opensuse-su-2022:0024-1
Vulnerability from csaf_opensuse
Published
2022-02-02 12:46
Modified
2022-02-02 12:46
Summary
Security update for lighttpd

Notes

Title of the patch
Security update for lighttpd
Description of the patch
This update for lighttpd fixes the following issues: lighttpd was updated to 1.4.64: * CVE-2022-22707: off-by-one stack overflow in the mod_extforward plugin (boo#1194376) * graceful restart/shutdown timeout changed from 0 (disabled) to 8 seconds. configure an alternative with: server.feature-flags += (“server.graceful-shutdown-timeout” => 8) * deprecated modules (previously announced) have been removed: mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming, mod_geoip, mod_trigger_b4_dl update to 1.4.63: * import xxHash v0.8.1 * fix reqpool mem corruption in 1.4.62 includes changes in 1.4.62: * [mod_alias] fix use-after-free bug * many developer visible bug fixes update to 1.4.61: * mod_dirlisting: sort '../' to top * fix HTTP/2 upload > 64k w/ max-request-size * code level and developer visible bug fixes update to 1.4.60: * HTTP/2 smoother and lower memory use (in general) * HTTP/2 tuning to better handle aggressive client initial requests * reduce memory footprint; workaround poor glibc behavior; jemalloc is better * mod_magnet lua performance improvements * mod_dirlisting performance improvements and new caching option * memory constraints for extreme edge cases in mod_dirlisting, mod_ssi, mod_webdav * connect(), write(), read() time limits on backends (separate from client timeouts) * lighttpd restarts if large discontinuity in time occurs (embedded systems) * RFC7233 Range support for all non-streaming responses, not only static files * connect() to backend now has default 8 second timeout (configurable) - Added hardening to systemd service(s) (boo#1181400). update to 1.4.59: * HTTP/2 enabled by default * mod_deflate zstd suppport * new mod_ajp13 Update to 1.4.58: * [mod_wolfssl] use wolfSSL TLS version defines * [mod_wolfssl] compile with earlier wolfSSL vers * [core] prefer IPv6+IPv4 func vs IPv4-specific func * [core] reuse large mem chunks (fix mem usage) (fixes #3033) * [core] add comment for FastCGI mem use in hctx->rb (#3033) * [mod_proxy] fix sending of initial reqbody chunked * [multiple] fdevent_waitpid() wrapper * [core] sys-time.h - localtime_r,gmtime_r macros * [core] http_date.[ch] encapsulate HTTP-date parse * [core] specialized strptime() for HTTP date fmts * [multiple] employ http_date.h, sys-time.h * [core] http_date_timegm() (portable timegm()) * buffer_append_path_len() to join paths * [core] inet_ntop_cache -> sock_addr_cache * [multiple] etag.[ch] -> http_etag.[ch]; better imp * [core] fix crash after specific err in config file * [core] fix bug in FastCGI uploads (#3033) * [core] http_response_match_if_range() * [mod_webdav] typedef off_t loff_t for FreeBSD * [multiple] chunkqueue_write_chunk() * [build] add GNUMAKEFLAGS=--no-print-directory * [core] fix bug in read retry found by coverity * [core] attempt to quiet some coverity warnings * [mod_webdav] compile fix for Mac OSX/11 * [core] handle U+00A0 in config parser * [core] fix lighttpd -1 one-shot with pipes * [core] quiet start/shutdown trace in one-shot mode * [core] allow keep-alives in one-shot mode (#3042) * [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD * [core] setsockopt IPV6_V6ONLY if server.v4mapped * [core] prefer inet_aton() over inet_addr() * [core] add missing mod_wolfssl to ssl compat list * [mod_openssl] remove ancient preprocessor logic * [core] SHA512_Init, SHA512_Update, SHA512_Final * [mod_wolfssl] add complex preproc logic for SNI * [core] wrap a macro value with parens * [core] fix handling chunked response from backend (fixes #3044) * [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044) * [core] skip some trace if backend Upgrade (#3044) * [TLS] cert-staple.sh POSIX sh compat (fixes #3043) * [core] portability fix if st_mtime not defined * [mod_nss] portability fix * [core] warn if mod_authn_file needed in conf * [core] fix chunked decoding from backend (fixes #3044) * [core] reject excess data after chunked encoding (#3046) * [core] track chunked encoding state from backend (fixes #3046) * [core] li_restricted_strtoint64() * [core] track Content-Length from backend (fixes #3046) * [core] enhance config parsing debugging (#3047) * [core] reorder srv->config_context to match ndx (fixes #3047) * [mod_proxy] proxy.header = ('force-http10' => ...) * [mod_authn_ldap] fix crash (fixes #3048) * [mod_authn_ldap, mod_vhostdb_ldap] default cafile * [core] fix array_copy_array() sorted[] * [multiple] replace fall through comment with attr * [core] fix crash printing trace if backend is down * [core] fix decoding chunked from backend (fixes #3049) * [core] attempt to quiet some coverity warnings * [core] perf: request processing * [core] http_header_str_contains_token() * [mod_flv_streaming] parse query string w/o copying * [mod_evhost] use local array to split values * [core] remove srv->split_vals * [core] add User-Agent to http_header_e enum * [core] store struct server * in struct connection * [core] use func rc to indicate done reading header * [core] replace connection_set_state w/ assignment * [core] do not pass srv to http header parsing func * [core] cold buffer_string_prepare_append_resize() * [core] chunkqueue_compact_mem() * [core] connection_chunkqueue_compact() * [core] pass con around request, not srv and con * [core] reduce use of struct parse_header_state * [core] perf: HTTP header parsing using \n offsets * [core] no need to pass srv to connection_set_state * [core] perf: connection_read_header_more() * [core] perf: connection_read_header_hoff() hot * [core] inline connection_read_header() * [core] pass ptr to http_request_parse() * [core] more 'const' in request.c prototypes * [core] handle common case of alnum or - field-name * [mod_extforward] simplify code: use light_isxdigit * [core] perf: array.c performance enhancements * [core] mark some data_* funcs cold * [core] http_header.c internal inline funcs * [core] remove unused array_reset() * [core] prefer uint32_t to size_t in base.h * [core] uint32_t for struct buffer sizes * [core] remove unused members of struct server * [core] short-circuit path to clear request.headers * [core] array keys are non-empty in key-value list * [core] keep a->data[] sorted; remove a->sorted[] * [core] __attribute_returns_nonnull__ * [core] differentiate array_get_* for ro and rw * [core] (const buffer *) in (struct burl_parts_t) * [core] (const buffer *) for con->server_name * [core] perf: initialize con->conf using memcpy() * [core] run config_setup_connection() fewer times * [core] isolate data_config.c, vector.c * [core] treat con->conditional_is_valid as bitfield * [core] http_header_hkey_get() over const array * [core] inline buffer as part of DATA_UNSET key * [core] inline buffer key for *_patch_connection() * [core] (data_unset *) from array_get_element_klen * [core] inline buffer as part of data_string value * [core] add const to callers of http_header_*_get() * [core] inline array as part of data_array value * [core] const char *op in data_config * [core] buffer string in data_config * [core] streamline config_check_cond() * [core] keep a->data[] sorted (REVERT) * [core] array a->sorted[] as ptrs rather than pos * [core] inline header and env arrays into con * [mod_accesslog] avoid alloc for parsing cookie val * [core] simpler config_check_cond() * [mod_redirect,mod_rewrite] store context_ndx * [core] const char *name in struct plugin * [core] srv->plugin_slots as compact list * [core] rearrange server_config, server members * [core] macros CONST_LEN_STR and CONST_STR_LEN * [core] struct plugin_data_base * [core] improve condition caching perf * [core] config_plugin_values_init() new interface * [mod_access] use config_plugin_values_init() * [core] (const buffer *) from strftime_cache_get() * [core] mv config_setup_connection to connections.c * [core] use (const char *) in config file parsing * [mod_staticfile] use config_plugin_values_init() * [mod_skeleton] use config_plugin_values_init() * [mod_setenv] use config_plugin_values_init() * [mod_alias] use config_plugin_values_init() * [mod_indexfile] use config_plugin_values_init() * [mod_expire] use config_plugin_values_init() * [mod_flv_streaming] use config_plugin_values_init() * [mod_magnet] use config_plugin_values_init() * [mod_usertrack] use config_plugin_values_init() * [mod_userdir] split policy from userdir path build * [mod_userdir] use config_plugin_values_init() * [mod_ssi] use config_plugin_values_init() * [mod_uploadprogress] use config_plugin_values_init() * [mod_status] use config_plugin_values_init() * [mod_cml] use config_plugin_values_init() * [mod_secdownload] use config_plugin_values_init() * [mod_geoip] use config_plugin_values_init() * [mod_evasive] use config_plugin_values_init() * [mod_trigger_b4_dl] use config_plugin_values_init() * [mod_accesslog] use config_plugin_values_init() * [mod_simple_vhost] use config_plugin_values_init() * [mod_evhost] use config_plugin_values_init() * [mod_vhostdb*] use config_plugin_values_init() * [mod_mysql_vhost] use config_plugin_values_init() * [mod_maxminddb] use config_plugin_values_init() * [mod_auth*] use config_plugin_values_init() * [mod_deflate] use config_plugin_values_init() * [mod_compress] use config_plugin_values_init() * [core] add xsendfile* check if xdocroot is NULL * [mod_cgi] use config_plugin_values_init() * [mod_dirlisting] use config_plugin_values_init() * [mod_extforward] use config_plugin_values_init() * [mod_webdav] use config_plugin_values_init() * [core] store addtl data in pcre_keyvalue_buffer * [mod_redirect] use config_plugin_values_init() * [mod_rewrite] use config_plugin_values_init() * [mod_rrdtool] use config_plugin_values_init() * [multiple] gw_backends config_plugin_values_init() * [core] config_get_config_cond_info() * [mod_openssl] use config_plugin_values_init() * [core] use config_plugin_values_init() * [core] collect more config logic into configfile.c * [core] config_plugin_values_init_block() * [core] gw_backend config_plugin_values_init_block * [core] remove old config_insert_values_*() funcs * [multiple] plugin.c handles common FREE_FUNC code * [core] run all trigger and sighup handlers * [mod_wstunnel] change DEBUG_LOG to use log_error() * [core] stat_cache_path_contains_symlink use errh * [core] isolate use of data_config, configfile.h * [core] split cond cache from cond matches * [mod_auth] inline arrays in http_auth_require_t * [core] array_init() arg for initial size * [core] gw_exts_clear_check_local() * [core] gw_backend less pointer chasing * [core] connection_handle_errdoc() separate func * [multiple] prefer (connection *) to (srv *) * [core] create http chunk header on the stack * [multiple] connection hooks no longer get (srv *) * [multiple] plugin_stats array * [core] read up-to fixed size chunk before fionread * [core] default chunk size 8k (was 4k) * [core] pass con around gw_backend instead of srv * [core] log_error_multiline_buffer() * [multiple] reduce direct use of srv->cur_ts * [multiple] extern log_epoch_secs * [multiple] reduce direct use of srv->errh * [multiple] stat_cache singleton * [mod_expire] parse config into structured data * [multiple] generic config array type checking * [multiple] rename r to rc rv rd wr to be different * [core] (minor) config_plugin_keys_t data packing * [core] inline buffer in log_error_st errh * [multiple] store srv->tmp_buf in tb var * [multiple] quiet clang compiler warnings * [core] http_status_set_error_close() * [core] http_request_host_policy w/ http_parseopts * [multiple] con->proto_default_port * [core] store log filename in (log_error_st *) * [core] separate log_error_open* funcs * [core] fdevent uses uint32_t instead of size_t * [mod_webdav] large buffer reuse * [mod_accesslog] flush file log buffer at 8k size * [core] include settings.h where used * [core] static buffers for mtime_cache * [core] convenience macros to check req methods * [core] support multiple error logs * [multiple] omit passing srv to fdevent_handler * [core] remove unused arg to fdevent_fcntl_set_nb* * [core] slightly simpify server_(over)load_check() * [core] isolate fdevent subsystem * [core] isolate stat_cache subsystem * [core] remove include base.h where unused * [core] restart dead piped loggers every 64 sec * [mod_webdav] use copy_file_range() if available * [core] perf: buffer copy and append * [core] copy some srv->srvconf into con->conf * [core] move keep_alive flag into request_st * [core] pass scheme port to http_request_parse() * [core] pass http_parseopts around request.c * [core] rename specific_config to request_config * [core] move request_st,request_config to request.h * [core] pass (request_st *) to request.c funcs * [core] remove unused request_st member 'request' * [core] rename content_length to reqbody_length * [core] t/test_request.c using (request_st *) * [core] (const connection *) in http_header_*_get() * [mod_accesslog] log_access_record() fmt log record * [core] move request start ts into (request_st *) * [core] move addtl request-specific struct members * [core] move addtl request-specific struct members * [core] move plugin_ctx into (request_st *) * [core] move addtl request-specific struct members * [core] move request state into (request_st *) * [core] store (plugin *) in p->data * [core] store subrequest_handler instead of mode * [multiple] copy small struct instead of memcpy() * [multiple] split con, request (very large change) * [core] r->uri.path always set, though might be '' * [core] C99 restrict on some base funcs * [core] dispatch handler in handle_request func * [core] http_request_parse_target() * [mod_magnet] modify r->target with 'uri.path-raw' * [core] remove r->uri.path_raw; generate as needed * [core] http_response_comeback() * [core] http_response_config() * [tests] use buffer_eq_slen() for str comparison * [core] http_status_append() short-circuit 200 OK * [core] mark some chunk.c funcs as pure * [core] use uint32_t in http_header.[ch] * [core] perf: tighten some code in some hot paths * [core] parse header label before end of line * [mod_auth] 'nonce_secret' option to validate nonce (fixes #2976) * [build] fix build on MacOS X Tiger * [doc] lighttpd.conf: lighttpd choose event-handler * [config] blank server.tag if whitespace-only * [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006) * [multiple] correct misspellings in comments * [multiple] fix some cc warnings in 32-bit, powerpc * [tests] fix skip count in mod-fastcgi w/o php-cgi * [multiple] ./configure --with-nettle to use Nettle * [core] skip excess close() when FD_CLOEXEC defined * [mod_cgi] remove redundant calls to set FD_CLOEXEC * [core] return EINVAL if stat_cache_get_entry w/o / * [mod_webdav] define PATH_MAX if not defined * [mod_accesslog] process backslash-escapes in fmt * [mod_openssl] disable cert vrfy if ALPN acme-tls/1 * [core] add seed before openssl RAND_pseudo_bytes() * [mod_mbedtls] mbedTLS option for TLS * [core] prefer getxattr() instead of get_attr() * [multiple] use *(unsigned char *) with ctypes * [mod_openssl] do not log ECONNRESET unless debug * [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING * [mod_gnutls] GnuTLS option for TLS (fixes #109) * [mod_openssl] rotate session ticket encryption key * [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842) * [mod_openssl] set chains from callback in 1.0.2+ (#2842) * [core] RFC-strict parse of Content-Length * [build] point ./configure --help to support forum * [core] stricter parse of numerical digits * [multiple] add summaries to top of some modules * [core] sys-crypto-md.h w/ inline message digest fn * [mod_openssl] enable read-ahead, if set, after SNI * [mod_openssl] issue warning for deprecated options * [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail * [mod_openssl] use openssl feature define for ALPN * [mod_openssl] update default DH params * [core] SecureZeroMemory() on _WIN32 * [core] safe memset calls memset() through volatile * [doc] update comments in doc/config/modules.conf * [core] more precise check for request stream flags * [mod_openssl] rotate session ticket encryption key * [mod_openssl] ssl.stek-file to specify encrypt key * [mod_mbedtls] ssl.stek-file to specify encrypt key * [mod_gnutls] ssl.stek-file to specify encrypt key * [mod_openssl] disable session cache; prefer ticket * [mod_openssl] compat with LibreSSL * [mod_openssl] compat with WolfSSL * [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA * [mod_openssl] move SSL_CTX curve conf to new func * [mod_openssl] basic SSL_CONF_cmd for alt TLS libs * [mod_openssl] OCSP stapling (fixes #2469) * [TLS] cert-staple.sh - refresh OCSP responses (#2469) * [mod_openssl] compat with BoringSSL * [mod_gnutls] option to override GnuTLS priority * [mod_gnutls] OCSP stapling (#2469) * [mod_extforward] config warning for module order * [mod_webdav] store webdav.opts as bitflags * [mod_webdav] limit webdav_propfind_dir() recursion * [mod_webdav] unsafe-propfind-follow-symlink option * [mod_webdav] webdav.opts 'propfind-depth-infinity' * [mod_openssl] detect certs marked OCSP Must-Staple * [mod_gnutls] detect certs marked OCSP Must-Staple * [mod_openssl] default to set MinProtocol TLSv1.2 * [mod_nss] NSS option for TLS (fixes #1218) * [core] fdevent_load_file() shared code * [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file * [core] error if s->socket_perms chmod() fails * [mod_openssl] prefer some WolfSSL native APIs * quiet clang analyzer scan-build warnings * [core] uint32_t is plenty large for path names * [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql * [core] splaytree_djbhash() in splaytree.h (reuse) * [cmake] update deps for src/t/test_* * [cmake] update deps for src/t/test_* * [build] remove tests/mod-userdir.t from builds * [build] fix typo in src/Makefile.am EXTRA_DIST * [core] remove unused mbedtls_enabled flag * [core] store fd in srv->stdin_fd during setup * [multiple] address coverity warnings * [mod_webdav] fix theoretical NULL dereference * [mod_webdav] update rc for PROPFIND allprop * [mod_webdav] build fix: ifdef live_properties * [multiple] address coverity warnings * [meson] fix libmariadb dependency * [meson] add missing libmaxminddb section * [mod_auth,mod_vhostdb] add caching option (fixes #2805) * [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805) * [mod_auth] accept 'nonce-secret' & 'nonce_secret' * [mod_openssl] fix build warnings on MacOS X * [core] Nettle assert()s if buffer len > digest sz * [mod_authn_dbi] authn backend employing DBI * [mod_authn_mysql,file] use crypt() to save stack * [mod_vhostdb_dbi] allow strings and ints in config * add ci-build.sh * move ci-build.sh to scripts * [build] build fixes for AIX * [mod_deflate] Brotli support * [build] bzip2 default to not-enabled in build * [mod_deflate] fix typo in config option * [mod_deflate] propagate errs from internal funcs * [mod_deflate] deflate.cache-dir compressed cache * [mod_deflate] mod_deflate subsumes mod_compress * [doc] mod_compress -> mod_deflate * [tests] mod_compress -> mod_deflate * [mod_compress] remove mod_compress * [build] add --with-brotli to CI build * [core] server.feature-flags extensible config * [core] con layer plugin_ctx separate from request * [multiple] con hooks store ctx in con->plugin_ctx * [core] separate funcs to reset (request_st *) * [multiple] rename connection_reset hook to request * [mod_nss] func renames for consistency * [core] detect and reject TLS connect to cleartext * [mod_deflate] quicker check for Content-Encoding * [mod_openssl] read secret data w/ BIO_new_mem_buf * [core] decode Transfer-Encoding: chunked from gw * [mod_fastcgi] decode Transfer-Encoding: chunked * [core] stricter parsing of POST chunked block hdr * [mod_proxy] send HTTP/1.1 requests to backends * [tests] test_base64.c clear buf vs reset * [core] http_header_remove_token() * [mod_webdav] fix inadvertent string truncation * [core] add some missing standard includes * [mod_extforward] attempt to quiet Coverity warning * [mod_authn_dbi,mod_authn_mysql] fix coverity issue * scons: fix check environment * Add avahi service file under doc/avahi/ * [mod_webdav] fix fallback if linkat() fails * [mod_proxy] do not forward Expect: 100-continue * [core] chunkqueue_compact_mem() must upd cq->last * [core] dlsym for FAMNoExists() for compat w/ fam * [core] disperse settings.h to appropriate headers * [core] inline buffer_reset() * [mod_extforward] save proto per connection * [mod_extforward] skip after HANDLER_COMEBACK * [core] server.feature-flags to enable h2 * [core] HTTP_VERSION_2 * [multiple] allow TLS ALPN 'h2' if 'server.h2proto' * [mod_extforward] preserve changed addr for h2 con * [core] do not send Connection: close if h2 * [core] lowercase response hdr field names for h2 * [core] recognize status: 421 Misdirected Request * [core] parse h2 pseudo-headers * [core] request_headers_process() * [core] connection_state_machine_loop() * [core] reset connection counters per connection * [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting * [core] connection_set_fdevent_interest() * [core] HTTP2-Settings * [core] adjust http_request_headers_process() * [core] http_header_parse_hoff() * [core] move http_request_headers_process() * [core] reqpool.