{"id":"CVE-2022-31248","aliases":["EUVD-2022-52826","GHSA-jcvh-6rq4-c7xr","SUSE-SU-2022:2143-1","SUSE-SU-2022:2144-1","SUSE-SU-2022:2145-1","SUSE-SU-2022:2146-1","SUSE-SU-2022:2567-1","SUSE-SU-2022:2568-1","SUSE-SU-2022:3194-1"],"status":"published","title":"SUMA user enumeration via weak error message","description":"A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to discover valid usernames. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46-1. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37-1.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.01018,"percentile":0.63623,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-204"],"published":"2022-06-20T14:10:44Z","modified":"2026-06-17T04:45:12Z","fixes":[{"ecosystem":"SUSE:Manager Proxy 4.2","package":"release-notes-susemanager-proxy","fixed_in":["4.2.8-150300.3.40.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.2","package":"release-notes-susemanager-proxy","fixed_in":["4.2.8-150300.3.40.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"release-notes-susemanager","fixed_in":["4.2.8-150300.3.51.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"apache-commons-csv","fixed_in":["1.2-150300.3.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"apache-commons-math3","fixed_in":["3.2-150300.3.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"drools","fixed_in":["7.17.0-150300.4.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"jakarta-commons-validator","fixed_in":["1.1.4-21.150300.21.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"jose4j","fixed_in":["0.5.1-150300.3.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"kie-api","fixed_in":["7.17.0-150300.4.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"mvel2","fixed_in":["2.2.6.Final-150300.3.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"optaplanner","fixed_in":["7.17.0-150300.4.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"py27-compat-salt","fixed_in":["3000.3-150300.7.7.20.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"python-susemanager-retail","fixed_in":["1.0.1653987003.92d4870-150300.3.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"smdba","fixed_in":["1.7.10-0.150300.3.9.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"spacecmd","fixed_in":["4.2.18-150300.4.24.3"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-admin","fixed_in":["4.2.11-150300.3.12.3"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-backend","fixed_in":["4.2.23-150300.4.26.3"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-branding","fixed_in":["4.2.14-150300.3.12.3"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-certs-tools","fixed_in":["4.2.17-150300.3.21.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-client-tools","fixed_in":["4.2.19-150300.4.21.3"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-java","fixed_in":["4.2.40-150300.3.40.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-search","fixed_in":["4.2.7-150300.3.9.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-setup","fixed_in":["4.2.11-150300.3.15.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-utils","fixed_in":["4.2.17-150300.3.18.3"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-web","fixed_in":["4.2.28-150300.3.24.3"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"subscription-matcher","fixed_in":["0.29-150300.6.9.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager","fixed_in":["4.2.35-150300.3.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager-doc-indexes","fixed_in":["4.2-150300.12.30.3"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager-docs_en","fixed_in":["4.2-150300.12.30.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager-schema","fixed_in":["4.2.23-150300.3.24.3"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager-sls","fixed_in":["4.2.26-150300.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager-sync-data","fixed_in":["4.2.13-150300.3.21.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"virtual-host-gatherer","fixed_in":["1.0.23-150300.3.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"woodstox","fixed_in":["4.4.2-150300.3.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.2","package":"xmlpull-api","fixed_in":["1.1.3.1-150300.3.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"apache-commons-csv","fixed_in":["1.2-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"apache-commons-math3","fixed_in":["3.2-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"drools","fixed_in":["7.17.0-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"image-sync-formula","fixed_in":["0.1.1658330139.861779d-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"inter-server-sync","fixed_in":["0.2.3-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"jakarta-commons-validator","fixed_in":["1.1.4-21.150400.21.3.4"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"jose4j","fixed_in":["0.5.1-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"kie-api","fixed_in":["7.17.0-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"mvel2","fixed_in":["2.2.6.Final-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"optaplanner","fixed_in":["7.17.0-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"python-susemanager-retail","fixed_in":["1.0.1658330139.861779d-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"python-urlgrabber","fixed_in":["4.1.0-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"reprepro","fixed_in":["5.3.0-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"salt-netapi-client","fixed_in":["0.20.0-150400.3.3.5"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"smdba","fixed_in":["1.7.10-0.150400.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"spacecmd","fixed_in":["4.3.14-150400.3.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk","fixed_in":["4.3.5-150400.3.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-backend","fixed_in":["4.3.15-150400.3.3.5"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-certs-tools","fixed_in":["4.3.14-150400.3.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-client-tools","fixed_in":["4.3.11-150400.3.3.4"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-config","fixed_in":["4.3.9-150400.3.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-java","fixed_in":["4.3.35-150400.3.3.5"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-search","fixed_in":["4.3.6-150400.3.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-setup","fixed_in":["4.3.10-150400.3.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-utils","fixed_in":["4.3.13-150400.3.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-web","fixed_in":["4.3.23-150400.3.3.4"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"subscription-matcher","fixed_in":["0.29-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager","fixed_in":["4.3.18-150400.3.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager-build-keys","fixed_in":["15.4.3-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager-docs_en","fixed_in":["4.3-150400.9.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager-schema","fixed_in":["4.3.13-150400.3.