SUSE-SU-2022:4477-1

Details

Description of the patch:

This update for zabbix fixes the following issues:

CVE-2022-43515: X-Forwarded-For header is active by default causes access to Zabbix sites in maintenance mode (bsc#1206083).

Affected Packages

zabbix-agent

SUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP4-LTSSSUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

4.0.12-4.21.1

References

ADVISORY

https://bugzilla.suse.com/1206083

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2022-December/013237.html

ADVISORY

https://www.suse.com/security/cve/CVE-2022-43515/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2022/suse-su-20224477-1/