[ch] for (request_st *) * [multiple] modules read reqbody via fn ptr * [multiple] isolate more con code in connections.c * [core] isolate more resp code in response.c * [core] h2.[ch] with stub funcs (incomplete) * [core] alternate between two joblists * [core] connection transition to HTTP/2; incomplete * [core] mark some error paths with attribute cold * [core] discard 100 102 103 responses from backend * [core] skip write throttle for 100 Continue * [core] adjust (disabled) debug code * [core] update comment * [core] link in ls-hpack (EXPERIMENTAL) * [core] HTTP/2 HPACK using LiteSpeed ls-hpack * [core] h2_send_headers() specialized for resp hdrs * [core] http_request_parse_header() specialized * [core] comment possible future ls-hpack optimize * [mod_status] separate funcs to print request table * [mod_status] adjust to print HTTP/2 requests * [core] redirect to dir using relative-path * [core] ignore empty field-name from backends * [mod_auth] fix crash if auth.require misconfigured (fixes #3023) * [core] fix 1-char trunc of default server.tag * [core] request_acquire(), request_release() * [core] keep pool of (request_st *) for HTTP/2 * [mod_status] dedicated funcs for r->state labels * [core] move connections_get_state to connections.c * [core] fix crash on master after graceful restart * [core] defer optimization to read small files * [core] do not require '\0' term for k,v hdr parse * [scripts] cert-staple.sh enhancements * [core] document algorithm used in lighttpd etag * [core] ls-hpack optimizations * [core] fix crash on master if blank line request * [core] use djbhash in gw_backend to choose host * [core] rename md5.[ch] to algo_md5.[ch] * [core] move djbhash(), dekhash() to algo_md.h * [core] rename splaytree.[ch] to algo_splaytree.[ch] * [core] import xxHash v0.8.0 * [build] modify build, includes for xxHash v0.8.0 * [build] remove ls-hpack/deps * [core] xxhash no inline hints; let compiler choose * [mod_dirlisting] fix config parsing crash * [mod_openssl] clarify trace w/ deprecated options * [doc] refresh doc/config/*/* * [core] code size: disable XXH64(), XXH3() * [doc] update README and INSTALL * [core] combine Cookie request headers with ';' * [core] log stream id with debug.log-state-handling * [core] set r->state in h2.c * [mod_ssi] update chunk after shell output redirect * [mod_webdav] preserve bytes_out when chunks merged * [multiple] inline chunkqueue_length() * [core] cold h2_log_response_header*() funcs * [core] update HTTP status codes list from IANA * [mod_wolfssl] standalone module * [core] Content-Length in http_response_send_file() * [core] adjust response header prep for common case * [core] light_isupper(), light_islower() * [core] tst,set,clr macros for r->{rqst,resp}_htags * [core] separate http_header_e from _htags bitmask * [core] http_header_hkey_get_lc() for HTTP/2 * [core] array.[ch] using uint32_t instead of size_t * [core] extend (data_string *) to store header id * [multiple] extend enum http_header_e list * [core] http_header_e <=> lshpack_static_hdr_idx * [core] skip ls-hpack decode work unused by lighttpd * [TLS] error if inherit empty TLS cfg from globals * [core] connection_check_expect_100() * [core] support multiple 1xx responses from backend * [core] reload c after chunkqueue_compact_mem() * [core] relay 1xx from backend over HTTP/2 * [core] relay 1xx from backend over HTTP/1.1 * [core] chunkqueue_{peek,read}_data(), squash * [multiple] TLS modules use chunkqueue_peek_data() * [mod_magnet] magnet.attract-response-start-to * [multiple] code reuse chunkqueue_peek_data() * [core] reuse r->start_hp.tv_sec for r->start_ts * [core] config_plugin_value_tobool() accept '0','1' * [core] graceful and immediate restart option * [mod_ssi] init status var before waitpid() * [core] graceful shutdown timeout option * [core] lighttpd -1 supports pipes (e.g. netcat) * [core] perf adjustments to avoid load miss * [multiple] use sock_addr_get_family in more places * [multiple] inline chunkqueue where always alloc'd * [core] propagate state after writing * [core] server_run_con_queue() * [core] defer handling FDEVENT_HUP and FDEVENT_ERR * [core] handle unexpected EOF reading FILE_CHUNK * [core] short-circuit connection_write_throttle() * [core] walk queue in connection_write_chunkqueue() * [core] connection_joblist global * [core] be more precise checking streaming flags * [core] fdevent_load_file_bytes() * [TLS] use fdevent_load_file_bytes() for STEK file * [core] allow symlinks under /dev for rand devices * [multiple] use light_btst() for hdr existence chk * [mod_deflate] fix potential NULL deref in err case * [core] save errno around close() if fstat() fails * [mod_ssi] use stat_cache_open_rdonly_fstat() * [core] fdevent_dup_cloexec() * [core] dup FILE_CHUNK fd when splitting FILE_CHUNK * [core] stat_cache_path_isdir() * [multiple] use stat_cache_path_isdir() * [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset * [mod_gnutls] quiet CLOSE_NOTIFY after conn reset * [core] limit num ranges in Range requests * [core] remove unused r->content_length * [core] http_response_parse_range() const file sz * [core] pass open fd to http_response_parse_range * [core] stat_cache_get_entry_open() * [core,mod_deflate] leverage cache of open fd * [doc] comment out config disabling Range for .pdf * [core] coalesce nearby ranges in Range requests * [mod_fastcgi] decode chunked is cold code path * [core] fix chunkqueue_compact_mem w/ partial chunk * [core] alloc optim reading file, sending chunked * [core] reuse chunkqueue_compact_mem*() * [mod_cgi] use splice() to send input to CGI * [multiple] ignore openssl 3.0.0 deprecation warns * [mod_openssl] migrate ticket cb to openssl 3.0.0 * [mod_openssl] construct OSSL_PARAM on stack * [mod_openssl] merge ssl_tlsext_ticket_key_cb impls * [multiple] openssl 3.0.0 digest interface migrate * [tests] detect multiple SSL/TLS/crypto providers * [core] sys-crypto-md.h consistent interfaces * [wolfssl] wolfSSL_CTX_set_mode differs from others * [multiple] use NSS crypto if no other crypto avail * [multiple] stat_cache_path_stat() for struct st * [TLS] ignore empty 'CipherString' in ssl-conf-cmd * [multiple] remove chunk file.start member * [core] modify use of getrlimit() to not be fatal * [mod_webdav] add missing update to cq accounting * [mod_webdav] update defaults after worker_init * [mod_openssl] use newer openssl 3.0.0 func * [core] config_plugin_value_to_int32() * [core] minimize pause during graceful restart * [mod_deflate] use large mmap chunks to compress * [core] stat_cache_entry reference counting * [core] FILE_CHUNK can hold stat_cache_entry ref * [core] http_chunk_append_file_ref_range() * [multiple] use http_chunk_append_file_ref() * [core] always lseek() with shared fd * [core] silence coverity warnings (false positives) * [core] silence coverity warnings in ls-hpack * [core] silence coverity warnings (another try) * [core] fix fd sharing when splitting file chunk * [mod_mbedtls] quiet unused variable warning * [core] use inline funcs in sys-crypto-md.h * [core] add missing declaration for NSS rand * [core] init NSS lib for basic crypto algorithms * [doc] change mod_compress refs to mod_deflate * [doc] replace bzip2 refs with brotli * [build] remove svnversion from versionstamp rule * [doc] /var/run -> /run * [multiple] test for nss includes * [mod_nss] more nss includes fixes * [mod_webdav] define _NETBSD_SOURCE on NetBSD * [core] silence coverity warnings (another try) * [mod_mbedtls] newer mbedTLS vers support TLSv1.3 * [mod_accesslog] update defaults after cycling log * [multiple] add some missing config cleanup * [core] fix (startup) mem leaks in configparser.y * [core] STAILQ_* -> SIMPLEQ_* on OpenBSD * [mod_wolfssl] use more wolfssl/options.h defines * [mod_wolfssl] cripple SNI if not built OPENSSL_ALL * [mod_wolfssl] need to build --enable-alpn for ALPN * [mod_secdownload] fix compile w/ NSS on FreeBSD * [mod_mbedtls] wrap addtl code in preproc defines * [TLS] server.feature-flags 'ssl.session-cache' * [core] workaround fragile code in wolfssl types.h * [core] move misplaced error trace to match option * [core] adjust wolfssl workaround for another case * [multiple] consistent order for crypto lib select * [multiple] include mbedtls/config.h after select * [multiple] include wolfssl/options.h after select * [core] set NSS_VER_INCLUDE after crypto lib select * [core] use system xxhash lib if available * [doc] refresh doc/config/conf.d/mime.conf * [meson] add matching -I for lua lib version * [build] prepend search for lua version 5.4 * [core] use inotify in stat_cache.[ch] on Linux * [build] detect inotify header <sys/inotify.h> * [mod_nss] update session ticket NSS devel comment * [core] set last_used on rd/wr from backend (fixes #3029) * [core] cold func for gw_recv_response error case * [core] use kqueue() instead of FAM/gamin on *BSD * [core] no graceful-restart-bg on OpenBSD, NetBSD * [mod_openssl] add LIBRESSL_VERSION_NUMBER checks * [core] use struct kevent on stack in stat_cache * [core] stat_cache preprocessor paranoia * [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check * [mod_maxminddb] fix config validation typo * [tests] allow LIGHTTPD_EXE_PATH override * [multiple] handle NULL val as empty in *_env_add (fixes #3030) * [core] accept 'HTTP/2.0', 'HTTP/3.0' from backends (fixes #3031) * [build] check for xxhash in more ways * [core] accept 'HTTP/2.0', 'HTTP/3.0' from backends (#3031) * [core] http_response_buffer_append_authority() * [core] define SHA*_DIGEST_LENGTH macros if missing * [doc] update optional pkg dependencies in INSTALL * [mod_alias] validate given order, not sorted order * [core] filter out duplicate modules * [mod_cgi] fix crash if initial write to CGI fails * [mod_cgi] ensure tmp file open() before splice() * [multiple] add back-pressure gw data pump (fixes #3033) * [core] fix bug when HTTP/2 frames span chunks * [multiple] more forgiving config str to boolean (fixes #3036) * [core] check for __builtin_expect() availability * [core] quiet more request parse errs unless debug * [core] consolidate chunk size checks * [mod_flv_streaming] use stat_cache_get_entry_open * [mod_webdav] pass full path to webdav_unlinkat() * [mod_webdav] fallbacks if _ATFILE_SOURCE not avail * [mod_fastcgi] move src/fastcgi.h into src/compat/ * [mod_status] add additional HTML-encoding * [core] server.v4mapped option * [mod_webdav] workaround for gvfs dir redir bug - Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist anymore - Changed /etc/logrotate.d/lighttpd from init.d to systemd fix boo#1146452.
Patchnames
openSUSE-2022-24
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).



