Security update for rmt-server
This update for rmt-server fixes the following issue Update to 3.0.0: - CVE-2026-42256: net-imap: hostile server can perform a DoS on client authenticating a connection with SCRAM-SHA1 or SCRAM-SHA2 (bsc#1265369). Changes for rmt-server: - Version 3.0.0 * Security fix: Remove unused ActionMailer/ActionMailbox components to eliminate CVE-2026-42256 (bsc#1265369) * Split Rails meta-gem into individual components for better security control - Version 2.26 * Add support for processing, storing, and syncing system profiles (jsc#TEL-265) - Version 2.25 * fix rmt-cli list and purge commands for large data (bsc#1253146 and bsc#1253147) * Fix mirroring of SLE16 NVIDIA-GPU-Compute-Toolkit-CUDA repo (bsc#1256826) * Support for new redirect_repo_hosts config, to exclude some repo hosts from mirroring, and send clients directly there (jsc#SCC-452) * rmt-server-pubcloud * Clearer error message (bsc#1256883) * Handle zypper response when data exporter raises an error (bsc#1257133) * Add Valkey + Sidekiq for async processing * Enable mirroring xz compressed repositories (bsc#1246976) * Rack 2.2.20 security update (bsc#1253953, bsc#1251937) * Drop some de-published products from RMT * Include Live-Patching for SLES 15.X (jsc#PCT-630) * Handle only one data exporter (bsc#1248869) * Do not decode instance data from db to access registry (bsc#1248510) * Handle instance verification exceptions
Security update for rmt-server
Description
This update for rmt-server fixes the following issue Update to 3.0.0: - CVE-2026-42256: net-imap: hostile server can perform a DoS on client authenticating a connection with SCRAM-SHA1 or SCRAM-SHA2 (bsc#1265369). Changes for rmt-server: - Version 3.0.0 * Security fix: Remove unused ActionMailer/ActionMailbox components to eliminate CVE-2026-42256 (bsc#1265369) * Split Rails meta-gem into individual components for better security control - Version 2.26 * Add support for processing, storing, and syncing system profiles (jsc#TEL-265) - Version 2.25 * fix rmt-cli list and purge commands for large data (bsc#1253146 and bsc#1253147) * Fix mirroring of SLE16 NVIDIA-GPU-Compute-Toolkit-CUDA repo (bsc#1256826) * Support for new redirect_repo_hosts config, to exclude some repo hosts from mirroring, and send clients directly there (jsc#SCC-452) * rmt-server-pubcloud * Clearer error message (bsc#1256883) * Handle zypper response when data exporter raises an error (bsc#1257133) * Add Valkey + Sidekiq for async processing * Enable mirroring xz compressed repositories (bsc#1246976) * Rack 2.2.20 security update (bsc#1253953, bsc#1251937) * Drop some de-published products from RMT * Include Live-Patching for SLES 15.X (jsc#PCT-630) * Handle only one data exporter (bsc#1248869) * Do not decode instance data from db to access registry (bsc#1248510) * Handle instance verification exceptions
Affected software
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- SUSE Product Security Team
- Advisory Id
- openSUSE-SU-2026:21225-1
- Cve Count
- 1
- State
- PUBLISHED
Threat ID: 6aab497155bf5e2cf5990e08
Added to database: 09/17/2026, 01:59:13 UTC
Last updated: 09/17/2026, 02:02:24 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.