shield Security update for suse manager proxy 4.3

SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2022-3750

This update fixes the following issues: mgr-daemon: - Version 4.3.6-1 * Update translation strings spacecmd: - Version 4.3.15-1 * Process date values in spacecmd api calls (bsc#1198903) spacewalk-backend: - Version 4.3.16-1 * Prevent mixing credentials for proxy and repository server while using basic authentication and avoid hiding errors i.e. timeouts while having proxy settings issues with extra logging in verbose mode (bsc#1201788) * Fix the condition of hiding the token from URL on logging * export armored GPG key to salt filesystem as well * Upgrade Cobbler requirement to 3.3.3 or later * Make reposync use the configured http proxy with mirrorlist (bsc#1198168) spacewalk-certs-tools: - Version 4.3.15-1 * fix mgr-ssl-cert-setup for root CAs which do not set authorityKeyIdentifier (bsc#1203585) spacewalk-client-tools: - Version 4.3.12-1 * Update translation strings spacewalk-web: - Version 4.3.24-1 * Upgrade moment-timezone * CVE-2021-43138: Obtain privileges via the `mapValues()` method. (bsc#1200480) * CVE-2021-42740: Command injection in the shell-quote package. (bsc#1203287) * CVE-2022-31129: Denial-of-Service moment: inefficient parsing algorithm (bsc#1203288) * Fix table header layout for unselectable tables susemanager-build-keys: - Add release and auxiliary GPG keys for RedHat - Add keys for Rocky Linux 9 * RPM-GPG-KEY-redhat-release * RPM-GPG-KEY-redhat-auxiliary * RPM-GPG-KEY-Rocky-9 susemanager-tftpsync-recv: - Version 4.3.7-1 * Add missing IPv6 default configuration (bsc#1201589) * fix problems with parallel running processes uyuni-common-libs: - Version 4.3.6-1 * Do not allow creating path if nonexistent user or group in fileutils. How to apply this update: 1. Log in as root user to the SUSE Manager proxy. 2. Stop the proxy service: spacewalk-proxy stop 3. Apply the patch using either zypper patch or YaST Online Update. 4. Start the Spacewalk service: spacewalk-proxy start

• Release Date
  Oct 26 2022
• References
  Bugzilla: 1198168, 1198903, 1200480, 1201589, 1201788, 1203287, 1203288, 1203585
  CVEs: CVE-2021-43138, CVE-2021-42740, CVE-2022-31129
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Manager Proxy Module 4.3 x86_64

• Packages
  mgr-daemon
  Spacewalk query daemon

  4.3.6-150400.3.6.4 lock rpm lock src

  python3-spacewalk-certs-tools
  Spacewalk SSL Key/Cert Tool

  4.3.15-150400.3.6.2 lock rpm

  python3-spacewalk-check
  Support programs and libraries for Spacewalk

  4.3.12-150400.3.6.6 lock rpm

  python3-spacewalk-client-setup
  Configure and register an Spacewalk client

  4.3.12-150400.3.6.6 lock rpm

  python3-spacewalk-client-tools
  Support programs and libraries for Spacewalk

  4.3.12-150400.3.6.6 lock rpm

  python3-uyuni-common-libs
  Uyuni server and client tools libraries for python3

  4.3.6-150400.3.6.4 lock rpm

  spacecmd
  Command-line interface to Spacewalk and Red Hat Satellite servers

  4.3.15-150400.3.6.4 lock rpm lock src

  spacewalk-backend
  Common programs needed to be installed on the Spacewalk servers/proxies

  4.3.16-150400.3.6.8 lock rpm lock src

  spacewalk-base-minimal
  Core of Perl modules for spacewalk-web package

  4.3.24-150400.3.6.4 lock rpm

  spacewalk-base-minimal-config
  Configuration for spacewalk-web package

  4.3.24-150400.3.6.4 lock rpm

  spacewalk-certs-tools
  Spacewalk SSL Key/Cert Tool

  4.3.15-150400.3.6.2 lock rpm lock src

  spacewalk-check
  Check for Spacewalk actions

  4.3.12-150400.3.6.6 lock rpm

  spacewalk-client-setup
  Configure and register an Spacewalk client

  4.3.12-150400.3.6.6 lock rpm

  spacewalk-client-tools
  Support programs and libraries for Spacewalk

  4.3.12-150400.3.6.6 lock rpm lock src

  spacewalk-web
  Spacewalk Web site - Perl modules

  4.3.24-150400.3.6.4 lock src

  susemanager-build-keys
  The public gpg keys for rpm package signature verification

  15.4.3-150400.3.6.1 lock rpm lock src

  susemanager-build-keys-web
  The public gpg keys for bootstrap use

  15.4.3-150400.3.6.1 lock rpm

  susemanager-tftpsync-recv
  Reciever for SUSE Manager tftp sync

  4.3.7-150400.3.3.3 lock rpm lock src

  uyuni-common-libs
  Uyuni server and client libs

  4.3.6-150400.3.6.4 lock src