{"schemaVersion":3,"id":"SUSE-SU-2022:1397-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for SUSE Manager Server 4.2\n\nThis update fixes the following issues:\n\nc3p0:\n\n- Update to version c3p0 0.9.5.5 and\n  mchange-commons-java 0.2.19\n  * Address CVE-2018-20433\n  * Address CVE-2019-5427 - XML-config parsing related attacks  (bsc#1133198)\n  * Properly implement the JDBC 4.1 abort method\n\ngrafana-formula:\n\n- Version 0.7.0\n  * Add SLES 15 SP4 and openSUSE Leap 15.4 to supported versions\n\nhub-xmlrpc-api:\n\n- Updated to build on Enterprise Linux 8.\n\ninter-server-sync:\n\n- Version 0.1.0\n  * Allow export and import of configuration channels\n  * Clean lookup cache after processing a channel (bsc#1195750)\n  * Improve lookup method for generate foreign key export\n- Adapted for build on Enterprise Linux 8.\n\nmgr-osad:\n\n- Version 4.2.8-1\n  * Fix the condition for preventing building python 2 subpackage for SLE15\n\nmgr-push:\n\n- Version 4.2.5-1\n  * Fix the condition for preventing building python 2 subpackage for SLE15\n\npatterns-suse-manager:\n\n- golang-github-wrouesnel-postgres_exporter was renamed to prometheus-postgres_exporter\n\nprometheus-exporters-formula:\n\n- Version 1.2.0\n  * Postres exporter package was renamed for RedHat\n- Version 1.1.0\n  * Postgres exporter package was renamed for SLES/openSUSE\n\npy26-compat-msgpack-python:\n\n- Adapted to build on OBS for Enterprise Linux.\n\nrhnlib:\n\n- Version 4.2.6-1\n  * Fix the condition for preventing building python 2 subpackage for SLE15\n\nsaltboot-formula:\n\n- Update to version 0.1.1645440615.7f1328c\n  * skip device lookup for correctly provided devices\n  * improve image url modifications - preparation for ftp/http changes\n- Skip device lookup if correct path to device is already provided (bsc#1195757)\n- Improve image url modifications\n\nsmdba:\n\n- Version 1.7.10\n  * adapt pgtune using new defaults for new postgres versions\n  * support special configuration for SSD storage\n  * make argument '--backup-dir' symlink aware\n- Version 1.7.9\n- Allow different standard configuration file location for other OSes\n\nspacecmd:\n\n- Version 4.2.16-1\n  * implement system.bootstrap (bsc#1194909)\n  * Fix interactive mode for 'system_applyerrata' and 'errata_apply' (bsc#1194363)\n\nspacewalk-admin:\n\n- Version 4.2.10-1\n  * wait after copying the CA to give systemd time to finish automation\n\nspacewalk-backend:\n\n- Version 4.2.20-1\n  * Fix reposync update notice formatting and date parsing (bsc#1194447)\n  * implement more decompression algorithms for reposync (bsc#1196704)\n  * enable check for client certificates in reposync\n  * remove auto inherit of host entitlements for virtual guests\n\nspacewalk-branding:\n\n- Version 4.2.13-1\n  * Fix modal footer misalignment\n\nspacewalk-certs-tools:\n\n- Version 4.2.15-1\n  * Add dynamic version for bootstrap script header (bsc#1186336)\n\nspacewalk-client-tools:\n\n- Version 4.2.18-1\n  * Fix the condition for preventing building python 2 subpackage for SLE15\n- Version 4.2.17-1\n  * Update translation strings\n\nspacewalk-config:\n\n- Version 4.2.6-1\n  * Upgrade build tooling, and corresponding cache configuration\n\nspacewalk-java:\n\n- Version 4.2.34-1\n  * Added new XML-RPC mathod: configchannel.syncSaltFilesOnDisk\n  * update last checkin only if job is successful (bsc#1197007)\n  * Fix NPE when accessing cancelled action via system history (bsc#1195762)\n  * CVE Audit: Show patch as available in the currently installed product even if successor\n    patch affects additional packages (bsc#1196455)\n  * send notifications for new or changed ubuntu errata (bsc#1196977)\n  * change directory owner and permissions only when needed\n  * Fixed broken help link for system overview\n  * Provide link to Sync page when unsynced patches message show up (bsc#1196094)\n  * fix class cast exception during action chains (bsc#1195772)\n  * Finding empty profiles by mac address must be case insensitive (bsc#1196407)\n  * prepare to use new postgresql-jdbc driver with stringprep and saslprep support (bsc#1196693)\n  * allow SCC to display the last check-in time for registered systems\n  * generate the system ssh key when bootstrapping a salt-ssh client (bsc#1194909)\n  * Provide link for CVEs\n  * Fix lock/unlock scheduling on page Software Packages Lock (bsc#1195271)\n  * When adding a product, check if the new vendor channels conflicts\n    with any of the existing custom channel (bsc#1193448)\n  * Fix disappearing metadata key files after channel change (bsc#1192822)\n  * Suggest Product Migration when patch for CVE is in a successor Product (bsc#1191360)\n  * Add store info to Equals and hash methods to fix CVE audit process (bsc#1195282)\n  * Fix virtualization list rendering for foreign systems (bsc#1195712)\n  * FIX errors when an image profile / store is deleted during build / inspect action (bsc#1191597, bsc#1192150)\n  * Remove verbose token log (bsc#1195666)\n  * fix ClassCastException