Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE Manager 4.3: Important Security Update and Fixes Overview

suse
Calendar Grey December 14, 2023
Dist Suse Esm H88
Critical upkeep instructions for SUSE Manager 4.3 targeting diverse issues and bolstering security across solutions.
* bsc#1191143 * bsc#1204235 * bsc#1207012 * bsc#1207532 * bsc#1210928

Summary

### This update fixes the following issues: spacecmd: * Version 4.3.25-1 * Update translation strings spacewalk-backend: * Version 4.3.25-1 * Use the new apache2-mod_wsgi package name * Set stricter file permissions for config file * Add table statistics and options to the support config database output * Add CLM data collection to spacewalk-debug spacewalk-client-tools: * Version 4.3.17-1 * Update translation strings spacewalk-proxy: * Version 4.3.17-1 * Use the new apache2-mod_wsgi package name spacewalk-web: * Version 4.3.36-1 * Safeguard request URLs against tempering (bsc#1216754) * Improve datetimepicker input formatting * Improve logging to better capture third-party library issues * Simplify and modernize password generation logic * Update webpack to 5.88.2

Topics%20covered

Topics Covered

security advisory update instructions apache2 package security suse manager config permissions

References

* bsc#1191143

* bsc#1204235

* bsc#1207012

* bsc#1207532

* bsc#1210928

* bsc#1210930

* bsc#1211355

* bsc#1211560

* bsc#1211649

* bsc#1212695

* bsc#1212904

* bsc#1213469

* bsc#1214186

* bsc#1214471

* bsc#1214601

* bsc#1214759

* bsc#1215209

* bsc#1215514

* bsc#1215949

* bsc#1216030

* bsc#1216041

* bsc#1216085

* bsc#1216128

* bsc#1216380

* bsc#1216506

* bsc#1216555

* bsc#1216690

* bsc#1216754

* bsc#1217038

* bsc#1217223

* bsc#1217224

* jsc#MSQA-708

* jsc#SUMA-282

Cross-

* CVE-2023-22644

CVSS scores:

* CVE-2023-22644 ( NVD ): 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Affected Products:

* openSUSE Leap 15.4

* openSUSE Leap 15.5

* Public Cloud Module 15-SP4

* Public Cloud Module 15-SP5

* SUSE Linux Enterprise High Performance Computing 15 SP4

* SUSE Linux Enterprise High Performance Computing 15 SP5

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2023:4737-1
Rating: important

Topics%20covered

Topics Covered

security advisory update instructions apache2 package security suse manager config permissions

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here