You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by mj...@apache.org on 2007/08/30 12:35:52 UTC
svn commit: r571107 - in /httpd/site/trunk: docs/security/ xdocs/security/
Author: mjc
Date: Thu Aug 30 03:35:50 2007
New Revision: 571107
URL: http://svn.apache.org/viewvc?rev=571107&view=rev
Log:
As 2.0.59/2.2.4/1.3.38 are not going to be released, bump
Note CVE-2007-3847 issue for 2.0 and 2.2 (not an issue for 1.3 as
no threaded MPM)
Modified:
httpd/site/trunk/docs/security/vulnerabilities-oval.xml
httpd/site/trunk/docs/security/vulnerabilities_13.html
httpd/site/trunk/docs/security/vulnerabilities_20.html
httpd/site/trunk/docs/security/vulnerabilities_22.html
httpd/site/trunk/xdocs/security/vulnerabilities-httpd.xml
httpd/site/trunk/xdocs/security/vulnerabilities_22.xml
Modified: httpd/site/trunk/docs/security/vulnerabilities-oval.xml
URL: http://svn.apache.org/viewvc/httpd/site/trunk/docs/security/vulnerabilities-oval.xml?rev=571107&r1=571106&r2=571107&view=diff
==============================================================================
--- httpd/site/trunk/docs/security/vulnerabilities-oval.xml (original)
+++ httpd/site/trunk/docs/security/vulnerabilities-oval.xml Thu Aug 30 03:35:50 2007
@@ -5,6 +5,57 @@
<oval:timestamp>2005-10-12T18:13:45</oval:timestamp>
</generator>
<definitions>
+<definition id="oval:org.apache.httpd:def:20073847" version="1" class="vulnerability">
+<metadata>
+<title>mod_proxy crash</title>
+<reference source="CVE" ref_id="CVE-2007-3847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3847"/>
+<description>
+A flaw was found in the Apache HTTP Server mod_proxy module. On sites where
+a reverse proxy is configured, a remote attacker could send a carefully
+crafted request that would cause the Apache child process handling that
+request to crash. On sites where a forward proxy is configured, an attacker
+could cause a similar crash if a user could be persuaded to visit a
+malicious site using the proxy. This could lead to a denial of service if
+using a threaded Multi-Processing Module.</description>
+<apache_httpd_repository>
+<public>20061210</public>
+<reported>20061210</reported>
+<released/>
+<severity level="3">moderate</severity>
+</apache_httpd_repository>
+</metadata>
+<criteria operator="OR">
+<criteria operator="OR">
+<criterion test_ref="oval:org.apache.httpd:tst:224" comment="the version of httpd is 2.2.4"/>
+<criterion test_ref="oval:org.apache.httpd:tst:223" comment="the version of httpd is 2.2.3"/>
+<criterion test_ref="oval:org.apache.httpd:tst:222" comment="the version of httpd is 2.2.2"/>
+<criterion test_ref="oval:org.apache.httpd:tst:220" comment="the version of httpd is 2.2.0"/>
+</criteria>
+<criteria operator="OR">
+<criterion test_ref="oval:org.apache.httpd:tst:2059" comment="the version of httpd is 2.0.59"/>
+<criterion test_ref="oval:org.apache.httpd:tst:2058" comment="the version of httpd is 2.0.58"/>
+<criterion test_ref="oval:org.apache.httpd:tst:2055" comment="the version of httpd is 2.0.55"/>
+<criterion test_ref="oval:org.apache.httpd:tst:2054" comment="the version of httpd is 2.0.54"/>
+<criterion test_ref="oval:org.apache.httpd:tst:2053" comment="the version of httpd is 2.0.53"/>
+<criterion test_ref="oval:org.apache.httpd:tst:2052" comment="the version of httpd is 2.0.52"/>
+<criterion test_ref="oval:org.apache.httpd:tst:2051" comment="the version of httpd is 2.0.51"/>
+<criterion test_ref="oval:org.apache.httpd:tst:2050" comment="the version of httpd is 2.0.50"/>
+<criterion test_ref="oval:org.apache.httpd:tst:2049" comment="the version of httpd is 2.0.49"/>
+<criterion test_ref="oval:org.apache.httpd:tst:2048" comment="the version of httpd is 2.0.48"/>
+<criterion test_ref="oval:org.apache.httpd:tst:2047" comment="the version of httpd is 2.0.47"/>
+<criterion test_ref="oval:org.apache.httpd:tst:2046" comment="the version of httpd is 2.0.46"/>
+<criterion test_ref="oval:org.apache.httpd:tst:2045" comment="the version of httpd is 2.0.45"/>
+<criterion test_ref="oval:org.apache.httpd:tst:2044" comment="the version of httpd is 2.0.44"/>
+<criterion test_ref="oval:org.apache.httpd:tst:2043" comment="the version of httpd is 2.0.43"/>
+<criterion test_ref="oval:org.apache.httpd:tst:2042" comment="the version of httpd is 2.0.42"/>
+<criterion test_ref="oval:org.apache.httpd:tst:2040" comment="the version of httpd is 2.0.40"/>
+<criterion test_ref="oval:org.apache.httpd:tst:2039" comment="the version of httpd is 2.0.39"/>
+<criterion test_ref="oval:org.apache.httpd:tst:2037" comment="the version of httpd is 2.0.37"/>
+<criterion test_ref="oval:org.apache.httpd:tst:2036" comment="the version of httpd is 2.0.36"/>
+<criterion test_ref="oval:org.apache.httpd:tst:2035" comment="the version of httpd is 2.0.35"/>
+</criteria>
+</criteria>
+</definition>
<definition id="oval:org.apache.httpd:def:20065752" version="1" class="vulnerability">
<metadata>
<title>mod_status cross-site scripting</title>
@@ -404,7 +455,7 @@
</description>
<apache_httpd_repository>
<public>20060508</public>
-<reported/>
+<reported></reported>
<released>20060501</released>
<severity level="3">moderate</severity>
</apache_httpd_repository>
@@ -2460,209 +2511,209 @@
</definition>
</definitions>
<tests>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:1337" version="1" comment="the version of httpd is 1.3.37" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:1337"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:1336" version="1" comment="the version of httpd is 1.3.36" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:1336"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:1335" version="1" comment="the version of httpd is 1.3.35" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:1335"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:1334" version="1" comment="the version of httpd is 1.3.34" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:1334"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:1333" version="1" comment="the version of httpd is 1.3.33" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:1333"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:1332" version="1" comment="the version of httpd is 1.3.32" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:1332"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:1331" version="1" comment="the version of httpd is 1.3.31" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:1331"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:1329" version="1" comment="the