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager-sls","fixed_in":["4.3.24-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"uyuni-common-libs","fixed_in":["4.3.5-150400.3.3.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"virtual-host-gatherer","fixed_in":["1.0.23-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"woodstox","fixed_in":["4.4.2-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server Module 4.3","package":"xmlpull-api","fixed_in":["1.1.3.1-150400.3.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"release-notes-susemanager-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.15-150200.3.56.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"release-notes-susemanager-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.15-150200.3.56.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"release-notes-susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.15-150200.3.80.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.17-150300.4.21.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.22-150300.4.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"spacewalk-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.16-150300.3.18.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.27-150300.3.21.7"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"supportutils-plugin-salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-150300.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"inter-server-sync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.2-150300.8.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"prometheus-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.2-150300.3.14.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"salt-netapi-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0-150300.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"smdba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.10-0.150300.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.17-150300.4.21.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.22-150300.4.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.16-150300.3.18.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.38-150300.3.35.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.16-150300.3.15.5"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.27-150300.3.21.7"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"supportutils-plugin-salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-150300.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.32-150300.3.31.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager-doc-indexes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2-150300.12.27.6"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager-docs_en","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2-150300.12.27.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.22-150300.3.21.6"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager-sls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.23-150300.3.25.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager-sync-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.12-150300.3.18.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"virtual-host-gatherer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.23-150300.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.1","package":"golang-github-QubitProducts-exporter_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0-150200.6.12.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.1","package":"golang-github-lusitaniae-apache_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-150200.2.6.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.1","package":"golang-github-prometheus-node_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150200.3.9.3"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.1","package":"patterns-suse-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1-150200.6.12.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.1","package":"postgresql-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"42.2.10-150200.3.8.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.1","package":"prometheus-exporters-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.5-150200.3.31.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.1","package":"prometheus-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.7-150200.3.21.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.1","package":"py27-compat-salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000.3-150200.6.24.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.1","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.18-150200.4.39.3"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.1","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.31-150200.4.50.4"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.1","package":"spacewalk-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.46-150200.3.71.5"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.1","package":"spacewalk-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.11-150200.3.18.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.1","package":"spacewalk-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.20-150200.3.30.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.1","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.34-150200.3.47.6"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.1","package":"subscription-matcher","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.28-150200.3.15.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.1","package":"susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.36-150200.3.52.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.1","package":"susemanager-doc-indexes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1-150200.11.55.4"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.1","package":"susemanager-docs_en","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1-150200.11.55.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.1","package":"susemanager-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.26-150200.3.45.4"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.1","package":"susemanager-sls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.36-150200.3.64.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"release-notes-susemanager-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.7-150300.3.31.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.2","package":"release-notes-susemanager-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.7-150300.3.31.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"release-notes-susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.7-150300.3.44.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"release-notes-susemanager-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8-150300.3.40.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.2","package":"release-notes-susemanager-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8-150300.3.40.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"release-notes-susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8-150300.3.51.