SUSE-RU-2023:2592-1: important: Maintenance update for SUSE Manager 4.3.6 Release Notes

27 Feb 2024

      # Maintenance update for SUSE Manager 4.3.6 Release Notes

Announcement ID: SUSE-RU-2023:2592-1  
Rating: important  
References:

  * bsc#1201059
  * bsc#1201063
  * bsc#1203599
  * bsc#1204089
  * bsc#1204186
  * bsc#1204270
  * bsc#1204900
  * bsc#1205011
  * bsc#1205088
  * bsc#1205600
  * bsc#1205759
  * bsc#1206060
  * bsc#1206146
  * bsc#1206191
  * bsc#1206423
  * bsc#1206520
  * bsc#1206562
  * bsc#1206725
  * bsc#1206783
  * bsc#1206800
  * bsc#1206817
  * bsc#1206861
  * bsc#1206932
  * bsc#1206963
  * bsc#1206973
  * bsc#1206979
  * bsc#1206981
  * bsc#1207063
  * bsc#1207087
  * bsc#1207141
  * bsc#1207297
  * bsc#1207352
  * bsc#1207595
  * bsc#1207792
  * bsc#1207799
  * bsc#1207814
  * bsc#1207829
  * bsc#1207830
  * bsc#1207838
  * bsc#1207867
  * bsc#1207883
  * bsc#1208046
  * bsc#1208119
  * bsc#1208288
  * bsc#1208321
  * bsc#1208325
  * bsc#1208427
  * bsc#1208522
  * bsc#1208536
  * bsc#1208540
  * bsc#1208550
  * bsc#1208586
  * bsc#1208611
  * bsc#1208661
  * bsc#1208687
  * bsc#1208719
  * bsc#1208772
  * bsc#1208908
  * bsc#1209119
  * bsc#1209143
  * bsc#1209149
  * bsc#1209215
  * bsc#1209220
  * bsc#1209231
  * bsc#1209253
  * bsc#1209259
  * bsc#1209277
  * bsc#1209369
  * bsc#1209386
  * bsc#1209395
  * bsc#1209434
  * bsc#1209508
  * bsc#1209557
  * bsc#1209926
  * bsc#1209938
  * bsc#1209993
  * bsc#1210086
  * bsc#1210094
  * bsc#1210101
  * bsc#1210107
  * bsc#1210154
  * bsc#1210162
  * bsc#1210349
  * bsc#1210437
  * bsc#1210458
  * bsc#1210776
  * bsc#1210835
  * bsc#1211956
  * bsc#1211958
  * bsc#1212096
  * bsc#1212363
  * bsc#1212516
  * jsc#MSQA-666

Cross-References:

  * CVE-2022-46146
  * CVE-2023-22644

CVSS scores:

  * CVE-2022-46146 ( SUSE ):  8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2022-46146 ( NVD ):  8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2023-22644 ( NVD ):  3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Affected Products:

  * openSUSE Leap 15.4
  * SUSE Manager Proxy 4.3
  * SUSE Manager Retail Branch Server 4.3
  * SUSE Manager Server 4.3

An update that solves two vulnerabilities, contains one feature and has 90
recommended fixes can now be installed.

## Recommended update for SUSE Manager Proxy and Retail Branch Server 4.3

### Description:

This update fixes the following issues:

release-notes-susemanager-proxy:

  * Update to SUSE Manager 4.3.6
  * Salt has been upgraded to 3006.0
  * Bugs mentioned bsc#1204270, bsc#1206725, bsc#1207814, bsc#1207829,
    bsc#1207830 bsc#1208288, bsc#1208719, bsc#1208772, bsc#1209119, bsc#1209231
    bsc#1210437, bsc#1210458, bsc#1211956

## Security update for SUSE Manager Server 4.3

### Description:

This update fixes the following issues:

release-notes-susemanager:

  * Update to SUSE Manager 4.3.6
  * Salt has been upgraded to 3006.0
  * SUSE Linux Enterprise Server 15 SP5 Family support has been added
  * SUSE Linux Enterprise Server Micro 5.4 support has been added
  * openSUSE Leap 15.5 support has been added
  * Ability to install PTFs from SUSE Manager has been added
  * Scheduling Custom States on recurrent basis is now possible
  * Syncing optional channels from the webUI is now possible
  * All Tomcat logs are now rotated with logrotate
  * Grafana upgraded to 9.5.1
  * Node exporter upgraded to 1.5.0
  * Prometheus upgraded to 2.37.6
  * Postgres exporter upgraded to 0.10.1
  * CVEs fixed CVE-2023-22644, CVE-2022-46146
  * Bugs mentioned