version of httpd is 1.3.29" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:1329"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:1328" version="1" comment="the version of httpd is 1.3.28" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:1328"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:1327" version="1" comment="the version of httpd is 1.3.27" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:1327"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:1326" version="1" comment="the version of httpd is 1.3.26" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:1326"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:1324" version="1" comment="the version of httpd is 1.3.24" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:1324"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:1322" version="1" comment="the version of httpd is 1.3.22" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:1322"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:1320" version="1" comment="the version of httpd is 1.3.20" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:1320"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:1319" version="1" comment="the version of httpd is 1.3.19" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:1319"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:1317" version="1" comment="the version of httpd is 1.3.17" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:1317"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:1314" version="1" comment="the version of httpd is 1.3.14" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:1314"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:1312" version="1" comment="the version of httpd is 1.3.12" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:1312"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:1311" version="1" comment="the version of httpd is 1.3.11" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:1311"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:139" version="1" comment="the version of httpd is 1.3.9" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:139"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:136" version="1" comment="the version of httpd is 1.3.6" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:136"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:134" version="1" comment="the version of httpd is 1.3.4" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:134"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:133" version="1" comment="the version of httpd is 1.3.3" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:133"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:132" version="1" comment="the version of httpd is 1.3.2" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:132"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:2059" version="1" comment="the version of httpd is 2.0.59" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:2059"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:2058" version="1" comment="the version of httpd is 2.0.58" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:2058"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:2055" version="1" comment="the version of httpd is 2.0.55" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:2055"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:2054" version="1" comment="the version of httpd is 2.0.54" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:2054"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:2053" version="1" comment="the version of httpd is 2.0.53" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:2053"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:2052" version="1" comment="the version of httpd is 2.0.52" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:2052"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:2051" version="1" comment="the version of httpd is 2.0.51" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:2051"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:2050" version="1" comment="the version of httpd is 2.0.50" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:2050"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:2049" version="1" comment="the version of httpd is 2.0.49" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:2049"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:2048" version="1" comment="the version of httpd is 2.0.48" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:2048"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:2047" version="1" comment="the version of httpd is 2.0.47" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:2047"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:2046" version="1" comment="the version of httpd is 2.0.46" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:2046"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:2045" version="1" comment="the version of httpd is 2.0.45" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:2045"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:2044" version="1" comment="the version of httpd is 2.0.44" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:2044"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:2043" version="1" comment="the version of httpd is 2.0.43" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:2043"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:2042" version="1" comment="the version of httpd is 2.0.42" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:2042"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:2040" version="1" comment="the version of httpd is 2.0.40" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:2040"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:2039" version="1" comment="the version of httpd is 2.0.39" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:2039"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:2037" version="1" comment="the version of httpd is 2.0.37" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:2037"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:2036" version="1" comment="the version of httpd is 2.0.36" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:2036"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:2035" version="1" comment="the version of httpd is 2.0.35" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:2035"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:224" version="1" comment="the version of httpd is 2.2.4" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:224"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:223" version="1" comment="the version of httpd is 2.2.3" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:223"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:222" version="1" comment="the version of httpd is 2.2.2" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:222"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:220" version="1" comment="the version of httpd is 2.2.0" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:220"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:131" version="1" comment="the version of httpd is 1.3.1" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:131"/>
