This update fixes the following issues:
netty:
- Security issues fixed:
* CVE-2024-47535: Decorate InputStream to throw an exception once the data
read limit is reached (bsc#1233297)
- Other changes:
* Replace AlgorithmId.sha256WithRSAEncryption_oid usage with
specify the OID directly
susemanager-sync-data:
- Version 4.3.22-0:
* Added support for OES 24.4 (bsc#1230585)
* Set Ubuntu 24.04 as released
How to apply this update:
1. Log in as root user to the Multi-Linux Manager Server.
2. Stop the Spacewalk service:
`spacewalk-service stop`
3. Apply the patch using either zypper patch or YaST Online Update.
4. Start the
This update for netty fixes the following issues:
- CVE-2020-11612: The ZlibDecoders allow for unbounded memory allocation while decoding a byte stream (bsc#1168932)
- CVE-2021-21290: Information disclosure via the local system temporary directory (bsc#1182103)
- CVE-2021-37136: Bzip2Decoder doesn't allow setting size restrictions for decompressed data (bsc#1190610)
- CVE-2021-37137: Snappy frame decoder doesn't restrict the chunk length and may buffer skippable chunks (bsc#1190613)