gpp_maybe Security update for apache2-mod_security2

SUSE-SLE-Module-Server-Applications-15-SP7-2025-2028

This update for apache2-mod_security2 fixes the following issues: - CVE-2025-47947: Fixed denial of service through sanitiseMatchedBytes (bsc#1243978). - CVE-2025-48866: Fixed denial of service via excessive number of arguments in sanitiseArg (bsc#1243976).

• Release Date
  Jun 19 2025
• References
  Bugzilla: 1243976, 1243978
  CVEs: CVE-2025-48866, CVE-2025-47947
• Type
  security
• Severity
  important

cloud_download Downloads

Server Applications Module 15.7 aarch64

• Packages
  apache2-mod_security2
  Web Application Firewall for apache httpd

  2.9.4-150400.3.9.1 lock rpm lock src

Server Applications Module 15.7 ppc64le

• Packages
  apache2-mod_security2
  Web Application Firewall for apache httpd

  2.9.4-150400.3.9.1 lock rpm lock src

Server Applications Module 15.7 s390x

• Packages
  apache2-mod_security2
  Web Application Firewall for apache httpd

  2.9.4-150400.3.9.1 lock rpm lock src

Server Applications Module 15.7 x86_64

• Packages
  apache2-mod_security2
  Web Application Firewall for apache httpd

  2.9.4-150400.3.9.1 lock rpm lock src