p PatchFirst

SUSE-SU-2025:01994-1

SUSE-SU-2025:01994-1 · Security update 4.3.15.2 SUSE Manager Server 4.3

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update fixes the following issues: netty: - Security issues fixed: * CVE-2024-47535: Decorate InputStream to throw an exception once the data read limit is reached (bsc#1233297) - Other changes: * Replace AlgorithmId.sha256WithRSAEncryption_oid usage with specify the OID directly susemanager-sync-data: - Version 4.3.22-0: * Added support for OES 24.4 (bsc#1230585) * Set Ubuntu 24.04 as released How to apply this update: 1. Log in as root user to the Multi-Linux Manager Server. 2. Stop the Spacewalk service: `spacewalk-service stop` 3. Apply the patch using either zypper patch or YaST Online Update. 4. Start the Spacewalk service: `spacewalk-service start`

Fix available

Published
Updated

Stack: system

Affected products and versions

  • netty SUSE:Manager Server Module 4.3

    Affected ranges
    • ECOSYSTEM: < 4.1.44.Final-150400.3.6.3

    Update to 4.1.44.Final-150400.3.6.3

  • susemanager-sync-data SUSE:Manager Server Module 4.3

    Affected ranges
    • ECOSYSTEM: < 4.3.23-150400.3.41.3

    Update to 4.3.23-150400.3.41.3

Original sources

Check your server →