7.1" CPE="cpe:/o:suse:ses:7.1">SUSE Enterprise Storage 7.1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS" CPE="cpe:/o:suse:sle_hpc-ltss:15:sp2">SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS" CPE="cpe:/o:suse:sle_hpc-ltss:15:sp3">SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 15 SP2-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 15 SP2-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP2-LTSS" CPE="cpe:/o:suse:sles-ltss:15:sp2">SUSE Linux Enterprise Server 15 SP2-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 15 SP3-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS" CPE="cpe:/o:suse:sles-ltss:15:sp3">SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 15 SP2">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 15 SP2">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP2" CPE="cpe:/o:suse:sles_sap:15:sp2">SUSE Linux Enterprise Server for SAP Applications 15 SP2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3" CPE="cpe:/o:suse:sles_sap:15:sp3">SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="apache2-2.4.51-150200.3.62.1">
      <FullProductName ProductID="apache2-2.4.51-150200.3.62.1">apache2-2.4.51-150200.3.62.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="apache2-prefork-2.4.51-150200.3.62.1">
      <FullProductName ProductID="apache2-prefork-2.4.51-150200.3.62.1">apache2-prefork-2.4.51-150200.3.62.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="apache2-utils-2.4.51-150200.3.62.1">
      <FullProductName ProductID="apache2-utils-2.4.51-150200.3.62.1">apache2-utils-2.4.51-150200.3.62.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="apache2-devel-2.4.51-150200.3.62.1">
      <FullProductName ProductID="apache2-devel-2.4.51-150200.3.62.1">apache2-devel-2.4.51-150200.3.62.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="apache2-doc-2.4.51-150200.3.62.1">
      <FullProductName ProductID="apache2-doc-2.4.51-150200.3.62.1">apache2-doc-2.4.51-150200.3.62.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="apache2-event-2.4.51-150200.3.62.1">
      <FullProductName ProductID="apache2-event-2.4.51-150200.3.62.1">apache2-event-2.4.51-150200.3.62.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="apache2-example-pages-2.4.51-150200.3.62.1">
      <FullProductName ProductID="apache2-example-pages-2.4.51-150200.3.62.1">apache2-example-pages-2.4.51-150200.3.62.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="apache2-worker-2.4.51-150200.3.62.1">
      <FullProductName ProductID="apache2-worker-2.4.51-150200.3.62.1">apache2-worker-2.4.51-150200.3.62.1</FullProductName>
    </Branch>
    <Relationship ProductReference="apache2-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP3-SAPCAL-Azure">
      <FullProductName ProductID="Image SLES15-SP3-SAPCAL-Azure:apache2-2.4.51-150200.3.62.1">apache2-2.4.51-150200.3.62.1 as a component of Image SLES15-SP3-SAPCAL-Azure</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-prefork-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP3-SAPCAL-Azure">
      <FullProductName ProductID="Image SLES15-SP3-SAPCAL-Azure:apache2-prefork-2.4.51-150200.3.62.1">apache2-prefork-2.4.51-150200.3.62.1 as a component of Image SLES15-SP3-SAPCAL-Azure</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-utils-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP3-SAPCAL-Azure">
      <FullProductName ProductID="Image SLES15-SP3-SAPCAL-Azure:apache2-utils-2.4.51-150200.3.62.1">apache2-utils-2.4.51-150200.3.62.1 as a component of Image SLES15-SP3-SAPCAL-Azure</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP3-SAPCAL-EC2-HVM">
      <FullProductName ProductID="Image SLES15-SP3-SAPCAL-EC2-HVM:apache2-2.4.51-150200.3.62.1">apache2-2.4.51-150200.3.62.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-prefork-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP3-SAPCAL-EC2-HVM">
      <FullProductName ProductID="Image SLES15-SP3-SAPCAL-EC2-HVM:apache2-prefork-2.4.51-150200.3.62.1">apache2-prefork-2.4.51-150200.3.62.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-utils-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP3-SAPCAL-EC2-HVM">
      <FullProductName ProductID="Image SLES15-SP3-SAPCAL-EC2-HVM:apache2-utils-2.4.51-150200.3.62.1">apache2-utils-2.4.51-150200.3.62.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP3-SAPCAL-GCE">
      <FullProductName ProductID="Image SLES15-SP3-SAPCAL-GCE:apache2-2.4.51-150200.3.62.1">apache2-2.4.51-150200.3.62.1 as a component of Image SLES15-SP3-SAPCAL-GCE</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-prefork-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP3-SAPCAL-GCE">
      <FullProductName ProductID="Image SLES15-SP3-SAPCAL-GCE:apache2-prefork-2.4.51-150200.3.62.1">apache2-prefork-2.4.51-150200.3.62.1 as a component of Image SLES15-SP3-SAPCAL-GCE</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-utils-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP3-SAPCAL-GCE">
      <FullProductName ProductID="Image SLES15-SP3-SAPCAL-GCE:apache2-utils-2.4.51-150200.3.62.1">apache2-utils-2.4.51-150200.3.62.1 as a component of Image SLES15-SP3-SAPCAL-GCE</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7.1">
      <FullProductName ProductID="SUSE Enterprise Storage 7.1:apache2-2.4.51-150200.3.62.1">apache2-2.4.51-150200.3.62.1 as a component of SUSE Enterprise Storage 7.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-devel-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7.1">
      <FullProductName ProductID="SUSE Enterprise Storage 7.1:apache2-devel-2.4.51-150200.3.62.1">apache2-devel-2.4.51-150200.3.62.1 as a component of SUSE Enterprise Storage 7.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-doc-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7.1">
      <FullProductName ProductID="SUSE Enterprise Storage 7.1:apache2-doc-2.4.51-150200.3.62.1">apache2-doc-2.4.51-150200.3.62.1 as a component of SUSE Enterprise Storage 7.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-prefork-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7.1">
      <FullProductName ProductID="SUSE Enterprise Storage 7.1:apache2-prefork-2.4.51-150200.3.62.1">apache2-prefork-2.4.51-150200.3.62.1 as a component of SUSE Enterprise Storage 7.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-utils-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7.1">
