<div class="container">
<h1>Maintenance update for SUSE Manager 4.3: Server, Proxy and Retail Branch Server</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-SU-2023:3861-1</td>
</tr>
<tr>
<th>Rating:</th>
<td>important</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1207330">#1207330</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1207330">#1207330</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1208692">#1208692</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1208692">#1208692</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1208692">#1208692</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1210935">#1210935</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1210935">#1210935</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1211525">#1211525</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1211525">#1211525</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1211525">#1211525</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1211874">#1211874</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1211874">#1211874</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1211884">#1211884</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1211884">#1211884</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212246">#1212246</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212246">#1212246</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212730">#1212730</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212730">#1212730</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212814">#1212814</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212814">#1212814</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212827">#1212827</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212827">#1212827</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212856">#1212856</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212856">#1212856</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212856">#1212856</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212943">#1212943</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212943">#1212943</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212943">#1212943</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213009">#1213009</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213009">#1213009</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213077">#1213077</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213077">#1213077</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213288">#1213288</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213288">#1213288</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213445">#1213445</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213445">#1213445</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213445">#1213445</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213675">#1213675</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213675">#1213675</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213675">#1213675</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213716">#1213716</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213716">#1213716</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213880">#1213880</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213880">#1213880</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214002">#1214002</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214002">#1214002</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214121">#1214121</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214121">#1214121</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214124">#1214124</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214124">#1214124</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214187">#1214187</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214187">#1214187</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214266">#1214266</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214266">#1214266</