SUSE-SU-2022:0729-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2022/suse-su-20220729-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0729-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2022:0729-1
Published
2022-03-04T10:52:03Z
Modified
2022-03-04T10:52:03Z
Summary
Security update for SUSE Manager Server 4.2
Details

This update fixes the following issues:

spacewalk-java:

  • Version 4.2.33-1
    • handle npe when syncing ubuntu errata (bsc#1196619)

susemanager-sync-data:

  • Version 4.2.11-1
    • change centos 8 eol urls to vault which still work

How to apply this update:

  1. Log in as root user to the SUSE Manager server.
  2. Stop the Spacewalk service: spacewalk-service stop
  3. Apply the patch using either zypper patch or YaST Online Update.
  4. Start the Spacewalk service: spacewalk-service start
References

Affected packages

SUSE:Manager Server Module 4.2 / spacewalk-java

Package

Name
spacewalk-java
Purl
pkg:rpm/suse/spacewalk-java&distro=SUSE%20Manager%20Server%20Module%204.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.2.33-150300.3.23.1

Ecosystem specific 

{
    "binaries":  [
        {
            "spacewalk-java":  "4.2.33-150300.3.23.1",
            "spacewalk-java-config":  "4.2.33-150300.3.23.1",
            "spacewalk-java-lib":  "4.2.33-150300.3.23.1",
            "spacewalk-java-postgresql":  "4.2.33-150300.3.23.1",
            "spacewalk-taskomatic":  "4.2.33-150300.3.23.1",
            "susemanager-sync-data":  "4.2.11-150300.3.15.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0729-1.json"

SUSE:Manager Server Module 4.2 / susemanager-sync-data

Package

Name
susemanager-sync-data
Purl
pkg:rpm/suse/susemanager-sync-data&distro=SUSE%20Manager%20Server%20Module%204.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.2.11-150300.3.15.1

Ecosystem specific 

{
    "binaries":  [
        {
            "spacewalk-java":  "4.2.33-150300.3.23.1",
            "spacewalk-java-config":  "4.2.33-150300.3.23.1",
            "spacewalk-java-lib":  "4.2.33-150300.3.23.1",
            "spacewalk-java-postgresql":  "4.2.33-150300.3.23.1",
            "spacewalk-taskomatic":  "4.2.33-150300.3.23.1",
            "susemanager-sync-data":  "4.2.11-150300.3.15.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0729-1.json"