-</httpd_test>
-<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:tst:130" version="1" comment="the version of httpd is 1.3.0" check="at least one">
-<object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" object_ref="oval:org.apache.httpd:obj:1"/>
-<state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" state_ref="oval:org.apache.httpd:ste:130"/>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:224" version="1" comment="the version of httpd is 2.2.4" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:224"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:223" version="1" comment="the version of httpd is 2.2.3" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:223"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:222" version="1" comment="the version of httpd is 2.2.2" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:222"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:220" version="1" comment="the version of httpd is 2.2.0" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:220"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:2059" version="1" comment="the version of httpd is 2.0.59" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:2059"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:2058" version="1" comment="the version of httpd is 2.0.58" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:2058"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:2055" version="1" comment="the version of httpd is 2.0.55" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:2055"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:2054" version="1" comment="the version of httpd is 2.0.54" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:2054"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:2053" version="1" comment="the version of httpd is 2.0.53" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:2053"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:2052" version="1" comment="the version of httpd is 2.0.52" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:2052"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:2051" version="1" comment="the version of httpd is 2.0.51" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:2051"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:2050" version="1" comment="the version of httpd is 2.0.50" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:2050"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:2049" version="1" comment="the version of httpd is 2.0.49" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:2049"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:2048" version="1" comment="the version of httpd is 2.0.48" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:2048"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:2047" version="1" comment="the version of httpd is 2.0.47" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:2047"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:2046" version="1" comment="the version of httpd is 2.0.46" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:2046"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:2045" version="1" comment="the version of httpd is 2.0.45" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:2045"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:2044" version="1" comment="the version of httpd is 2.0.44" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:2044"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:2043" version="1" comment="the version of httpd is 2.0.43" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:2043"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:2042" version="1" comment="the version of httpd is 2.0.42" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:2042"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:2040" version="1" comment="the version of httpd is 2.0.40" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:2040"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:2039" version="1" comment="the version of httpd is 2.0.39" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:2039"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:2037" version="1" comment="the version of httpd is 2.0.37" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:2037"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:2036" version="1" comment="the version of httpd is 2.0.36" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:2036"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:2035" version="1" comment="the version of httpd is 2.0.35" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:2035"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:1337" version="1" comment="the version of httpd is 1.3.37" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:1337"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:1336" version="1" comment="the version of httpd is 1.3.36" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:1336"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:1335" version="1" comment="the version of httpd is 1.3.35" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:1335"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:1334" version="1" comment="the version of httpd is 1.3.34" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:1334"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:1333" version="1" comment="the version of httpd is 1.3.33" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:1333"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:1332" version="1" comment="the version of httpd is 1.3.32" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:1332"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:1331" version="1" comment="the