[security bulletin] HPESBUX03725 rev.1 - HPE HP-UX Web Server Suite running Apache, Multiple Vulnerabilities

LS0tLS1CRUdJTiBQR1AgU0lHTkVEIE1FU1NBR0UtLS0tLQpIYXNoOiBTSEEyNTYKCk5v
dGU6IHRoZSBjdXJyZW50IHZlcnNpb24gb2YgdGhlIGZvbGxvd2luZyBkb2N1bWVudCBp
cyBhdmFpbGFibGUgaGVyZToNCmh0dHBzOi8vaDIwNTY0Lnd3dzIuaHBlLmNvbS9ocHNj
L2RvYy9wdWJsaWMvZGlzcGxheT9kb2NJZD1lbXJfbmEtaHBlc2J1eDAzNzI1ZW5fdXMN
Cg0KU1VQUE9SVCBDT01NVU5JQ0FUSU9OIC0gU0VDVVJJVFkgQlVMTEVUSU4NCg0KRG9j
dW1lbnQgSUQ6IGhwZXNidXgwMzcyNWVuX3VzDQpWZXJzaW9uOiAxDQoNCkhQRVNCVVgw
MzcyNSByZXYuMSAtIEhQRSBIUC1VWCBXZWIgU2VydmVyIFN1aXRlIHJ1bm5pbmcgQXBh
Y2hlLCBNdWx0aXBsZQ0KVnVsbmVyYWJpbGl0aWVzDQoNCk5PVElDRTogVGhlIGluZm9y
bWF0aW9uIGluIHRoaXMgU2VjdXJpdHkgQnVsbGV0aW4gc2hvdWxkIGJlIGFjdGVkIHVw
b24gYXMNCnNvb24gYXMgcG9zc2libGUuDQoNClJlbGVhc2UgRGF0ZTogMjAxNy0wMy0y
OQ0KTGFzdCBVcGRhdGVkOiAyMDE3LTAzLTI5DQoNClBvdGVudGlhbCBTZWN1cml0eSBJ
bXBhY3Q6IFJlbW90ZTogRGVuaWFsIG9mIFNlcnZpY2UgKERvUyksIFVuYXV0aG9yaXpl
ZCBSZWFkDQpBY2Nlc3MgdG8gRGF0YQ0KDQpTb3VyY2U6IEhld2xldHQgUGFja2FyZCBF
bnRlcnByaXNlLCBQcm9kdWN0IFNlY3VyaXR5IFJlc3BvbnNlIFRlYW0NCg0KVlVMTkVS
QUJJTElUWSBTVU1NQVJZDQpQb3RlbnRpYWwgc2VjdXJpdHkgdnVsbmVyYWJpbGl0aWVz
IGhhdmUgYmVlbiBpZGVudGlmaWVkIHdpdGggSFAtVVggV2ViIFNlcnZlcg0KU3VpdGUg
cnVubmluZyBBcGFjaGUgb24gSFAtVVggMTFpdjMuIFRoZXNlIHZ1bG5lcmFiaWxpdGll
cyBjb3VsZCBiZSBleHBsb2l0ZWQNCnJlbW90ZWx5IHRvIGNyZWF0ZSBhIERlbmlhbCBv
ZiBTZXJ2aWNlIChEb1MpLCBVbmF1dGhvcml6ZWQgUmVhZCBBY2Nlc3MgdG8NCkRhdGEg
YW5kIG90aGVyIGltcGFjdHMgaW5jbHVkaW5nOg0KDQogICogUGFkZGluZyBPcmFjbGUg
YXR0YWNrIGluIEFwYWNoZSBtb2Rfc2Vzc2lvbl9jcnlwdG8gICAJDQogICogQXBhY2hl
IEhUVFAgUmVxdWVzdCBQYXJzaW5nIFdoaXRlc3BhY2UgRGVmZWN0cw0KDQpSZWZlcmVu
Y2VzOg0KDQogIC0gQ1ZFLTIwMTYtODc0MCAtIEFwYWNoZSBodHRwIHNlcnZlciwgRGVu
aWFsIG9mIFNlcnZpY2UgKERvUykgDQogIC0gQ1ZFLTIwMTYtMjE2MSAtIEFwYWNoZSBo
dHRwIHNlcnZlciwgRGVuaWFsIG9mIFNlcnZpY2UgKERvUykNCiAgLSBDVkUtMjAxNi0w
