shield Security update for suse manager server 4.3
SUSE-SLE-Module-SUSE-Manager-Server-4.3-2024-485


This update fixes the following issues: cobbler: - Build the appendline correctly for RHEL-family <= 9 (bsc#1216437) - Notify to "systemd" when cobblerd startup is finished (bsc#1215982) - Enable ppc64(le) buildiso support (bsc#1214077) grafana-formula: - Version 0.10.0 * Replace legacy message queue metrics with Salt queue metrics * Grafana formula should not be supported in a Proxy/Retail inter-server-sync: - Version 0.3.2-1 * Fix conflict in rhndistchannelmap (bsc#1216114) jose4j: - CVE-2023-31582: Insecure Password-Based Encryption Iteration Count (bsc#1216609) liberate-formula: - Version 0.1.0 * Provide liberate-formula, a formula for converting a system to SUSE Liberty Linux patterns-suse-manager: - Add liberate-formula to the required packages for the server to get it installed by default prometheus-formula: - Version 0.8.0 * Fix federation endpoint * Add remote write configuration * Add group filtering for service discovery relabeling configuration - Version 0.7.1 * Fix PrometheusNotIngestingSamples false positive alerts (bsc#1216550) prometheus-postgres_exporter: - Do not build debug if RHEL >= 8 - Do not strip if SUSE Linux Enterprise 15 SP3 - Build at least with with Go >= 1.18 on RHEL - Build with Go >= 1.20 elsewhere saltboot-formula: - Update to version 0.1.1701196218.b6b8ca1 * Remove f-formating to be compatible with python < 3.6 * Update packaging not to package salt directories - Update to version 0.1.1692188980.9aa0455 spacecmd: - Version 4.3.26-1 * Update translation strings spacewalk-backend: - Version 4.3.27-1 * Fix issue in "spacewalk-repo-sync" when RPM packages contains files with size greater than 4GB (bsc#1219151) - Version 4.3.26-1 * Fix decompressing and renaming bzip2 comps files in reposync * Update query to the new credentials structure * Remove normalize_orphan_vendor_packages and move it to taskomatic (bsc#1216781) * Skip syncing packages with incorrect metadata (bsc#1213738) * Update translation strings spacewalk-certs-tools: - version 4.3.22-1 * Skip deploying the CA into the Salt directory on proxies (bsc#1219850) - Version 4.3.21-1 * Deploy the CA certificate also into the Salt filesystem (bsc#1219577) - Version 4.3.20-1 * Handle server keys in PKCS8 format in mgr-ssl-cert-setup (bsc#1218615) * Include reboot info beacon in the bootstrap script for transactional systems (bsc#1217588) spacewalk-client-tools: - Version 4.3.18-1 * Update translation strings spacewalk-java: - Version 4.3.71-1 * Generate server SSH key also when bootstrapping regular Minions (bsc#1219449) - Version 4.3.70-1 * Fix the use of page size preference in systems and packages lists (bsc#1217209) * Fix issue with disabling token check not working (bsc#1218669) * Enforce snakeyaml version requirement (bsc#1215166) * Improve the performance of paginated queries when syncing the reporting database (bsc#1211912, bsc#1213079) * Do not require entitlement for Pay-as-you-go SUSE Linux Enterprise Server for SAP (bsc#1217069) * Use the base product file to show the correct SUSE Manager product in the subscription matching results page * Do not require entitlements if SUSE Manager is Pay-as-you-go * Exclude SUSE Manager from subscription matching if it's Pay-as-you-go * Refactor Credentials to a proper class hierarchy * Fix unit test about duplicated packages * Prevent installation of packages with same name in a single action (bsc#1214791) * When canceling an action which has prerequisites, return hints to get the first action id which can be canceled (bsc#1216988) * Fix exception when removing a Debian package (bsc#1216781) * Fix XSS in taskomatic XML RPC handler (bsc#1210911) * Improve logging for Product Migration (bsc#1218490) * Add only 1 IP for Cloud RMT Host in /etc/hosts * Change org for orphan vendor packages that an admin can delete (bsc#1216781) * Expose the monitoring data for the Salt queue handling the Salt results * Provide total number of CPUs for SUSE Linux Enterprise Micro systems to subscription matcher when it is not used as hypervisor to match vCore subscriptions correctly (bsc#1218074) * Try to download compressed Ubuntu USN database * Add user information to system organization transfer message (bsc#1216753) * CVE-2023-32189: Fix issue with Salt SSH keys for Salt SSH Minions (bsc#1170848) * Add notification in daily email in addition to in SUSE Manager home page when SUSE Manager Pay-as-you-go is not compliant * Fix apidoc link from #top to $call.name (bsc#1213507) * Add config option to disable remote commands from web UI (bsc#1217869) * Address high rating Sonar issues * Refactor SUSE Customer Center registration flow * Avoid blocking Taskomatic thread when waiting for queued action (bsc#1211560) * Fix modify kickstart profile when using "Always newest tree" option (bsc#1215813) * Configure reboot method for SUSE Linux Enterprise Micro when applying bootstrap state (bsc#1213981) * Handle not existing known_host file in permission check * Fix handling of proxy ssh public keys * Include reboot required indication for non-Suse distros spacewalk-setup: - Version 4.3.19-1 * Update query to the new credentials structure * Fix setting SUSE Customer Center password during setup spacewalk-utils: - Version 4.3.19-1 * Add SUSE Linux Enterprise Micro 5.4 and 5.5 to spacewalk-commons-channels spacewalk-web: - Version 4.3.37-1 * Fix the use of page size preference in systems and packages lists (bsc#1217209) * Fix issue displaying Ansible playbook name (bsc#1216657) * Add support for `PaygNotCompliantWarning` notification * Bump web.version to 4.3.11 subscription-matcher: - Version 0.35 * Added missing part number - Version 0.34 * Enabled support for Long Term Service Pack Support subscriptions (bsc#1218075) * Added SUSE Linux Enterprise Micro vCore handling (bsc#1218074) * Added new SKUs and new bundles supportutils-plugin-susemanager: - Version 4.3.10-1 * Update query to the new credentials structure susemanager: - Version 4.3.34-1 * Rename Open Enterprise Server label to OES23.4 (bsc#1215514) * Verify in Yast FQDN with name returned via DNS reverse lookup * CVE-2023-32189: Fix issue with Salt SSH keys for Salt SSH Minions (bsc#1170848) susemanager-build-keys: - Version 15.4.10 * Add new Almalinux 8 GPG Key (bsc#1218849) * Refresh extended Uyuni GPG public key susemanager-docs_en: - Removed obsolete traditional to Salt migration documentation from the System Types section of the Client Configuration Guide and updated the Migrate traditional clients to Salt clients section - Fixed navigation bar of Client Configuration Guide (bsc#1218089) - Added openSUSE Leap to Supported Features navigation list in Client Configuration Guide (bsc#1218094) - Described new monitoring metrics for Salt queue in Administration Guide - Fixed xrefs for internal book references - Removed mentioning that CVE number for CVE auditing is optional (bsc#1218019) - Corrected channel names for CentOS 7 Updates and Extras in CentOS Client Configuration Guide - Documented bootstrap settings for SUSE Linux Enterprise Micro in Client Configuration Guide (bsc#1216394) - Corrected command mgr-push to mgrpush in Administration Guide (bsc#1215810) - Updated Red Hat OVAL data URL and file in CentOS Clients Registration in Client Configution Guide - Added Pay-as-you-go for Azure documentation to the Specialized Guides book - Added Pay-as-you-go limitations chapter to Pay-as-you-go Guide - Removed Ubuntu 18.04 from the list of supported clients - Fixed file location in Custom Salt Formulas section of Salt Guide - Documented using Virtualization Host formula in Client Configuration susemanager-schema: - Version 4.3.24-1 * Refactor susecredentials to support the new hierarchy * Improve performance of System (bsc#1211254) * Change schedule of system-profile-refresh to run on the 2nd Saturday of a month to not collide with normal working times (bsc#1215769) susemanager-sls: - version 4.3.40-1 * Remove automatic reboot from transactional systems bootstrap (bsc#1218146) - Version 4.3.39-1 * Change certs/RHN-ORG-TRUSTED-SSL-CERT from symlink into a real file (bsc#1219577) - Version 4.3.38-1 * Improve Pay-as-you-go instance detection (bsc#1217784) * CVE-2023-32189: Fix issue with Salt SSH keys for Salt SSH Minions (bsc#1170848) * Configure reboot method for SUSE Linux Enterprise Micro when applying bootstrap state (bsc#1213981) * Include reboot required indication for non SUSE distros susemanager-sync-data: - Version 4.3.16-1 * Fix OES 23.4 internal name (bsc#1218837) - Version 4.3.15-1 * Update release status and repository description of Open Enterprise Server 23.4 (bsc#1215514) * Add new SUSE Liberty Linux 7 Long Term Service Pack Support channel families * Rename Red Hat Enterprise Linux and Liberty 8 Base product to remove EOL CentOS 8 from the name uyuni-reportdb-schema: - Version 4.3.9-1 * Provide reportdb upgrade schema path structure How to apply this update: 1. Log in as root user to the SUSE Manager Server. 2. Stop the Spacewalk service: `spacewalk-service stop` 3. Apply the patch using either zypper patch or YaST Online Update. 4. Start the Spacewalk service: `spacewalk-service start`


cloud_download Downloads

SUSE Manager Server Module 4.3 x86_64
SUSE Manager Server Module 4.3 s390x
SUSE Manager Server Module 4.3 ppc64le