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214280">#1214280</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214280">#1214280</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214889">#1214889</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214889">#1214889</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214982">#1214982</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214982">#1214982</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215352">#1215352</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215352">#1215352</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215362">#1215362</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215362">#1215362</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215373">#1215373</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215373">#1215373</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215413">#1215413</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215413">#1215413</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215497">#1215497</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215497">#1215497</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215756">#1215756</a>
</li>
<li style="display: inline;">
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215756">#1215756</a>
</li>
<li style="display: inline;">
<a href="https://jira.suse.com/browse/MSQA-699">MSQA-699</a>
</li>
<li style="display: inline;">
<a href="https://jira.suse.com/browse/MSQA-699">MSQA-699</a>
</li>
<li style="display: inline;">
<a href="https://jira.suse.com/browse/MSQA-699">MSQA-699</a>
</li>
<li style="display: inline;">
<a href="https://jira.suse.com/browse/SUMA-158">SUMA-158</a>
</li>
<li style="display: inline;">
<a href="https://jira.suse.com/browse/SUMA-158">SUMA-158</a>
</li>
<li style="display: inline;">
<a href="https://jira.suse.com/browse/SUMA-280">SUMA-280</a>
</li>
<li style="display: inline;">
<a href="https://jira.suse.com/browse/SUMA-280">SUMA-280</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>
Cross-References:
</th>
<td>
<ul>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2023-29409.html">CVE-2023-29409</a>
</li>
<li style="display: inline;">
<a href="https://www.suse.com/security/cve/CVE-2023-29409.html">CVE-2023-29409</a>
</li>
</ul>
</td>
</tr>
<tr>
<th>CVSS scores:</th>
<td>
<ul class="list-group">
<li class="list-group-item">
<span class="cvss-reference">CVE-2023-29409</span>
<span class="cvss-source">
(
SUSE
):
</span>
<span class="cvss-score">7.5</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</span>
</li>
<li class="list-group-item">
<span class="cvss-reference">CVE-2023-29409</span>
<span class="cvss-source">
(
NVD
):
</span>
<span class="cvss-score">5.3</span>
<span class="cvss-vector">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L</span>
</li>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">SUSE Manager Proxy 4.3</li>
<li class="list-group-item">SUSE Manager Proxy 4.3 Module 4.3</li>
<li class="list-group-item">SUSE Manager Retail Branch Server 4.3</li>
<li class="list-group-item">SUSE Manager Server 4.3</li>
<li class="list-group-item">SUSE Manager Server 4.3 Module 4.3</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that solves two vulnerabilities, contains seven features and has 70 security fixes can now be installed.</p>
<h2>Recommended update for SUSE Manager Proxy and Retail Branch Server 4.3</h2>
<h3>Description:</h3>
<p>This update fixes the following issues:</p>
<p>spacecmd:</p>
<ul>
<li>Version 4.3.23-1</li>
<li>Update translation strings</li>
</ul>
<p>spacewalk-backend:</p>
<ul>
<li>Version 4.3.23-1</li>
<li>Use a constant to get the product name in python code rather than reading rhn.conf (bsc#1212943)</li>
<li>Add key import debug logging to reposync (bsc#1213675)</li>
<li>Add hint about missing auth header for Pay-as-you-go instances (bsc#1213445)</li>
<li>rhn-ssl-dbstore read CA from STDIN (bsc#1212856)</li>
<li>Implement new RHUI support in reposync</li>
</ul>
<p>spacewalk-certs-tools:</p>
<ul>
<li>Version 4.3.19-1</li>