version of httpd is 1.3.31" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:1331"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:1329" version="1" comment="the version of httpd is 1.3.29" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:1329"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:1328" version="1" comment="the version of httpd is 1.3.28" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:1328"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:1327" version="1" comment="the version of httpd is 1.3.27" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:1327"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:1326" version="1" comment="the version of httpd is 1.3.26" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:1326"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:1324" version="1" comment="the version of httpd is 1.3.24" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:1324"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:1322" version="1" comment="the version of httpd is 1.3.22" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:1322"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:1320" version="1" comment="the version of httpd is 1.3.20" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:1320"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:1319" version="1" comment="the version of httpd is 1.3.19" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:1319"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:1317" version="1" comment="the version of httpd is 1.3.17" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:1317"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:1314" version="1" comment="the version of httpd is 1.3.14" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:1314"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:1312" version="1" comment="the version of httpd is 1.3.12" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:1312"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:1311" version="1" comment="the version of httpd is 1.3.11" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:1311"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:139" version="1" comment="the version of httpd is 1.3.9" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:139"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:136" version="1" comment="the version of httpd is 1.3.6" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:136"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:134" version="1" comment="the version of httpd is 1.3.4" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:134"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:133" version="1" comment="the version of httpd is 1.3.3" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:133"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:132" version="1" comment="the version of httpd is 1.3.2" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:132"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:131" version="1" comment="the version of httpd is 1.3.1" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:131"/>
+</httpd_test>
+<httpd_test xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:tst:130" version="1" comment="the version of httpd is 1.3.0" check="at least one">
+<object object_ref="oval:org.apache.httpd:obj:1"/>
+<state state_ref="oval:org.apache.httpd:ste:130"/>
</httpd_test>
</tests>
<objects>
@@ -2673,158 +2724,158 @@
</httpd_object>
</objects>
<states>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:1337" version="1" comment="the version of httpd is 1.3.37">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.37</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:224" version="1" comment="the version of httpd is 2.2.4">
+<version operation="equals" datatype="version">2.2.4</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:1336" version="1" comment="the version of httpd is 1.3.36">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.36</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:223" version="1" comment="the version of httpd is 2.2.3">
+<version operation="equals" datatype="version">2.2.3</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:1335" version="1" comment="the version of httpd is 1.3.35">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.35</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:222" version="1" comment="the version of httpd is 2.2.2">
+<version operation="equals" datatype="version">2.2.2</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:1334" version="1" comment="the version of httpd is 1.3.34">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.34</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:220" version="1" comment="the version of httpd is 2.2.0">
+<version operation="equals" datatype="version">2.2.0</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:1333" version="1" comment="the version of httpd is 1.3.33">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.33</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:2059" version="1" comment="the version of httpd is 2.0.59">
+<version operation="equals" datatype="version">2.0.59</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:1332" version="1" comment="the version of httpd is 1.3.32">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.32</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:2058" version="1" comment="the version of httpd is 2.0.58">
+<version operation="equals" datatype="version">2.0.58</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:1331" version="1" comment="the version of httpd is 1.3.31">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.31</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:2055" version="1" comment="the version of httpd is 2.0.55">
+<version operation="equals" datatype="version">2.0.55</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:1329" version="1" comment="the version of httpd is 1.3.29">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.29</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:2054" version="1" comment="the version of httpd is 2.0.54">
+<version operation="equals" datatype="version">2.0.54</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:1328" version="1" comment="the version of httpd is 1.3.28">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.28</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:2053" version="1" comment="the version of httpd is 2.0.53">