NzM2IC0gQXBhY2hlIGh0dHAgc2VydmVyLCBkaXNjbG9zdXJlIG9mIGluZm9ybWF0aW9u
LCBwYWRkaW5nDQpvcmFjbGUgYXR0YWNrDQogIC0gQ1ZFLTIwMTYtODc0MyAtIEFwYWNo
ZSBodHRwIHNlcnZlciwgcmVxdWVzdCBjb3JydXB0aW9uLCByZXF1ZXN0IHBhcnNpbmcN
CndoaXRlIHNwYWNlDQogIC0gQ1ZFLTIwMTYtMjE4MyAtIE9wZW5TU0wsIGRpc2Nsb3N1
cmUgb2YgaW5mb3JtYXRpb24sIFNXRUVUMzINCg0KU1VQUE9SVEVEIFNPRlRXQVJFIFZF
UlNJT05TKjogT05MWSBpbXBhY3RlZCB2ZXJzaW9ucyBhcmUgbGlzdGVkLg0KDQogIC0g
SFAtVVggQXBhY2hlLWJhc2VkIFdlYiBTZXJ2ZXIgQi4xMS4zMSAtIGh0dHBkIHByaW9y
IHRvIEIuMi40LjE4LjAyDQoNCkJBQ0tHUk9VTkQNCg0KICBDVlNTIEJhc2UgTWV0cmlj
cw0KICA9PT09PT09PT09PT09PT09PQ0KICBSZWZlcmVuY2UsIENWU1MgVjMgU2NvcmUv
VmVjdG9yLCBDVlNTIFYyIFNjb3JlL1ZlY3Rvcg0KDQogICAgQ1ZFLTIwMTYtMDczNg0K
ICAgICAgMC4wIENWU1M6My4wL0FWOk4vQUM6TC9QUjpOL1VJOk4vUzpVL0M6Ti9JOk4v
QTpODQogICAgICA0LjQgKEFWOkwvQUM6TS9BdTpOL0M6UC9JOlAvQTpQKQ0KDQogICAg
Q1ZFLTIwMTYtMjE2MQ0KICAgICAgMC4wIENWU1M6My4wL0FWOk4vQUM6TC9QUjpOL1VJ
Ok4vUzpVL0M6Ti9JOk4vQTpODQogICAgICA0LjQgKEFWOkwvQUM6TS9BdTpOL0M6UC9J
OlAvQTpQKQ0KDQogICAgQ1ZFLTIwMTYtMjE4Mw0KICAgICAgNS4zIENWU1M6My4wL0FW
Ok4vQUM6TC9QUjpOL1VJOk4vUzpVL0M6TC9JOk4vQTpODQogICAgICA1LjAgKEFWOk4v
QUM6TC9BdTpOL0M6UC9JOk4vQTpOKQ0KDQogICAgQ1ZFLTIwMTYtODc0MA0KICAgICAg
Ny41IENWU1M6My4wL0FWOk4vQUM6TC9QUjpOL1VJOk4vUzpVL0M6Ti9JOk4vQTpIDQog
ICAgICA1LjAgKEFWOk4vQUM6TC9BdTpOL0M6Ti9JOk4vQTpQKQ0KDQogICAgQ1ZFLTIw
MTYtODc0Mw0KICAgICAgMC4wIENWU1M6My4wL0FWOk4vQUM6TC9QUjpOL1VJOk4vUzpV
L0M6Ti9JOk4vQTpODQogICAgICA0LjQgKEFWOkwvQUM6TS9BdTpOL0M6UC9JOlAvQTpQ
KQ0KDQogICAgSW5mb3JtYXRpb24gb24gQ1ZTUyBpcyBkb2N1bWVudGVkIGluDQogICAg
SFBFIEN1c3RvbWVyIE5vdGljZSBIUFNOLTIwMDgtMDAyIGhlcmU6DQoNCmh0dHBzOi8v
aDIwNTY0Lnd3dzIuaHBlLmNvbS9ocHNjL2RvYy9wdWJsaWMvZGlzcGxheT9kb2NJZD1l
bXJfbmEtYzAxMzQ1NDk5DQoNClJFU09MVVRJT04NCg0KSFBFIGhhcyBwcm92aWRlZCB0
aGUgZm9sbG93aW5nIHNvZnR3YXJlIHVwZGF0ZXMgdG8gcmVzb2x2ZSB0aGUNCnZ1bG5l
cmFiaWxpdGllcyB3aXRoIEhQLVVYIFdlYiBTZXJ2ZXIgU3VpdGUgcnVubmluZyBBcGFj