      <FullProductName ProductID="SUSE Enterprise Storage 7.1:apache2-utils-2.4.51-150200.3.62.1">apache2-utils-2.4.51-150200.3.62.1 as a component of SUSE Enterprise Storage 7.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-worker-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7.1">
      <FullProductName ProductID="SUSE Enterprise Storage 7.1:apache2-worker-2.4.51-150200.3.62.1">apache2-worker-2.4.51-150200.3.62.1 as a component of SUSE Enterprise Storage 7.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache2-2.4.51-150200.3.62.1">apache2-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-devel-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache2-devel-2.4.51-150200.3.62.1">apache2-devel-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-doc-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache2-doc-2.4.51-150200.3.62.1">apache2-doc-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-prefork-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache2-prefork-2.4.51-150200.3.62.1">apache2-prefork-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-utils-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache2-utils-2.4.51-150200.3.62.1">apache2-utils-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-worker-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache2-worker-2.4.51-150200.3.62.1">apache2-worker-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache2-2.4.51-150200.3.62.1">apache2-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-devel-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache2-devel-2.4.51-150200.3.62.1">apache2-devel-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-doc-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache2-doc-2.4.51-150200.3.62.1">apache2-doc-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-prefork-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache2-prefork-2.4.51-150200.3.62.1">apache2-prefork-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-utils-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache2-utils-2.4.51-150200.3.62.1">apache2-utils-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-worker-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache2-worker-2.4.51-150200.3.62.1">apache2-worker-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP2-LTSS:apache2-2.4.51-150200.3.62.1">apache2-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-devel-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP2-LTSS:apache2-devel-2.4.51-150200.3.62.1">apache2-devel-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-doc-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP2-LTSS:apache2-doc-2.4.51-150200.3.62.1">apache2-doc-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-prefork-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP2-LTSS:apache2-prefork-2.4.51-150200.3.62.1">apache2-prefork-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-utils-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP2-LTSS:apache2-utils-2.4.51-150200.3.62.1">apache2-utils-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-worker-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP2-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP2-LTSS:apache2-worker-2.4.51-150200.3.62.1">apache2-worker-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS:apache2-2.4.51-150200.3.62.1">apache2-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-devel-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS:apache2-devel-2.4.51-150200.3.62.1">apache2-devel-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-doc-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS:apache2-doc-2.4.51-150200.3.62.1">apache2-doc-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-prefork-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS:apache2-prefork-2.4.51-150200.3.62.1">apache2-prefork-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-utils-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS:apache2-utils-2.4.51-150200.3.62.1">apache2-utils-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-worker-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS:apache2-worker-2.4.51-150200.3.62.1">apache2-worker-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache2-2.4.51-150200.3.62.1">apache2-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-devel-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache2-devel-2.4.51-150200.3.62.1">apache2-devel-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-doc-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache2-doc-2.4.51-150200.3.62.1">apache2-doc-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-prefork-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache2-prefork-2.4.51-150200.3.62.1">apache2-prefork-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-utils-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache2-utils-2.4.51-150200.3.62.1">apache2-utils-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-worker-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP2">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache2-worker-2.4.51-150200.3.62.1">apache2-worker-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache2-2.4.51-150200.3.62.1">apache2-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-devel-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache2-devel-2.4.51-150200.3.62.1">apache2-devel-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-doc-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache2-doc-2.4.51-150200.3.62.1">apache2-doc-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-prefork-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache2-prefork-2.4.51-150200.3.62.1">apache2-prefork-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-utils-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache2-utils-2.4.51-150200.3.62.1">apache2-utils-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="apache2-worker-2.4.51-150200.3.62.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache2-worker-2.4.51-150200.3.62.1">apache2-worker-2.4.51-150200.3.62.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses.