<li>Support EC Cryptography with mgr-ssl-cert-setup</li>
<li>mgr-ssl-cert-setup: store CA certificate in database (bsc#1212856)</li>
</ul>
<p>spacewalk-web:</p>
<ul>
<li>Version 4.3.33-1</li>
<li>Update the messages after syncing the products</li>
<li>Fix issue that prevented to delete credentials</li>
<li>Add warning message in login UI for Pay-as-you-go with SCC credentials and no forward registration.</li>
<li>Hide SSH info for <code>localhost</code> in Pay-as-you-go section</li>
<li>Integrate @formatjs/intl as a replacement for t()</li>
<li>Fix link interpolation in message maps</li>
</ul>
<p>supportutils-plugin-susemanager-client:</p>
<ul>
<li>Version 4.3.3-1</li>
<li>Write configured crypto-policy in supportconfig</li>
<li>Add cloud and Pay-as-you-go checks</li>
</ul>
<p>supportutils-plugin-susemanager-proxy:</p>
<ul>
<li>Version 4.3.3-1</li>
<li>Write configured crypto-policy in supportconfig</li>
</ul>
<p>uyuni-common-libs:</p>
<ul>
<li>Version 4.3.9-1</li>
<li>Workaround for python3-debian bug about collecting control file (bsc#1211525, bsc#1208692)</li>
</ul>
<p>How to apply this update:</p>
<ol>
<li>Log in as root user to the SUSE Manager Proxy or Retail Branch Server.</li>
<li>Stop the proxy service:
<code>spacewalk-proxy stop</code></li>
<li>Apply the patch using either zypper patch or YaST Online Update.</li>
<li>Start the Spacewalk service:
<code>spacewalk-proxy start</code></li>
</ol>
<h2>Security update for SUSE Manager Server 4.3</h2>
<h3>Description:</h3>
<p>This update fixes the following issues:</p>
<p>billing-data-service:</p>
<ul>
<li>Version 0.3-1</li>
<li>Add required dependencies to package and service</li>
<li>Change billing api datastructure</li>
<li>Require csp-billing-adapter service</li>
</ul>
<p>cobbler:</p>
<ul>
<li>Fix EFI PXE boot regression (bsc#1214124)</li>
<li>Fix isolinux.cfg generation in "cobbler buildiso" (bsc#1207330) </li>
</ul>
<p>hub-xmlrpc-api:</p>
<ul>
<li>CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server
while validating signatures for extremely large RSA keys. (bsc#1213880)
There are no direct source changes. The CVE is fixed rebuilding the sources with the patched Go version.</li>
</ul>
<p>grafana-formula:</p>
<ul>
<li>Version 0.9.0</li>
<li>Add SUSE Linux Enterprise 15 Service Pack 5 to the supported versions (bsc#1215497)</li>
</ul>
<p>image-sync-formula:</p>
<ul>
<li>Update to version 0.1.1692188980.9aa0455</li>
<li>Fix boot image version compare to use numeric instead of string (bsc#1214002)</li>
<li>Add support to filter individual image versions in whitelist</li>
<li>Delete cache files that are no longer needed</li>
</ul>
<p>inter-server-sync:</p>
<ul>
<li>Version 0.3.0</li>
<li>CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server
while validating signatures for extremely large RSA keys. (bsc#1213880)</li>
<li>Require at least Go 1.19 for building due to CVE-2023-29409</li>
<li>Require at least Go 1.18 for building Red Hat packages</li>
</ul>
<p>prometheus-exporters-formula:</p>
<ul>
<li>Version 1.3.0</li>
<li>Add support for Apache exporter >= 1.0.0 (bsc#1214266)</li>
</ul>
<p>prometheus-postgres_exporter:</p>
<ul>
<li>CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server
while validating signatures for extremely large RSA keys. (bsc#1213880)
There are no direct source changes. The CVE is fixed rebuilding the sources with the patched Go version.</li>
</ul>
<p>saltboot-formula:</p>
<ul>
<li>Update to version 0.1.1692188980.9aa0455 </li>
<li>Add pillar based saltboot redeploy and repartitioning (jsc#SUMA-158)</li>
</ul>
<p>spacecmd:</p>
<ul>
<li>Version 4.3.23-1</li>
<li>Update translation strings</li>
</ul>
<p>spacewalk-admin:</p>
<ul>
<li>Version 4.3.13-1</li>
<li>Integrate instance-flavor-check to detect if the instance is Pay-as-you-go</li>
<li>Add checks for csp-billing-adapter in case of a Pay-as-you-go instance</li>
</ul>
<p>spacewalk-backend:</p>
<ul>
<li>Version 4.3.23-1</li>
<li>Use a constant to get the product name in python code rather than reading rhn.conf (bsc#1212943)</li>
