Security update for apache2 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:3067-1 Final 1 1 2020-10-28T10:46:08Z current 2020-10-28T10:46:08Z 2020-10-28T10:46:08Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for apache2 This update for apache2 fixes the following issues: - Enables the patch for CVE-2020-11993 and CVE-2020-9490. The patch was included but not applied in the previous update. (bsc#1178074) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy-2020-3067,Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server-2020-3067,Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy-2020-3067,Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server-2020-3067,Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy-2020-3067,Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server-2020-3067,Image SLES15-SP1-SAPCAL-Azure-2020-3067,Image SLES15-SP1-SAPCAL-EC2-HVM-2020-3067,Image SLES15-SP1-SAPCAL-GCE-2020-3067,SUSE-2020-3067,SUSE-SLE-Module-Server-Applications-15-SP1-2020-3067,SUSE-SLE-Product-HPC-15-2020-3067,SUSE-SLE-Product-SLES-15-2020-3067,SUSE-SLE-Product-SLES_SAP-15-2020-3067 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20203067-1/ Link for SUSE-SU-2020:3067-1 https://lists.suse.com/pipermail/sle-security-updates/2020-October/007655.html E-Mail link for SUSE-SU-2020:3067-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1175070 SUSE Bug 1175070 https://bugzilla.suse.com/1175071 SUSE Bug 1175071 https://bugzilla.suse.com/1178074 SUSE Bug 1178074 https://www.suse.com/security/cve/CVE-2020-11993/ SUSE CVE CVE-2020-11993 page https://www.suse.com/security/cve/CVE-2020-9490/ SUSE CVE CVE-2020-9490 page Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server Image SLES15-SP1-SAPCAL-Azure Image SLES15-SP1-SAPCAL-EC2-HVM Image SLES15-SP1-SAPCAL-GCE SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 apache2-2.4.33-3.41.1 apache2-prefork-2.4.33-3.41.1 apache2-utils-2.4.33-3.41.1 apache2-devel-2.4.33-3.41.1 apache2-doc-2.4.33-3.41.1 apache2-event-2.4.33-3.41.1 apache2-example-pages-2.4.33-3.41.1 apache2-worker-2.4.33-3.41.1 apache2-2.4.33-3.41.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy apache2-prefork-2.4.33-3.41.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy apache2-utils-2.4.33-3.41.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy apache2-2.4.33-3.41.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server apache2-prefork-2.4.33-3.41.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server apache2-utils-2.4.33-3.41.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server apache2-2.4.33-3.41.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy apache2-prefork-2.4.33-3.41.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy apache2-utils-2.4.33-3.41.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy apache2-2.4.33-3.41.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server apache2-prefork-2.4.33-3.41.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server apache2-utils-2.4.33-3.41.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server apache2-2.4.33-3.41.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy apache2-prefork-2.4.33-3.41.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy apache2-utils-2.4.33-3.41.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy apache2-2.4.33-3.41.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server apache2-prefork-2.4.33-3.41.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server apache2-utils-2.4.33-3.41.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server apache2-2.4.33-3.41.1 as a component of Image SLES15-SP1-SAPCAL-Azure apache2-prefork-2.4.33-3.41.1 as a component of Image SLES15-SP1-SAPCAL-Azure apache2-utils-2.4.33-3.41.1 as a component of Image SLES15-SP1-SAPCAL-Azure apache2-2.4.33-3.41.1 as a component of Image SLES15-SP1-SAPCAL-EC2-HVM apache2-prefork-2.4.33-3.41.1 as a component of Image SLES15-SP1-SAPCAL-EC2-HVM apache2-utils-2.4.33-3.41.1 as a component of Image SLES15-SP1-SAPCAL-EC2-HVM apache2-2.4.33-3.41.1 as a component of Image SLES15-SP1-SAPCAL-GCE apache2-prefork-2.4.33-3.41.1 as a component of Image SLES15-SP1-SAPCAL-GCE apache2-utils-2.4.33-3.41.1 as a component of Image SLES15-SP1-SAPCAL-GCE apache2-2.4.33-3.41.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS apache2-devel-2.4.33-3.41.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS apache2-doc-2.4.33-3.41.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS apache2-prefork-2.4.33-3.41.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS apache2-utils-2.4.33-3.41.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS apache2-worker-2.4.33-3.41.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS apache2-2.4.33-3.41.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS apache2-devel-2.4.33-3.41.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS apache2-doc-2.4.33-3.41.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS apache2-prefork-2.4.33-3.41.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS apache2-utils-2.4.33-3.41.