+<version operation="equals" datatype="version">2.0.53</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:1327" version="1" comment="the version of httpd is 1.3.27">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.27</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:2052" version="1" comment="the version of httpd is 2.0.52">
+<version operation="equals" datatype="version">2.0.52</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:1326" version="1" comment="the version of httpd is 1.3.26">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.26</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:2051" version="1" comment="the version of httpd is 2.0.51">
+<version operation="equals" datatype="version">2.0.51</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:1324" version="1" comment="the version of httpd is 1.3.24">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.24</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:2050" version="1" comment="the version of httpd is 2.0.50">
+<version operation="equals" datatype="version">2.0.50</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:1322" version="1" comment="the version of httpd is 1.3.22">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.22</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:2049" version="1" comment="the version of httpd is 2.0.49">
+<version operation="equals" datatype="version">2.0.49</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:1320" version="1" comment="the version of httpd is 1.3.20">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.20</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:2048" version="1" comment="the version of httpd is 2.0.48">
+<version operation="equals" datatype="version">2.0.48</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:1319" version="1" comment="the version of httpd is 1.3.19">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.19</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:2047" version="1" comment="the version of httpd is 2.0.47">
+<version operation="equals" datatype="version">2.0.47</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:1317" version="1" comment="the version of httpd is 1.3.17">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.17</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:2046" version="1" comment="the version of httpd is 2.0.46">
+<version operation="equals" datatype="version">2.0.46</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:1314" version="1" comment="the version of httpd is 1.3.14">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.14</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:2045" version="1" comment="the version of httpd is 2.0.45">
+<version operation="equals" datatype="version">2.0.45</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:1312" version="1" comment="the version of httpd is 1.3.12">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.12</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:2044" version="1" comment="the version of httpd is 2.0.44">
+<version operation="equals" datatype="version">2.0.44</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:1311" version="1" comment="the version of httpd is 1.3.11">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.11</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:2043" version="1" comment="the version of httpd is 2.0.43">
+<version operation="equals" datatype="version">2.0.43</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:139" version="1" comment="the version of httpd is 1.3.9">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.9</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:2042" version="1" comment="the version of httpd is 2.0.42">
+<version operation="equals" datatype="version">2.0.42</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:136" version="1" comment="the version of httpd is 1.3.6">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.6</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:2040" version="1" comment="the version of httpd is 2.0.40">
+<version operation="equals" datatype="version">2.0.40</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:134" version="1" comment="the version of httpd is 1.3.4">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.4</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:2039" version="1" comment="the version of httpd is 2.0.39">
+<version operation="equals" datatype="version">2.0.39</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:133" version="1" comment="the version of httpd is 1.3.3">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.3</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:2037" version="1" comment="the version of httpd is 2.0.37">
+<version operation="equals" datatype="version">2.0.37</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:132" version="1" comment="the version of httpd is 1.3.2">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.2</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:2036" version="1" comment="the version of httpd is 2.0.36">
+<version operation="equals" datatype="version">2.0.36</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:2059" version="1" comment="the version of httpd is 2.0.59">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">2.0.59</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:2035" version="1" comment="the version of httpd is 2.0.35">
+<version operation="equals" datatype="version">2.0.35</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:2058" version="1" comment="the version of httpd is 2.0.58">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">2.0.58</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:1337" version="1" comment="the version of httpd is 1.3.37">
+<version operation="equals" datatype="version">1.3.37</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:2055" version="1" comment="the version of httpd is 2.0.55">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">2.0.55</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:1336" version="1" comment="the version of httpd is 1.3.36">
+<version operation="equals" datatype="version">1.3.36</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:2054" version="1" comment="the version of httpd is 2.0.54">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">2.0.54</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:1335" version="1" comment="the version of httpd is 1.3.35">