aGUuDQoNCkFwYWNoZSAyLjQuMTguMDIgZm9yIEhQLVVYIFJlbGVhc2UgQi4xMS4zMSAo
UEEgYW5kIElBKToNCg0KICAqIDMyIGJpdCBEZXBvdDogSFAtVVggMTEuMzEoSFBVWFdT
MjRBVFctQjUwMy0xMS0zMS02NC5kZXBvdCkNCiAgKiA2NCBiaXQgRGVwb3Q6IEhQLVVY
IDExLjMxKEhQVVhXUzI0QVRXLUI1MDMtMTEtMzEtMzIuZGVwb3QpDQoNCioqTm90ZToq
KiBUaGUgZGVwb3QgZmlsZXMgY2FuIGJlIGZvdW5kIGhlcmU6DQo8aHR0cHM6Ly9oMjAz
OTIud3d3Mi5ocGUuY29tL3BvcnRhbC9zd2RlcG90L2Rpc3BsYXlQcm9kdWN0SW5mby5k
bz9wcm9kdWN0TnVtYg0Kcj1IUFVYV1NBVFc1MDM+DQoNCk1BTlVBTCBBQ1RJT05TOiBZ
ZXMgLSBVcGRhdGUgDQpEb3dubG9hZCBhbmQgaW5zdGFsbCB0aGUgc29mdHdhcmUgdXBk
YXRlICAgDQoNClBST0RVQ1QgU1BFQ0lGSUMgSU5GT1JNQVRJT04gDQpIUC1VWCBTb2Z0
d2FyZSBBc3Npc3RhbnQ6IEhQLVVYIFNvZnR3YXJlIEFzc2lzdGFudCBpcyBhbiBlbmhh
bmNlZCBhcHBsaWNhdGlvbg0KDQp0aGF0IHJlcGxhY2VzIEhQLVVYIFNlY3VyaXR5IFBh
dGNoIENoZWNrLiBJdCBhbmFseXplcyBhbGwgU2VjdXJpdHkgQnVsbGV0aW5zIA0KaXNz
dWVkIGJ5IEhQRSBhbmQgbGlzdHMgcmVjb21tZW5kZWQgYWN0aW9ucyB0aGF0IG1heSBh
cHBseSB0byBhIHNwZWNpZmljDQpIUC1VWCANCnN5c3RlbS4gSXQgY2FuIGFsc28gZG93
bmxvYWQgcGF0Y2hlcyBhbmQgY3JlYXRlIGEgZGVwb3QgYXV0b21hdGljYWxseS4gRm9y
DQptb3JlIGluZm9ybWF0aW9uIHNlZTogDQo8aHR0cHM6Ly9oMjAzOTIud3d3Mi5ocGUu
Y29tL3BvcnRhbC9zd2RlcG90L2Rpc3BsYXlQcm9kdWN0SW5mby5kbz9wcm9kdWN0TnVt
Yg0Kcj1CNjgzNEFBPg0KDQogICAgQUZGRUNURUQgVkVSU0lPTlMgDQoNCg0KICAgIEhQ
LVVYIEIuMTEuMzEgSUEvUEENCiAgICA9PT09PT09PT09PT09PT09PT09DQoNCiAgICBo
cHV4d3MyNEFQQUNIRS5BUEFDSEUNCiAgICBocHV4d3MyNEFQQUNIRS5BUEFDSEUyDQog
ICAgaHB1eHdzMjRBUEFDSEUuQVVUSF9MREFQDQogICAgaHB1eHdzMjRBUEFDSEUuQVVU
SF9MREFQMg0KICAgIGhwdXh3czI0QVBBQ0hFLk1PRF9KSw0KICAgIGhwdXh3czI0QVBB
Q0hFLk1PRF9KSzINCiAgICBocHV4d3MyNEFQQUNIRS5NT0RfUEVSTA0KICAgIGhwdXh3
czI0QVBBQ0hFLk1PRF9QRVJMMg0KICAgIGhwdXh3czI0QVBBQ0hFLldFQlBST1hZDQog
ICAgaHB1eHdzMjRBUEFDSEUuV0VCUFJPWFkyDQoNCiAgICBhY3Rpb246IGluc3RhbGwg
Qi4yLjQuMTguMDIgb3Igc3Vic2VxdWVudA0KDQogICAgRU5EIEFGRkVDVEVEIFZFUlNJ
T05TDQoNCg0KSElTVE9SWQ0KVmVyc2lvbjoxIChyZXYuMSkgLSAyOSBNYXJjaCAyMDE3
