
CVE catalog
CVE-2022-31255
Security update for SUSE Manager Server 4.2
- Severity
- Medium · CVSS 4.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.75% · Oct 25, 2026
This update for release-notes-susemanager, release-notes-susemanager-proxy fixes the following issues: Release notes for SUSE Manager: - Update to SUSE Manager 4.2.10 * Apache exporter has been upgraded to version 0.11.0 * CVEs fixed: CVE-2022-43753, CVE-2022-43754, CVE-2022-31255 * Bugs mentioned: bsc#1195624, bsc#1197724, bsc#1199726, bsc#1200596, bsc#1201059 bsc#1201788, bsc#1202167, bsc#1202729, bsc#1202785, bsc#1203283 bsc#1203406, bsc#1203422, bsc#1203564, bsc#1203599, bsc#1203611 bsc#1203898, bsc#1204146, bsc#1204203, bsc#1195624, bsc#1197724 bsc#1199726, bsc#1200596, bsc#1201059, bsc#1201788, bsc#1202167 bsc#1202729, bsc#1202785, bsc#1203283, bsc#1203406, bsc#1203422 bsc#1203564, bsc#1203599, bsc#1203611, bsc#1203898, bsc#1204146 bsc#1204716, bsc#1204741, bsc#1204543 Release notes for SUSE Manager Proxy: - Update to SUSE Manager 4.2.10 * Bugs mentioned: bsc#1201059, bsc#1201788, bsc#1203283
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Suse | release-notes-susemanager-proxy | manager proxy 4.2 | 4.2.10-150300.3.46.1 | fixed |
| Suse | release-notes-susemanager-proxy | manager retail branch server 4.2 | 4.2.10-150300.3.46.1 | fixed |
| Suse | release-notes-susemanager | manager server 4.2 | 4.2.10-150300.3.57.1 | fixed |
| Suse | spacewalk-java | manager server module 4.3 | 4.3.39-150400.3.11.1 | fixed |
| Suse | hub-xmlrpc-api | manager server module 4.2 | 0.7-150300.3.9.2 | fixed |
| Suse | inter-server-sync | manager server module 4.2 | 0.2.4-150300.8.25.2 | fixed |
| Suse | locale-formula | manager server module 4.2 | 0.3-150300.3.3.2 | fixed |
| Suse | py27-compat-salt | manager server module 4.2 | 3000.3-150300.7.7.26.2 | fixed |
| Suse | python-urlgrabber | manager server module 4.2 | 3.10.2.1py2_3-150300.3.3.2 | fixed |
| Suse | spacecmd | manager server module 4.2 | 4.2.20-150300.4.30.2 | fixed |
| Suse | spacewalk-backend | manager server module 4.2 | 4.2.25-150300.4.32.4 | fixed |
| Suse | spacewalk-client-tools | manager server module 4.2 | 4.2.21-150300.4.27.3 | fixed |
| Suse | spacewalk-java | manager server module 4.2 | 4.2.43-150300.3.48.2 | fixed |
| Suse | spacewalk-utils | manager server module 4.2 | 4.2.18-150300.3.21.2 | fixed |
| Suse | spacewalk-web | manager server module 4.2 | 4.2.30-150300.3.30.3 | fixed |
| Suse | susemanager | manager server module 4.2 | 4.2.38-150300.3.44.3 | fixed |
| Suse | susemanager-doc-indexes | manager server module 4.2 | 4.2-150300.12.36.3 | fixed |
| Suse | susemanager-docs_en | manager server module 4.2 | 4.2-150300.12.36.2 | fixed |
| Suse | susemanager-schema | manager server module 4.2 | 4.2.25-150300.3.30.3 | fixed |
| Suse | susemanager-sls | manager server module 4.2 | 4.2.28-150300.3.36.2 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Suse | release-notes-susemanager-proxy | rpm | manager proxy 4.2 | 4.2.10-150300.3.46.1 | Not reported | SUSE-SU-2022:3879-1 | Not reported |
| Suse | release-notes-susemanager-proxy | rpm | manager retail branch server 4.2 | 4.2.10-150300.3.46.1 | Not reported | SUSE-SU-2022:3879-1 | Not reported |
| Suse | release-notes-susemanager | rpm | manager server 4.2 | 4.2.10-150300.3.57.1 | Not reported | SUSE-SU-2022:3879-1 | Not reported |
| Suse | spacewalk-java | rpm | manager server module 4.3 | 4.3.39-150400.3.11.1 | Not reported | SUSE-SU-2022:3880-1 | Not reported |
| Suse | hub-xmlrpc-api | rpm | manager server module 4.2 | 0.7-150300.3.9.2 | Not reported | SUSE-SU-2022:3878-1 | Not reported |
| Suse | inter-server-sync | rpm | manager server module 4.2 | 0.2.4-150300.8.25.2 | Not reported | SUSE-SU-2022:3878-1 | Not reported |
| Suse | locale-formula | rpm | manager server module 4.2 | 0.3-150300.3.3.2 | Not reported | SUSE-SU-2022:3878-1 | Not reported |
| Suse | py27-compat-salt | rpm | manager server module 4.2 | 3000.3-150300.7.7.26.2 | Not reported | SUSE-SU-2022:3878-1 | Not reported |
| Suse | python-urlgrabber | rpm | manager server module 4.2 | 3.10.2.1py2_3-150300.3.3.2 | Not reported | SUSE-SU-2022:3878-1 | Not reported |
| Suse | spacecmd | rpm | manager server module 4.2 | 4.2.20-150300.4.30.2 | Not reported | SUSE-SU-2022:3878-1 | Not reported |
| Suse | spacewalk-backend | rpm | manager server module 4.2 | 4.2.25-150300.4.32.4 | Not reported | SUSE-SU-2022:3878-1 | Not reported |
| Suse | spacewalk-client-tools | rpm | manager server module 4.2 | 4.2.21-150300.4.27.3 | Not reported | SUSE-SU-2022:3878-1 | Not reported |
| Suse | spacewalk-java | rpm | manager server module 4.2 | 4.2.43-150300.3.48.2 | Not reported | SUSE-SU-2022:3878-1 | Not reported |
| Suse | spacewalk-utils | rpm | manager server module 4.2 | 4.2.18-150300.3.21.2 | Not reported | SUSE-SU-2022:3878-1 | Not reported |
| Suse | spacewalk-web | rpm | manager server module 4.2 | 4.2.30-150300.3.30.3 | Not reported | SUSE-SU-2022:3878-1 | Not reported |
| Suse | susemanager | rpm | manager server module 4.2 | 4.2.38-150300.3.44.3 | Not reported | SUSE-SU-2022:3878-1 | Not reported |
| Suse | susemanager-doc-indexes | rpm | manager server module 4.2 | 4.2-150300.12.36.3 | Not reported | SUSE-SU-2022:3878-1 | Not reported |
| Suse | susemanager-docs_en | rpm | manager server module 4.2 | 4.2-150300.12.36.2 | Not reported | SUSE-SU-2022:3878-1 | Not reported |
| Suse | susemanager-schema | rpm | manager server module 4.2 | 4.2.25-150300.3.30.3 | Not reported | SUSE-SU-2022:3878-1 | Not reported |
| Suse | susemanager-sls | rpm | manager server module 4.2 | 4.2.28-150300.3.36.2 | Not reported | SUSE-SU-2022:3878-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_3878-1.json]
- [https://osv.dev/vulnerability/SUSE-SU-2022:3878-1]
- [https://osv.dev/vulnerability/SUSE-SU-2022:3879-1]
- [https://osv.dev/vulnerability/SUSE-SU-2022:3880-1]
[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]