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"apache-commons-csv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-150300.3.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"apache-commons-math3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.3.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"drools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.17.0-150300.4.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"jakarta-commons-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-21.150300.21.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"jose4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.1-150300.3.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"kie-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.17.0-150300.4.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"mvel2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6.Final-150300.3.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"optaplanner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.17.0-150300.4.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"py27-compat-salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000.3-150300.7.7.20.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"python-susemanager-retail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1653987003.92d4870-150300.3.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"smdba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.10-0.150300.3.9.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.18-150300.4.24.3"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-admin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.11-150300.3.12.3"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.23-150300.4.26.3"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-branding","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.14-150300.3.12.3"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.17-150300.3.21.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.19-150300.4.21.3"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.40-150300.3.40.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-search","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.7-150300.3.9.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.11-150300.3.15.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.17-150300.3.18.3"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.28-150300.3.24.3"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"subscription-matcher","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29-150300.6.9.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.35-150300.3.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager-doc-indexes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2-150300.12.30.3"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager-docs_en","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2-150300.12.30.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.23-150300.3.24.3"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager-sls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.26-150300.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager-sync-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.13-150300.3.21.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"virtual-host-gatherer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.23-150300.3.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"woodstox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-150300.3.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"xmlpull-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3.1-150300.3.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"apache-commons-csv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"apache-commons-math3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"drools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.17.0-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"image-sync-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.1658330139.861779d-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"inter-server-sync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.3-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"jakarta-commons-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-21.150400.21.3.4"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"jose4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.1-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"kie-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.17.0-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"mvel2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6.Final-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"optaplanner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.17.0-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"python-susemanager-retail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1658330139.861779d-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"python-urlgrabber","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"reprepro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.0-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"salt-netapi-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.0-150400.3.3.5"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"smdba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.10-0.150400.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.14-150400.3.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-150400.3.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.15-150400.3.3.5"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.14-150400.3.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.11-150400.3.3.4"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.9-150400.3.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.35-150400.3.3.5"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-search","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.6-150400.3.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.10-150400.3.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.13-150400.3.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.23-150400.3.3.4"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"subscription-matcher","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.18-150400.3.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager-build-keys","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.4.3-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager-docs_en","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3-150400.9.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.13-150400.3.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager-sls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.24-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"uyuni-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-150400.3.3.