during action processing (bsc#1195043)\n\nspacewalk-web:\n\n- Version 4.2.26-1\n  * Provide link to Sync page when unsynced patches message show up (bsc#1196094)\n  * Provide a search box on section name for Formulas content\n  * Add expand/collapse all button for formula sections\n  * Improved large data support in channel selection\n  * Provide link for CVEs\n  * Improved error handling in the product setup page\n  * Suggest Product Migration when patch for CVE is in a successor Product (bsc#1191360)\n  * susemanager-web-libs is now packaged as a part of spacewalk-html\n\nsubscription-matcher:\n\n- Version 0.29\n  * Migration to log4j 2\n- Version 0.28\n  * Support both antlr3-java and antlr3-runtime as dependencies\n  * Make it obvious that log4j12 is used\n\nsupportutils-plugin-susemanager:\n\n- Version 4.2.4-1\n  * Get version of bootstrap scripts for supportconfig (bsc#1186336)\n\nsuseRegisterInfo:\n\n- Version 4.2.6-1\n  * Fix the condition for preventing building python 2 subpackage for SLE15\n\nsusemanager:\n\n- Version 4.2.28-1\n  * set default for registration batch size\n\nsusemanager-doc-indexes:\n\n- Renamed golang-github-wrouesnel-postgres_exporter to\n  prometheus-postgres_exporter in the Administration Guide\n- Clarified in Client Configuration Guide and Retail Guide that\n  mandatory channels are automatically checked. Also recommended\n  channels as long as they are not deactivated (bsc#1173527)\n- In Custom Channels chapter of the Administration Guide, provide\n  information about creating metadata (bsc#1195294)\n- In the Client Configuration Guide, mark Yomi as unsupported on\n  SUSE Linux Enterprise Server 11 and 12\n- Documented GPG encrypted Salt Pillars in the Salt book\n- In Client Configuration Guide, fixed channel configuration and\n  registration of Expanded Support clients\n- Clarified channel label name in Registering Clients with RHUI\n  section of the Client Configuration Guide (bsc#1196067)\n- In Throubleshooting Synchronization chapter in the Administration\n  Guide added instructions for GPG removal\n- In Client Configuration Guide, integrated SUSE Linux Enterprise\n  Micro Client documentation next to SUSE Linux Enterprise Client\n  documentation and other related documentation improvements (bsc#1195145)\n- Added a warning about the origin of the salt-minion package in the\n  Register on the Command Line (Salt) section of the Client\n  Configuration Guide\n- Add troubleshooting section about avoiding package conflicts\n  with custom channels\n\nsusemanager-docs_en:\n\n- Renamed golang-github-wrouesnel-postgres_exporter to\n  prometheus-postgres_exporter in the Administration Guide\n- Clarified in Client Configuration Guide and Retail Guide that\n  mandatory channels are automatically checked. Also recommended\n  channels as long as they are not deactivated (bsc#1173527)\n- In Custom Channels chapter of the Administration Guide, provide\n  information about creating metadata (bsc#1195294)\n- In the Client Configuration Guide, mark Yomi as unsupported on\n  SUSE Linux Enterprise Server 11 and 12\n- Documented GPG encrypted Salt Pillars in the Salt book\n- In Client Configuration Guide, fixed channel configuration and\n  registration of Expanded Support clients\n- Clarified channel label name in Registering Clients with RHUI\n  section of the Client Configuration Guide (bsc#1196067)\n- In Throubleshooting Synchronization chapter in the Administration\n  Guide added instructions for GPG removal\n- In Client Configuration Guide, integrated SUSE Linux Enterprise\n  Micro Client documentation next to SUSE Linux Enterprise Client\n  documentation and other related documentation improvements (bsc#1195145)\n- Added a warning about the origin of the salt-minion package in the\n  Register on the Command Line (Salt) section of the Client\n  Configuration Guide\n- Add troubleshooting section about avoiding package conflicts\n  with custom channels\n\nsusemanager-schema:\n\n- Version 4.2.21-1\n  * fix check on allowVendorChange\n  * fix advisory status migration (bsc#1195765)\n  * FIX error when an image profile / store is deleted\n    during build / inspect action (bsc#1191597, bsc#1192150)\n\nsusemanager-sls:\n\n- Version 4.2.21-1\n  * Improve `pkgset` beacon with using `salt.cache`\n    to notify about the changes made while the minion was stopped\n  * Align the code of pkgset beacon to prevent warnings (bsc#1194464)\n  * fixing how the return code is returned in mgrutil runner (bsc#1194909)\n  * Fix errors on calling sed -E ... by force_restart_minion\n    with action chains\n  * Avoid using lscpu -J option in grains (bsc#1195920)\n  * Postgres exporter package was renamed\n  * fix deprecation warnings\n\nvirtualization-formulas:\n\n- Update to version 0.6.2\n  * Ensure qemu-ksm is installed on host\n\nHow to apply this update:\n\n1. Log in as root user to the SUSE Manager server.\n2. Stop the Spacewalk service:\n`spacewalk-service stop`\n3. Apply the patch using either zypper patch or YaST Online Update.