<li>Add key import debug logging to reposync (bsc#1213675)</li>
<li>Add hint about missing auth header for Pay-as-you-go instances (bsc#1213445)</li>
<li>rhn-ssl-dbstore read CA from STDIN (bsc#1212856)</li>
<li>Implement new RHUI support in reposync</li>
</ul>
<p>spacewalk-certs-tools:</p>
<ul>
<li>Version 4.3.19-1</li>
<li>Support EC Cryptography with mgr-ssl-cert-setup</li>
<li>mgr-ssl-cert-setup: store CA certificate in database (bsc#1212856)</li>
</ul>
<p>spacewalk-config:</p>
<ul>
<li>Version 4.3.11-1</li>
<li>Allow calling instance-flavor-check via sudo</li>
</ul>
<p>spacewalk-java:</p>
<ul>
<li>version 4.3.66-1</li>
<li>Fix RHUI support for RHEL 7 clients (bsc#1215756)</li>
<li>version 4.3.65-1</li>
<li>Combine the PAYG credentials and the repository paths when they
collide (bsc#1215413)</li>
<li>version 4.3.64-1</li>
<li>Fix token issue with cloned deb channels (bsc#1214982)</li>
<li>Fix PAYG credentials extraction for SLES 12 clients (bsc#1215352)</li>
<li>Improved detection of the best authentication for accessing a
repository in case of PAYG credentials (bsc#1215362)</li>
<li>Do not warn about missing Client Tools Channel subscription in a
PAYG environment</li>
<li>version 4.3.63-1</li>
<li>Fix X-Instance-Identifier header when doing a product refresh
at Cloud RMT Server (bsc#1214889)</li>
<li>Version 4.3.62-1</li>
<li>Add environment build/promote date to CLM API output (jsc#SUMA-280)</li>
<li>Call mgr-libmod with its absolute path</li>
<li>Introduce new API to update the products page metadata</li>
<li>Extract additional authentication information needed for Pay-as-you-go</li>
<li>Fix handling of null credentials in RMT credentials check</li>
<li>Integrate instance-flavor-check to detect if the instance is Pay-as-you-go</li>
<li>Add rule to count only servers with SUSE Manager Tools as managed clients</li>
<li>Create flag to disable update status (bsc#1212730)</li>
<li>Fix syntax error in sql query for source package search</li>
<li>Catch exceptions and log a message when mailer setup failed (bsc#1213009)</li>
<li>Fix logging of libraries using apache-commons-logging</li>
<li>Invalidate Pay-as-you-go client credentials after repeated connection failure (bsc#1213445)</li>
<li>Restrict product migrations for Pay-as-you-go</li>
<li>Add warning message in login UI for Pay-as-you-go with SCC credentials and no forward registration</li>
<li>Restrict cloning channels under different product channels for Pay-as-you-go</li>
<li>Avoid sending data to SCC about Pay-as-you-go instances</li>
<li>Add saltboot redeploy and repartition based on pillars (jsc#SUMA-158)</li>
<li>Add system pillar API access {get|set}Pillar</li>
<li>Consider the venv-salt-minion package update as Salt update to prevent backtraces on upgrading Salt with
itself (bsc#1211884)</li>
<li>Fix processing of pkg.purged results (bsc#1213288)</li>
<li>Fix Null Pointer Exception in auth endpoint when an empty body is provided</li>
<li>Do not ignore scheduling error in Taskomatic</li>
<li>Add compliance checks when running as Pay-as-you-go</li>
<li>Add RHUI support to Pay-as-you-go connection feature</li>
<li>Fix Debian Packages file generation (bsc#1213716)</li>
<li>Fix action executor to prevent blocking Taskomatic for actions that are already finished (bsc#1214121)</li>
<li>Fix detection in case RHEL-based products (bsc#1214280)</li>
<li>Improve error message when instance-flavor-check tool is not installed</li>
<li>Fix auto product refresh in case of SUSE Manager Pay-as-you-go Server</li>
<li>Optimize org channel accessibility query (bsc#1211874)</li>
<li>Check csp billing adapter status</li>
</ul>
<p>spacewalk-setup:</p>
<ul>
<li>Version 4.3.18-1</li>
<li>Do not rely on rpm runtime status, rather check rhn.conf if is configured (bsc#1210935)</li>
<li>Remove storing CA in DB directly as it is now part of mgr-ssl-cert-setup (bsc#1212856)</li>
</ul>
<p>spacewalk-web:</p>
<ul>
<li>Version 4.3.33-1</li>
<li>Update the messages after syncing the products</li>
<li>Fix issue that prevented to delete credentials</li>