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"virtual-host-gatherer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.23-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"woodstox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"xmlpull-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.3.1-150400.3.3.1"}]}]}],"products":[{"vendor":"suse","product":"manager_server"},{"vendor":"suse","product":"suse manager server 4.1"},{"vendor":"suse","product":"suse manager server 4.2"}],"references":[{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1199629","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-31248"},{"url":"https://github.com/advisories/GHSA-jcvh-6rq4-c7xr"},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222143-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1182742","tags":["report"]},{"url":"https://bugzilla.suse.com/1189501","tags":["report"]},{"url":"https://bugzilla.suse.com/1190535","tags":["report"]},{"url":"https://bugzilla.suse.com/1192850","tags":["report"]},{"url":"https://bugzilla.suse.com/1193032","tags":["report"]},{"url":"https://bugzilla.suse.com/1193238","tags":["report"]},{"url":"https://bugzilla.suse.com/1193707","tags":["report"]},{"url":"https://bugzilla.suse.com/1194262","tags":["report"]},{"url":"https://bugzilla.suse.com/1194447","tags":["report"]},{"url":"https://bugzilla.suse.com/1194594","tags":["report"]},{"url":"https://bugzilla.suse.com/1194909","tags":["report"]},{"url":"https://bugzilla.suse.com/1195561","tags":["report"]},{"url":"https://bugzilla.suse.com/1196338","tags":["report"]},{"url":"https://bugzilla.suse.com/1196407","tags":["report"]},{"url":"https://bugzilla.suse.com/1196702","tags":["report"]},{"url":"https://bugzilla.suse.com/1196704","tags":["report"]},{"url":"https://bugzilla.suse.com/1197356","tags":["report"]},{"url":"https://bugzilla.suse.com/1197429","tags":["report"]},{"url":"https://bugzilla.suse.com/1197438","tags":["report"]},{"url":"https://bugzilla.suse.com/1197488","tags":["report"]},{"url":"https://bugzilla.suse.com/1198221","tags":["report"]},{"url":"https://bugzilla.suse.com/1198356","tags":["report"]},{"url":"https://bugzilla.suse.com/1198686","tags":["report"]},{"url":"https://bugzilla.suse.com/1198914","tags":["report"]},{"url":"https://bugzilla.suse.com/1199036","tags":["report"]},{"url":"https://bugzilla.suse.com/1199142","tags":["report"]},{"url":"https://bugzilla.suse.com/1199149","tags":["report"]},{"url":"https://bugzilla.suse.com/1199512","tags":["report"]},{"url":"https://bugzilla.suse.com/1199528","tags":["report"]},{"url":"https://bugzilla.suse.com/1199629","tags":["report"]},{"url":"https://bugzilla.suse.com/1199677","tags":["report"]},{"url":"https://bugzilla.suse.com/1199888","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31248","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222144-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1187333","tags":["report"]},{"url":"https://bugzilla.suse.com/1191143","tags":["report"]},{"url":"https://bugzilla.suse.com/1192550","tags":["report"]},{"url":"https://bugzilla.suse.com/1195710","tags":["report"]},{"url":"https://bugzilla.suse.com/1197400","tags":["report"]},{"url":"https://bugzilla.suse.com/1197449","tags":["report"]},{"url":"https://bugzilla.suse.com/1197591","tags":["report"]},{"url":"https://bugzilla.suse.com/1197689","tags":["report"]},{"url":"https://bugzilla.suse.com/1199089","tags":["report"]},{"url":"https://bugzilla.suse.com/1200212","tags":["report"]},{"url":"https://bugzilla.suse.com/1200606","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-44906","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222145-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1173527","tags":["report"]},{"url":"https://bugzilla.suse.com/1196067","tags":["report"]},{"url":"https://bugzilla.suse.com/1199577","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21698","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222146-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222567-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1179962","tags":["report"]},{"url":"https://bugzilla.suse.com/1194394","tags":["report"]},{"url":"https://bugzilla.suse.com/1196977","tags":["report"]},{"url":"https://bugzilla.suse.com/1197507","tags":["report"]},{"url":"https://bugzilla.suse.com/1198191","tags":["report"]},{"url":"https://bugzilla.suse.com/1198358","tags":["report"]},{"url":"https://bugzilla.suse.com/1198429","tags":["report"]},{"url":"https://bugzilla.suse.com/1198646","tags":["report"]},{"url":"https://bugzilla.suse.com/1198944","tags":["report"]},{"url":"https://bugzilla.suse.com/1198999","tags":["report"]},{"url":"https://bugzilla.suse.com/1199019","tags":["report"]},{"url":"https://bugzilla.suse.com/1199049","tags":["report"]},{"url":"https://bugzilla.suse.com/1199401","tags":["report"]},{"url":"https://bugzilla.suse.com/1199438","tags":["report"]},{"url":"https://bugzilla.suse.com/1199466","tags":["report"]},{"url":"https://bugzilla.suse.com/1199523","tags":["report"]},{"url":"https://bugzilla.suse.com/1199596","tags":["report"]},{"url":"https://bugzilla.suse.com/1199646","tags":["report"]},{"url":"https://bugzilla.suse.com/1199656","tags":["report"]},{"url":"https://bugzilla.suse.com/1199679","tags":["report"]},{"url":"https://bugzilla.suse.com/1199727","tags":["report"]},{"url":"https://bugzilla.suse.com/1199874","tags":["report"]},{"url":"https://bugzilla.suse.com/1200087","tags":["report"]},{"url":"https://bugzilla.suse.com/1200703","tags":["report"]},{"url":"https://bugzilla.suse.com/1200707","tags":["report"]},{"url":"https://bugzilla.suse.com/1200863","tags":["report"]},{"url":"https://bugzilla.suse.com/1201782","tags":["report"]},{"url":"https://bugzilla.suse.com/1201842","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222568-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223194-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1172179","tags":["report"]},{"url":"https://bugzilla.suse.com/1186011","tags":["report"]},{"url":"https://bugzilla.suse.com/1187028","tags":["report"]},{"url":"https://bugzilla.suse.com/1191925","tags":["report"]},{"url":"https://bugzilla.suse.com/1195455","tags":["report"]},{"url":"https://bugzilla.suse.com/1199147","tags":["report"]},{"url":"https://bugzilla.suse.com/1199157","tags":["report"]},{"url":"https://bugzilla.suse.com/1199659","tags":["report"]},{"url":"https://bugzilla.suse.com/1199662","tags":["report"]},{"url":"https://bugzilla.suse.com/1199663","tags":["report"]},{"url":"https://bugzilla.suse.com/1199714","tags":["report"]},{"url":"https://bugzilla.suse.com/1199779","tags":["report"]},{"url":"https://bugzilla.suse.com/1199817","tags":["report"]},{"url":"https://bugzilla.suse.com/1199950","tags":["report"]},{"url":"https://bugzilla.suse.com/1199984","tags":["report"]},{"url":"https://bugzilla.suse.com/1199998","tags":["report"]},{"url":"https://bugzilla.suse.com/1200276","tags":["report"]},{"url":"https://bugzilla.suse.com/1200347","tags":["report"]},{"url":"https://bugzilla.suse.com/1200532","tags":["report"]},{"url":"https://bugzilla.suse.com/1200591","tags":["report"]},{"url":"https://bugzilla.suse.com/1201003","tags":["report"]},{"url":"https://bugzilla.suse.com/1201142","tags":["report"]},{"url":"https://bugzilla.suse.com/1201189","tags":["report"]},{"url":"https://bugzilla.suse.com/1201224","tags":["report"]},{"url":"https://bugzilla.suse.com/1201411","tags":["report"]},{"url":"https://bugzilla.suse.com/1201498","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-31248","title":"SUMA user enumeration via weak error message","description":"A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to discover valid usernames. