Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:4013-1

Опубликовано: 16 нояб. 2022
Источник: suse-cvrf

Описание

Security update for apache2-mod_wsgi

This update for apache2-mod_wsgi fixes the following issues:

  • CVE-2022-2255: Hardened the trusted proxy header filter to avoid bypass. (bsc#1201634)

Список пакетов

HPE Helion OpenStack 8
apache2-mod_wsgi-4.4.13-3.3.1
SUSE Linux Enterprise Module for Public Cloud 12
apache2-mod_wsgi-4.4.13-3.3.1
SUSE Linux Enterprise Module for Web and Scripting 12
apache2-mod_wsgi-4.4.13-3.3.1
SUSE OpenStack Cloud 8
apache2-mod_wsgi-4.4.13-3.3.1
SUSE OpenStack Cloud Crowbar 8
apache2-mod_wsgi-4.4.13-3.3.1

Ссылки

Описание

A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.

Затронутые продукты
HPE Helion OpenStack 8:apache2-mod_wsgi-4.4.13-3.3.1
SUSE Linux Enterprise Module for Public Cloud 12:apache2-mod_wsgi-4.4.13-3.3.1
SUSE Linux Enterprise Module for Web and Scripting 12:apache2-mod_wsgi-4.4.13-3.3.1
SUSE OpenStack Cloud 8:apache2-mod_wsgi-4.4.13-3.3.1
Ссылки