Alerts This Week
Warning Icon 1 1,154
Alerts This Week
Warning Icon 1 1,154

SUSE: 2025:01994-1 moderate: Fix for InputStream Exception

suse
Calendar Grey June 18, 2025
Dist Suse Esm H88
A significant security patch for SUSE Manager Server 4.3 tackling CVE-2024-47536 and improving overall system performance.
* bsc#1230585 * bsc#1233297 * jsc#MSC-956 * jsc#MSQA-992

Summary

## This update fixes the following issues: netty: * Security issues fixed: * CVE-2024-47535: Decorate InputStream to throw an exception once the data read limit is reached (bsc#1233297) * Other changes: * Replace AlgorithmId.sha256WithRSAEncryption_oid usage with specify the OID directly susemanager-sync-data: * Version 4.3.22-0: * Added support for OES 24.4 (bsc#1230585) * Set Ubuntu 24.04 as released How to apply this update: 1. Log in as root user to the Multi-Linux Manager Server. 2. Stop the Spacewalk service: `spacewalk-service stop` 3. Apply the patch using either zypper patch or YaST Online Update. 4. Start the Spacewalk service: `spacewalk-service start` ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

Topics%20covered

Topics Covered

security advisory moderate security issue system update SUSE input stream exception

References

* bsc#1230585

* bsc#1233297

* jsc#MSC-956

* jsc#MSQA-992

Cross-

* CVE-2024-47535

CVSS scores:

* CVE-2024-47535 ( SUSE ): 5.6

CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

* CVE-2024-47535 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

* CVE-2024-47535 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products:

* SUSE Manager Server 4.3

* SUSE Manager Server 4.3 Module

An update that solves one vulnerability, contains two features and has one

security fix can now be installed.

##

* https://www.suse.com/security/cve/CVE-2024-47535.html

* https://bugzilla.suse.com/show_bug.cgi?id=1230585

* https://bugzilla.suse.com/show_bug.cgi?id=1233297

Announcement ID: SUSE-SU-2025:01994-1
Release Date: 2025-06-18T02:13:39Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate security issue system update SUSE input stream exception

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here