{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for lighttpd",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for lighttpd fixes the following issues:\n\nlighttpd was updated to 1.4.64:\n\n* CVE-2022-22707: off-by-one stack overflow in the mod_extforward\n  plugin (boo#1194376)\n* graceful restart/shutdown timeout changed from 0 (disabled) to\n  8 seconds. configure an alternative with:\n  server.feature-flags += (\u201cserver.graceful-shutdown-timeout\u201d =\u003e 8)\n* deprecated modules (previously announced) have been removed:\n  mod_authn_mysql, mod_mysql_vhost, mod_cml, mod_flv_streaming,\n  mod_geoip, mod_trigger_b4_dl\n\nupdate to 1.4.63:\n\n* import xxHash v0.8.1\n* fix reqpool mem corruption in 1.4.62\n\nincludes changes in 1.4.62:\n\n* [mod_alias] fix use-after-free bug\n* many developer visible bug fixes\n\nupdate to 1.4.61:\n\n* mod_dirlisting: sort \u0027../\u0027 to top\n* fix HTTP/2 upload \u003e 64k w/ max-request-size\n* code level and developer visible bug fixes\n\nupdate to 1.4.60:\n\n* HTTP/2 smoother and lower memory use (in general)\n* HTTP/2 tuning to better handle aggressive client initial\n  requests\n* reduce memory footprint; workaround poor glibc behavior;\n  jemalloc is better\n* mod_magnet lua performance improvements\n* mod_dirlisting performance improvements and new caching option\n* memory constraints for extreme edge cases in mod_dirlisting,\n  mod_ssi, mod_webdav\n* connect(), write(), read() time limits on backends (separate\n  from client timeouts)\n* lighttpd restarts if large discontinuity in time occurs\n  (embedded systems)\n* RFC7233 Range support for all non-streaming responses, not\n  only static files\n* connect() to backend now has default 8 second timeout\n  (configurable)\n\n- Added hardening to systemd service(s) (boo#1181400).\n\nupdate to 1.4.59:\n\n* HTTP/2 enabled by default\n* mod_deflate zstd suppport\n* new mod_ajp13\n\nUpdate to 1.4.58: \n\n* [mod_wolfssl] use wolfSSL TLS version defines\n* [mod_wolfssl] compile with earlier wolfSSL vers\n* [core] prefer IPv6+IPv4 func vs IPv4-specific func\n* [core] reuse large mem chunks (fix mem usage) (fixes #3033)\n* [core] add comment for FastCGI mem use in hctx-\u003erb (#3033)\n* [mod_proxy] fix sending of initial reqbody chunked\n* [multiple] fdevent_waitpid() wrapper\n* [core] sys-time.h - localtime_r,gmtime_r macros\n* [core] http_date.[ch] encapsulate HTTP-date parse\n* [core] specialized strptime() for HTTP date fmts\n* [multiple] employ http_date.h, sys-time.h\n* [core] http_date_timegm() (portable timegm())\n* buffer_append_path_len() to join paths\n* [core] inet_ntop_cache -\u003e sock_addr_cache\n* [multiple] etag.[ch] -\u003e http_etag.[ch]; better imp\n* [core] fix crash after specific err in config file\n* [core] fix bug in FastCGI uploads (#3033)\n* [core] http_response_match_if_range()\n* [mod_webdav] typedef off_t loff_t for FreeBSD\n* [multiple] chunkqueue_write_chunk()\n* [build] add GNUMAKEFLAGS=--no-print-directory\n* [core] fix bug in read retry found by coverity\n* [core] attempt to quiet some coverity warnings\n* [mod_webdav] compile fix for Mac OSX/11\n* [core] handle U+00A0 in config parser\n* [core] fix lighttpd -1 one-shot with pipes\n* [core] quiet start/shutdown trace in one-shot mode\n* [core] allow keep-alives in one-shot mode (#3042)\n* [mod_webdav] define _ATFILE_SOURCE if AT_FDCWD\n* [core] setsockopt IPV6_V6ONLY if server.v4mapped\n* [core] prefer inet_aton() over inet_addr()\n* [core] add missing mod_wolfssl to ssl compat list\n* [mod_openssl] remove ancient preprocessor logic\n* [core] SHA512_Init, SHA512_Update, SHA512_Final\n* [mod_wolfssl] add complex preproc logic for SNI\n* [core] wrap a macro value with parens\n* [core] fix handling chunked response from backend (fixes #3044)\n* [core] always set file.fd = -1 on FILE_CHUNK reset (fixes #3044)\n* [core] skip some trace if backend Upgrade (#3044)\n* [TLS] cert-staple.sh POSIX sh compat (fixes #3043)\n* [core] portability fix if st_mtime not defined\n* [mod_nss] portability fix\n* [core] warn if mod_authn_file needed in conf\n* [core] fix chunked decoding from backend (fixes #3044)\n* [core] reject excess data after chunked encoding (#3046)\n* [core] track chunked encoding state from backend (fixes #3046)\n* [core] li_restricted_strtoint64()\n* [core] track Content-Length from backend (fixes #3046)\n* [core] enhance config parsing debugging (#3047)\n* [core] reorder srv-\u003econfig_context to match ndx (fixes #3047)\n* [mod_proxy] proxy.header = (\u0027force-http10\u0027 =\u003e ...)\n* [mod_authn_ldap] fix crash (fixes #3048)\n* [mod_authn_ldap, mod_vhostdb_ldap] default cafile\n* [core] fix array_copy_array() sorted[]\n* [multiple] replace fall through comment with attr\n* [core] fix crash printing trace if backend is down\n* [core] fix decoding chunked from backend (fixes #3049)\n* [core] attempt to quiet some coverity warnings\n* [core] perf: request processing\n* [core] http_header_str_contains_token()\n* [mod_flv_streaming] parse query string w/o copying\n* [mod_evhost] use local array to split values\n* [core] remove srv-\u003esplit_vals\n* [core] add User-Agent to http_header_e enum\n* [core] store struct server * in struct connection\n* [core] use func rc to indicate done reading header\n* [core] replace connection_set_state w/ assignment\n* [core] do not pass srv to http header parsing func\n* [core] cold buffer_string_prepare_append_resize()\n* [core] chunkqueue_compact_mem()\n* [core] connection_chunkqueue_compact()\n* [core] pass con around request, not srv and con\n* [core] reduce use of struct parse_header_state\n* [core] perf: HTTP header parsing using \\n offsets\n* [core] no need to pass srv to connection_set_state\n* [core] perf: connection_read_header_more()\n* [core] perf: connection_read_header_hoff() hot\n* [core] inline connection_read_header()\n* [core] pass ptr to http_request_parse()\n* [core] more \u0027const\u0027 in request.c prototypes\n* [core] handle common case of alnum or - field-name\n* [mod_extforward] simplify code: use light_isxdigit\n* [core] perf: array.c performance enhancements\n* [core] mark some data_* funcs cold\n* [core] http_header.c internal inline funcs\n* [core] remove unused array_reset()\n* [core] prefer uint32_t to size_t in base.h\n* [core] uint32_t for struct buffer sizes\n* [core] remove unused members of struct server\n* [core] short-circuit path to clear request.headers\n* [core] array keys are non-empty in key-value list\n* [core] keep a-\u003edata[] sorted; remove a-\u003esorted[]\n* [core] __attribute_returns_nonnull__\n* [core] differentiate array_get_* for ro and rw\n* [core] (const buffer *) in (struct burl_parts_t)\n* [core] (const buffer *) for con-\u003eserver_name\n* [core] perf: initialize con-\u003econf using memcpy()\n* [core] run config_setup_connection() fewer times\n* [core] isolate data_config.c, vector.c\n* [core] treat con-\u003econditional_is_valid as bitfield\n* [core] http_header_hkey_get() over const array\n* [core] inline buffer as part of DATA_UNSET key\n* [core] inline buffer key for *_patch_connection()\n* [core] (data_unset *) from array_get_element_klen\n* [core] inline buffer as part of data_string value\n* [core] add const to callers of http_header_*_get()\n* [core] inline array as part of data_array value\n* [core] const char *op in data_config\n* [core] buffer string in data_config\n* [core] streamline config_check_cond()\n* [core] keep a-\u003edata[] sorted (REVERT)\n* [core] array a-\u003esorted[] as ptrs rather than pos\n* [core] inline header and env arrays into con\n* [mod_accesslog] avoid alloc for parsing cookie val\n* [core] simpler config_check_cond()\n* [mod_redirect,mod_rewrite] store context_ndx\n* [core] const char *name in struct plugin\n* [core] srv-\u003eplugin_slots as compact list\n* [core] rearrange server_config, server members\n* [core] macros CONST_LEN_STR and CONST_STR_LEN\n* [core] struct plugin_data_base\n* [core] improve condition caching perf\n* [core] config_plugin_values_init() new interface\n* [mod_access] use config_plugin_values_init()\n* [core] (const buffer *) from strftime_cache_get()\n* [core] mv config_setup_connection to connections.c\n* [core] use (const char *) in config file parsing\n* [mod_staticfile] use config_plugin_values_init()\n* [mod_skeleton] use config_plugin_values_init()\n* [mod_setenv] use config_plugin_values_init()\n* [mod_alias] use config_plugin_values_init()\n* [mod_indexfile] use config_plugin_values_init()\n* [mod_expire] use config_plugin_values_init()\n* [mod_flv_streaming] use config_plugin_values_init()\n* [mod_magnet] use config_plugin_values_init()\n* [mod_usertrack] use config_plugin_values_init()\n* [mod_userdir] split policy from userdir path build\n* [mod_userdir] use config_plugin_values_init()\n* [mod_ssi] use config_plugin_values_init()\n* [mod_uploadprogress] use config_plugin_values_init()\n* [mod_status] use config_plugin_values_init()\n* [mod_cml] use config_plugin_values_init()\n* [mod_secdownload] use config_plugin_values_init()\n* [mod_geoip] use config_plugin_values_init()\n* [mod_evasive] use config_plugin_values_init()\n* [mod_trigger_b4_dl] use config_plugin_values_init()\n* [mod_accesslog] use config_plugin_values_init()\n* [mod_simple_vhost] use config_plugin_values_init()\n* [mod_evhost] use config_plugin_values_init()\n* [mod_vhostdb*] use config_plugin_values_init()\n* [mod_mysql_vhost] use config_plugin_values_init()\n* [mod_maxminddb] use config_plugin_values_init()\n* [mod_auth*] use config_plugin_values_init()\n* [mod_deflate] use config_plugin_values_init()\n* [mod_compress] use config_plugin_values_init()\n* [core] add xsendfile* check if xdocroot is NULL\n* [mod_cgi] use config_plugin_values_init()\n* [mod_dirlisting] use config_plugin_values_init()\n* [mod_extforward] use config_plugin_values_init()\n* [mod_webdav] use config_plugin_values_init()\n* [core] store addtl data in pcre_keyvalue_buffer\n* [mod_redirect] use config_plugin_values_init()\n* [mod_rewrite] use config_plugin_values_init()\n* [mod_rrdtool] use config_plugin_values_init()\n* [multiple] gw_backends config_plugin_values_init()\n* [core] config_get_config_cond_info()\n* [mod_openssl] use config_plugin_values_init()\n* [core] use config_plugin_values_init()\n* [core] collect more config logic into configfile.c\n* [core] config_plugin_values_init_block()\n* [core] gw_backend config_plugin_values_init_block\n* [core] remove old config_insert_values_*() funcs\n* [multiple] plugin.c handles common FREE_FUNC code\n* [core] run all trigger and sighup handlers\n* [mod_wstunnel] change DEBUG_LOG to use log_error()\n* [core] stat_cache_path_contains_symlink use errh\n* [core] isolate use of data_config, configfile.h\n* [core] split cond cache from cond matches\n* [mod_auth] inline arrays in http_auth_require_t\n* [core] array_init() arg for initial size\n* [core] gw_exts_clear_check_local()\n* [core] gw_backend less pointer chasing\n* [core] connection_handle_errdoc() separate func\n* [multiple] prefer (connection *) to (srv *)\n* [core] create http chunk header on the stack\n* [multiple] connection hooks no longer get (srv *)\n* [multiple] plugin_stats array\n* [core] read up-to fixed size chunk before fionread\n* [core] default chunk size 8k (was 4k)\n* [core] pass con around gw_backend instead of srv\n* [core] log_error_multiline_buffer()\n* [multiple] reduce direct use of srv-\u003ecur_ts\n* [multiple] extern log_epoch_secs\n* [multiple] reduce direct use of srv-\u003eerrh\n* [multiple] stat_cache singleton\n* [mod_expire] parse config into structured data\n* [multiple] generic config array type checking\n* [multiple] rename r to rc rv rd wr to be different\n* [core] (minor) config_plugin_keys_t data packing\n* [core] inline buffer in log_error_st errh\n* [multiple] store srv-\u003etmp_buf in tb var\n* [multiple] quiet clang compiler warnings\n* [core] http_status_set_error_close()\n* [core] http_request_host_policy w/ http_parseopts\n* [multiple] con-\u003eproto_default_port\n* [core] store log filename in (log_error_st *)\n* [core] separate log_error_open* funcs\n* [core] fdevent uses uint32_t instead of size_t\n* [mod_webdav] large buffer reuse\n* [mod_accesslog] flush file log buffer at 8k size\n* [core] include settings.h where used\n* [core] static buffers for mtime_cache\n* [core] convenience macros to check req methods\n* [core] support multiple error logs\n* [multiple] omit passing srv to fdevent_handler\n* [core] remove unused arg to fdevent_fcntl_set_nb*\n* [core] slightly simpify server_(over)load_check()\n* [core] isolate fdevent subsystem\n* [core] isolate stat_cache subsystem\n* [core] remove include base.h where unused\n* [core] restart dead piped loggers every 64 sec\n* [mod_webdav] use copy_file_range() if available\n* [core] perf: buffer copy and append\n* [core] copy some srv-\u003esrvconf into con-\u003econf\n* [core] move keep_alive flag into request_st\n* [core] pass scheme port to http_request_parse()\n* [core] pass http_parseopts around request.c\n* [core] rename specific_config to request_config\n* [core] move request_st,request_config to request.h\n* [core] pass (request_st *) to request.c funcs\n* [core] remove unused request_st member \u0027request\u0027\n* [core] rename content_length to reqbody_length\n* [core] t/test_request.c using (request_st *)\n* [core] (const connection *) in http_header_*_get()\n* [mod_accesslog] log_access_record() fmt log record\n* [core] move request start ts into (request_st *)\n* [core] move addtl request-specific struct members\n* [core] move addtl request-specific struct members\n* [core] move plugin_ctx into (request_st *)\n* [core] move addtl request-specific struct members\n* [core] move request state into (request_st *)\n* [core] store (plugin *) in p-\u003edata\n* [core] store subrequest_handler instead of mode\n* [multiple] copy small struct instead of memcpy()\n* [multiple] split con, request (very large change)\n* [core] r-\u003euri.path always set, though might be \u0027\u0027\n* [core] C99 restrict on some base funcs\n* [core] dispatch handler in handle_request func\n* [core] http_request_parse_target()\n* [mod_magnet] modify r-\u003etarget with \u0027uri.path-raw\u0027\n* [core] remove r-\u003euri.path_raw; generate as needed\n* [core] http_response_comeback()\n* [core] http_response_config()\n* [tests] use buffer_eq_slen() for str comparison\n* [core] http_status_append() short-circuit 200 OK\n* [core] mark some chunk.c funcs as pure\n* [core] use uint32_t in http_header.