shield Security update for suse manager proxy and retail branch server 4.3

SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2024-4006

This update fixes the following issues: mgr-daemon: - Version 4.3.11-0 * Update translation strings spacecmd: - Version 4.3.29-0 * Speed up softwarechannel_removepackages (bsc#1227606) spacewalk-backend: - Version 4.3.30-0 * Make ISSv1 timezone independent (bsc#1221505) * reposync: introduce timeout when syncing DEB channels (bsc#1225960) * yum_src: use proper name variable name for subprocess.TimeoutExpired * Check and populate PTF attributes at the time of importing packages (bsc#1225619) * reposync: import GPG keys to RPM DB individually (bsc#1217003) * Add log string to the journal when services are stopped because of insufficient disk space spacewalk-certs-tools: - Version 4.3.26-0 * Fix private key format in jabberd certificate file (bsc#1228851) * Fix parsing Authority Key Identifier when keyid is not prefixed (bsc#1229079) * Support multiple certificates for root-ca-file and server-cert-file spacewalk-client-tools: - Version 4.3.21-0 * Update translation strings spacewalk-proxy: - Version 4.3.19-0 * Allow execute of ssh-keygen command on the Proxy to clean up SSH known_hosts (bsc#1228345) spacewalk-web: - Security issues fixed: * Version 4.3.42-0 + CVE-2024-49503: Escape organization credentials username to mitigate XSS vulnerability (bsc#1231922) * Version 4.3.41-0 + CVE-2024-49502: Validate proxy hostname format and escape proxy username to mitigate XSS vulnerabilities (bsc#1231852) - Bugs fixed: * Version 4.3.40-0 + Fix channel selection using SSM (bsc#1226917) + Fix datetime selection when using maintenance windows (bsc#1228036) susemanager-build-keys: - Extended 2048 bit SUSE SLE 12, 15 GA-SP5 key until 2028. (bsc#1229339) uyuni-common-libs: - Version 4.3.11-0 * Enforce directory permissions at repo-sync when creating directories (bsc#1229260) * Make ISSv1 timezone independent (bsc#1221505) uyuni-proxy-systemd-services: - version 4.3.14-0 * Update to SUSE Manager 4.3.14 How to apply this update: 1. Log in as root user to the SUSE Manager Proxy or Retail Branch Server. 2. Stop the proxy service: `spacewalk-proxy stop` 3. Apply the patch using either zypper patch or YaST Online Update. 4. Start the Spacewalk service: `spacewalk-proxy start`

• Release Date
  Nov 18 2024
• References
  Bugzilla: 1217003, 1221505, 1225619, 1225960, 1226917, 1227606, 1228036, 1228345, 1228851, 1229079, 1229260, 1229339, 1231852, 1231922
  CVEs: CVE-2024-49502, CVE-2024-49503
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Manager Proxy Module 4.3 x86_64

• Packages
  mgr-daemon
  Spacewalk query daemon

  4.3.11-150400.3.21.6 lock rpm lock src

  python3-spacewalk-certs-tools
  Spacewalk SSL Key/Cert Tool

  4.3.26-150400.3.36.7 lock rpm

  python3-spacewalk-check
  Support programs and libraries for Spacewalk

  4.3.21-150400.3.33.11 lock rpm

  python3-spacewalk-client-setup
  Configure and register an Spacewalk client

  4.3.21-150400.3.33.11 lock rpm

  python3-spacewalk-client-tools
  Support programs and libraries for Spacewalk

  4.3.21-150400.3.33.11 lock rpm

  python3-uyuni-common-libs
  Uyuni server and client tools libraries for python3

  4.3.11-150400.3.21.6 lock rpm

  spacecmd
  Command-line interface to Spacewalk and Red Hat Satellite servers

  4.3.29-150400.3.42.8 lock rpm lock src

  spacewalk-backend
  Common programs needed to be installed on the Spacewalk servers/proxies

  4.3.30-150400.3.47.16 lock rpm lock src

  spacewalk-base-minimal
  Core of Perl modules for spacewalk-web package

  4.3.42-150400.3.52.1 lock rpm

  spacewalk-base-minimal-config
  Configuration for spacewalk-web package

  4.3.42-150400.3.52.1 lock rpm

  spacewalk-certs-tools
  Spacewalk SSL Key/Cert Tool

  4.3.26-150400.3.36.7 lock rpm lock src

  spacewalk-check
  Check for Spacewalk actions

  4.3.21-150400.3.33.11 lock rpm

  spacewalk-client-setup
  Configure and register an Spacewalk client

  4.3.21-150400.3.33.11 lock rpm

  spacewalk-client-tools
  Support programs and libraries for Spacewalk

  4.3.21-150400.3.33.11 lock rpm lock src

  spacewalk-proxy
  Spacewalk Proxy Server

  4.3.19-150400.3.29.9 lock src

  spacewalk-proxy-broker
  The Broker component for the Spacewalk Proxy Server

  4.3.19-150400.3.29.9 lock rpm

  spacewalk-proxy-common
  Modules shared by Spacewalk Proxy components

  4.3.19-150400.3.29.9 lock rpm

  spacewalk-proxy-management
  Packages required by the Spacewalk Management Proxy

  4.3.19-150400.3.29.9 lock rpm

  spacewalk-proxy-package-manager
  Custom Channel Package Manager for the Spacewalk Proxy Server

  4.3.19-150400.3.29.9 lock rpm

  spacewalk-proxy-redirect
  The SSL Redirect component for the Spacewalk Proxy Server

  4.3.19-150400.3.29.9 lock rpm

  spacewalk-proxy-salt
  A ZeroMQ Proxy for Salt Minions

  4.3.19-150400.3.29.9 lock rpm

  spacewalk-web
  Spacewalk Web site - Perl modules

  4.3.42-150400.3.52.1 lock src

  susemanager-build-keys
  The public gpg keys for rpm package signature verification

  15.4.10-150400.3.29.4 lock rpm lock src

  susemanager-build-keys-web
  The public gpg keys for bootstrap use

  15.4.10-150400.3.29.4 lock rpm

  uyuni-common-libs
  Uyuni server and client libs

  4.3.11-150400.3.21.6 lock src

  uyuni-proxy-systemd-services
  Uyuni proxy server systemd services containers

  4.3.14-150000.1.27.4 lock rpm lock src