<li>Add warning message in login UI for Pay-as-you-go with SCC credentials and no forward registration.</li>
<li>Hide SSH info for <code>localhost</code> in Pay-as-you-go section</li>
<li>Integrate @formatjs/intl as a replacement for t()</li>
<li>Fix link interpolation in message maps</li>
</ul>
<p>supportutils-plugin-susemanager:</p>
<ul>
<li>Version 4.3.9-1</li>
<li>Add cloud and Pay-as-you-go checks</li>
<li>Write configured crypto-policy in supportconfig</li>
</ul>
<p>susemanager:</p>
<ul>
<li>Version 4.3.31-1</li>
<li>Require LTSS channel for SUSE Manager Proxy 4.2 (bsc#1214187)</li>
</ul>
<p>susemanager-docs_en:</p>
<ul>
<li>Added a note for SUSE Linux Enterprise Micro clients only having Node and Blackbox exporter for monitoring available,
in the Administration Guide (bsc#1212246)</li>
<li>Added a warning about channel synchronization failure because of invalidated credentials in Connect Pay-as-you-go
instance section of the Installation and Upgrade Guide</li>
<li>Added a workflow describing channel removal to the Common Workflows Guide</li>
<li>Added background information on Ansible playbooks in the Ansible chapter in Administration Guide (bsc#1213077)</li>
<li>Added Best practices and image pillars files to Retail Guide</li>
<li>Added detailed information about all supported SUSE Linux Enterprise Micro versions</li>
<li>Added Saltboot redeployment subchapter in the Retail Guide</li>
<li>Changed filename for configuring Tomcat memory usage in Specialized Guides (bsc#1212814)</li>
<li>Fixed Ubuntu channel names in Ubuntu chapter of the Client Configuration Guide (bsc#1212827)</li>
<li>Improved Red Hat Update Infrastructure documentation (bsc#1215373)</li>
<li>Listed supported key types for SSL certificates in Import SSL Certificates section of the Administation Guide</li>
<li>Minimal memory requirement is now 16 GB for a SUSE Manager Server installation</li>
<li>Removed the step calling rhn-ssl-dbstore from the SSL setup as it is now integrated into mgr-ssl-cert-setup in
Administration Guide</li>
<li>Replaced plain text with dedicated attribute for AutoYaST</li>
<li>Typo correction for cobbler buildiso command in Client Configuration Guide</li>
<li>Updated Ansible chapter in Administration Guide for clarity (bsc#1213077)</li>
</ul>
<p>susemanager-schema:</p>
<ul>
<li>Version 4.3.20-1</li>
<li>Add new credentials type RHUI</li>
<li>Store the Pay-as-you-go products</li>
</ul>
<p>susemanager-sls:</p>
<ul>
<li>Version 4.3.35-1</li>
<li>Integrate instance-flavor-check to detect if the instance is Pay-as-you-go</li>
<li>Do not disable salt-minion on salt-ssh managed clients</li>
<li>Keep original traditional stack tools for RHEL7 RHUI connection</li>
<li>Include automatic migration from Salt 3000 to Salt Bundle in highstate</li>
<li>Use recurse stratedy to merge formula pillar with existing pillars</li>
<li>Mask Uyuni roster module password on logs</li>
</ul>
<p>uyuni-common-libs:</p>
<ul>
<li>Version 4.3.9-1</li>
<li>Workaround for python3-debian bug about collecting control file (bsc#1211525, bsc#1208692)</li>
</ul>
<p>How to apply this update:</p>
<ol>
<li>Log in as root user to the SUSE Manager Server.</li>
<li>Stop the Spacewalk service:
<code>spacewalk-service stop</code></li>
<li>Apply the patch using either zypper patch or YaST Online Update.</li>
<li>Start the Spacewalk service:
<code>spacewalk-service start</code></li>
</ol>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
SUSE Manager Proxy 4.3 Module 4.3
<br/>
<code>zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2023-3861=1</code>
</li>
<li class="list-group-item">
SUSE Manager Server 4.3 Module 4.3
<br/>
<code>zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.3-2023-3861=1</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
SUSE Manager Proxy 4.3 Module 4.3 (noarch)
<ul>
<li>spacewalk-base-minimal-config-4.3.33-150400.3.27.16</li>
<li>python3-spacewalk-certs-tools-4.3.19-150400.3.18.13</li>
<li>supportutils-plugin-susemanager-client-4.3.3-150400.3.3.13</li>
<li>spacewalk-backend-4.3.23-150400.3.27.19</li>
<li>spacecmd-4.3.23-150400.3.24.13</li>
