shield Security update for apache2-mod_security2
SUSE-SLE-Module-Server-Applications-15-SP6-2025-3422


This update for apache2-mod_security2 fixes the following issues: - CVE-2025-54571: Fixed insufficient return value handling on modsecurity leads to xss and source code disclosure (bsc#1247674)

  • Release Date
    Sep 29 2025
  • References
    Bugzilla: 1247674
    CVEs: CVE-2025-54571
  • Type
    security
  • Severity
    moderate

cloud_download Downloads

Server Applications Module 15.6 aarch64
  • Packages
    apache2-mod_security2
    Web Application Firewall for apache httpd
    2.9.4-150400.3.12.1 lock rpm lock src
Server Applications Module 15.6 ppc64le
  • Packages
    apache2-mod_security2
    Web Application Firewall for apache httpd
    2.9.4-150400.3.12.1 lock rpm lock src
Server Applications Module 15.6 s390x
  • Packages
    apache2-mod_security2
    Web Application Firewall for apache httpd
    2.9.4-150400.3.12.1 lock rpm lock src
Server Applications Module 15.6 x86_64
  • Packages
    apache2-mod_security2
    Web Application Firewall for apache httpd
    2.9.4-150400.3.12.1 lock rpm lock src