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS apache2-worker-2.4.33-3.41.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS apache2-2.4.33-3.41.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 apache2-devel-2.4.33-3.41.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 apache2-doc-2.4.33-3.41.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 apache2-prefork-2.4.33-3.41.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 apache2-utils-2.4.33-3.41.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 apache2-worker-2.4.33-3.41.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP1 apache2-2.4.33-3.41.1 as a component of SUSE Linux Enterprise Server 15-LTSS apache2-devel-2.4.33-3.41.1 as a component of SUSE Linux Enterprise Server 15-LTSS apache2-doc-2.4.33-3.41.1 as a component of SUSE Linux Enterprise Server 15-LTSS apache2-prefork-2.4.33-3.41.1 as a component of SUSE Linux Enterprise Server 15-LTSS apache2-utils-2.4.33-3.41.1 as a component of SUSE Linux Enterprise Server 15-LTSS apache2-worker-2.4.33-3.41.1 as a component of SUSE Linux Enterprise Server 15-LTSS apache2-2.4.33-3.41.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 apache2-devel-2.4.33-3.41.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 apache2-doc-2.4.33-3.41.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 apache2-prefork-2.4.33-3.41.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 apache2-utils-2.4.33-3.41.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 apache2-worker-2.4.33-3.41.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of mod_http2 above "info" will mitigate this vulnerability for unpatched servers. CVE-2020-11993 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:apache2-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:apache2-prefork-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:apache2-utils-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:apache2-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:apache2-prefork-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:apache2-utils-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:apache2-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:apache2-prefork-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:apache2-utils-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:apache2-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:apache2-prefork-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:apache2-utils-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:apache2-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:apache2-prefork-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:apache2-utils-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:apache2-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:apache2-prefork-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:apache2-utils-2.4.33-3.41.1 Image SLES15-SP1-SAPCAL-Azure:apache2-2.4.33-3.41.1 Image SLES15-SP1-SAPCAL-Azure:apache2-prefork-2.4.33-3.41.1 Image SLES15-SP1-SAPCAL-Azure:apache2-utils-2.4.33-3.41.1 Image SLES15-SP1-SAPCAL-EC2-HVM:apache2-2.4.33-3.41.1 Image SLES15-SP1-SAPCAL-EC2-HVM:apache2-prefork-2.4.33-3.41.1 Image SLES15-SP1-SAPCAL-EC2-HVM:apache2-utils-2.4.33-3.41.1 Image SLES15-SP1-SAPCAL-GCE:apache2-2.4.33-3.41.1 Image SLES15-SP1-SAPCAL-GCE:apache2-prefork-2.4.33-3.41.1 Image SLES15-SP1-SAPCAL-GCE:apache2-utils-2.4.33-3.41.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-2.4.33-3.41.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-devel-2.4.33-3.41.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-doc-2.4.33-3.41.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-prefork-2.4.33-3.41.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-utils-2.4.33-3.41.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-worker-2.4.33-3.41.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-2.4.33-3.41.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-devel-2.4.33-3.41.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-doc-2.4.33-3.41.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-prefork-2.4.33-3.41.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-utils-2.4.33-3.41.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-worker-2.4.33-3.41.1 SUSE Linux Enterprise Module for Server Applications 15 SP1:apache2-2.4.33-3.41.1 SUSE Linux Enterprise Module for Server Applications 15 SP1:apache2-devel-2.4.33-3.41.1 SUSE Linux Enterprise Module for Server Applications 15 SP1:apache2-doc-2.4.33-3.41.1 SUSE Linux Enterprise Module for Server Applications 15 SP1:apache2-prefork-2.4.33-3.41.1 SUSE Linux Enterprise Module for Server Applications 15 SP1:apache2-utils-2.4.33-3.41.1 SUSE Linux Enterprise Module for Server Applications 15 SP1:apache2-worker-2.4.33-3.41.1 SUSE Linux Enterprise Server 15-LTSS:apache2-2.4.33-3.41.1 SUSE Linux Enterprise Server 15-LTSS:apache2-devel-2.4.33-3.41.1 SUSE Linux Enterprise Server 15-LTSS:apache2-doc-2.4.33-3.41.1 SUSE Linux Enterprise Server 15-LTSS:apache2-prefork-2.4.33-3.41.1 SUSE Linux Enterprise Server 15-LTSS:apache2-utils-2.4.33-3.41.1 SUSE Linux Enterprise Server 15-LTSS:apache2-worker-2.4.33-3.41.