IEluaXRpYWwgcmVsZWFzZQ0KDQpUaGlyZCBQYXJ0eSBTZWN1cml0eSBQYXRjaGVzOiBU
aGlyZCBwYXJ0eSBzZWN1cml0eSBwYXRjaGVzIHRoYXQgYXJlIHRvIGJlDQppbnN0YWxs
ZWQgb24gc3lzdGVtcyBydW5uaW5nIEhld2xldHQgUGFja2FyZCBFbnRlcnByaXNlIChI
UEUpIHNvZnR3YXJlDQpwcm9kdWN0cyBzaG91bGQgYmUgYXBwbGllZCBpbiBhY2NvcmRh
bmNlIHdpdGggdGhlIGN1c3RvbWVyJ3MgcGF0Y2ggbWFuYWdlbWVudA0KcG9saWN5Lg0K
DQpTdXBwb3J0OiBGb3IgaXNzdWVzIGFib3V0IGltcGxlbWVudGluZyB0aGUgcmVjb21t
ZW5kYXRpb25zIG9mIHRoaXMgU2VjdXJpdHkNCkJ1bGxldGluLCBjb250YWN0IG5vcm1h
bCBIUEUgU2VydmljZXMgc3VwcG9ydCBjaGFubmVsLiBGb3Igb3RoZXIgaXNzdWVzIGFi
b3V0DQp0aGUgY29udGVudCBvZiB0aGlzIFNlY3VyaXR5IEJ1bGxldGluLCBzZW5kIGUt
bWFpbCB0byBzZWN1cml0eS1hbGVydEBocGUuY29tLg0KDQpSZXBvcnQ6IFRvIHJlcG9y
dCBhIHBvdGVudGlhbCBzZWN1cml0eSB2dWxuZXJhYmlsaXR5IGZvciBhbnkgSFBFIHN1
cHBvcnRlZA0KcHJvZHVjdDoNCiAgV2ViIGZvcm06IGh0dHBzOi8vd3d3LmhwZS5jb20v
aW5mby9yZXBvcnQtc2VjdXJpdHktdnVsbmVyYWJpbGl0eQ0KICBFbWFpbDogc2VjdXJp
dHktYWxlcnRAaHBlLmNvbQ0KDQpTdWJzY3JpYmU6IFRvIGluaXRpYXRlIGEgc3Vic2Ny
aXB0aW9uIHRvIHJlY2VpdmUgZnV0dXJlIEhQRSBTZWN1cml0eSBCdWxsZXRpbg0KYWxl
cnRzIHZpYSBFbWFpbDogaHR0cDovL3d3dy5ocGUuY29tL3N1cHBvcnQvU3Vic2NyaWJl
cl9DaG9pY2UNCg0KU2VjdXJpdHkgQnVsbGV0aW4gQXJjaGl2ZTogQSBsaXN0IG9mIHJl
Y2VudGx5IHJlbGVhc2VkIFNlY3VyaXR5IEJ1bGxldGlucyBpcw0KYXZhaWxhYmxlIGhl
cmU6IGh0dHA6Ly93d3cuaHBlLmNvbS9zdXBwb3J0L1NlY3VyaXR5X0J1bGxldGluX0Fy
Y2hpdmUNCg0KU29mdHdhcmUgUHJvZHVjdCBDYXRlZ29yeTogVGhlIFNvZnR3YXJlIFBy
b2R1Y3QgQ2F0ZWdvcnkgaXMgcmVwcmVzZW50ZWQgaW4NCnRoZSB0aXRsZSBieSB0aGUg
dHdvIGNoYXJhY3RlcnMgZm9sbG93aW5nIEhQU0IuDQoNCjNDID0gM0NPTQ0KM1AgPSAz
cmQgUGFydHkgU29mdHdhcmUNCkdOID0gSFBFIEdlbmVyYWwgU29mdHdhcmUNCkhGID0g
SFBFIEhhcmR3YXJlIGFuZCBGaXJtd2FyZQ0KTVUgPSBNdWx0aS1QbGF0Zm9ybSBTb2Z0
d2FyZQ0KTlMgPSBOb25TdG9wIFNlcnZlcnMNCk9WID0gT3BlblZNUw0KUFYgPSBQcm9D
dXJ2ZQ0KU1QgPSBTdG9yYWdlIFNvZnR3YXJlDQpVWCA9IEhQLVVYDQoNCkNvcHlyaWdo