\n4. Start the Spacewalk service:\n`spacewalk-service start`","dates":{"published":"2022-04-25T14:43:53.000Z","modified":"2026-02-04T03:25:23.014Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"c3p0&distro=SUSE Manager Server Module 4.2","name":"c3p0","label":"c3p0&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/c3p0&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 0.9.5.5-150300.4.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.9.5.5-150300.4.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grafana-formula&distro=SUSE Manager Server Module 4.2","name":"grafana-formula","label":"grafana-formula&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grafana-formula&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 0.7.0-150300.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.7.0-150300.3.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"hub-xmlrpc-api&distro=SUSE Manager Server Module 4.2","name":"hub-xmlrpc-api","label":"hub-xmlrpc-api&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/hub-xmlrpc-api&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 0.7-150300.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.7-150300.3.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"inter-server-sync&distro=SUSE Manager Server Module 4.2","name":"inter-server-sync","label":"inter-server-sync&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/inter-server-sync&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 0.1.0-150300.8.12.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.1.0-150300.8.12.1","eol":null,"hubHref":null},{"vendor":"suse","product":"mgr-osad&distro=SUSE Manager Server Module 4.2","name":"mgr-osad","label":"mgr-osad&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/mgr-osad&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 4.2.8-150300.2.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.8-150300.2.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"mgr-push&distro=SUSE Manager Server Module 4.2","name":"mgr-push","label":"mgr-push&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/mgr-push&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 4.2.5-150300.2.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.5-150300.2.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"patterns-suse-manager&distro=SUSE Manager Server Module 4.2","name":"patterns-suse-manager","label":"patterns-suse-manager&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/patterns-suse-manager&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 4.2-150300.4.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2-150300.4.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"prometheus-exporters-formula&distro=SUSE Manager Server Module 4.2","name":"prometheus-exporters-formula","label":"prometheus-exporters-formula&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/prometheus-exporters-formula&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 1.2.0-150300.3.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-150300.3.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"py26-compat-msgpack-python&distro=SUSE Manager Server Module 4.2","name":"py26-compat-msgpack-python","label":"py26-compat-msgpack-python&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/py26-compat-msgpack-python&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 0.4.6-150300.4.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.4.6-150300.4.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"rhnlib&distro=SUSE Manager Server Module 4.2","name":"rhnlib","label":"rhnlib&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/rhnlib&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 4.2.6-150300.4.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.6-150300.4.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"saltboot-formula&distro=SUSE Manager Server Module 4.2","name":"saltboot-formula","label":"saltboot-formula&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltboot-formula&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 0.1.1645440615.7f1328c-150300.3.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.1.1645440615.7f1328c-150300.3.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"smdba&distro=SUSE Manager Server Module 4.2","name":"smdba","label":"smdba&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/smdba&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 1.7.10-0.150300.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.10-0.150300.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacecmd&distro=SUSE Manager Server Module 4.2","name":"spacecmd","label":"spacecmd&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacecmd&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 4.2.16-150300.4.18.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.16-150300.4.18.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-admin&distro=SUSE Manager Server Module 4.2","name":"spacewalk-admin","label":"spacewalk-admin&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-admin&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 4.2.10-150300.3.