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46-1. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37-1.","status":"published","published":"2022-06-22T10:05:13.408Z","modified":"2024-09-16T16:22:26.146Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-204"],"updated_at":"2026-11-02T14:34:35.615708Z"}],"euvd":[{"id":"EUVD-2022-52826","description":"A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to discover valid usernames. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46-1. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37-1.","status":"published","published":"2022-06-22T10:05:13Z","modified":"2024-09-16T16:22:26Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:55:52.590586Z"}],"ghsa":[{"id":"GHSA-jcvh-6rq4-c7xr","title":"A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1,...","description":"A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to discover valid usernames. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46-1. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37-1.","status":"published","published":"2022-06-23T00:00:35Z","modified":"2023-01-27T05:05:05Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-204"],"updated_at":"2026-11-02T14:42:37.253278Z"}],"nvd":[{"id":"CVE-2022-31248","description":"A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to discover valid usernames. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46-1. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37-1.","status":"published","published":"2022-06-22T10:15:08.023Z","modified":"2026-06-17T04:45:12.92Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-204"],"updated_at":"2026-11-02T14:07:22.613788Z"}],"osv":[{"id":"SUSE-SU-2022:2143-1","title":"Recommended update for SUSE Manager 4.1.15 Release Notes","description":"This update for SUSE Manager 4.1.15 Release Notes provides the following additions:\n\nRelease notes for SUSE Manager:\n\n- Update to 4.1.15\n  * Salt has been upgraded to 3004 version\n  * Grafana has been upgraded to 8.3.5\n  * Postgres exporter has been upgraded to 0.10.0\n  * Alertmanager has been upgraded to 0.23.0\n  * Node exporter has been upgraded 1.3.0\n  * CVEs fixed: CVE-2022-21724, CVE-2022-21952, CVE-2022-31248, CVE-2022-26520\n  * Bugs mentioned:\n    bsc#1182742, bsc#1189501, bsc#1190535, bsc#1192850, bsc#1193032\n    bsc#1193238, bsc#1193707, bsc#1194262, bsc#1194447, bsc#1194594\n    bsc#1194909, bsc#1195561, bsc#1196338, bsc#1196407, bsc#1196702\n    bsc#1196704, bsc#1197356, bsc#1197429, bsc#1197438, bsc#1197488\n    bsc#1198221, bsc#1198356, bsc#1198686, bsc#1198914, bsc#1199036\n    bsc#1199142, bsc#1199149, bsc#1199512, bsc#1199528, bsc#1199629\n    bsc#1199677, bsc#1199888\n\nRelease notes for SUSE Manager proxy:\n\n- Update to 4.1.15\n  * Salt has been upgraded to 3004 version\n  * Bugs mentioned:\n    bsc#1190535, bsc#1193238, bsc#1194447, bsc#1194594, bsc#1194909\n    bsc#1196338, bsc#1196704, bsc#1199142, bsc#1199528\n","status":"published","published":"2022-06-20T14:10:44Z","modified":"2026-02-04T03:03:40.133294Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:2144-1","title":"Security update for SUSE Manager Server 4.2","description":"\nThis update fixes the following issues:\n\ninter-server-sync:\n\n- version 0.2.2\n  * Parameter --channel-with-children didn't export data (bsc#1199089)\n  * Clean rhnchannelcloned table to rebuild hierarchy (bsc#1197400)\n- Version 0.2.1\n  * Correct sequence in use for table rhnpackagekey(bsc#1197400)\n  * Make Docker image export compatible with Suse Manager 4.2\n- Version 0.2.0\n  * Allow images export and import (os based and Docker)\n\nprometheus-formula:\n\n- Version 0.6.2\n  * Allow prometheus-formula only for SUSE systems (bsc#1199149)\n\nsalt-netapi-client:\n\n- Improve the hotfix for bsc#1192550 (bsc#1197449):\n\nsmdba:\n\n- Don't package egg-info file for Enterprise Linux.\n\nspacecmd:\n\n- Version 4.2.17-1\n  * parse boolean paramaters correctly (bsc#1197689)\n\nspacewalk-backend:\n\n- version 4.2.22-1\n  * Do not raise error on file:// based DEB repo when looking for alternative Release files (bsc#1199142)\n- Version 4.2.21-1\n  * Improve parsing deb packages dependencies (bsc#1194594)\n\nspacewalk-certs-tools:\n\n- Version 4.2.16-1\n  * Add Salt Bundle support to bootstrap script generator\n\nspacewalk-java:\n\n- version 4.2.38-1\n  * Remove unused gson-extras.jar during build \n- version 4.2.37-1\n  * CVE-2022-31248: User enumeration via weak error message. (bsc#1199629)\n- version 4.2.36-1\n  * CVE-2022-21952: Unauthenticated remote Denial of Service via resource exhaustion. (bsc#1199512)\n- Version 4.2.35-1\n  * faster display installable packages list (bsc#1187333)\n  * Pass ssh_salt_pre_flight_script and ssh_use_salt_thin parameters\n    to the generated roster files to enable optional Salt Bundle\n    support with Salt SSH\n  * Fix reboot time on salt-ssh client(bsc#1197591)\n  * detect free products in Alpha and Beta stage and prevent checks\n    on openSUSE products (bsc#1197488)\n  * Allow monitoring entitlement for debian 11 and 10\n  * Hide private methods in XMLRPC handlers\n  * Warning log when hardware refresh result is not serializable\n  * Optimize adding new products function (bsc#1193707)\n\nspacewalk-utils:\n\n- Version 4.2.16-1\n  * Add Debian 11 repositories\n\nspacewalk-web:\n\n- Version 4.2.27-1\n  * increase web page default timeout (bsc#1187333)\n  * Add ssh_salt_pre_flight_script and ssh_use_salt_thin parameters\n    to default rhn_web.conf\n  * Upgrade minimist to fix CVE-2021-44906\n  * susemanager-nodejs-sdk-devel is now provided by spacewalk-web\n  * Resolve race conditions in CLM (bsc#1195710)\n\nsusemanager:\n\n- version 4.2.32-1\n  * Add python3-contextvars and python3-immutables to missing bootstrap repos (bsc#1200606)\n- version 4.2.31-1\n  * Add python3-gnupg to bootstrap repo definition for Ubuntu 20.04 (bsc#1200212)\n- version 4.2.30-1\n  * Fix a syntax problem at the bootstrap repository definitions\n- Version 4.2.29-1\n  * Add Salt Bundle support to mgr-create-bootstrap-repo\n  * Enable bootstrapping for Debian 11\n  * fix SLE15 bootstrap repo definition (bsc#1197438)\n  * Add SLES15SP4 and SUMA Proxy 4.3 to bootstrap\n    repo definitions (bsc#1196702)\n  * Add missing dependencies for Salt 3004 into bootstrap repository\n    for SLE15 family (bsc#1198221)\n\nsusemanager-doc-indexes:\n\n- Updated Salt version for Server and Proxy to 3004\n- Added details to Client Configuration Guide on using Salt Bundle as optional\n- Updated saltversion attribute from 3002 to 3004 \n- In the Administration Guide, documented that monitoring tools are \n  available in SUSE Linux Enterprise 12 and 15 and openSUSE Leap 15, \n  but Grafana is not available on Proxy (bsc#1191143)\n- Documented Autoyast installation features in Autoyast section of \n  the Client Configuration Guide\n- In Client Configuration Guide