bsc#1201063, bsc#1203599, bsc#1204089, bsc#1204270, bsc#1204900 bsc#1205600,
bsc#1206060, bsc#1206191, bsc#1206423, bsc#1206725 bsc#1206783, bsc#1207063,
bsc#1207595, bsc#1207814, bsc#1207829 bsc#1207830, bsc#1208288, bsc#1208321,
bsc#1208427, bsc#1208522 bsc#1208536, bsc#1208540, bsc#1208550, bsc#1208586,
bsc#1208661 bsc#1208687, bsc#1208719, bsc#1208772, bsc#1209143, bsc#1209149
bsc#1209215, bsc#1209220, bsc#1209231, bsc#1209253, bsc#1209277 bsc#1209386,
bsc#1209395, bsc#1209508, bsc#1209557, bsc#1209926 bsc#1209938, bsc#1209993,
bsc#1210086, bsc#1210094, bsc#1210101 bsc#1210107, bsc#1210154, bsc#1210162,
bsc#1210349, bsc#1210437 bsc#1210458, bsc#1210835, bsc#1211958, bsc#1210776,
bsc#1209434 bsc#1208046, bsc#1212363, bsc#1212096, bsc#1212516

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * openSUSE Leap 15.4  
    zypper in -t patch SUSE-2023-2592=1

  * SUSE Manager Proxy 4.3  
    zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2023-2592=1

  * SUSE Manager Retail Branch Server 4.3  
    zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-
Server-4.3-2023-2592=1

  * SUSE Manager Server 4.3  
    zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2023-2592=1

## Package List:

  * openSUSE Leap 15.4 (noarch)
    * release-notes-susemanager-proxy-4.3.6-150400.3.55.4
    * release-notes-susemanager-4.3.6-150400.3.63.2
  * SUSE Manager Proxy 4.3 (noarch)
    * release-notes-susemanager-proxy-4.3.6-150400.3.55.4
  * SUSE Manager Retail Branch Server 4.3 (noarch)
    * release-notes-susemanager-proxy-4.3.6-150400.3.55.4
  * SUSE Manager Server 4.3 (noarch)
    * release-notes-susemanager-4.3.6-150400.3.63.2