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.10-150300.3.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-backend&distro=SUSE Manager Server Module 4.2","name":"spacewalk-backend","label":"spacewalk-backend&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-backend&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 4.2.20-150300.4.18.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.20-150300.4.18.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-branding&distro=SUSE Manager Server Module 4.2","name":"spacewalk-branding","label":"spacewalk-branding&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-branding&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 4.2.13-150300.3.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.13-150300.3.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-certs-tools&distro=SUSE Manager Server Module 4.2","name":"spacewalk-certs-tools","label":"spacewalk-certs-tools&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-certs-tools&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 4.2.15-150300.3.15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.15-150300.3.15.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-client-tools&distro=SUSE Manager Server Module 4.2","name":"spacewalk-client-tools","label":"spacewalk-client-tools&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-client-tools&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 4.2.18-150300.4.18.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.18-150300.4.18.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-config&distro=SUSE Manager Server Module 4.2","name":"spacewalk-config","label":"spacewalk-config&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-config&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 4.2.6-150300.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.6-150300.3.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-java&distro=SUSE Manager Server Module 4.2","name":"spacewalk-java","label":"spacewalk-java&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-java&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 4.2.34-150300.3.26.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.34-150300.3.26.2","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-web&distro=SUSE Manager Server Module 4.2","name":"spacewalk-web","label":"spacewalk-web&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-web&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 4.2.26-150300.3.18.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.26-150300.3.18.2","eol":null,"hubHref":null},{"vendor":"suse","product":"subscription-matcher&distro=SUSE Manager Server Module 4.2","name":"subscription-matcher","label":"subscription-matcher&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/subscription-matcher&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 0.29-150300.6.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.29-150300.6.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"supportutils-plugin-susemanager&distro=SUSE Manager Server Module 4.2","name":"supportutils-plugin-susemanager","label":"supportutils-plugin-susemanager&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/supportutils-plugin-susemanager&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 4.2.4-150300.3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.4-150300.3.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-doc-indexes&distro=SUSE Manager Server Module 4.2","name":"susemanager-doc-indexes","label":"susemanager-doc-indexes&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-doc-indexes&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 4.2-150300.12.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2-150300.12.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-docs_en&distro=SUSE Manager Server Module 4.2","name":"susemanager-docs_en","label":"susemanager-docs_en&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-docs_en&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 4.2-150300.12.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2-150300.12.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-schema&distro=SUSE Manager Server Module 4.2","name":"susemanager-schema","label":"susemanager-schema&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-schema&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 4.2.21-150300.3.18.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.21-150300.3.18.1","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-sls&distro=SUSE Manager Server Module 4.2","name":"susemanager-sls","label":"susemanager-sls&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-sls&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 4.2.21-150300.3.20.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.21-150300.3.20.1","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager&distro=SUSE Manager Server Module 4.2","name":"susemanager","label":"susemanager&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 4.2.28-150300.3.