+<version operation="equals" datatype="version">1.3.35</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:2053" version="1" comment="the version of httpd is 2.0.53">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">2.0.53</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:1334" version="1" comment="the version of httpd is 1.3.34">
+<version operation="equals" datatype="version">1.3.34</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:2052" version="1" comment="the version of httpd is 2.0.52">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">2.0.52</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:1333" version="1" comment="the version of httpd is 1.3.33">
+<version operation="equals" datatype="version">1.3.33</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:2051" version="1" comment="the version of httpd is 2.0.51">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">2.0.51</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:1332" version="1" comment="the version of httpd is 1.3.32">
+<version operation="equals" datatype="version">1.3.32</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:2050" version="1" comment="the version of httpd is 2.0.50">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">2.0.50</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:1331" version="1" comment="the version of httpd is 1.3.31">
+<version operation="equals" datatype="version">1.3.31</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:2049" version="1" comment="the version of httpd is 2.0.49">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">2.0.49</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:1329" version="1" comment="the version of httpd is 1.3.29">
+<version operation="equals" datatype="version">1.3.29</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:2048" version="1" comment="the version of httpd is 2.0.48">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">2.0.48</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:1328" version="1" comment="the version of httpd is 1.3.28">
+<version operation="equals" datatype="version">1.3.28</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:2047" version="1" comment="the version of httpd is 2.0.47">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">2.0.47</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:1327" version="1" comment="the version of httpd is 1.3.27">
+<version operation="equals" datatype="version">1.3.27</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:2046" version="1" comment="the version of httpd is 2.0.46">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">2.0.46</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:1326" version="1" comment="the version of httpd is 1.3.26">
+<version operation="equals" datatype="version">1.3.26</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:2045" version="1" comment="the version of httpd is 2.0.45">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">2.0.45</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:1324" version="1" comment="the version of httpd is 1.3.24">
+<version operation="equals" datatype="version">1.3.24</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:2044" version="1" comment="the version of httpd is 2.0.44">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">2.0.44</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:1322" version="1" comment="the version of httpd is 1.3.22">
+<version operation="equals" datatype="version">1.3.22</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:2043" version="1" comment="the version of httpd is 2.0.43">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">2.0.43</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:1320" version="1" comment="the version of httpd is 1.3.20">
+<version operation="equals" datatype="version">1.3.20</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:2042" version="1" comment="the version of httpd is 2.0.42">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">2.0.42</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:1319" version="1" comment="the version of httpd is 1.3.19">
+<version operation="equals" datatype="version">1.3.19</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:2040" version="1" comment="the version of httpd is 2.0.40">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">2.0.40</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:1317" version="1" comment="the version of httpd is 1.3.17">
+<version operation="equals" datatype="version">1.3.17</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:2039" version="1" comment="the version of httpd is 2.0.39">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">2.0.39</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:1314" version="1" comment="the version of httpd is 1.3.14">
+<version operation="equals" datatype="version">1.3.14</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:2037" version="1" comment="the version of httpd is 2.0.37">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">2.0.37</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:1312" version="1" comment="the version of httpd is 1.3.12">
+<version operation="equals" datatype="version">1.3.12</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:2036" version="1" comment="the version of httpd is 2.0.36">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">2.0.36</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:1311" version="1" comment="the version of httpd is 1.3.11">
+<version operation="equals" datatype="version">1.3.11</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:2035" version="1" comment="the version of httpd is 2.0.35">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">2.0.35</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:139" version="1" comment="the version of httpd is 1.3.9">
+<version operation="equals" datatype="version">1.3.9</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:224" version="1" comment="the version of httpd is 2.2.4">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">2.2.4</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:136" version="1" comment="the version of httpd is 1.3.6">
+<version operation="equals" datatype="version">1.3.6</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:223" version="1" comment="the version of httpd is 2.2.3">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">2.2.3</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:134" version="1" comment="the version of httpd is 1.3.4">
