SUSE-SU-2025:02429-1

Details

Description of the patch:

This update for rmt-server fixes the following issues:

Update to version 2.23
CVE-2025-46727: Fixed Unbounded-Parameter DoS in Rack:QueryParser. (bsc#1242893)
CVE-2025-32441: Fixed a bug where simultaneous rack requests can restore a deleted rack session. (bsc#1242898)

Affected Packages

rmt-server-pubcloud

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise Module for Public Cloud 15 SP3SUSE Linux Enterprise Server 15 SP3SUSE Linux Enterprise Server for SAP Applications 15 SP3

Fixed in:

0:2.23-150300.3.54.1

rmt-server

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Server 15 SP3-LTSS

Fixed in:

0:2.23-150300.3.54.1

rmt-server-config

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Server 15 SP3-LTSS

Fixed in:

0:2.23-150300.3.54.1

References

ADVISORY