<li>spacewalk-certs-tools-4.3.19-150400.3.18.13</li>
<li>spacewalk-base-minimal-4.3.33-150400.3.27.16</li>
<li>supportutils-plugin-susemanager-proxy-4.3.3-150400.3.3.13</li>
</ul>
</li>
<li>
SUSE Manager Proxy 4.3 Module 4.3 (x86_64)
<ul>
<li>python3-uyuni-common-libs-4.3.9-150400.3.15.13</li>
</ul>
</li>
<li>
SUSE Manager Server 4.3 Module 4.3 (noarch)
<ul>
<li>susemanager-docs_en-pdf-4.3-150400.9.38.2</li>
<li>susemanager-schema-4.3.20-150400.3.24.17</li>
<li>spacewalk-base-4.3.33-150400.3.27.16</li>
<li>spacewalk-config-4.3.11-150400.3.9.13</li>
<li>prometheus-exporters-formula-1.3.0-150400.3.3.13</li>
<li>spacewalk-backend-applet-4.3.23-150400.3.27.19</li>
<li>spacewalk-base-minimal-config-4.3.33-150400.3.27.16</li>
<li>billing-data-service-0.3-150400.10.6.13</li>
<li>spacewalk-java-lib-4.3.66-150400.3.60.1</li>
<li>python3-spacewalk-certs-tools-4.3.19-150400.3.18.13</li>
<li>spacewalk-backend-package-push-server-4.3.23-150400.3.27.19</li>
<li>spacewalk-backend-xml-export-libs-4.3.23-150400.3.27.19</li>
<li>spacewalk-backend-config-files-common-4.3.23-150400.3.27.19</li>
<li>spacewalk-java-config-4.3.66-150400.3.60.1</li>
<li>susemanager-docs_en-4.3-150400.9.38.2</li>
<li>susemanager-schema-utility-4.3.20-150400.3.24.17</li>
<li>saltboot-formula-0.1.1692188980.9aa0455-150400.3.12.13</li>
<li>cobbler-3.3.3-150400.5.33.13</li>
<li>spacewalk-backend-iss-4.3.23-150400.3.27.19</li>
<li>spacewalk-base-minimal-4.3.33-150400.3.27.16</li>
<li>image-sync-formula-0.1.1692188980.9aa0455-150400.3.15.13</li>
<li>spacewalk-admin-4.3.13-150400.3.12.13</li>
<li>spacewalk-java-4.3.66-150400.3.60.1</li>
<li>spacewalk-backend-4.3.23-150400.3.27.19</li>
<li>spacecmd-4.3.23-150400.3.24.13</li>
<li>spacewalk-certs-tools-4.3.19-150400.3.18.13</li>
<li>spacewalk-taskomatic-4.3.66-150400.3.60.1</li>
<li>spacewalk-backend-iss-export-4.3.23-150400.3.27.19</li>
<li>supportutils-plugin-susemanager-4.3.9-150400.3.15.13</li>
<li>spacewalk-setup-4.3.18-150400.3.27.13</li>
<li>uyuni-config-modules-4.3.35-150400.3.31.12</li>
<li>spacewalk-backend-server-4.3.23-150400.3.27.19</li>
<li>spacewalk-backend-app-4.3.23-150400.3.27.19</li>
<li>spacewalk-backend-tools-4.3.23-150400.3.27.19</li>
<li>spacewalk-html-4.3.33-150400.3.27.16</li>
<li>susemanager-sls-4.3.35-150400.3.31.12</li>
<li>grafana-formula-0.9.0-150400.3.12.1</li>
<li>spacewalk-backend-sql-postgresql-4.3.23-150400.3.27.19</li>
<li>spacewalk-backend-config-files-tool-4.3.23-150400.3.27.19</li>
<li>spacewalk-backend-xmlrpc-4.3.23-150400.3.27.19</li>
<li>spacewalk-backend-config-files-4.3.23-150400.3.27.19</li>
<li>spacewalk-java-postgresql-4.3.66-150400.3.60.1</li>
<li>spacewalk-backend-sql-4.3.23-150400.3.27.19</li>
</ul>
</li>
<li>
SUSE Manager Server 4.3 Module 4.3 (ppc64le s390x x86_64)
<ul>
<li>inter-server-sync-0.3.0-150400.3.21.15</li>
<li>hub-xmlrpc-api-0.7-150400.5.9.15</li>
<li>python3-uyuni-common-libs-4.3.9-150400.3.15.13</li>
<li>susemanager-4.3.31-150400.3.36.12</li>
<li>prometheus-postgres_exporter-0.10.1-150400.3.6.17</li>
<li>inter-server-sync-debuginfo-0.3.0-150400.3.21.15</li>
<li>susemanager-tools-4.3.31-150400.3.36.12</li>
</ul>
</li>
</ul>
<h2>References:</h2>
<ul>
<li>
<a href="https://www.suse.com/security/cve/CVE-2023-29409.html">https://www.suse.com/security/cve/CVE-2023-29409.html</a>
</li>
<li>
<a href="https://www.suse.com/security/cve/CVE-2023-29409.html">https://www.suse.com/security/cve/CVE-2023-29409.html</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1207330">https://bugzilla.suse.com/show_bug.cgi?id=1207330</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1207330">https://bugzilla.suse.com/show_bug.cgi?id=1207330</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1208692">https://bugzilla.suse.com/show_bug.cgi?id=1208692</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1208692">https://bugzilla.suse.com/show_bug.cgi?id=1208692</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1208692">https://bugzilla.suse.com/show_bug.cgi?id=1208692</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1210935">https://bugzilla.suse.com/show_bug.cgi?id=1210935</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1210935">https://bugzilla.suse.com/show_bug.cgi?id=1210935</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1211525">https://bugzilla.suse.com/show_bug.cgi?id=1211525</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1211525">https://bugzilla.suse.com/show_bug.cgi?id=1211525</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1211525">https://bugzilla.suse.com/show_bug.cgi?id=1211525</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1211874">https://bugzilla.suse.com/show_bug.cgi?id=1211874</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1211874">https://bugzilla.suse.com/show_bug.cgi?id=1211874</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1211884">https://bugzilla.suse.com/show_bug.cgi?id=1211884</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1211884">https://bugzilla.suse.com/show_bug.cgi?id=1211884</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212246">https://bugzilla.suse.com/show_bug.cgi?id=1212246</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212246">https://bugzilla.suse.com/show_bug.cgi?id=1212246</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212730">https://bugzilla.suse.com/show_bug.cgi?id=1212730</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212730">https://bugzilla.suse.com/show_bug.cgi?id=1212730</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212814">https://bugzilla.suse.com/show_bug.cgi?id=1212814</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212814">https://bugzilla.suse.com/show_bug.cgi?id=1212814</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212827">https://bugzilla.suse.com/show_bug.cgi?id=1212827</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212827">https://bugzilla.suse.com/show_bug.cgi?id=1212827</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212856">https://bugzilla.suse.com/show_bug.cgi?id=1212856</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212856">https://bugzilla.suse.com/show_bug.cgi?id=1212856</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212856">https://bugzilla.suse.com/show_bug.cgi?id=1212856</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212943">https://bugzilla.suse.com/show_bug.cgi?id=1212943</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212943">https://bugzilla.suse.com/show_bug.cgi?id=1212943</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1212943">https://bugzilla.suse.com/show_bug.cgi?id=1212943</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213009">https://bugzilla.suse.com/show_bug.cgi?id=1213009</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213009">https://bugzilla.suse.com/show_bug.cgi?id=1213009</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213077">https://bugzilla.suse.com/show_bug.cgi?id=1213077</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213077">https://bugzilla.suse.com/show_bug.cgi?id=1213077</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213288">https://bugzilla.suse.com/show_bug.cgi?id=1213288</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213288">https://bugzilla.suse.com/show_bug.cgi?id=1213288</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213445">https://bugzilla.suse.com/show_bug.cgi?id=1213445</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213445">https://bugzilla.suse.com/show_bug.cgi?id=1213445</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213445">https://bugzilla.suse.com/show_bug.cgi?id=1213445</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213675">https://bugzilla.suse.com/show_bug.cgi?id=1213675</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213675">https://bugzilla.suse.com/show_bug.cgi?id=1213675</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213675">https://bugzilla.suse.com/show_bug.cgi?id=1213675</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213716">https://bugzilla.suse.com/show_bug.cgi?id=1213716</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213716">https://bugzilla.suse.com/show_bug.cgi?id=1213716</