< back to search

gpp_maybe Security update for rmt-server
SUSE-SLE-Module-Server-Applications-15-SP5-2023-2781

This update for rmt-server fixes the following issues: Update to version 2.13: - CVE-2023-28120: Fixed a possible XSS Security Vulnerability in bytesliced strings for html_safe (bsc#1209507). - CVE-2023-27530: Fixed a DoS in multipart mime parsing (bsc#1209096). - CVE-2022-31254: Fixed escalation vector bug from user _rmt to root in the packaging file (bsc#1204285). Bug fixes: - Handle X-Original-URI header, partial fix for (bsc#1211398) - Force rmt-client-setup-res script to use https (bsc#1209825) - Mark secrets.yml.key file as part of the rpm to allow seamless downgrades (bsc#1207670) - Adding -f to the file move command when moving the mirrored directory to its final location (bsc#1203171) - Fix %post install of pubcloud subpackage reload of nginx (bsc#1206593) - Skip warnings regarding nokogiri libxml version mismatch (bsc#1202053) - Add option to turn off system token support (bsc#1205089) - Do not retry to import non-existing files in air-gapped mode (bsc#1204769)

cloud_download Downloads

Server Applications Module 15.5 x86_64
  • Packages
    rmt-server
    Repository mirroring tool and registration proxy for SCC
    2.13-150500.3.3.1 lock rpm lock src
    rmt-server-config
    RMT default configuration
    2.13-150500.3.3.1 lock rpm
Server Applications Module 15.5 s390x
  • Packages
    rmt-server
    Repository mirroring tool and registration proxy for SCC
    2.13-150500.3.3.1 lock rpm lock src
    rmt-server-config
    RMT default configuration
    2.13-150500.3.3.1 lock rpm
Server Applications Module 15.5 aarch64
  • Packages
    rmt-server
    Repository mirroring tool and registration proxy for SCC
    2.13-150500.3.3.1 lock rpm lock src
    rmt-server-config
    RMT default configuration
    2.13-150500.3.3.1 lock rpm
Server Applications Module 15.5 ppc64le
  • Packages
    rmt-server
    Repository mirroring tool and registration proxy for SCC
    2.13-150500.3.3.1 lock rpm lock src
    rmt-server-config
    RMT default configuration
    2.13-150500.3.3.1 lock rpm