Stay Secure with the Latest Linux Advisories

security advisorymoderatesecurity issue

SUSE: 2025:01994-1 moderate: Fix for InputStream Exception

* bsc#1230585 * bsc#1233297 * jsc#MSC-956 * jsc#MSQA-992 . # Security update 4.3.15.2 SUSE Manager Server 4.3 Announcement ID: SUSE-SU-2025:01994-1 Release Date: 2025-06-18T02:13:39Z Rating: moderate References: * bsc#1230585 * bsc#1233297 * jsc#MSC-956 * jsc#MSQA-992 Cross-References: * CVE-2024-47535 CVSS scores: * CVE-2024-47535 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-47535 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2024-47535 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Manager Server 4.3 * SUSE Manager Server 4.3 Module An update that solves one vulnerability, contains two features and has one security fix can now be installed. ## Description: This update fixes the following issues: netty: * Security issues fixed: * CVE-2024-47535: Decorate InputStream to throw an exception once the data read limit is reached (bsc#1233297) * Other changes: * Replace AlgorithmId.sha256WithRSAEncryption_oid usage with specify the OID directly susemanager-sync-data: * Version 4.3.22-0: * Added support for OES 24.4 (bsc#1230585) * Set Ubuntu 24.04 as released How to apply this update: 1. Log in as root user to the Multi-Linux Manager Server. 2. Stop the Spacewalk service: `spacewalk-service stop` 3. Apply the patch using either zypper patch or YaST Online Update. 4. Start the Spacewalk service: `spacewalk-service start` ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Server 4.3 Module zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.3-2025-1994=1 ## Package List: * SUSE Manager Server 4.3 Module (noarch) * netty-4.1.44.Final-150400.3.6.3 * susemanager-sync-data-4.3.23-150400.3.41.3 ## References: *https://www.suse.com/security/cve/CVE-2024-47535.html * https://bugzilla.suse.com/show_bug.cgi?id=1230585 * https://bugzilla.suse.com/show_bug.cgi?id=1233297 * https://jira.suse.com/login.jsp?permissionViolation=true&os_destination=%2Fbrowse%2FMSC-956&page_caps=&user_role= * https://jira.suse.com/login.jsp?permissionViolation=true&os_destination=%2Fbrowse%2FMSQA-992&page_caps=&user_role= . A significant security patch for SUSE Manager Server 4.3 tackling CVE-2024-47536 and improving overall system performance.. SUSE Manager Server, security update, system patch. . LinuxSecurity.com Team

Jun 18, 2025 SuSE