SUSE-SU-2022:4442-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2022/suse-su-20224442-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:4442-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2022:4442-1
Published
2022-12-13T07:39:56Z
Modified
2022-12-13T07:39:56Z
Summary
Security update for SUSE Manager Server 4.2
Details

This update fixes the following issues:

spacewalk-java:

  • Version 4.2.44-1
    • Do not disclose Proxy password in browser console log. (bsc#1205339)

spacewalk-web:

  • Version 4.2.31-1
    • Do not log Proxy password in browser console log. (bsc#1205339)

susemanager-sync-data:

  • Version 4.2.14-1
    • Add SUSE Linux Enterprise Server 15 SP3 LTSS

How to apply this update:

  1. Log in as root user to the SUSE Manager server.
  2. Stop the Spacewalk service: spacewalk-service stop
  3. Apply the patch using either zypper patch or YaST Online Update.
  4. Start the Spacewalk service: spacewalk-service start
References

Affected packages

SUSE:Manager Proxy Module 4.2
spacewalk-web

Package

Name
spacewalk-web
Purl
pkg:rpm/suse/spacewalk-web&distro=SUSE%20Manager%20Proxy%20Module%204.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.2.31-150300.3.33.2

Ecosystem specific 

{
    "binaries":  [
        {
            "spacewalk-base-minimal":  "4.2.31-150300.3.33.2",
            "spacewalk-base-minimal-config":  "4.2.31-150300.3.33.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:4442-1.json"
SUSE:Manager Server Module 4.2
spacewalk-java

Package

Name
spacewalk-java
Purl
pkg:rpm/suse/spacewalk-java&distro=SUSE%20Manager%20Server%20Module%204.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.2.44-150300.3.51.3

Ecosystem specific 

{
    "binaries":  [
        {
            "spacewalk-base":  "4.2.31-150300.3.33.2",
            "spacewalk-base-minimal":  "4.2.31-150300.3.33.2",
            "spacewalk-base-minimal-config":  "4.2.31-150300.3.33.2",
            "spacewalk-html":  "4.2.31-150300.3.33.2",
            "spacewalk-java":  "4.2.44-150300.3.51.3",
            "spacewalk-java-config":  "4.2.44-150300.3.51.3",
            "spacewalk-java-lib":  "4.2.44-150300.3.51.3",
            "spacewalk-java-postgresql":  "4.2.44-150300.3.51.3",
            "spacewalk-taskomatic":  "4.2.44-150300.3.51.3",
            "susemanager-sync-data":  "4.2.14-150300.3.24.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:4442-1.json"
spacewalk-web

Package

Name
spacewalk-web
Purl
pkg:rpm/suse/spacewalk-web&distro=SUSE%20Manager%20Server%20Module%204.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.2.31-150300.3.33.2

Ecosystem specific 

{
    "binaries":  [
        {
            "spacewalk-base":  "4.2.31-150300.3.33.2",
            "spacewalk-base-minimal":  "4.2.31-150300.3.33.2",
            "spacewalk-base-minimal-config":  "4.2.31-150300.3.33.2",
            "spacewalk-html":  "4.2.31-150300.3.33.2",
            "spacewalk-java":  "4.2.44-150300.3.51.3",
            "spacewalk-java-config":  "4.2.44-150300.3.51.3",
            "spacewalk-java-lib":  "4.2.44-150300.3.51.3",
            "spacewalk-java-postgresql":  "4.2.44-150300.3.51.3",
            "spacewalk-taskomatic":  "4.2.44-150300.3.51.3",
            "susemanager-sync-data":  "4.2.14-150300.3.24.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:4442-1.json"
susemanager-sync-data

Package

Name
susemanager-sync-data
Purl
pkg:rpm/suse/susemanager-sync-data&distro=SUSE%20Manager%20Server%20Module%204.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.2.14-150300.3.24.1

Ecosystem specific 

{
    "binaries":  [
        {
            "spacewalk-base":  "4.2.31-150300.3.33.2",
            "spacewalk-base-minimal":  "4.2.31-150300.3.33.2",
            "spacewalk-base-minimal-config":  "4.2.31-150300.3.33.2",
            "spacewalk-html":  "4.2.31-150300.3.33.2",
            "spacewalk-java":  "4.2.44-150300.3.51.3",
            "spacewalk-java-config":  "4.2.44-150300.3.51.3",
            "spacewalk-java-lib":  "4.2.44-150300.3.51.3",
            "spacewalk-java-postgresql":  "4.2.44-150300.3.51.3",
            "spacewalk-taskomatic":  "4.2.44-150300.3.51.3",
            "susemanager-sync-data":  "4.2.14-150300.3.24.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:4442-1.json"