document Debian 11 as a supported OS \n  as a client\n- In Client Configuration Guide, clarified client upgrade issues\n- In Client Configuration Guide, added information about registration \n  of version 12 of SUSE Linux Enterprise clients\n- In Client Configuration Guide, mark the applying patches features as \n  supported on Ubuntu\n- SLE Micro in Client Configuration Guide: Update version number from\n  5.0 to 5.1, and warn about Salt installation. \n\nsusemanager-docs_en:\n\n- Updated Salt version for Server and Proxy to 3004\n- Added details to Client Configuration Guide on using Salt Bundle as optional\n- In the Administration Guide, documented that monitoring tools are \n  available in SUSE Linux Enterprise 12 and 15 and openSUSE Leap 15, \n  but Grafana is not available on Proxy (bsc#1191143)\n- Documented Autoyast installation features in Autoyast section of \n  the Client Configuration Guide\n- In Client Configuration Guide document Debian 11 as a supported OS \n  as a client\n- In Client Configuration Guide, clarified client upgrade issues\n- In Client Configuration Guide, added information about registration \n  of version 12 of SUSE Linux Enterprise clients\n- In Client Configuration Guide, mark the applying patches features as \n  supported on Ubuntu\n- SLE Micro in Client Configuration Guide: Update version number from\n  5.0 to 5.1, and warn about Salt installation. \n\nsusemanager-schema:\n\n- Version 4.2.22-1\n  * Add schema directory for susemanager-schema-4.2.21\n\nsusemanager-sls:\n\n- version 4.2.23-1\n  * Fix bootstrap repository URL resolution for Yum based clients with preflight script for Salt SSH\n- Version 4.2.22-1\n  * Add Salt Bundle support on bootstrapping\n  * Add Salt SSH with Salt Bundle support\n  * Add util.mgr_switch_to_venv_minion state to switch salt minions\n    to use the Salt Bundle\n  * Fix bootstrap repository path resolution for Oracle Linux\n  * Handle salt bundle in set_proxy.sls\n\nsusemanager-sync-data:\n\n- Version 4.2.12-1\n  * change release status of EL 7 and 8 aarch64 to released\n  * change release status of Rocky Linux 8 x86_64 to released\n  * add Debian 11 amd64\n\nsupportutils-plugin-salt:\n\n- Update to version 1.2.0\n  * Add support for Salt Bundle\n\nvirtual-host-gatherer:\n\n- Version 1.0.23-1\n  * reformat the first 3 groups of the UUID for hardware versions \u003e=13\n    in VMWare environment.\n  * Fix shebangs to use python3\n  * Implement libvirt module\n\nHow to apply this update:\n\n1. Log in as root user to the SUSE Manager server.\n2. Stop the Spacewalk service:\n`spacewalk-service stop`\n3. Apply the patch using either zypper patch or YaST Online Update.\n4. Start the Spacewalk service:\n`spacewalk-service start`\n","status":"published","published":"2022-06-20T14:11:52Z","modified":"2026-02-04T02:56:37.568729Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:2145-1","title":"Security update for SUSE Manager Server 4.1","description":"This update fixes the following issues:\n\ngolang-github-QubitProducts-exporter_exporter:\n\n- Adapted to build on Enterprise Linux.\n- Fix build for RedHat 7\n- Require Go \u003e= 1.14 also for CentOS\n- Add support for CentOS\n- Replace %{?systemd_requires} with %{?systemd_ordering}\n\ngolang-github-lusitaniae-apache_exporter:\n\n- Require building with Go 1.15\n- Add %license macro for LICENSE file \n\ngolang-github-prometheus-node_exporter:\n\n- CVE-2022-21698: Update vendor tarball with prometheus/client_golang 1.11.1\n  (bsc#1196338, jsc#SLE-24238, jsc#SLE-24239)\n- Update to 1.3.0\n  * [CHANGE] Add path label to rapl collector #2146\n  * [CHANGE] Exclude filesystems under /run/credentials #2157\n  * [CHANGE] Add TCPTimeouts to netstat default filter #2189\n  * [FEATURE] Add lnstat collector for metrics from /proc/net/stat/ #1771\n  * [FEATURE] Add darwin powersupply collector #1777\n  * [FEATURE] Add support for monitoring GPUs on Linux #1998\n  * [FEATURE] Add Darwin thermal collector #2032\n  * [FEATURE] Add os release collector #2094\n  * [FEATURE] Add netdev.address-info collector #2105\n  * [FEATURE] Add clocksource metrics to time collector #2197\n  * [ENHANCEMENT] Support glob textfile collector directories #1985\n  * [ENHANCEMENT] ethtool: Expose node_ethtool_info metric #2080\n  * [ENHANCEMENT] Use include/exclude flags for ethtool filtering #2165\n  * [ENHANCEMENT] Add flag to disable guest CPU metrics #2123\n  * [ENHANCEMENT] Add DMI collector #2131\n  * [ENHANCEMENT] Add threads metrics to processes collector #2164\n  * [ENHANCMMENT] Reduce timer GC delays in the Linux filesystem collector #2169\n  * [ENHANCMMENT] Add TCPTimeouts to netstat default filter #2189\n  * [ENHANCMMENT] Use SysctlTimeval for boottime collector on BSD #2208\n  * [BUGFIX] ethtool: Sanitize metric names #2093\n  * [BUGFIX] Fix ethtool collector for multiple interfaces #2126\n  * [BUGFIX] Fix possible panic on macOS #2133\n  * [BUGFIX] Collect flag_info and bug_info only for one core #2156\n  * [BUGFIX] Prevent duplicate ethtool metric names #2187\n- Update to 1.2.2\n  * Bug fixes\n     Fix processes collector long int parsing #2112\n- Update to 1.2.1\n  * Removed\n     Remove obsolete capture permission denied error patch already included upstream\n     Fix zoneinfo parsing prometheus/procfs#386\n     Fix nvme collector log noise #2091\n     Fix rapl collector log noise #2092\n- Update to 1.2.0\n  * Changes\n     Rename filesystem collector flags to match other collectors #2012\n     Make node_exporter print usage to STDOUT #203\n  * Features\n     Add conntrack statistics metrics #1155\n     Add ethtool stats collector #1832\n     Add flag to ignore network speed if it is unknown #1989\n     Add tapestats collector for Linux #2044\n     Add nvme collector #2062\n  * Enhancements\n     Add ErrorLog plumbing to promhttp #1887\n     Add more Infiniband counters #2019\n     netclass: retrieve interface names and filter before parsing #2033\n     Add time zone offset metric #2060\n     Handle errors from disabled PSI subsystem #1983\n     Fix panic when using backwards compatible flags #2000\n     Fix wrong value for OpenBSD memory buffer cache #2015\n     Only initiate collectors once #2048\n     Handle small backwards jumps in CPU idle #2067\n- Capture permission denied error for 'energy_uj' file (bsc#1190535)\n\npatterns-suse-manager:\n\n- Golang-github-wrouesnel-postgres_exporter was renamed to prometheus-postgres_exporter\n\npostgresql-jdbc:\n\n- CVE-2022-26520: Address Arbitrary File Write Vulnerability (bsc#1197356)\n- CVE-2022-21724: Address unchecked class instantiation when loading plugins based on class names (bsc#1195561)\n\nprometheus-exporters-formula:\n\n- Version 0.9.5\n  * Postgres exporter package was renamed for Red Hat\n- Version 0.9.4\n  * Postgres exporter package was renamed for SUSE Linux Enterprise Server and openSUSE\n\nprometheus-formula:\n\n- Version 0.3.7\n  * Allow prometheus-formula only for SUSE systems (bsc#1199149)\n\npy27-compat-salt:\n\n- Remove redundant overrides causing confusing DEBUG logging (bsc#1189501)\n\nspacecmd:\n\n- Version 4.1.18-1\n  * implement system.bootstrap (bsc#1194909)\n\nspacewalk-backend:\n\n- Version 