[ch]\n* [core] perf: tighten some code in some hot paths\n* [core] parse header label before end of line\n* [mod_auth] \u0027nonce_secret\u0027 option to validate nonce (fixes #2976)\n* [build] fix build on MacOS X Tiger\n* [doc] lighttpd.conf: lighttpd choose event-handler\n* [config] blank server.tag if whitespace-only\n* [mod_proxy] stream request using HTTP/1.1 chunked (fixes #3006)\n* [multiple] correct misspellings in comments\n* [multiple] fix some cc warnings in 32-bit, powerpc\n* [tests] fix skip count in mod-fastcgi w/o php-cgi\n* [multiple] ./configure --with-nettle to use Nettle\n* [core] skip excess close() when FD_CLOEXEC defined\n* [mod_cgi] remove redundant calls to set FD_CLOEXEC\n* [core] return EINVAL if stat_cache_get_entry w/o /\n* [mod_webdav] define PATH_MAX if not defined\n* [mod_accesslog] process backslash-escapes in fmt\n* [mod_openssl] disable cert vrfy if ALPN acme-tls/1\n* [core] add seed before openssl RAND_pseudo_bytes()\n* [mod_mbedtls] mbedTLS option for TLS\n* [core] prefer getxattr() instead of get_attr()\n* [multiple] use *(unsigned char *) with ctypes\n* [mod_openssl] do not log ECONNRESET unless debug\n* [mod_openssl] SSL_R_UNEXPECTED_EOF_WHILE_READING\n* [mod_gnutls] GnuTLS option for TLS (fixes #109)\n* [mod_openssl] rotate session ticket encryption key\n* [mod_openssl] set cert from callback in 1.0.2+ (fixes #2842)\n* [mod_openssl] set chains from callback in 1.0.2+ (#2842)\n* [core] RFC-strict parse of Content-Length\n* [build] point ./configure --help to support forum\n* [core] stricter parse of numerical digits\n* [multiple] add summaries to top of some modules\n* [core] sys-crypto-md.h w/ inline message digest fn\n* [mod_openssl] enable read-ahead, if set, after SNI\n* [mod_openssl] issue warning for deprecated options\n* [mod_openssl] use SSL_OP_NO_RENEGOTIATION if avail\n* [mod_openssl] use openssl feature define for ALPN\n* [mod_openssl] update default DH params\n* [core] SecureZeroMemory() on _WIN32\n* [core] safe memset calls memset() through volatile\n* [doc] update comments in doc/config/modules.conf\n* [core] more precise check for request stream flags\n* [mod_openssl] rotate session ticket encryption key\n* [mod_openssl] ssl.stek-file to specify encrypt key\n* [mod_mbedtls] ssl.stek-file to specify encrypt key\n* [mod_gnutls] ssl.stek-file to specify encrypt key\n* [mod_openssl] disable session cache; prefer ticket\n* [mod_openssl] compat with LibreSSL\n* [mod_openssl] compat with WolfSSL\n* [mod_openssl] set SSL_OP_PRIORITIZE_CHACHA\n* [mod_openssl] move SSL_CTX curve conf to new func\n* [mod_openssl] basic SSL_CONF_cmd for alt TLS libs\n* [mod_openssl] OCSP stapling (fixes #2469)\n* [TLS] cert-staple.sh - refresh OCSP responses (#2469)\n* [mod_openssl] compat with BoringSSL\n* [mod_gnutls] option to override GnuTLS priority\n* [mod_gnutls] OCSP stapling (#2469)\n* [mod_extforward] config warning for module order\n* [mod_webdav] store webdav.opts as bitflags\n* [mod_webdav] limit webdav_propfind_dir() recursion\n* [mod_webdav] unsafe-propfind-follow-symlink option\n* [mod_webdav] webdav.opts \u0027propfind-depth-infinity\u0027\n* [mod_openssl] detect certs marked OCSP Must-Staple\n* [mod_gnutls] detect certs marked OCSP Must-Staple\n* [mod_openssl] default to set MinProtocol TLSv1.2\n* [mod_nss] NSS option for TLS (fixes #1218)\n* [core] fdevent_load_file() shared code\n* [mod_openssl,mbedtls,gnutls,nss] fdevent_load_file\n* [core] error if s-\u003esocket_perms chmod() fails\n* [mod_openssl] prefer some WolfSSL native APIs\n* quiet clang analyzer scan-build warnings\n* [core] uint32_t is plenty large for path names\n* [mod_mysql_vhost] deprecated; use mod_vhostdb_mysql\n* [core] splaytree_djbhash() in splaytree.h (reuse)\n* [cmake] update deps for src/t/test_*\n* [cmake] update deps for src/t/test_*\n* [build] remove tests/mod-userdir.t from builds\n* [build] fix typo in src/Makefile.am EXTRA_DIST\n* [core] remove unused mbedtls_enabled flag\n* [core] store fd in srv-\u003estdin_fd during setup\n* [multiple] address coverity warnings\n* [mod_webdav] fix theoretical NULL dereference\n* [mod_webdav] update rc for PROPFIND allprop\n* [mod_webdav] build fix: ifdef live_properties\n* [multiple] address coverity warnings\n* [meson] fix libmariadb dependency\n* [meson] add missing libmaxminddb section\n* [mod_auth,mod_vhostdb] add caching option (fixes #2805)\n* [mod_authn_ldap,mod_vhostdb_ldap] add timeout opt (#2805)\n* [mod_auth] accept \u0027nonce-secret\u0027 \u0026 \u0027nonce_secret\u0027\n* [mod_openssl] fix build warnings on MacOS X\n* [core] Nettle assert()s if buffer len \u003e digest sz\n* [mod_authn_dbi] authn backend employing DBI\n* [mod_authn_mysql,file] use crypt() to save stack\n* [mod_vhostdb_dbi] allow strings and ints in config\n* add ci-build.sh\n* move ci-build.sh to scripts\n* [build] build fixes for AIX\n* [mod_deflate] Brotli support\n* [build] bzip2 default to not-enabled in build\n* [mod_deflate] fix typo in config option\n* [mod_deflate] propagate errs from internal funcs\n* [mod_deflate] deflate.cache-dir compressed cache\n* [mod_deflate] mod_deflate subsumes mod_compress\n* [doc] mod_compress -\u003e mod_deflate\n* [tests] mod_compress -\u003e mod_deflate\n* [mod_compress] remove mod_compress\n* [build] add --with-brotli to CI build\n* [core] server.feature-flags extensible config\n* [core] con layer plugin_ctx separate from request\n* [multiple] con hooks store ctx in con-\u003eplugin_ctx\n* [core] separate funcs to reset (request_st *)\n* [multiple] rename connection_reset hook to request\n* [mod_nss] func renames for consistency\n* [core] detect and reject TLS connect to cleartext\n* [mod_deflate] quicker check for Content-Encoding\n* [mod_openssl] read secret data w/ BIO_new_mem_buf\n* [core] decode Transfer-Encoding: chunked from gw\n* [mod_fastcgi] decode Transfer-Encoding: chunked\n* [core] stricter parsing of POST chunked block hdr\n* [mod_proxy] send HTTP/1.1 requests to backends\n* [tests] test_base64.c clear buf vs reset\n* [core] http_header_remove_token()\n* [mod_webdav] fix inadvertent string truncation\n* [core] add some missing standard includes\n* [mod_extforward] attempt to quiet Coverity warning\n* [mod_authn_dbi,mod_authn_mysql] fix coverity issue\n* scons: fix check environment\n* Add avahi service file under doc/avahi/\n* [mod_webdav] fix fallback if linkat() fails\n* [mod_proxy] do not forward Expect: 100-continue\n* [core] chunkqueue_compact_mem() must upd cq-\u003elast\n* [core] dlsym for FAMNoExists() for compat w/ fam\n* [core] disperse settings.h to appropriate headers\n* [core] inline buffer_reset()\n* [mod_extforward] save proto per connection\n* [mod_extforward] skip after HANDLER_COMEBACK\n* [core] server.feature-flags to enable h2\n* [core] HTTP_VERSION_2\n* [multiple] allow TLS ALPN \u0027h2\u0027 if \u0027server.h2proto\u0027\n* [mod_extforward] preserve changed addr for h2 con\n* [core] do not send Connection: close if h2\n* [core] lowercase response hdr field names for h2\n* [core] recognize status: 421 Misdirected Request\n* [core] parse h2 pseudo-headers\n* [core] request_headers_process()\n* [core] connection_state_machine_loop()\n* [core] reset connection counters per connection\n* [mod_accesslog,mod_rrdtool] HTTP/2 basic accounting\n* [core] connection_set_fdevent_interest()\n* [core] HTTP2-Settings\n* [core] adjust http_request_headers_process()\n* [core] http_header_parse_hoff()\n* [core] move http_request_headers_process()\n* [core] reqpool.[ch] for (request_st *)\n* [multiple] modules read reqbody via fn ptr\n* [multiple] isolate more con code in connections.c\n* [core] isolate more resp code in response.c\n* [core] h2.[ch] with stub funcs (incomplete)\n* [core] alternate between two joblists\n* [core] connection transition to HTTP/2; incomplete\n* [core] mark some error paths with attribute cold\n* [core] discard 100 102 103 responses from backend\n* [core] skip write throttle for 100 Continue\n* [core] adjust (disabled) debug code\n* [core] update comment\n* [core] link in ls-hpack (EXPERIMENTAL)\n* [core] HTTP/2 HPACK using LiteSpeed ls-hpack\n* [core] h2_send_headers() specialized for resp hdrs\n* [core] http_request_parse_header() specialized\n* [core] comment possible future ls-hpack optimize\n* [mod_status] separate funcs to print request table\n* [mod_status] adjust to print HTTP/2 requests\n* [core] redirect to dir using relative-path\n* [core] ignore empty field-name from backends\n* [mod_auth] fix crash if auth.require misconfigured (fixes #3023)\n* [core] fix 1-char trunc of default server.tag\n* [core] request_acquire(), request_release()\n* [core] keep pool of (request_st *) for HTTP/2\n* [mod_status] dedicated funcs for r-\u003estate labels\n* [core] move connections_get_state to connections.c\n* [core] fix crash on master after graceful restart\n* [core] defer optimization to read small files\n* [core] do not require \u0027\\0\u0027 term for k,v hdr parse\n* [scripts] cert-staple.sh enhancements\n* [core] document algorithm used in lighttpd etag\n* [core] ls-hpack optimizations\n* [core] fix crash on master if blank line request\n* [core] use djbhash in gw_backend to choose host\n* [core] rename md5.[ch] to algo_md5.[ch]\n* [core] move djbhash(), dekhash() to algo_md.h\n* [core] rename splaytree.[ch] to algo_splaytree.[ch]\n* [core] import xxHash v0.8.0\n* [build] modify build, includes for xxHash v0.8.0\n* [build] remove ls-hpack/deps\n* [core] xxhash no inline hints; let compiler choose\n* [mod_dirlisting] fix config parsing crash\n* [mod_openssl] clarify trace w/ deprecated options\n* [doc] refresh doc/config/*/*\n* [core] code size: disable XXH64(), XXH3()\n* [doc] update README and INSTALL\n* [core] combine Cookie request headers with \u0027;\u0027\n* [core] log stream id with debug.log-state-handling\n* [core] set r-\u003estate in h2.c\n* [mod_ssi] update chunk after shell output redirect\n* [mod_webdav] preserve bytes_out when chunks merged\n* [multiple] inline chunkqueue_length()\n* [core] cold h2_log_response_header*() funcs\n* [core] update HTTP status codes list from IANA\n* [mod_wolfssl] standalone module\n* [core] Content-Length in http_response_send_file()\n* [core] adjust response header prep for common case\n* [core] light_isupper(), light_islower()\n* [core] tst,set,clr macros for r-\u003e{rqst,resp}_htags\n* [core] separate http_header_e from _htags bitmask\n* [core] http_header_hkey_get_lc() for HTTP/2\n* [core] array.[ch] using uint32_t instead of size_t\n* [core] extend (data_string *) to store header id\n* [multiple] extend enum http_header_e list\n* [core] http_header_e \u003c=\u003e lshpack_static_hdr_idx\n* [core] skip ls-hpack decode work unused by lighttpd\n* [TLS] error if inherit empty TLS cfg from globals\n* [core] connection_check_expect_100()\n* [core] support multiple 1xx responses from backend\n* [core] reload c after chunkqueue_compact_mem()\n* [core] relay 1xx from backend over HTTP/2\n* [core] relay 1xx from backend over HTTP/1.1\n* [core] chunkqueue_{peek,read}_data(), squash\n* [multiple] TLS modules use chunkqueue_peek_data()\n* [mod_magnet] magnet.attract-response-start-to\n* [multiple] code reuse chunkqueue_peek_data()\n* [core] reuse r-\u003estart_hp.tv_sec for r-\u003estart_ts\n* [core] config_plugin_value_tobool() accept \u00270\u0027,\u00271\u0027\n* [core] graceful and immediate restart option\n* [mod_ssi] init status var before waitpid()\n* [core] graceful shutdown timeout option\n* [core] lighttpd -1 supports pipes (e.g. netcat)\n* [core] perf adjustments to avoid load miss\n* [multiple] use sock_addr_get_family in more places\n* [multiple] inline chunkqueue where always alloc\u0027d\n* [core] propagate state after writing\n* [core] server_run_con_queue()\n* [core] defer handling FDEVENT_HUP and FDEVENT_ERR\n* [core] handle unexpected EOF reading FILE_CHUNK\n* [core] short-circuit connection_write_throttle()\n* [core] walk queue in connection_write_chunkqueue()\n* [core] connection_joblist global\n* [core] be more precise checking streaming flags\n* [core] fdevent_load_file_bytes()\n* [TLS] use fdevent_load_file_bytes() for STEK file\n* [core] allow symlinks under /dev for rand devices\n* [multiple] use light_btst() for hdr existence chk\n* [mod_deflate] fix potential NULL deref in err case\n* [core] save errno around close() if fstat() fails\n* [mod_ssi] use stat_cache_open_rdonly_fstat()\n* [core] fdevent_dup_cloexec()\n* [core] dup FILE_CHUNK fd when splitting FILE_CHUNK\n* [core] stat_cache_path_isdir()\n* [multiple] use stat_cache_path_isdir()\n* [mod_mbedtls] quiet CLOSE_NOTIFY after conn reset\n* [mod_gnutls] quiet CLOSE_NOTIFY after conn reset\n* [core] limit num ranges in Range requests\n* [core] remove unused r-\u003econtent_length\n* [core] http_response_parse_range() const file sz\n* [core] pass open fd to http_response_parse_range\n* [core] stat_cache_get_entry_open()\n* [core,mod_deflate] leverage cache of open fd\n* [doc] comment out config disabling Range for .pdf\n* [core] coalesce nearby ranges in Range requests\n* [mod_fastcgi] decode chunked is cold code path\n* [core] fix chunkqueue_compact_mem w/ partial chunk\n* [core] alloc optim reading file, sending chunked\n* [core] reuse chunkqueue_compact_mem*()\n* [mod_cgi] use splice() to send input to CGI\n* [multiple] ignore openssl 3.0.0 deprecation warns\n* [mod_openssl] migrate ticket cb to openssl 3.0.0\n* [mod_openssl] construct OSSL_PARAM on stack\n* [mod_openssl] merge