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-2.4.33-3.41.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-devel-2.4.33-3.41.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-doc-2.4.33-3.41.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-prefork-2.4.33-3.41.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-utils-2.4.33-3.41.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-worker-2.4.33-3.41.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203067-1/ https://www.suse.com/security/cve/CVE-2020-11993.html CVE-2020-11993 https://bugzilla.suse.com/1175070 SUSE Bug 1175070 https://bugzilla.suse.com/1178074 SUSE Bug 1178074 https://bugzilla.suse.com/1180830 SUSE Bug 1180830 Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Configuring the HTTP/2 feature via "H2Push off" will mitigate this vulnerability for unpatched servers. CVE-2020-9490 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:apache2-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:apache2-prefork-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:apache2-utils-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:apache2-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:apache2-prefork-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:apache2-utils-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:apache2-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:apache2-prefork-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:apache2-utils-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:apache2-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:apache2-prefork-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:apache2-utils-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:apache2-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:apache2-prefork-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:apache2-utils-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:apache2-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:apache2-prefork-2.4.33-3.41.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:apache2-utils-2.4.33-3.41.1 Image SLES15-SP1-SAPCAL-Azure:apache2-2.4.33-3.41.1 Image SLES15-SP1-SAPCAL-Azure:apache2-prefork-2.4.33-3.41.1 Image SLES15-SP1-SAPCAL-Azure:apache2-utils-2.4.33-3.41.1 Image SLES15-SP1-SAPCAL-EC2-HVM:apache2-2.4.33-3.41.1 Image SLES15-SP1-SAPCAL-EC2-HVM:apache2-prefork-2.4.33-3.41.1 Image SLES15-SP1-SAPCAL-EC2-HVM:apache2-utils-2.4.33-3.41.1 Image SLES15-SP1-SAPCAL-GCE:apache2-2.4.33-3.41.1 Image SLES15-SP1-SAPCAL-GCE:apache2-prefork-2.4.33-3.41.1 Image SLES15-SP1-SAPCAL-GCE:apache2-utils-2.4.33-3.41.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-2.4.33-3.41.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-devel-2.4.33-3.41.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-doc-2.4.33-3.41.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-prefork-2.4.33-3.41.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-utils-2.4.33-3.41.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:apache2-worker-2.4.33-3.41.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-2.4.33-3.41.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-devel-2.4.33-3.41.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-doc-2.4.33-3.41.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-prefork-2.4.33-3.41.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-utils-2.4.33-3.41.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:apache2-worker-2.4.33-3.41.1 SUSE Linux Enterprise Module for Server Applications 15 SP1:apache2-2.4.33-3.41.1 SUSE Linux Enterprise Module for Server Applications 15 SP1:apache2-devel-2.4.33-3.41.1 SUSE Linux Enterprise Module for Server Applications 15 SP1:apache2-doc-2.4.33-3.41.1 SUSE Linux Enterprise Module for Server Applications 15 SP1:apache2-prefork-2.4.33-3.41.1 SUSE Linux Enterprise Module for Server Applications 15 SP1:apache2-utils-2.4.33-3.41.1 SUSE Linux Enterprise Module for Server Applications 15 SP1:apache2-worker-2.4.33-3.41.1 SUSE Linux Enterprise Server 15-LTSS:apache2-2.4.33-3.41.1 SUSE Linux Enterprise Server 15-LTSS:apache2-devel-2.4.33-3.41.1 SUSE Linux Enterprise Server 15-LTSS:apache2-doc-2.4.33-3.41.1 SUSE Linux Enterprise Server 15-LTSS:apache2-prefork-2.4.33-3.41.1 SUSE Linux Enterprise Server 15-LTSS:apache2-utils-2.4.33-3.41.1 SUSE Linux Enterprise Server 15-LTSS:apache2-worker-2.4.33-3.41.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-2.4.33-3.41.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-devel-2.4.33-3.41.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-doc-2.4.33-3.41.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-prefork-2.4.33-3.41.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-utils-2.4.33-3.41.1 SUSE Linux Enterprise Server for SAP Applications 15:apache2-worker-2.4.33-3.41.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203067-1/ https://www.suse.com/security/cve/CVE-2020-9490.html CVE-2020-9490 https://bugzilla.suse.com/1175071 SUSE Bug 1175071 https://bugzilla.suse.com/1178074 SUSE Bug 1178074