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.28-150300.3.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"suseRegisterInfo&distro=SUSE Manager Server Module 4.2","name":"suseRegisterInfo","label":"suseRegisterInfo&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/suseRegisterInfo&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 4.2.6-150300.4.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.2.6-150300.4.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"virtualization-formulas&distro=SUSE Manager Server Module 4.2","name":"virtualization-formulas","label":"virtualization-formulas&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/virtualization-formulas&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 0.6.2-150300.8.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.6.2-150300.8.6.1","eol":null,"hubHref":null}],"affectedCount":30,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221397-1/","label":"www.suse.com/support/update/announcement/2022/suse-su-20221397-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1133198","label":"bugzilla.suse.com/1133198","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1173527","label":"bugzilla.suse.com/1173527","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1186336","label":"bugzilla.suse.com/1186336","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1191360","label":"bugzilla.suse.com/1191360","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1191597","label":"bugzilla.suse.com/1191597","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1192150","label":"bugzilla.suse.com/1192150","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1192822","label":"bugzilla.suse.com/1192822","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1193448","label":"bugzilla.suse.com/1193448","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194363","label":"bugzilla.suse.com/1194363","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194447","label":"bugzilla.suse.com/1194447","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194464","label":"bugzilla.suse.com/1194464","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194909","label":"bugzilla.suse.com/1194909","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1195043","label":"bugzilla.suse.com/1195043","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1195145","label":"bugzilla.suse.com/1195145","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1195271","label":"bugzilla.suse.com/1195271","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1195282","label":"bugzilla.suse.com/1195282","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1195294","label":"bugzilla.suse.com/1195294","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1195666","label":"bugzilla.suse.com/1195666","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1195712","label":"bugzilla.suse.com/1195712","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1195750","label":"bugzilla.suse.com/1195750","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1195757","label":"bugzilla.suse.com/1195757","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1195762","label":"bugzilla.suse.com/1195762","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1195765","label":"bugzilla.suse.com/1195765","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1195772","label":"bugzilla.suse.com/1195772","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1195920","label":"bugzilla.suse.com/1195920","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1196067","label":"bugzilla.suse.com/1196067","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1196094","label":"bugzilla.suse.com/1196094","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1196407","label":"bugzilla.suse.com/1196407","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1196455","label":"bugzilla.suse.com/1196455","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1196693","label":"bugzilla.suse.com/1196693","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1196704","label":"bugzilla.suse.com/1196704","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1196977","label":"bugzilla.suse.com/1196977","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1197007","label":"bugzilla.suse.com/1197007","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20433","label":"www.suse.com/security/cve/CVE-2018-20433","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5427","label":"www.suse.com/security/cve/CVE-2019-5427","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2018-20433","CVE-2019-5427"],"downstream":[],"duplicates":[],"related":["CVE-2018-20433","CVE-2019-5427"]},"timeline":[{"kind":"published","date":"2022-04-25T14:43:53.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:25:23.014Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T20:47:51.325Z","stale":false,"partial":false}}