SUSE-SU-2025:02329-1

Details

This update for rmt-server fixes the following issues:

Update to version 2.23
CVE-2025-46727: Fixed Unbounded-Parameter DoS in Rack:QueryParser. (bsc#1242893)
CVE-2025-32441: Fixed a bug where simultaneous rack requests can restore a deleted rack session. (bsc#1242898)

Affected Packages

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSrmt-server

Fixed in:

2.23-150400.3.42.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSrmt-server-config

Fixed in:

2.23-150400.3.42.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSrmt-server

Fixed in:

2.23-150400.3.42.1

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSrmt-server-config

Fixed in:

2.23-150400.3.42.1

SUSE:Linux Enterprise Module for Public Cloud 15 SP4rmt-server

Fixed in:

2.23-150400.3.42.1

SUSE:Linux Enterprise Module for Public Cloud 15 SP4rmt-server-pubcloud

Fixed in:

2.23-150400.3.42.1

SUSE:Linux Enterprise Server 15 SP4-LTSSrmt-server

Fixed in:

2.23-150400.3.42.1

SUSE:Linux Enterprise Server 15 SP4-LTSSrmt-server-config

Fixed in:

2.23-150400.3.42.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4rmt-server

Fixed in:

2.23-150400.3.42.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP4rmt-server-config

Fixed in:

2.23-150400.3.42.1

SUSE:Manager Proxy 4.3rmt-server

Fixed in:

2.23-150400.3.42.1

SUSE:Manager Proxy 4.3rmt-server-config

Fixed in:

2.23-150400.3.42.1

SUSE:Manager Server 4.3rmt-server

Fixed in:

2.23-150400.3.42.1

SUSE:Manager Server 4.3rmt-server-config

Fixed in:

2.23-150400.3.42.1

References

REPORThttps://bugzilla.suse.com/1236600 REPORThttps://bugzilla.suse.com/1236816 REPORThttps://bugzilla.suse.com/1236836 REPORThttps://bugzilla.suse.com/1237373 REPORThttps://bugzilla.suse.com/1242893 REPORThttps://bugzilla.suse.com/1242898 REPORThttps://bugzilla.suse.com/1244166 WEBhttps://www.suse.com/security/cve/CVE-2025-32441 WEBhttps://www.suse.com/security/cve/CVE-2025-46727 ADVISORYhttps://www.suse.com/support/update/announcement/2025/suse-su-202502329-1/

SUSE-SU-2025:02329-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline