SUSE-SU-2025:02475-1

SUSE-SU-2025:02475-1 · Security update 4.3.16 for Multi-Linux Manager Server

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.

This update fixes the following issues: cobbler: - Prevent crash during Cobbler startup on NFS environments (bsc#1240666) - Synchronize cobbler add and sync actions (bsc#1233371) - Exclude disabled profiles from buildiso gen (bsc#1230908) grafana-formula: - Version 4.3.0: * Added SUSE Linux Enterprise Server 15 SP7 to the supported versions (bsc#1245368) * Dropped old unsupported SUSE versions from the supported versions list * Migrated from deprecated Graph panels to new timeseries panels inter-server-sync: - Version 0.3.7-0: * Added SSL signed export and import validation (bsc#1241239) - Version 0.3.6-0: * Included /var/log/hub (bsc#1243724) spacecmd: - Version 4.3.31-0: * Improved translation update process spacewalk-admin: - Version 4.3.33-0 * Security issues fixed: + CVE-2025-46809: Do not expose HTTP Proxy password when breaking URL format (bsc#1245005) * Other bugs fixed: + Enhance permissions for reposync zypper cache - Version 4.3.14-0: * Added support for environment variables in rhn-config-satellite (bsc#1242148) * mgr-monitoring-ctl: avoid possible errors due to non-ascii characters (bsc#1242030) spacewalk-backend: - Version 4.3.32-0 * Removed python3-simplejson use in spacewalk-repo-sync (bsc#1236635) * Improved translation update process * Make reposync allow commas as part of HTTP Proxy password (bsc#1243460) * Removed bootloader linux and initrd files from spacewalk-debug * Use libzypp's Curl2 backend during reposync (bsc#1245222) spacewalk-client-tools: - Version 4.3.23-0 * Improved translation update process spacewalk-config: - Version 4.3.16-0 * Allow passing environment variables to rhn-config-satellite (bsc#1242148) spacewalk-java: - Version 4.3.87-0 * Security issues fixed: + CVE-2025-46811: Clean up stale sessions on websocket open (bsc#1246119) - Version 4.3.86-0: * Security issues fixed: + CVE-2025-23393: Filter user input in systems list page (bsc#1240386) * Other bugs fixed: + Fixed tooltip text for icons in the patches list (bsc#1234608) + Fixed openscap audit is running immediately even when scheduled for next days (bsc#1239743) + Adds calling a highstate in the API for actionchain (bsc#1157520) + Fixed behavior of `reboot_suggested` or `restart_suggested` by API (bsc#1236910) + Fixed action chain scheduled within SSM creates no link for the new action chain (bsc#1243825) + Fixed severity levels missing in API output of errata.getDetails (bsc#1240038) + Fixed internal server error when accessing groups in activation keys (bsc#1237581) + Fixed http_proxy_password stored as clear text in /var/log/messages (bsc#1242148) + Fixed `manage errors` in user-defined pillars (bsc#1230403) + In CLM live-patching template form, show kernel versions from base product as well (bsc#1239907) + Improved handling of system list filtering (bsc#1242004) + Fixed issue preventing OES products from showing up (bsc#1237082) + Fixed config channels not following priority in highstate (bsc#1237694) + Improved performance when changing channels on multiple system through SSM (bsc#1239154) + Fixed package locking for packages not available anymore in the assigned repositories (bsc#1236877) + Do not show Vendor Advisory link for SL-Micro 6.0 and 6.1 products (bsc#1237770) + Fixed API namespace for AdminPaygHandler + Fixed CLM channel name definition (bsc#1239868) + Fixed XMLRPC API endpoint updateRepoSsl repository property + Fixed API documentation for system config listFiles (bsc#1245027) + Fixed inconsistency in task schedule deactivation and add activation capability (bsc#1225740) spacewalk-utils: - Version 4.3.24-0: * Removed spacewalk-clone-by-date dependency on python3-simplejson spacewalk-web: - Version 4.3.45-0: * Security issues fixed: + CVE-2025-23392, CVE-2025-23393: Filter user input in systems list page (bsc#1239826, bsc#1240386) * Other bugs fixed: + Fix: Filters of type Product Temporary Fix cannot be created (bsc#1238922) + Improved handling of system list filtering (bsc#1242004) + Improved translation update process subscription-matcher: - Version 0.40: * Fixed integer overflow which can cause a division by zero error (bsc#1243239) - Version 0.39: * Fixed the wrong matching for 2 Sockets or 2 VMs subscription string (bsc#1238924) * Fixed logging issues * Updated runtime dependencies supportutils-plugin-susemanager: - Version 4.3.15-0: * Backported supportutils plugin resource functions, replacing the removed supportutils `scplugin.rc` functions with those provided by `supportconfig.rc` susemanager: - Version 4.3.42-0: * Fixed bootstrap repository definition for SLE 15 SP7 and support only bootstrapping with salt-bundle (bsc#1246788) - Version 4.3.41-0: * Improved translation update process susemanager-build-keys: - Changed keys to use SHA256 UIDs instead of SHA1 (bsc#1237294, bsc#1236779, jsc#PED-12321) * Renamed `build-alp-09d9ea69-645b99ce.asc` to `build-alp-09d9ea69.asc` * Renamed `gpg-pubkey-3fa1d6ce-63c9481c.asc` to `gpg-pubkey-3fa1d6ce.asc` * Adjusted `suse_ptf_key_2023.asc` and `suse_ptf_key.asc` susemanager-docs_en: - SUSE Manager 4.3.16 Update - Added information about missing monitoring package to Administration Guide (bsc#1191142) - Added missing script parameters in Installation and Upgrade Guide (bsc#1216187) - Added reference to the list of supported SCAP profiles (bsc#1213952) - Extended information in an admonition in Specialized Guides (bsc#1221031) - Added missing 4505 and 4506 Salt ports in network requirements in Installation and Upgrade Guide - Removed references to the methods no longer used from Reference Guide (bsc#1209060) - Fixed Python script in Administration Guide (bsc#1244290) - Extended troubleshooting section with a reposync example (bsc#1211373) - Added section about enabling SUSE Manager 4.3 LTS in Installation and Upgrade Guide - Added missing Task Schedules to the list and updated the Task Schedule page to reflect changes—now only allowing disabling of tasks, not deletion in the Administration Guide - Added SUSE Linux Enterprise 15 SP7 as a supported client - Fixed asciidoc menu macro issue with duplicate css class, menu items now display correctly - Added note about autoyast profiles not having passwords - Added details about the behavior of the rescheduled failed action (bsc#1244065) - Updated Network Requirement section to add settings for server configuration behind HTTP OSI level 7 Proxy - Clarified that NFS with Cobbler is not supported (bsc#1240666) - Fixed a URL link in Common Workflows Guide (bsc#1242911) - Documented uptodate action in Common Workflows Guide as background information - Documented renaming the journal folder when changing machine ID in Administration Guide (bsc#1241286) - Fixed removing Salt bundle client procedure in Client Configuration Guide - Added referenced target and remove obsolete section in Common Workflows (bsc#1240842, bsc#1242554) - Fixed GPG key import command in Administration Guide (bsc#1239102) - Added java.smtp_server parameter for mail configuration in Administration Guide (bsc#1241490) - Added system_listeventhistory to spacecmd reference in Reference Guide (bsc#1239604) - Added links to supported features tables for third party operating systems (bsc#1236810) - Fixed typo in Installation and Upgrade Guide (bsc#1237403) - Added note to limit Squid's cache_dir size to 60% of available free space in Installation and Upgrade Guide susemanager-schema: - Version 4.3.29-0: * Fixed typo in OES 24.4 channel definition susemanager-sls: - Version 4.3.47-0: * Change uptodate recurring action to use dist-upgrade instead of upgrade for Debian systems (bsc#1237060) * Adjust SLS files for SUSE Linux Enterprise SP7 and other systems running higher Python versions * Optimize SAP module to prevent high IO workload (bsc#1241455

Correctif disponible

Publication

2025-07-23T12:36:44Z

Mise à jour

2026-03-23T04:46:38.606362Z

Pile logicielle: system

Vérifiez votre serveur →