+<version operation="equals" datatype="version">1.3.4</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:222" version="1" comment="the version of httpd is 2.2.2">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">2.2.2</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:133" version="1" comment="the version of httpd is 1.3.3">
+<version operation="equals" datatype="version">1.3.3</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:220" version="1" comment="the version of httpd is 2.2.0">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">2.2.0</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:132" version="1" comment="the version of httpd is 1.3.2">
+<version operation="equals" datatype="version">1.3.2</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:131" version="1" comment="the version of httpd is 1.3.1">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.1</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:131" version="1" comment="the version of httpd is 1.3.1">
+<version operation="equals" datatype="version">1.3.1</version>
</httpd_state>
-<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" id="oval:org.apache.httpd:ste:130" version="1" comment="the version of httpd is 1.3.0">
-<version xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" operation="equals" datatype="version">1.3.0</version>
+<httpd_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#apache" id="oval:org.apache.httpd:ste:130" version="1" comment="the version of httpd is 1.3.0">
+<version operation="equals" datatype="version">1.3.0</version>
</httpd_state>
</states>
</oval_definitions>
Modified: httpd/site/trunk/docs/security/vulnerabilities_13.html
URL: http://svn.apache.org/viewvc/httpd/site/trunk/docs/security/vulnerabilities_13.html?rev=571107&r1=571106&r2=571107&view=diff
==============================================================================
--- httpd/site/trunk/docs/security/vulnerabilities_13.html (original)
+++ httpd/site/trunk/docs/security/vulnerabilities_13.html Thu Aug 30 03:35:50 2007
@@ -81,7 +81,7 @@
<table border="0" cellspacing="0" cellpadding="2" width="100%">
<tr><td bgcolor="#525D76">
<font color="#ffffff" face="arial,helvetica,sanserif">
- <a name="1.3.38-dev"><strong>Fixed in Apache httpd 1.3.38-dev</strong></a>
+ <a name="1.3.39-dev"><strong>Fixed in Apache httpd 1.3.39-dev</strong></a>
</font>
</td></tr>
<tr><td>
Modified: httpd/site/trunk/docs/security/vulnerabilities_20.html
URL: http://svn.apache.org/viewvc/httpd/site/trunk/docs/security/vulnerabilities_20.html?rev=571107&r1=571106&r2=571107&view=diff
==============================================================================
--- httpd/site/trunk/docs/security/vulnerabilities_20.html (original)
+++ httpd/site/trunk/docs/security/vulnerabilities_20.html Thu Aug 30 03:35:50 2007
@@ -81,12 +81,32 @@
<table border="0" cellspacing="0" cellpadding="2" width="100%">
<tr><td bgcolor="#525D76">
<font color="#ffffff" face="arial,helvetica,sanserif">
- <a name="2.0.60-dev"><strong>Fixed in Apache httpd 2.0.60-dev</strong></a>
+ <a name="2.0.61-dev"><strong>Fixed in Apache httpd 2.0.61-dev</strong></a>
</font>
</td></tr>
<tr><td>
<blockquote>
<dl>
+<dd>
+<b>moderate: </b>
+<b>
+<name name="CVE-2007-3847">mod_proxy crash</name>
+</b>
+<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3847">CVE-2007-3847</a>
+<p>
+A flaw was found in the Apache HTTP Server mod_proxy module. On sites where
+a reverse proxy is configured, a remote attacker could send a carefully
+crafted request that would cause the Apache child process handling that
+request to crash. On sites where a forward proxy is configured, an attacker
+could cause a similar crash if a user could be persuaded to visit a
+malicious site using the proxy. This could lead to a denial of service if
+using a threaded Multi-Processing Module.</p>
+</dd>
+<dd />
+<dd>
+ Affects:
+ 2.0.59, 2.0.58, 2.0.55, 2.0.54, 2.0.53, 2.0.52, 2.0.51, 2.0.50, 2.0.49, 2.0.48, 2.0.47, 2.0.46, 2.0.45, 2.0.44, 2.0.43, 2.0.42, 2.0.40, 2.0.39, 2.0.37, 2.0.36, 2.0.35<p />
+</dd>
<dd>
<b>moderate: </b>
<b>
Modified: httpd/site/trunk/docs/security/vulnerabilities_22.html
URL: http://svn.apache.org/viewvc/httpd/site/trunk/docs/security/vulnerabilities_22.html?rev=571107&r1=571106&r2=571107&view=diff
==============================================================================
--- httpd/site/trunk/docs/security/vulnerabilities_22.html (original)
+++ httpd/site/trunk/docs/security/vulnerabilities_22.html Thu Aug 30 03:35:50 2007
@@ -81,12 +81,32 @@
<table border="0" cellspacing="0" cellpadding="2" width="100%">
<tr><td bgcolor="#525D76">
<font color="#ffffff" face="arial,helvetica,sanserif">
- <a name="2.2.5-dev"><strong>Fixed in Apache httpd 2.2.5-dev</strong></a>
+ <a name="2.2.6-dev"><strong>Fixed in Apache httpd 2.2.6-dev</strong></a>
</font>
</td></tr>
<tr><td>
<blockquote>
<dl>
+<dd>
+<b>moderate: </b>
+<b>
+<name name="CVE-2007-3847">mod_proxy crash</name>
+</b>
+<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3847">CVE-2007-3847</a>
+<p>
+A flaw was found in the Apache HTTP Server mod_proxy module. On sites where
+a reverse proxy is configured, a remote attacker could send a carefully
+crafted request that would cause the Apache child process handling that
+request to crash. On sites where a forward proxy is configured, an attacker
+could cause a similar crash if a user could be persuaded to visit a
+malicious site using the proxy. This could lead to a denial of service if
+using a threaded Multi-Processing Module.</p>
+</dd>
+<dd />
+<dd>
+ Affects:
+ 2.2.4, 2.2.3, 2.2.2, 2.2.0<p />
+</dd>
<dd>
<b>moderate: </b>
<b>
Modified: httpd/site/trunk/xdocs/security/vulnerabilities-httpd.xml
URL: http://svn.apache.org/viewvc/httpd/site/trunk/xdocs/security/vulnerabilities-httpd.xml?rev=571107&r1=571106&r2=571107&view=diff
==============================================================================
--- httpd/site/trunk/xdocs/security/vulnerabilities-httpd.xml (original)
+++ httpd/site/trunk/xdocs/security/vulnerabilities-httpd.xml Thu Aug 30 03:35:50 2007
@@ -1,6 +1,59 @@
-<security updated="20070730">
+<security updated="20070830">
-<issue fixed="1.3.38-dev" public="20070620" reported="20061019">
+<issue fixed="2.2.6-dev" public="20061210" reported="20061210">
+<cve name="CVE-2007-3847"/>