ssl_tlsext_ticket_key_cb impls\n* [multiple] openssl 3.0.0 digest interface migrate\n* [tests] detect multiple SSL/TLS/crypto providers\n* [core] sys-crypto-md.h consistent interfaces\n* [wolfssl] wolfSSL_CTX_set_mode differs from others\n* [multiple] use NSS crypto if no other crypto avail\n* [multiple] stat_cache_path_stat() for struct st\n* [TLS] ignore empty \u0027CipherString\u0027 in ssl-conf-cmd\n* [multiple] remove chunk file.start member\n* [core] modify use of getrlimit() to not be fatal\n* [mod_webdav] add missing update to cq accounting\n* [mod_webdav] update defaults after worker_init\n* [mod_openssl] use newer openssl 3.0.0 func\n* [core] config_plugin_value_to_int32()\n* [core] minimize pause during graceful restart\n* [mod_deflate] use large mmap chunks to compress\n* [core] stat_cache_entry reference counting\n* [core] FILE_CHUNK can hold stat_cache_entry ref\n* [core] http_chunk_append_file_ref_range()\n* [multiple] use http_chunk_append_file_ref()\n* [core] always lseek() with shared fd\n* [core] silence coverity warnings (false positives)\n* [core] silence coverity warnings in ls-hpack\n* [core] silence coverity warnings (another try)\n* [core] fix fd sharing when splitting file chunk\n* [mod_mbedtls] quiet unused variable warning\n* [core] use inline funcs in sys-crypto-md.h\n* [core] add missing declaration for NSS rand\n* [core] init NSS lib for basic crypto algorithms\n* [doc] change mod_compress refs to mod_deflate\n* [doc] replace bzip2 refs with brotli\n* [build] remove svnversion from versionstamp rule\n* [doc] /var/run -\u003e /run\n* [multiple] test for nss includes\n* [mod_nss] more nss includes fixes\n* [mod_webdav] define _NETBSD_SOURCE on NetBSD\n* [core] silence coverity warnings (another try)\n* [mod_mbedtls] newer mbedTLS vers support TLSv1.3\n* [mod_accesslog] update defaults after cycling log\n* [multiple] add some missing config cleanup\n* [core] fix (startup) mem leaks in configparser.y\n* [core] STAILQ_* -\u003e SIMPLEQ_* on OpenBSD\n* [mod_wolfssl] use more wolfssl/options.h defines\n* [mod_wolfssl] cripple SNI if not built OPENSSL_ALL\n* [mod_wolfssl] need to build --enable-alpn for ALPN\n* [mod_secdownload] fix compile w/ NSS on FreeBSD\n* [mod_mbedtls] wrap addtl code in preproc defines\n* [TLS] server.feature-flags \u0027ssl.session-cache\u0027\n* [core] workaround fragile code in wolfssl types.h\n* [core] move misplaced error trace to match option\n* [core] adjust wolfssl workaround for another case\n* [multiple] consistent order for crypto lib select\n* [multiple] include mbedtls/config.h after select\n* [multiple] include wolfssl/options.h after select\n* [core] set NSS_VER_INCLUDE after crypto lib select\n* [core] use system xxhash lib if available\n* [doc] refresh doc/config/conf.d/mime.conf\n* [meson] add matching -I for lua lib version\n* [build] prepend search for lua version 5.4\n* [core] use inotify in stat_cache.[ch] on Linux\n* [build] detect inotify header \u003csys/inotify.h\u003e\n* [mod_nss] update session ticket NSS devel comment\n* [core] set last_used on rd/wr from backend (fixes #3029)\n* [core] cold func for gw_recv_response error case\n* [core] use kqueue() instead of FAM/gamin on *BSD\n* [core] no graceful-restart-bg on OpenBSD, NetBSD\n* [mod_openssl] add LIBRESSL_VERSION_NUMBER checks\n* [core] use struct kevent on stack in stat_cache\n* [core] stat_cache preprocessor paranoia\n* [mod_openssl] adjust LIBRESSL_VERSION_NUMBER check\n* [mod_maxminddb] fix config validation typo\n* [tests] allow LIGHTTPD_EXE_PATH override\n* [multiple] handle NULL val as empty in *_env_add (fixes #3030)\n* [core] accept \u0027HTTP/2.0\u0027, \u0027HTTP/3.0\u0027 from backends (fixes #3031)\n* [build] check for xxhash in more ways\n* [core] accept \u0027HTTP/2.0\u0027, \u0027HTTP/3.0\u0027 from backends (#3031)\n* [core] http_response_buffer_append_authority()\n* [core] define SHA*_DIGEST_LENGTH macros if missing\n* [doc] update optional pkg dependencies in INSTALL\n* [mod_alias] validate given order, not sorted order\n* [core] filter out duplicate modules\n* [mod_cgi] fix crash if initial write to CGI fails\n* [mod_cgi] ensure tmp file open() before splice()\n* [multiple] add back-pressure gw data pump (fixes #3033)\n* [core] fix bug when HTTP/2 frames span chunks\n* [multiple] more forgiving config str to boolean (fixes #3036)\n* [core] check for __builtin_expect() availability\n* [core] quiet more request parse errs unless debug\n* [core] consolidate chunk size checks\n* [mod_flv_streaming] use stat_cache_get_entry_open\n* [mod_webdav] pass full path to webdav_unlinkat()\n* [mod_webdav] fallbacks if _ATFILE_SOURCE not avail\n* [mod_fastcgi] move src/fastcgi.h into src/compat/\n* [mod_status] add additional HTML-encoding\n* [core] server.v4mapped option\n* [mod_webdav] workaround for gvfs dir redir bug\n\n- Remove SuSEfirewall2 service files, SuSEfirewall2 does not exist\n  anymore\n\n- Changed /etc/logrotate.d/lighttpd from init.d to systemd\n  fix boo#1146452. \n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2022-24",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2022_0024-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2022:0024-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6P5G6MJW4Q5RKKPO7TS5CLAAEQ2QUYBE/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2022:0024-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6P5G6MJW4Q5RKKPO7TS5CLAAEQ2QUYBE/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1146452",
        "url": "https://bugzilla.suse.com/1146452"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1181400",
        "url": "https://bugzilla.suse.com/1181400"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1194376",
        "url": "https://bugzilla.suse.com/1194376"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-22707 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-22707/"
      }
    ],
    "title": "Security update for lighttpd",
    "tracking": {
      "current_release_date": "2022-02-02T12:46:24Z",
      "generator": {
        "date": "2022-02-02T12:46:24Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2022:0024-1",
      "initial_release_date": "2022-02-02T12:46:24Z",
      "revision_history": [
        {
          "date": "2022-02-02T12:46:24Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "lighttpd-1.4.64-bp153.2.3.1.aarch64",
                "product": {
                  "name": "lighttpd-1.4.64-bp153.2.3.1.aarch64",
                  "product_id": "lighttpd-1.4.64-bp153.2.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.aarch64",
                "product": {
                  "name": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.aarch64",
                  "product_id": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.aarch64",
                "product": {
                  "name": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.aarch64",
                  "product_id": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.aarch64",
                "product": {
                  "name": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.aarch64",
                  "product_id": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.aarch64",
                "product": {
                  "name": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.aarch64",
                  "product_id": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.aarch64",
                "product": {
                  "name": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.aarch64",
                  "product_id": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.aarch64",
                "product": {
                  "name": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.aarch64",
                  "product_id": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.aarch64",
                "product": {
                  "name": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.aarch64",
                  "product_id": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.aarch64",
                "product": {
                  "name": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.aarch64",
                  "product_id": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.aarch64",
                "product": {
                  "name": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.aarch64",
                  "product_id": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.aarch64",
                "product": {
                  "name": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.aarch64",
                  "product_id": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.aarch64",
                "product": {
                  "name": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.aarch64",
                  "product_id": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.aarch64",
                "product": {
                  "name": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.aarch64",
                  "product_id": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "lighttpd-1.4.64-bp153.2.3.1.i586",
                "product": {
                  "name": "lighttpd-1.4.64-bp153.2.3.1.i586",
                  "product_id": "lighttpd-1.4.64-bp153.2.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.i586",
                "product": {
                  "name": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.i586",
                  "product_id": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.i586",
                "product": {
                  "name": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.i586",
                  "product_id": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.i586",
                "product": {
                  "name": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.i586",
                  "product_id": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.i586",
                "product": {
                  "name": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.i586",
                  "product_id": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.i586",
                "product": {
                  "name": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.i586",
                  "product_id": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.i586",
                "product": {
                  "name": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.i586",
                  "product_id": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.i586",
                "product": {
                  "name": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.i586",
                  "product_id": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.i586",
                "product": {
                  "name": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.i586",
                  "product_id": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.i586",
                "product": {
                  "name": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.i586",
                  "product_id": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.i586",
                "product": {
                  "name": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.i586",
                  "product_id": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.i586",
                "product": {
                  "name": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.i586",
                  "product_id": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.i586",
                "product": {
                  "name": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.i586",
                  "product_id": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "lighttpd-1.4.64-bp153.2.3.1.ppc64le",
                "product": {
                  "name": "lighttpd-1.4.64-bp153.2.3.1.ppc64le",
                  "product_id": "lighttpd-1.4.64-bp153.2.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.ppc64le",
                "product": {
                  "name": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.ppc64le",
                  "product_id": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.ppc64le",
                "product": {
                  "name": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.ppc64le",
                  "product_id": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.ppc64le",
                "product": {
                  "name": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.ppc64le",
                  "product_id": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.ppc64le",
                "product": {
                  "name": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.ppc64le",
                  "product_id": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.ppc64le",
                "product": {
                  "name": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.ppc64le",
                  "product_id": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.ppc64le",
                "product": {
                  "name": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.ppc64le",
                  "product_id": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.ppc64le",
                "product": {
                  "name": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.ppc64le",
                  "product_id": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.ppc64le",
                "product": {
                  "name": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.ppc64le",
                  "product_id": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.ppc64le",
                "product": {
                  "name": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.ppc64le",
                  "product_id": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.ppc64le",