This issue affects Apache HTTP Server: through 2.4.58.
</Note>
    </Notes>
    <CVE>CVE-2023-38709</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP3-SAPCAL-Azure:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>Image SLES15-SP3-SAPCAL-Azure:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>Image SLES15-SP3-SAPCAL-Azure:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>Image SLES15-SP3-SAPCAL-EC2-HVM:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>Image SLES15-SP3-SAPCAL-EC2-HVM:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>Image SLES15-SP3-SAPCAL-EC2-HVM:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>Image SLES15-SP3-SAPCAL-GCE:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>Image SLES15-SP3-SAPCAL-GCE:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>Image SLES15-SP3-SAPCAL-GCE:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:apache2-devel-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:apache2-doc-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:apache2-worker-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache2-devel-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache2-doc-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache2-worker-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache2-devel-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache2-doc-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache2-worker-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:apache2-devel-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:apache2-doc-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:apache2-worker-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:apache2-devel-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:apache2-doc-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:apache2-worker-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache2-devel-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache2-doc-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache2-worker-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache2-devel-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache2-doc-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache2-worker-2.4.51-150200.3.62.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2024/suse-su-20241788-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2023-38709.html</URL>
        <Description>CVE-2023-38709</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1222330</URL>
        <Description>SUSE Bug 1222330</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack.

Users are recommended to upgrade to version 2.4.59, which fixes this issue.</Note>
    </Notes>
    <CVE>CVE-2024-24795</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP3-SAPCAL-Azure:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>Image SLES15-SP3-SAPCAL-Azure:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>Image SLES15-SP3-SAPCAL-Azure:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>Image SLES15-SP3-SAPCAL-EC2-HVM:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>Image SLES15-SP3-SAPCAL-EC2-HVM:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>Image SLES15-SP3-SAPCAL-EC2-HVM:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>Image SLES15-SP3-SAPCAL-GCE:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>Image SLES15-SP3-SAPCAL-GCE:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>Image SLES15-SP3-SAPCAL-GCE:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:apache2-devel-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:apache2-doc-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:apache2-worker-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache2-devel-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache2-doc-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache2-worker-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache2-devel-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache2-doc-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache2-worker-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:apache2-devel-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:apache2-doc-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:apache2-worker-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:apache2-devel-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:apache2-doc-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:apache2-worker-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache2-devel-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache2-doc-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache2-worker-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache2-devel-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache2-doc-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache2-worker-2.4.51-150200.3.62.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2024/suse-su-20241788-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2024-24795.html</URL>
        <Description>CVE-2024-24795</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1222332</URL>
        <Description>SUSE Bug 1222332</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client does not stop sending headers, this leads to memory exhaustion.</Note>
    </Notes>
    <CVE>CVE-2024-27316</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP3-SAPCAL-Azure:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>Image SLES15-SP3-SAPCAL-Azure:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>Image SLES15-SP3-SAPCAL-Azure:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>Image SLES15-SP3-SAPCAL-EC2-HVM:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>Image SLES15-SP3-SAPCAL-EC2-HVM:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>Image SLES15-SP3-SAPCAL-EC2-HVM:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>Image SLES15-SP3-SAPCAL-GCE:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>Image SLES15-SP3-SAPCAL-GCE:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>Image SLES15-SP3-SAPCAL-GCE:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:apache2-devel-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:apache2-doc-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:apache2-worker-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache2-devel-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache2-doc-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:apache2-worker-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache2-devel-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache2-doc-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:apache2-worker-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:apache2-devel-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:apache2-doc-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP2-LTSS:apache2-worker-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:apache2-devel-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:apache2-doc-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:apache2-worker-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache2-devel-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache2-doc-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP2:apache2-worker-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache2-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache2-devel-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache2-doc-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache2-prefork-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache2-utils-2.4.51-150200.3.62.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:apache2-worker-2.4.51-150200.3.62.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2024/suse-su-20241788-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2024-27316.html</URL>
        <Description>CVE-2024-27316</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1221401</URL>
        <Description>SUSE Bug 1221401</Description>
      </Reference>
    </References>
  </Vulnerability>
</cvrfdoc>