dCAyMDE2IEhld2xldHQgUGFja2FyZCBFbnRlcnByaXNlDQoNCkhld2xldHQgUGFja2Fy
ZCBFbnRlcnByaXNlIHNoYWxsIG5vdCBiZSBsaWFibGUgZm9yIHRlY2huaWNhbCBvciBl
ZGl0b3JpYWwNCmVycm9ycyBvciBvbWlzc2lvbnMgY29udGFpbmVkIGhlcmVpbi4gVGhl
IGluZm9ybWF0aW9uIHByb3ZpZGVkIGlzIHByb3ZpZGVkDQoiYXMgaXMiIHdpdGhvdXQg
d2FycmFudHkgb2YgYW55IGtpbmQuIFRvIHRoZSBleHRlbnQgcGVybWl0dGVkIGJ5IGxh
dywgbmVpdGhlcg0KSFAgb3IgaXRzIGFmZmlsaWF0ZXMsIHN1YmNvbnRyYWN0b3JzIG9y
IHN1cHBsaWVycyB3aWxsIGJlIGxpYWJsZSBmb3INCmluY2lkZW50YWwsc3BlY2lhbCBv
ciBjb25zZXF1ZW50aWFsIGRhbWFnZXMgaW5jbHVkaW5nIGRvd250aW1lIGNvc3Q7IGxv
c3QNCnByb2ZpdHM7IGRhbWFnZXMgcmVsYXRpbmcgdG8gdGhlIHByb2N1cmVtZW50IG9m
IHN1YnN0aXR1dGUgcHJvZHVjdHMgb3INCnNlcnZpY2VzOyBvciBkYW1hZ2VzIGZvciBs
b3NzIG9mIGRhdGEsIG9yIHNvZnR3YXJlIHJlc3RvcmF0aW9uLiBUaGUNCmluZm9ybWF0
aW9uIGluIHRoaXMgZG9jdW1lbnQgaXMgc3ViamVjdCB0byBjaGFuZ2Ugd2l0aG91dCBu
b3RpY2UuIEhld2xldHQNClBhY2thcmQgRW50ZXJwcmlzZSBhbmQgdGhlIG5hbWVzIG9m
IEhld2xldHQgUGFja2FyZCBFbnRlcnByaXNlIHByb2R1Y3RzDQpyZWZlcmVuY2VkIGhl
cmVpbiBhcmUgdHJhZGVtYXJrcyBvZiBIZXdsZXR0IFBhY2thcmQgRW50ZXJwcmlzZSBp
biB0aGUgVW5pdGVkDQpTdGF0ZXMgYW5kIG90aGVyIGNvdW50cmllcy4gT3RoZXIgcHJv
ZHVjdCBhbmQgY29tcGFueSBuYW1lcyBtZW50aW9uZWQgaGVyZWluDQptYXkgYmUgdHJh
ZGVtYXJrcyBvZiB0aGVpciByZXNwZWN0aXZlIG93bmVycy4NCi0tLS0tQkVHSU4gUEdQ
IFNJR05BVFVSRS0tLS0tClZlcnNpb246IEdudVBHIHYxCgppUUVjQkFFQkNBQUdCUUpZ
M0JMR0FBb0pFTFhoQXh0N1NaYWlQVXNJQUlWV25MQVN3YzdxdmszWW91anM0YU04Clp0
ZmI2S214SFprWTR3NFBjdUZIa05ySGZJejFnNzI5eVgyREhVc1N3dGdRMlU0T2JhN2VU
dHA2R0hQUzZkWjMKamtUOGc5UmI4WS9PemF2YmVWMG82cUE1YmlqbXBtTG5rNkFtQTM0
akFZVVhxOHpoSEcwRjZPTURjcVVGa3JXMwpZQ090Z3NJYm83UlRPdnlFNTgxWHZ3U0Y0
OEUzb1o4UndkaWliN01QQ3M5TzFFbHpHNXlSM01NM21NRzd0K0t4ClJBY2U3a1UwSHc2
N0FkWk5kTWlhaHRXQTdYdkVaV0FDK0pWZ29CZXkvdmVvY1lESWJmMTFrZjRkVTJKc1RZ
TjEKZVIwNHFUUnJXMnZyOXB3ekloVHJ0NFFLUVF2eFU5ak9DRVdjYkhGaEIzT1htVTI5
YVZ3Y3R5QTl4QTh4dGJ3PQo9Z2cxRgotLS0tLUVORCBQR1AgU0lHTkFUVVJFLS0tLS0K