< back to search

gpp_maybe Security update for apache2-mod_security2

SUSE-SLE-Module-Server-Applications-15-SP6-2025-2028

This update for apache2-mod_security2 fixes the following issues: - CVE-2025-47947: Fixed denial of service through sanitiseMatchedBytes (bsc#1243978). - CVE-2025-48866: Fixed denial of service via excessive number of arguments in sanitiseArg (bsc#1243976).

Release Date

Jun 19 2025
References

Bugzilla: 1243976, 1243978
CVEs: CVE-2025-48866, CVE-2025-47947
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Server Applications Module 15.6 aarch64

Packages

apache2-mod_security2
Web Application Firewall for apache httpd

2.9.4-150400.3.9.1 lock rpm lock src

Server Applications Module 15.6 ppc64le

Packages

apache2-mod_security2
Web Application Firewall for apache httpd

2.9.4-150400.3.9.1 lock rpm lock src

Server Applications Module 15.6 s390x

Packages

apache2-mod_security2
Web Application Firewall for apache httpd

2.9.4-150400.3.9.1 lock rpm lock src

Server Applications Module 15.6 x86_64

Packages

apache2-mod_security2
Web Application Firewall for apache httpd

2.9.4-150400.3.9.1 lock rpm lock src