Important update for SUSE Manager 4.2.8 Release Notes SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:2567-1 Final 1 1 2022-07-27T13:42:03Z current 2022-07-27T13:42:03Z 2022-07-27T13:42:03Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Important update for SUSE Manager 4.2.8 Release Notes This update for SUSE Manager 4.2.8 Release Notes provides the following additions: Release notes for SUSE Manager: - Update to 4.2.8 * Notification about SUSE Manager end-of-life has been added * CVEs fixed CVE-2022-31248 * Bugs mentioned bsc#1179962, bsc#1182742, bsc#1189501, bsc#1192850, bsc#1193032 bsc#1193238, bsc#1194262, bsc#1196977, bsc#1197429, bsc#1197507 bsc#1198191, bsc#1198356, bsc#1198358, bsc#1198429, bsc#1198646 bsc#1198686, bsc#1198914, bsc#1198944, bsc#1198999, bsc#1199019 bsc#1199036, bsc#1199049, bsc#1199438, bsc#1199466, bsc#1199523 bsc#1199528, bsc#1199577, bsc#1199596, bsc#1199629, bsc#1199646 bsc#1199656, bsc#1199677, bsc#1199679, bsc#1199727, bsc#1199874 bsc#1199888, bsc#1200087, bsc#1200703, bsc#1200707, bsc#1200863 bsc#1194394, bsc#1201842, bsc#1201782 Release notes for SUSE Manager Proxy: - Update to 4.2.8 * Bugs mentioned bsc#1193238, bsc#1197507, bsc#1199019, bsc#1199401, bsc#1199528 bsc#1199679, bsc#1200087 The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2022-2567,SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2022-2567,SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2022-2567,SUSE-SLE-Product-SUSE-Manager-Server-4.2-2022-2567 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20222567-1/ Link for SUSE-SU-2022:2567-1 https://lists.suse.com/pipermail/sle-security-updates/2022-July/011683.html E-Mail link for SUSE-SU-2022:2567-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1179962 SUSE Bug 1179962 https://bugzilla.suse.com/1182742 SUSE Bug 1182742 https://bugzilla.suse.com/1189501 SUSE Bug 1189501 https://bugzilla.suse.com/1192850 SUSE Bug 1192850 https://bugzilla.suse.com/1193032 SUSE Bug 1193032 https://bugzilla.suse.com/1193238 SUSE Bug 1193238 https://bugzilla.suse.com/1194262 SUSE Bug 1194262 https://bugzilla.suse.com/1194394 SUSE Bug 1194394 https://bugzilla.suse.com/1196977 SUSE Bug 1196977 https://bugzilla.suse.com/1197429 SUSE Bug 1197429 https://bugzilla.suse.com/1197507 SUSE Bug 1197507 https://bugzilla.suse.com/1198191 SUSE Bug 1198191 https://bugzilla.suse.com/1198356 SUSE Bug 1198356 https://bugzilla.suse.com/1198358 SUSE Bug 1198358 https://bugzilla.suse.com/1198429 SUSE Bug 1198429 https://bugzilla.suse.com/1198646 SUSE Bug 1198646 https://bugzilla.suse.com/1198686 SUSE Bug 1198686 https://bugzilla.suse.com/1198914 SUSE Bug 1198914 https://bugzilla.suse.com/1198944 SUSE Bug 1198944 https://bugzilla.suse.com/1198999 SUSE Bug 1198999 https://bugzilla.suse.com/1199019 SUSE Bug 1199019 https://bugzilla.suse.com/1199036 SUSE Bug 1199036 https://bugzilla.suse.com/1199049 SUSE Bug 1199049 https://bugzilla.suse.com/1199401 SUSE Bug 1199401 https://bugzilla.suse.com/1199438 SUSE Bug 1199438 https://bugzilla.suse.com/1199466 SUSE Bug 1199466 https://bugzilla.suse.com/1199523 SUSE Bug 1199523 https://bugzilla.suse.com/1199528 SUSE Bug 1199528 https://bugzilla.suse.com/1199577 SUSE Bug 1199577 https://bugzilla.suse.com/1199596 SUSE Bug 1199596 https://bugzilla.suse.com/1199629 SUSE Bug 1199629 https://bugzilla.suse.com/1199646 SUSE Bug 1199646 https://bugzilla.suse.com/1199656 SUSE Bug 1199656 https://bugzilla.suse.com/1199677 SUSE Bug 1199677 https://bugzilla.suse.com/1199679 SUSE Bug 1199679 https://bugzilla.suse.com/1199727 SUSE Bug 1199727 https://bugzilla.suse.com/1199874 SUSE Bug 1199874 https://bugzilla.suse.com/1199888 SUSE Bug 1199888 https://bugzilla.suse.com/1200087 SUSE Bug 1200087 https://bugzilla.suse.com/1200703 SUSE Bug 1200703 https://bugzilla.suse.com/1200707 SUSE Bug 1200707 https://bugzilla.suse.com/1200863 SUSE Bug 1200863 https://bugzilla.suse.com/1201782 SUSE Bug 1201782 https://bugzilla.suse.com/1201842 SUSE Bug 1201842 https://www.suse.com/security/cve/CVE-2022-31248/ SUSE CVE CVE-2022-31248 page SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 release-notes-susemanager-4.2.8-150300.3.51.2 release-notes-susemanager-proxy-4.2.8-150300.3.40.2 release-notes-susemanager-proxy-4.2.8-150300.3.40.2 as a component of SUSE Manager Proxy 4.2 release-notes-susemanager-proxy-4.2.8-150300.3.40.2 as a component of SUSE Manager Retail Branch Server 4.2 release-notes-susemanager-4.2.8-150300.3.51.2 as a component of SUSE Manager Server 4.2 A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to discover valid usernames. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46-1. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37-1. CVE-2022-31248 SUSE Manager Proxy 4.2:release-notes-susemanager-proxy-4.2.8-150300.3.40.2 SUSE Manager Retail Branch Server 4.2:release-notes-susemanager-proxy-4.2.8-150300.3.40.2 SUSE Manager Server 4.2:release-notes-susemanager-4.2.8-150300.3.51.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222567-1/ https://www.suse.com/security/cve/CVE-2022-31248.html CVE-2022-31248 https://bugzilla.suse.com/1199629 SUSE Bug 1199629