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213880">https://bugzilla.suse.com/show_bug.cgi?id=1213880</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1213880">https://bugzilla.suse.com/show_bug.cgi?id=1213880</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214002">https://bugzilla.suse.com/show_bug.cgi?id=1214002</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214002">https://bugzilla.suse.com/show_bug.cgi?id=1214002</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214121">https://bugzilla.suse.com/show_bug.cgi?id=1214121</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214121">https://bugzilla.suse.com/show_bug.cgi?id=1214121</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214124">https://bugzilla.suse.com/show_bug.cgi?id=1214124</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214124">https://bugzilla.suse.com/show_bug.cgi?id=1214124</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214187">https://bugzilla.suse.com/show_bug.cgi?id=1214187</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214187">https://bugzilla.suse.com/show_bug.cgi?id=1214187</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214266">https://bugzilla.suse.com/show_bug.cgi?id=1214266</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214266">https://bugzilla.suse.com/show_bug.cgi?id=1214266</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214280">https://bugzilla.suse.com/show_bug.cgi?id=1214280</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214280">https://bugzilla.suse.com/show_bug.cgi?id=1214280</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214889">https://bugzilla.suse.com/show_bug.cgi?id=1214889</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214889">https://bugzilla.suse.com/show_bug.cgi?id=1214889</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214982">https://bugzilla.suse.com/show_bug.cgi?id=1214982</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1214982">https://bugzilla.suse.com/show_bug.cgi?id=1214982</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215352">https://bugzilla.suse.com/show_bug.cgi?id=1215352</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215352">https://bugzilla.suse.com/show_bug.cgi?id=1215352</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215362">https://bugzilla.suse.com/show_bug.cgi?id=1215362</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215362">https://bugzilla.suse.com/show_bug.cgi?id=1215362</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215373">https://bugzilla.suse.com/show_bug.cgi?id=1215373</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215373">https://bugzilla.suse.com/show_bug.cgi?id=1215373</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215413">https://bugzilla.suse.com/show_bug.cgi?id=1215413</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215413">https://bugzilla.suse.com/show_bug.cgi?id=1215413</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215497">https://bugzilla.suse.com/show_bug.cgi?id=1215497</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215497">https://bugzilla.suse.com/show_bug.cgi?id=1215497</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215756">https://bugzilla.suse.com/show_bug.cgi?id=1215756</a>
</li>
<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1215756">https://bugzilla.suse.com/show_bug.cgi?id=1215756</a>
</li>
<li>
<a href="https://jira.suse.com/browse/MSQA-699">https://jira.suse.com/browse/MSQA-699</a>
</li>
<li>
<a href="https://jira.suse.com/browse/MSQA-699">https://jira.suse.com/browse/MSQA-699</a>
</li>
<li>
<a href="https://jira.suse.com/browse/MSQA-699">https://jira.suse.com/browse/MSQA-699</a>
</li>
<li>
<a href="https://jira.suse.com/browse/SUMA-158">https://jira.suse.com/browse/SUMA-158</a>
</li>
<li>
<a href="https://jira.suse.com/browse/SUMA-158">https://jira.suse.com/browse/SUMA-158</a>
</li>
<li>
<a href="https://jira.suse.com/browse/SUMA-280">https://jira.suse.com/browse/SUMA-280</a>
</li>
<li>
<a href="https://jira.suse.com/browse/SUMA-280">https://jira.suse.com/browse/SUMA-280</a>
</li>
</ul>
</div>