gpp_maybe Security update for suse manager server 4.3

SUSE-SLE-Module-SUSE-Manager-Server-4.3-2023-2181

This update fixes the following issues: system-user-prometheus: - Provide system-user-prometheus to SUSE Manager Server repositories and resolve installation issues (no source changes) prometheus-postgres_exporter: - Security issues fixed: * CVE-2022-46146: Fix authentication bypass via cache poisoning (bsc#1208060) - Other non-security issues fixed: * Adapt the systemd service security configuration to be able to start it on for Red Hat Linux Enterprise systems and clones * Create the prometheus user for Red Hat Linux Enterprise systems and clones * Fix broken log-level for values other than debug (bsc#1208965) How to apply this update: 1. Log in as root user to the SUSE Manager Server. 2. Stop the Spacewalk service: `spacewalk-service stop` 3. Apply the patch using either zypper patch or YaST Online Update. 4. Start the Spacewalk service: `spacewalk-service start`

• Release Date
  May 11 2023
• References
  Bugzilla: 1208060, 1208965
  CVEs: CVE-2022-46146
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Manager Server Module 4.3 s390x

• Packages
  prometheus-postgres_exporter
  Prometheus exporter for PostgreSQL

  0.10.1-150400.3.3.6 lock rpm lock src

  system-user-prometheus
  System user and group 'prometheus'

  1.0.0-150000.8.4 lock rpm lock src

SUSE Manager Server Module 4.3 ppc64le

• Packages
  prometheus-postgres_exporter
  Prometheus exporter for PostgreSQL

  0.10.1-150400.3.3.6 lock rpm lock src

  system-user-prometheus
  System user and group 'prometheus'

  1.0.0-150000.8.4 lock rpm lock src

SUSE Manager Server Module 4.3 x86_64

• Packages
  prometheus-postgres_exporter
  Prometheus exporter for PostgreSQL

  0.10.1-150400.3.3.6 lock rpm lock src

  system-user-prometheus
  System user and group 'prometheus'

  1.0.0-150000.8.4 lock rpm lock src