SUSE-SU-2023:2304-1

Details

Description of the patch:

This update for rmt-server fixes the following issues:

Updated to version 2.13:

CVE-2023-28120: Fixed a potential XSS issue in an embedded dependency (bsc#1209507).
CVE-2023-27530: Fixed a denial of service issue in multipart request parsing (bsc#1209096).

Non-security fixes:

Fixed transactional update on GCE (bsc#1211398).
Use HTTPS in rmt-client-setup-res (bsc#1209825).
Various build fixes (bsc#1207670, bsc#1203171, bsc#1206593, bsc#1202053).

Affected Packages

rmt-server

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise Server 15 SP1-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP1

Fixed in:

2.13-150100.3.45.1

rmt-server-config

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise Server 15 SP1-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP1

Fixed in:

2.13-150100.3.45.1

rmt-server-pubcloud

SUSE Linux Enterprise Module for Public Cloud 15 SP1

Fixed in:

2.13-150100.3.45.1

References

ADVISORY

https://bugzilla.suse.com/1202053

ADVISORY

https://bugzilla.suse.com/1203171

ADVISORY