## References:

  * https://www.suse.com/security/cve/CVE-2022-46146.html
  * https://www.suse.com/security/cve/CVE-2023-22644.html
  * https://bugzilla.suse.com/show_bug.cgi?id=1201059
  * https://bugzilla.suse.com/show_bug.cgi?id=1201063
  * https://bugzilla.suse.com/show_bug.cgi?id=1203599
  * https://bugzilla.suse.com/show_bug.cgi?id=1204089
  * https://bugzilla.suse.com/show_bug.cgi?id=1204186
  * https://bugzilla.suse.com/show_bug.cgi?id=1204270
  * https://bugzilla.suse.com/show_bug.cgi?id=1204900
  * https://bugzilla.suse.com/show_bug.cgi?id=1205011
  * https://bugzilla.suse.com/show_bug.cgi?id=1205088
  * https://bugzilla.suse.com/show_bug.cgi?id=1205600
  * https://bugzilla.suse.com/show_bug.cgi?id=1205759
  * https://bugzilla.suse.com/show_bug.cgi?id=1206060
  * https://bugzilla.suse.com/show_bug.cgi?id=1206146
  * https://bugzilla.suse.com/show_bug.cgi?id=1206191
  * https://bugzilla.suse.com/show_bug.cgi?id=1206423
  * https://bugzilla.suse.com/show_bug.cgi?id=1206520
  * https://bugzilla.suse.com/show_bug.cgi?id=1206562
  * https://bugzilla.suse.com/show_bug.cgi?id=1206725
  * https://bugzilla.suse.com/show_bug.cgi?id=1206783
  * https://bugzilla.suse.com/show_bug.cgi?id=1206800
  * https://bugzilla.suse.com/show_bug.cgi?id=1206817
  * https://bugzilla.suse.com/show_bug.cgi?id=1206861
  * https://bugzilla.suse.com/show_bug.cgi?id=1206932
  * https://bugzilla.suse.com/show_bug.cgi?id=1206963
  * https://bugzilla.suse.com/show_bug.cgi?id=1206973
  * https://bugzilla.suse.com/show_bug.cgi?id=1206979
  * https://bugzilla.suse.com/show_bug.cgi?id=1206981
  * https://bugzilla.suse.com/show_bug.cgi?id=1207063
  * https://bugzilla.suse.com/show_bug.cgi?id=1207087
  * https://bugzilla.suse.com/show_bug.cgi?id=1207141
  * https://bugzilla.suse.com/show_bug.cgi?id=1207297
  * https://bugzilla.suse.com/show_bug.cgi?id=1207352
  * https://bugzilla.suse.com/show_bug.cgi?id=1207595
  * https://bugzilla.suse.com/show_bug.cgi?id=1207792
  * https://bugzilla.suse.com/show_bug.cgi?id=1207799
  * https://bugzilla.suse.com/show_bug.cgi?id=1207814
  * https://bugzilla.suse.com/show_bug.cgi?id=1207829
  * https://bugzilla.suse.com/show_bug.cgi?id=1207830
  * https://bugzilla.suse.com/show_bug.cgi?id=1207838
  * https://bugzilla.suse.com/show_bug.cgi?id=1207867
  * https://bugzilla.suse.com/show_bug.cgi?id=1207883
  * https://bugzilla.suse.com/show_bug.cgi?id=1208046
  * https://bugzilla.suse.com/show_bug.cgi?id=1208119
  * https://bugzilla.suse.com/show_bug.cgi?id=1208288
  * https://bugzilla.suse.com/show_bug.cgi?id=1208321
  * https://bugzilla.suse.com/show_bug.cgi?id=1208325
  * https://bugzilla.suse.com/show_bug.cgi?id=1208427
  * https://bugzilla.suse.com/show_bug.cgi?id=1208522
  * https://bugzilla.suse.com/show_bug.cgi?id=1208536
  * https://bugzilla.suse.com/show_bug.cgi?id=1208540
  * https://bugzilla.suse.com/show_bug.cgi?id=1208550
  * https://bugzilla.suse.com/show_bug.cgi?id=1208586
  * https://bugzilla.suse.com/show_bug.cgi?id=1208611
  * https://bugzilla.suse.com/show_bug.cgi?id=1208661
  * https://bugzilla.suse.com/show_bug.cgi?id=1208687
  * https://bugzilla.suse.com/show_bug.cgi?id=1208719
  * https://bugzilla.suse.com/show_bug.cgi?id=1208772
  * https://bugzilla.suse.com/show_bug.cgi?id=1208908
  * https://bugzilla.suse.com/show_bug.cgi?id=1209119
  * https://bugzilla.suse.com/show_bug.cgi?id=1209143
  * https://bugzilla.suse.com/show_bug.cgi?id=1209149
  * https://bugzilla.suse.com/show_bug.cgi?id=1209215
  * https://bugzilla.suse.com/show_bug.cgi?id=1209220
  * https://bugzilla.suse.com/show_bug.cgi?id=1209231
  * https://bugzilla.suse.com/show_bug.cgi?id=1209253
  * https://bugzilla.suse.com/show_bug.cgi?id=1209259
  * https://bugzilla.suse.com/show_bug.cgi?id=1209277
  * https://bugzilla.suse.com/show_bug.cgi?id=1209369
  * https://bugzilla.suse.com/show_bug.cgi?id=1209386
  * https://bugzilla.suse.com/show_bug.cgi?id=1209395
  * https://bugzilla.suse.com/show_bug.cgi?id=1209434
  * https://bugzilla.suse.com/show_bug.cgi?id=1209508
  * https://bugzilla.suse.com/show_bug.cgi?id=1209557
  * https://bugzilla.suse.com/show_bug.cgi?id=1209926
  * https://bugzilla.suse.com/show_bug.cgi?id=1209938
  * https://bugzilla.suse.com/show_bug.cgi?id=1209993
  * https://bugzilla.suse.com/show_bug.cgi?id=1210086
  * https://bugzilla.suse.com/show_bug.cgi?id=1210094
  * https://bugzilla.suse.com/show_bug.cgi?id=1210101
  * https://bugzilla.suse.com/show_bug.cgi?id=1210107
  * https://bugzilla.suse.com/show_bug.cgi?id=1210154
  * https://bugzilla.suse.com/show_bug.cgi?id=1210162
  * https://bugzilla.suse.com/show_bug.cgi?id=1210349
  * https://bugzilla.suse.com/show_bug.cgi?id=1210437
  * https://bugzilla.suse.com/show_bug.cgi?id=1210458
  * https://bugzilla.suse.com/show_bug.cgi?id=1210776
  * https://bugzilla.suse.com/show_bug.cgi?id=1210835
  * https://bugzilla.suse.com/show_bug.cgi?id=1211956
  * https://bugzilla.suse.com/show_bug.cgi?id=1211958
  * https://bugzilla.suse.com/show_bug.cgi?id=1212096
  * https://bugzilla.suse.com/show_bug.cgi?id=1212363
  * https://bugzilla.suse.com/show_bug.cgi?id=1212516
  * https://jira.suse.com/browse/MSQA-666

OPENSUSE-UPDATES

tags

participants (1)