4.1.31-1\n  * Fix traceback on calling spacewalk-repo-sync --show-packages (bsc#1193238)\n  * Fix virt_notify SQL syntax error (bsc#1199528)\n  * Do not raise error on file:// based DEB repo when looking\n    for alternative Release files (bsc#1199142)\n  * Improve parsing deb packages dependencies (bsc#1194594)\n  * Fix reposync update notice formatting and date parsing (bsc#1194447)\n  * implement more decompression algorithms for reposync (bsc#1196704)\n\nspacewalk-java:\n\n- Version 4.1.46-1\n  * Fix changelog to include the reference to CVE-2022-31248\n- Version 4.1.45-1\n  * CVE-2022-31248: User enumeration via weak error message (bsc#1199629)\n  * CVE-2022-21952: Unauthenticated remote Denial of Service via resource exhaustion. (bsc#1199512)\n  * During re-activation, recalculate grains if contact method has been changed (bsc#1199677)\n  * autoinstallation: missing whitespace after install URL (bsc#1199888)\n  * Change system details lock tab name to lock/unlock (bsc#1193032)\n  * Set profile tag has no-mandatory in XCCDF result (bsc#1194262)\n  * Added a notification to inform the administrators about the product end-of-life\n  * provisioning thought proxy should use proxy for self_update (bsc#1199036)\n  * Allow removing duplicated packages names in the same Salt action (bsc#1198686)\n  * Fix ACL rules for config diff download for SLS files (bsc#1198914)\n  * fix invalid link to action schedule\n  * Redesign the auto errata task to schedule combined actions (bsc#1197429)\n  * detect free products in Alpha and Beta stage and prevent checks on openSUSE products (bsc#1197488)\n  * Optimize adding new products function (bsc#1193707)\n  * change directory owner and permissions only when needed\n  * Fixed broken help link for system overview\n  * Finding empty profiles by mac address must be case insensitive (bsc#1196407)\n  * generate the system ssh key when bootstrapping a salt-ssh client (bsc#1194909)\n\nspacewalk-setup:\n\n- Version 4.1.11-1\n  * spacewalk-setup-cobbler assumes /etc/apache2/conf.d now as a\n    default instead of /etc/httpd/conf.d (bsc#1198356)\n\nspacewalk-utils:\n\n- Version 4.1.20-1\n  * spacewalk-hostname-rename now correctly replaces the hostname for\n    the mgr-sync configuration file (bsc#1198356)\n  * spacewalk-hostname-rename now utilizes the '--apache2-conf-dir'\n    flag for spacewalk-setup-cobbler (bsc#1198356)\n\nspacewalk-web:\n\n- Version 4.1.34-1\n  * Update Web UI version to 4.1.15\n- Version 4.1.33-1\n  * Added support for end of life notifications\n\nsubscription-matcher:\n\n- Version 0.28\n  * Support both antlr3-java and antlr3-runtime as dependencies\n  * Make it obvious that log4j12 is used\n\nsusemanager:\n\n- version 4.1.36-1\n  * Add python3-contextvars and python3-immutables to missing bootstrap repos (bsc#1200606)\n- version 4.1.35-1\n  * Add python3-gnupg to bootstrap repo definition for Ubuntu 20.04 (bsc#1200212)\n- Version 4.1.34-1\n  * mgr-sync: Raise a proper exception when duplicated lines exist in a config file (bsc#1182742)\n  * fix SLE15 bootstrap repo definition (bsc#1197438)\n  * Add SLES15SP4 and SUMA Proxy 4.3 to bootstrap\n    repo definitions (bsc#1196702)\n  * Add missing dependencies for Salt 3004 into bootstrap repository\n    for SLE15 family (bsc#1198221)\n\nsusemanager-doc-indexes:\n\n- The Large deployments Guide now includes a mention of the proxy (bsc#1199577)\n- In the Administration Guide, documented that monitoring tools are \n  now available on SUSE Linux Enterprise 12, 15 and openSUSE Leap 15, \n  however, Grafana is not available on Proxy (bsc#1191143)\n- In the Administration Guide, renamed the \n  golang-github-wrouesnel-postgres_exporter to prometheus-postgres_exporter\n- In the Client Configuration and Retail Guides clarified that mandatory \n  channels are automatically checked (bsc#1173527)\n- In the Client Configuration Guide, marked Yomi as unsupported on \n  SUSE Linux Enterprise Server 11 and 12\n- Clarified channel label name in Registering Clients with RHUI \n  section of the Client Configuration Guide (bsc#1196067)\n\nsusemanager-docs_en:\n\n- The Large deployments Guide now includes a mention of the proxy \n  (bsc#1199577)\n- In the Administration Guide, documented that monitoring tools are \n  now available on SUSE Linux Enterprise 12, 15 and openSUSE Leap 15,\n  however, Grafana is not available on Proxy (bsc#1191143)\n- In the Administration Guide, renamed the \n  golang-github-wrouesnel-postgres_exporter to prometheus-postgres_exporter\n- In the Client Configuration and Retail Guides clarified that mandatory \n  channels are automatically checked (bsc#1173527)\n- In the Client Configuration Guide, marked Yomi as unsupported on \n  SUSE Linux Enterprise Server 11 and 12\n- Clarified channel label name in Registering Clients with RHUI \n  section of the Client Configuration Guide (bsc#1196067)\n\nsusemanager-schema:\n\n- Version 4.1.26-1\n  * add schema update directory from 4.1.25 to 4.1.26\n\nsusemanager-sls:\n\n- version 4.1.36-1\n  * Prevent possible tracebacks on calling module.run from mgrcompat by setting proper globals with using LazyLoader\n\n- Version 4.1.35-1\n  * Add support to packages.pkgremove to deal with duplicated pkg names (bsc#1198686)\n  * Fix bootstrap repository path resolution for Oracle Linux\n  * Fix deprecated warning when getting pillar data (bsc#1192850)\n  * fixing how the return code is returned in mgrutil runner (bsc#1194909)\n\nHow to apply this update:\n\n1. Log in as root user to the SUSE Manager server.\n2. Stop the Spacewalk service:\n`spacewalk-service stop`\n3. Apply the patch using either zypper patch or YaST Online Update.\n4. Start the Spacewalk service:\n`spacewalk-service start`\n","status":"published","published":"2022-06-20T14:12:59Z","modified":"2026-02-04T03:40:29.79401Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:2146-1","title":"Security update for release-notes-susemanager, release-notes-susemanager-proxy","description":"This update for release-notes-susemanager, release-notes-susemanager-proxy fixes the following issues:\n\nRelease notes for SUSE Manager: \n\n- Update to 4.2.7\n  * Salt has been upgraded to 3004 version\n  * Enabled salt bundle as optional\n  * Debian 11 client support has been added\n  * Alertmanager has been upgraded to 0.23.0\n  * Node exporter has been upgraded 1.3.0\n  * CVEs fixed: CVE-2021-44906, CVE-2022-21952, CVE-2022-31248\n  * Bugs mentioned: \n    bsc#1187333, bsc#1191143, bsc#1192550, bsc#1193707, bsc#1194594\n    bsc#1195710, bsc#1196702, bsc#1197400, bsc#1197438, bsc#1197449\n    bsc#1197488, bsc#1197591, bsc#1197689, bsc#1198221\n\nRelease notes for SUSE Manager proxy:\n\n- Update to 4.2.7\n  * Salt has been upgraded to 3004 version\n  * Bugs mentioned: \n    bsc#1187333, bsc#1194594, bsc#1195710, bsc#1197689\n","status":"published","published":"2022-06-20T14:15:02Z","modified":"2026-02-04T04:17:21.661161Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:2567-1","title":"Important update for SUSE Manager 4.2.8 Release Notes","description":"This update for SUSE Manager 4.2.8 Release Notes provides the following additions:\n\nRelease