SUSE-SU-2022:4477-1

Details

This update for zabbix fixes the following issues:

CVE-2022-43515: X-Forwarded-For header is active by default causes access to Zabbix sites in maintenance mode (bsc#1206083).

Affected Packages

SUSE:Linux Enterprise Server 12 SP3-BCLzabbix

Fixed in:

4.0.12-4.21.1

SUSE:Linux Enterprise Server 12 SP3-BCLzabbix-agent

Fixed in:

4.0.12-4.21.1

SUSE:Linux Enterprise Server 12 SP4-LTSSzabbix

Fixed in:

4.0.12-4.21.1

SUSE:Linux Enterprise Server 12 SP4-LTSSzabbix-agent

Fixed in:

4.0.12-4.21.1

SUSE:Linux Enterprise Server 12 SP5zabbix

Fixed in:

4.0.12-4.21.1

SUSE:Linux Enterprise Server 12 SP5zabbix-agent

Fixed in:

4.0.12-4.21.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP4zabbix

Fixed in:

4.0.12-4.21.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP4zabbix-agent

Fixed in:

4.0.12-4.21.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP5zabbix

Fixed in:

4.0.12-4.21.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP5zabbix-agent

Fixed in:

4.0.12-4.21.1

SUSE:OpenStack Cloud 9zabbix

Fixed in:

4.0.12-4.21.1

SUSE:OpenStack Cloud 9zabbix-agent

Fixed in:

4.0.12-4.21.1

SUSE:OpenStack Cloud Crowbar 9zabbix

Fixed in:

4.0.12-4.21.1

SUSE:OpenStack Cloud Crowbar 9zabbix-agent

Fixed in:

4.0.12-4.21.1

References

REPORThttps://bugzilla.suse.com/1206083 WEBhttps://www.suse.com/security/cve/CVE-2022-43515 ADVISORYhttps://www.suse.com/support/update/announcement/2022/suse-su-20224477-1/

SUSE-SU-2022:4477-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline