SUSE-SU-2022:4488-1

UNKNOWN

Security update for apache2-mod_wsgi

Published Dec 14, 2022

Modified 3 years ago

Fix available

Details

This update for apache2-mod_wsgi fixes the following issues:

CVE-2022-2255: Hardened the trusted proxy header filter to avoid bypass. (bsc#1201634)

Affected Packages

apache2-mod_wsgi

SUSE Linux Enterprise Module for Public Cloud 15 SP1SUSE Linux Enterprise Module for Public Cloud 15 SP2SUSE Linux Enterprise Module for Public Cloud 15 SP3openSUSE Leap 15.3

Fixed in:

4.5.18-150000.4.6.1

apache2-mod_wsgi-python3

SUSE Linux Enterprise Module for Server Applications 15 SP3SUSE Linux Enterprise Module for Server Applications 15 SP4SUSE Manager Proxy Module 4.1SUSE Manager Proxy Module 4.2SUSE Manager Proxy Module 4.3

Fixed in:

4.5.18-150000.4.6.1

References

REPORT

https://bugzilla.suse.com/1201634

WEB

https://www.suse.com/security/cve/CVE-2022-2255

ADVISORY

https://www.suse.com/support/update/announcement/2022/suse-su-20224488-1/

Upstream

CVE-2022-2255

Ecosystems(10)

SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SP2 SUSE Linux Enterprise Module for Public Cloud 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4

Timeline

PublishedDec 14, 2022

ModifiedDec 14, 2022