+<severity level="3">moderate</severity>
+<title>mod_proxy crash</title>
+<description><p>
+A flaw was found in the Apache HTTP Server mod_proxy module. On sites where
+a reverse proxy is configured, a remote attacker could send a carefully
+crafted request that would cause the Apache child process handling that
+request to crash. On sites where a forward proxy is configured, an attacker
+could cause a similar crash if a user could be persuaded to visit a
+malicious site using the proxy. This could lead to a denial of service if
+using a threaded Multi-Processing Module.</p></description>
+<affects prod="httpd" version="2.2.4"/>
+<affects prod="httpd" version="2.2.3"/>
+<affects prod="httpd" version="2.2.2"/>
+<affects prod="httpd" version="2.2.0"/>
+</issue>
+
+<issue fixed="2.0.61-dev" public="20061210" reported="20061210">
+<cve name="CVE-2007-3847"/>
+<severity level="3">moderate</severity>
+<title>mod_proxy crash</title>
+<description><p>
+A flaw was found in the Apache HTTP Server mod_proxy module. On sites where
+a reverse proxy is configured, a remote attacker could send a carefully
+crafted request that would cause the Apache child process handling that
+request to crash. On sites where a forward proxy is configured, an attacker
+could cause a similar crash if a user could be persuaded to visit a
+malicious site using the proxy. This could lead to a denial of service if
+using a threaded Multi-Processing Module.</p></description>
+<affects prod="httpd" version="2.0.59"/>
+<affects prod="httpd" version="2.0.58"/>
+<affects prod="httpd" version="2.0.55"/>
+<affects prod="httpd" version="2.0.54"/>
+<affects prod="httpd" version="2.0.53"/>
+<affects prod="httpd" version="2.0.52"/>
+<affects prod="httpd" version="2.0.51"/>
+<affects prod="httpd" version="2.0.50"/>
+<affects prod="httpd" version="2.0.49"/>
+<affects prod="httpd" version="2.0.48"/>
+<affects prod="httpd" version="2.0.47"/>
+<affects prod="httpd" version="2.0.46"/>
+<affects prod="httpd" version="2.0.45"/>
+<affects prod="httpd" version="2.0.44"/>
+<affects prod="httpd" version="2.0.43"/>
+<affects prod="httpd" version="2.0.42"/>
+<affects prod="httpd" version="2.0.40"/>
+<affects prod="httpd" version="2.0.39"/>
+<affects prod="httpd" version="2.0.37"/>
+<affects prod="httpd" version="2.0.36"/>
+<affects prod="httpd" version="2.0.35"/>
+</issue>
+
+<issue fixed="1.3.39-dev" public="20070620" reported="20061019">
<cve name="CVE-2006-5752"/>
<severity level="3">moderate</severity>
<title>mod_status cross-site scripting</title>
@@ -37,7 +90,7 @@
<affects prod="httpd" version="1.3.2"/>
</issue>
-<issue fixed="2.0.60-dev" public="20070620" reported="20061019">
+<issue fixed="2.0.61-dev" public="20070620" reported="20061019">
<cve name="CVE-2006-5752"/>
<severity level="3">moderate</severity>
<title>mod_status cross-site scripting</title>
@@ -71,7 +124,7 @@
<affects prod="httpd" version="2.0.35"/>
</issue>
-<issue fixed="2.2.5-dev" public="20070620" reported="20061019">
+<issue fixed="2.2.6-dev" public="20070620" reported="20061019">
<cve name="CVE-2006-5752"/>
<severity level="3">moderate</severity>
<title>mod_status cross-site scripting</title>
@@ -88,7 +141,7 @@
<affects prod="httpd" version="2.2.0"/>
</issue>
-<issue fixed="2.0.60-dev" public="20070619" reported="20060515">
+<issue fixed="2.0.61-dev" public="20070619" reported="20060515">
<cve name="CVE-2007-3304"/>
<severity level="3">moderate</severity>
<title>Signals to arbitrary processes</title>
@@ -120,7 +173,7 @@
<affects prod="httpd" version="2.0.35"/>
</issue>
-<issue fixed="2.2.5-dev" public="20070619" reported="20060515">
+<issue fixed="2.2.6-dev" public="20070619" reported="20060515">
<cve name="CVE-2007-3304"/>
<severity level="3">moderate</severity>
<title>Signals to arbitrary processes</title>
@@ -135,7 +188,7 @@
<affects prod="httpd" version="2.2.0"/>
</issue>
-<issue fixed="1.3.38-dev" public="20070619" reported="20060515">
+<issue fixed="1.3.39-dev" public="20070619" reported="20060515">
<cve name="CVE-2007-3304"/>
<severity level="3">moderate</severity>
<title>Signals to arbitrary processes</title>
@@ -172,7 +225,7 @@
<affects prod="httpd" version="1.3.0"/>
</issue>
-<issue fixed="2.2.5-dev" public="20070601" reported="20070426">
+<issue fixed="2.2.6-dev" public="20070601" reported="20070426">
<cve name="CVE-2007-1862"/>
<severity level="3">moderate</severity>
<title>mod_cache information leak</title>
@@ -185,7 +238,7 @@
<affects prod="httpd" version="2.2.4"/>
</issue>
-<issue fixed="2.0.60-dev" public="20070618" reported="20070502">
+<issue fixed="2.0.61-dev" public="20070618" reported="20070502">
<cve name="CVE-2007-1863"/>
<severity level="3">moderate</severity>
<title>mod_cache proxy DoS</title>
@@ -216,7 +269,7 @@
<affects prod="httpd" version="2.0.37"/>
</issue>
-<issue fixed="2.2.5-dev" public="20070618" reported="20070502">
+<issue fixed="2.2.6-dev" public="20070618" reported="20070502">
<cve name="CVE-2007-1863"/>
<severity level="3">moderate</severity>
<title>mod_cache proxy DoS</title>
Modified: httpd/site/trunk/xdocs/security/vulnerabilities_22.xml
URL: http://svn.apache.org/viewvc/httpd/site/trunk/xdocs/security/vulnerabilities_22.xml?rev=571107&r1=571106&r2=571107&view=diff
==============================================================================
--- httpd/site/trunk/xdocs/security/vulnerabilities_22.xml (original)
+++ httpd/site/trunk/xdocs/security/vulnerabilities_22.xml Thu Aug 30 03:35:50 2007
@@ -19,9 +19,29 @@
these vulnerabilities to the <a href="/security_report.html">Security
Team</a>. </p>
</section>
-<section id="2.2.5-dev">
-<title>Fixed in Apache httpd 2.2.5-dev</title>
+<section id="2.2.6-dev">
+<title>Fixed in Apache httpd 2.2.6-dev</title>
<dl>
+<dd>
+<b>moderate: </b>
+<b>
+<name name="CVE-2007-3847">mod_proxy crash</name>
+</b>
+<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3847">CVE-2007-3847</a>
+<p>
+A flaw was found in the Apache HTTP Server mod_proxy module. On sites where
+a reverse proxy is configured, a remote attacker could send a carefully
+crafted request that would cause the Apache child process handling that
+request to crash. On sites where a forward proxy is configured, an attacker
+could cause a similar crash if a user could be persuaded to visit a
+malicious site using the proxy. This could lead to a denial of service if
+using a threaded Multi-Processing Module.</p>
+</dd>
+<dd/>
+<dd>
+ Affects:
+ 2.2.4, 2.2.3, 2.2.2, 2.2.0<p/>
+</dd>
<dd>
<b>moderate: </b>
<b>