SUSE-SU-2023:0317-1

Details

This update for apache2-mod_security2 fixes the following issues:

CVE-2022-48279: Fixed a potential firewall bypass due to an incorrect parsing of HTTP multipart requests (bsc#1207378).

Affected Packages

apache2-mod_security2

SUSE Enterprise Storage 6SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

Fixed in:

2.9.2-150000.3.6.1

References

REPORT

https://bugzilla.suse.com/1207378

WEB

https://www.suse.com/security/cve/CVE-2022-48279

ADVISORY

https://www.suse.com/support/update/announcement/2023/suse-su-20230317-1/