                "product": {
                  "name": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.ppc64le",
                  "product_id": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.ppc64le",
                "product": {
                  "name": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.ppc64le",
                  "product_id": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.ppc64le",
                "product": {
                  "name": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.ppc64le",
                  "product_id": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "lighttpd-1.4.64-bp153.2.3.1.s390x",
                "product": {
                  "name": "lighttpd-1.4.64-bp153.2.3.1.s390x",
                  "product_id": "lighttpd-1.4.64-bp153.2.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.s390x",
                "product": {
                  "name": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.s390x",
                  "product_id": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.s390x",
                "product": {
                  "name": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.s390x",
                  "product_id": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.s390x",
                "product": {
                  "name": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.s390x",
                  "product_id": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.s390x",
                "product": {
                  "name": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.s390x",
                  "product_id": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.s390x",
                "product": {
                  "name": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.s390x",
                  "product_id": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.s390x",
                "product": {
                  "name": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.s390x",
                  "product_id": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.s390x",
                "product": {
                  "name": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.s390x",
                  "product_id": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.s390x",
                "product": {
                  "name": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.s390x",
                  "product_id": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.s390x",
                "product": {
                  "name": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.s390x",
                  "product_id": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.s390x",
                "product": {
                  "name": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.s390x",
                  "product_id": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.s390x",
                "product": {
                  "name": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.s390x",
                  "product_id": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.s390x",
                "product": {
                  "name": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.s390x",
                  "product_id": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "lighttpd-1.4.64-bp153.2.3.1.x86_64",
                "product": {
                  "name": "lighttpd-1.4.64-bp153.2.3.1.x86_64",
                  "product_id": "lighttpd-1.4.64-bp153.2.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.x86_64",
                "product": {
                  "name": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.x86_64",
                  "product_id": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.x86_64",
                "product": {
                  "name": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.x86_64",
                  "product_id": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.x86_64",
                "product": {
                  "name": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.x86_64",
                  "product_id": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.x86_64",
                "product": {
                  "name": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.x86_64",
                  "product_id": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.x86_64",
                "product": {
                  "name": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.x86_64",
                  "product_id": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.x86_64",
                "product": {
                  "name": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.x86_64",
                  "product_id": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.x86_64",
                "product": {
                  "name": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.x86_64",
                  "product_id": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.x86_64",
                "product": {
                  "name": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.x86_64",
                  "product_id": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.x86_64",
                "product": {
                  "name": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.x86_64",
                  "product_id": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.x86_64",
                "product": {
                  "name": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.x86_64",
                  "product_id": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.x86_64",
                "product": {
                  "name": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.x86_64",
                  "product_id": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.x86_64",
                "product": {
                  "name": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.x86_64",
                  "product_id": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Package Hub 15 SP3",
                "product": {
                  "name": "SUSE Package Hub 15 SP3",
                  "product_id": "SUSE Package Hub 15 SP3"
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.3",
                "product": {
                  "name": "openSUSE Leap 15.3",
                  "product_id": "openSUSE Leap 15.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-1.4.64-bp153.2.3.1.aarch64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-1.4.64-bp153.2.3.1.i586 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-1.4.64-bp153.2.3.1.ppc64le as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-1.4.64-bp153.2.3.1.s390x as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-1.4.64-bp153.2.3.1.x86_64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.aarch64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.i586 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.ppc64le as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.s390x as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.x86_64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.aarch64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.i586 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.ppc64le as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.s390x as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.x86_64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.aarch64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.i586 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.ppc64le as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.s390x as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.x86_64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.aarch64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.i586 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.ppc64le as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.s390x as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.x86_64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.aarch64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.i586 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.ppc64le as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.s390x as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.x86_64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.aarch64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.i586 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.ppc64le as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.s390x as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.x86_64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.aarch64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.i586 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.ppc64le as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.s390x as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.x86_64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.aarch64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.i586 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.ppc64le as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.s390x as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.x86_64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.aarch64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.i586 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.ppc64le as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.s390x as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.x86_64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.aarch64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.i586 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.ppc64le as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.s390x as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.x86_64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.aarch64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.i586 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.ppc64le as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.s390x as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.x86_64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.aarch64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.i586 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.ppc64le as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.s390x as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.x86_64 as component of SUSE Package Hub 15 SP3",
          "product_id": "SUSE Package Hub 15 SP3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-1.4.64-bp153.2.3.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-1.4.64-bp153.2.3.1.i586 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-1.4.64-bp153.2.3.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-1.4.64-bp153.2.3.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-1.4.64-bp153.2.3.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.i586 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.i586 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.i586 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.i586 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.i586 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-mod_magnet-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.i586 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.i586 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.i586 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.i586 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.i586 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.i586 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.aarch64"
        },
        "product_reference": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.i586 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.i586"
        },
        "product_reference": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.i586",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.ppc64le"
        },
        "product_reference": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.s390x"
        },
        "product_reference": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.x86_64"
        },
        "product_reference": "lighttpd-mod_webdav-1.4.64-bp153.2.3.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-22707",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-22707"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow (4 bytes representing -1), as demonstrated by remote denial of service (daemon crash) in a non-default configuration. The non-default configuration requires handling of the Forwarded header in a somewhat unusual manner. Also, a 32-bit system is much more likely to be affected than a 64-bit system.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 15 SP3:lighttpd-1.4.64-bp153.2.3.1.aarch64",
          "SUSE Package Hub 15 SP3:lighttpd-1.4.64-bp153.2.3.1.i586",
          "SUSE Package Hub 15 SP3:lighttpd-1.4.64-bp153.2.3.1.ppc64le",
          "SUSE Package Hub 15 SP3:lighttpd-1.4.64-bp153.2.3.1.s390x",
          "SUSE Package Hub 15 SP3:lighttpd-1.4.64-bp153.2.3.1.x86_64",
          "SUSE Package Hub 15 SP3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.aarch64",
          "SUSE Package Hub 15 SP3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.i586",
          "SUSE Package Hub 15 SP3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.ppc64le",
          "SUSE Package Hub 15 SP3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.s390x",
          "SUSE Package Hub 15 SP3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.x86_64",
          "SUSE Package Hub 15 SP3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.aarch64",
          "SUSE Package Hub 15 SP3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.i586",
          "SUSE Package Hub 15 SP3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.ppc64le",
          "SUSE Package Hub 15 SP3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.s390x",
          "SUSE Package Hub 15 SP3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.x86_64",
          "SUSE Package Hub 15 SP3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.aarch64",
          "SUSE Package Hub 15 SP3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.i586",
          "SUSE Package Hub 15 SP3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.ppc64le",
          "SUSE Package Hub 15 SP3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.s390x",
          "SUSE Package Hub 15 SP3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.x86_64",
          "SUSE Package Hub 15 SP3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.aarch64",
          "SUSE Package Hub 15 SP3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.i586",
          "SUSE Package Hub 15 SP3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.ppc64le",
          "SUSE Package Hub 15 SP3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.s390x",
          "SUSE Package Hub 15 SP3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.x86_64",
          "SUSE Package Hub 15 SP3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.aarch64",
          "SUSE Package Hub 15 SP3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.i586",
          "SUSE Package Hub 15 SP3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.ppc64le",
          "SUSE Package Hub 15 SP3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.s390x",
          "SUSE Package Hub 15 SP3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.x86_64",
          "SUSE Package Hub 15 SP3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.aarch64",
          "SUSE Package Hub 15 SP3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.i586",
          "SUSE Package Hub 15 SP3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.ppc64le",
          "SUSE Package Hub 15 SP3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.s390x",
          "SUSE Package Hub 15 SP3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.x86_64",
          "SUSE Package Hub 15 SP3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.aarch64",
          "SUSE Package Hub 15 SP3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.i586",
          "SUSE Package Hub 15 SP3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.ppc64le",
          "SUSE Package Hub 15 SP3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.s390x",
          "SUSE Package Hub 15 SP3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.x86_64",
          "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.aarch64",
          "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.i586",
          "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.ppc64le",
          "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.s390x",
          "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.x86_64",
          "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.aarch64",
          "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.i586",
          "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.ppc64le",
          "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.s390x",
          "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.x86_64",
          "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.aarch64",
          "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.i586",
          "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.ppc64le",
          "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.s390x",
          "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.x86_64",
          "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.aarch64",
          "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.i586",
          "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.ppc64le",
          "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.s390x",
          "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.x86_64",
          "SUSE Package Hub 15 SP3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.aarch64",
          "SUSE Package Hub 15 SP3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.i586",
          "SUSE Package Hub 15 SP3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.ppc64le",
          "SUSE Package Hub 15 SP3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.s390x",
          "SUSE Package Hub 15 SP3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.x86_64",
          "openSUSE Leap 15.3:lighttpd-1.4.64-bp153.2.3.1.aarch64",
          "openSUSE Leap 15.3:lighttpd-1.4.64-bp153.2.3.1.i586",
          "openSUSE Leap 15.3:lighttpd-1.4.64-bp153.2.3.1.ppc64le",
          "openSUSE Leap 15.3:lighttpd-1.4.64-bp153.2.3.1.s390x",
          "openSUSE Leap 15.3:lighttpd-1.4.64-bp153.2.3.1.x86_64",
          "openSUSE Leap 15.3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.aarch64",
          "openSUSE Leap 15.3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.i586",
          "openSUSE Leap 15.3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.ppc64le",
          "openSUSE Leap 15.3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.s390x",
          "openSUSE Leap 15.3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.x86_64",
          "openSUSE Leap 15.3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.aarch64",
          "openSUSE Leap 15.3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.i586",
          "openSUSE Leap 15.3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.ppc64le",
          "openSUSE Leap 15.3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.s390x",
          "openSUSE Leap 15.3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.x86_64",
          "openSUSE Leap 15.3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.aarch64",
          "openSUSE Leap 15.3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.i586",
          "openSUSE Leap 15.3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.ppc64le",
          "openSUSE Leap 15.3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.s390x",
          "openSUSE Leap 15.3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.x86_64",
          "openSUSE Leap 15.3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.aarch64",
          "openSUSE Leap 15.3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.i586",
          "openSUSE Leap 15.3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.ppc64le",
          "openSUSE Leap 15.3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.s390x",
          "openSUSE Leap 15.3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.x86_64",
          "openSUSE Leap 15.3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.aarch64",
          "openSUSE Leap 15.3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.i586",
          "openSUSE Leap 15.3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.ppc64le",
          "openSUSE Leap 15.3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.s390x",
          "openSUSE Leap 15.3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.x86_64",
          "openSUSE Leap 15.3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.aarch64",
          "openSUSE Leap 15.3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.i586",
          "openSUSE Leap 15.3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.ppc64le",
          "openSUSE Leap 15.3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.s390x",
          "openSUSE Leap 15.3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.x86_64",
          "openSUSE Leap 15.3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.aarch64",
          "openSUSE Leap 15.3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.i586",
          "openSUSE Leap 15.3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.ppc64le",
          "openSUSE Leap 15.3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.s390x",
          "openSUSE Leap 15.3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.x86_64",
          "openSUSE Leap 15.3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.aarch64",
          "openSUSE Leap 15.3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.i586",
          "openSUSE Leap 15.3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.ppc64le",
          "openSUSE Leap 15.3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.s390x",
          "openSUSE Leap 15.3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.x86_64",
          "openSUSE Leap 15.3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.aarch64",
          "openSUSE Leap 15.3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.i586",
          "openSUSE Leap 15.3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.ppc64le",
          "openSUSE Leap 15.3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.s390x",
          "openSUSE Leap 15.3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.x86_64",
          "openSUSE Leap 15.3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.aarch64",
          "openSUSE Leap 15.3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.i586",
          "openSUSE Leap 15.3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.ppc64le",
          "openSUSE Leap 15.3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.s390x",
          "openSUSE Leap 15.3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.x86_64",
          "openSUSE Leap 15.3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.aarch64",
          "openSUSE Leap 15.3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.i586",
          "openSUSE Leap 15.3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.ppc64le",
          "openSUSE Leap 15.3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.s390x",
          "openSUSE Leap 15.3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.x86_64",
          "openSUSE Leap 15.3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.aarch64",
          "openSUSE Leap 15.3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.i586",
          "openSUSE Leap 15.3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.ppc64le",
          "openSUSE Leap 15.3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.s390x",
          "openSUSE Leap 15.3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-22707",
          "url": "https://www.suse.com/security/cve/CVE-2022-22707"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194376 for CVE-2022-22707",
          "url": "https://bugzilla.suse.com/1194376"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 15 SP3:lighttpd-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-1.4.64-bp153.2.3.1.x86_64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.x86_64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.x86_64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.x86_64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.x86_64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.x86_64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.x86_64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.x86_64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.x86_64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.x86_64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.x86_64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.x86_64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Package Hub 15 SP3:lighttpd-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-1.4.64-bp153.2.3.1.x86_64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.x86_64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.x86_64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.x86_64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.x86_64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.x86_64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.x86_64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.x86_64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.x86_64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.x86_64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.x86_64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.x86_64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.aarch64",
            "SUSE Package Hub 15 SP3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.i586",
            "SUSE Package Hub 15 SP3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.ppc64le",
            "SUSE Package Hub 15 SP3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.s390x",
            "SUSE Package Hub 15 SP3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-mod_authn_gssapi-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-mod_authn_ldap-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-mod_authn_pam-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-mod_authn_sasl-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-mod_magnet-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-mod_maxminddb-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-mod_rrdtool-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_dbi-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_ldap-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_mysql-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-mod_vhostdb_pgsql-1.4.64-bp153.2.3.1.x86_64",
            "openSUSE Leap 15.3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.aarch64",
            "openSUSE Leap 15.3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.i586",
            "openSUSE Leap 15.3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.ppc64le",
            "openSUSE Leap 15.3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.s390x",
            "openSUSE Leap 15.3:lighttpd-mod_webdav-1.4.64-bp153.2.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-02-02T12:46:24Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-22707"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.


Loading…

Loading…