notes for SUSE Manager:\n\n- Update to 4.2.8\n  * Notification about SUSE Manager end-of-life has been added\n  * CVEs fixed\n    CVE-2022-31248\n  * Bugs mentioned\n    bsc#1179962, bsc#1182742, bsc#1189501, bsc#1192850, bsc#1193032\n    bsc#1193238, bsc#1194262, bsc#1196977, bsc#1197429, bsc#1197507\n    bsc#1198191, bsc#1198356, bsc#1198358, bsc#1198429, bsc#1198646\n    bsc#1198686, bsc#1198914, bsc#1198944, bsc#1198999, bsc#1199019\n    bsc#1199036, bsc#1199049, bsc#1199438, bsc#1199466, bsc#1199523\n    bsc#1199528, bsc#1199577, bsc#1199596, bsc#1199629, bsc#1199646\n    bsc#1199656, bsc#1199677, bsc#1199679, bsc#1199727, bsc#1199874\n    bsc#1199888, bsc#1200087, bsc#1200703, bsc#1200707, bsc#1200863\n    bsc#1194394, bsc#1201842, bsc#1201782\n\nRelease notes for SUSE Manager Proxy:\n\n- Update to 4.2.8\n  * Bugs mentioned\n    bsc#1193238, bsc#1197507, bsc#1199019, bsc#1199401, bsc#1199528\n    bsc#1199679, bsc#1200087\n","status":"published","published":"2022-07-27T13:42:03Z","modified":"2026-02-04T04:33:06.769882Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2568-1","title":"Security update for SUSE Manager Server 4.2","description":"\nThis update fixes the following issues:\n\napache-commons-csv:\n\n- Fix the URL for the package\n- Declare the LICENSE file as license and not doc\n\napache-commons-math3:\n\n- Fix the URL for the package\n- Declare the LICENSE file as license and not doc\n\ndrools:\n\n- Declare the LICENSE file as license and not doc\n\njakarta-commons-validator:\n\n- Declare the LICENSE file as license and not doc\n\njose4j:\n\n- Declare the LICENSE file as license and not doc\n\nkie-api:\n\n- Declare the LICENSE file as license and not doc\n\nmvel2:\n\n- Declare the LICENSE file as license and not doc\n\noptaplanner:\n\n- Declare the LICENSE file as license and not doc\n\npy27-compat-salt:\n\n- Remove redundant overrides causing confusing DEBUG logging (bsc#1189501)\n\npython-susemanager-retail:\n\n- Update to version 1.0.1653987003.92d4870\n  * Fix messages and logging in retail_create_delta (bsc#1199727)\n\nsmdba:\n\n- Declare the LICENSE file as license and not doc\n- Make EL egginfo removal more generic\n\nspacecmd:\n\n- Version 4.2.18-1\n  * on full system update call schedulePackageUpdate API (bsc#1197507)\n\nspacewalk-admin:\n\n- Version 4.2.11-1\n  * clarify schema upgrade check message (bsc#1198999)\n\nspacewalk-backend:\n\n- Version 4.2.23-1\n  * Fix traceback on calling spacewalk-repo-sync --show-packages\n    (bsc#1193238)\n  * Fix virt_notify SQL syntax error (bsc#1199528)\n  * store create-bootstrap logs in spacewalk-debug\n\nspacewalk-branding:\n\n- Version 4.2.14-1\n  * Stylesheets and relevant assets are now provided by spacewalk-web\n\nspacewalk-certs-tools:\n\n- Version 4.2.17-1\n  * use RES bootstrap repo as a fallback for Red Hat downstream OS (bsc#1200087)\n\nspacewalk-client-tools:\n\n- Version 4.2.19-1\n  * Update translation strings\n\nspacewalk-java:\n- version 4.2.40-1\n  * Fix conflict when system is assigned to multiple instances of the same formula (bsc#1194394)\n    \n- Version 4.2.39-1\n  * Keep the websocket connections alive with ping/pong frames (bsc#1199874)\n  * Fix missing remote command history events for big output (bsc#1199656)\n  * Improve CLM channel cloning performance (bsc#1199523)\n  * fix api log message references the wrong user (bsc#1179962)\n  * Show patch as installed in CVE Audit even if successor patch affects\n    additional packages (bsc#1199646)\n  * fix download of packages with caret sign in the version due\n    to missing url decode\n  * Prefer the Salt Bundle with Cobbler snippets configuration\n    (minion_script and redhat_register_using_salt) (bsc#1198646)\n  * During re-activation, recalculate grains if \n    contact method has been changed (bsc#1199677)\n  * Hide authentication data in PAYG UI (bsc#1199679)\n  * autoinstallation: missing whitespace after install URL (bsc#1199888)\n  * Improved handling of error messages during bootstrapping\n  * skip forwarding data to scc if no credentials are available\n  * Change system details lock tab name to lock/unlock (bsc#1193032)\n  * Added a notification to inform the administrators about the product end-of-life\n  * Set profile tag has no-mandatory in XCCDF result (bsc#1194262)\n  * provisioning thought proxy should use proxy for self_update (bsc#1199036)\n  * Allow removing duplicated packages names in the same Salt action (bsc#1198686)\n  * fix NoSuchElementException when pkg install date is missing\n  * Improve API documentation\n  * Fix outdated documentation and release notes links\n  * Fix error message in Kubernetes VHM creation dialog\n  * Add createAppStreamFilters() XMLRPC function\n  * Correct concurrency error on payg taskomatic task\n    for updating certificates (#17783)\n  * Fix ACL rules for config diff download for SLS files (bsc#1198914)\n  * fix package selection for ubuntu errata install (bsc#1199049)\n  * fix invalid link to action schedule\n  * add schedulePackageUpdate() XMLRPC function (bsc#1197507)\n  * update server needed cache after adding Ubuntu Errata (bsc#1196977)\n  * check if file exists before sending it to xsendfile (bsc#1198191)\n  * Display usertime instead of server time for clm issue date filter (bsc#1198429)\n  * Redesign the auto errata task to schedule combined actions (bsc#1197429)\n  * Fix send login(s) and send password actions to avoid user\n    enumeration (bsc#1199629) (CVE-2022-31248)\n\nspacewalk-search:\n\n- Version 4.2.7-1\n  * Update development configuration file\n\nspacewalk-setup:\n\n- Version 4.2.11-1\n  * spacewalk-setup-cobbler assumes /etc/apache2/conf.d now as a\n    default instead of /etc/httpd/conf.d (bsc#1198356)\n\nspacewalk-utils:\n\n- Version 4.2.17-1\n  * spacewalk-hostname-rename now correctly replaces the hostname for\n    the mgr-sync configuration file (bsc#1198356)\n  * spacewalk-hostname-rename now utilizes the '--apache2-conf-dir'\n    flag for spacewalk-setup-cobbler (bsc#1198356)\n\nspacewalk-web:\n\n- Version 4.2.28-1\n  * Stylesheets and relevant assets are now provided by spacewalk-web\n  * Remove nodejs-packaging as a build requirement\n  * Hide authentication data in PAYG UI (bsc#1199679)\n  * Improved handling of error messages during bootstrapping\n  * Added support for end of life notifications\n  * Improved test integration for dropdowns\n  * Upgrade moment to 2.29.2\n  * Fix outdated documentation and release notes links\n  * Fix mimetype in kubeconfig validation request (bsc#1199019)\n\nsubscription-matcher:\n\n- Declare the LICENSE file as license and not doc\n\nsusemanager:\n\n- version 4.2.35-1\n  * Add missing python3-gnupg to Debian10 bootstrap repo (bsc#1201842)\n- Version 4.2.34-1\n  * mgr-sync: Raise a proper exception when duplicated lines exist in a config file (bsc#1182742)\n  * add SLED 12 SP3 bootstrap repo definition (bsc#1199438)\n- Version 4.2.33-1\n  * Fix issue with bootstrap repo definitions for RHEL/RES8 variants (bsc#1200863)\n\nsusemanager-doc-indexes:\n\n- Fixed the 'fast' switch ('-f') of the database migration script in\n  the Installation and Upgrade Guides\n- Updated the Virtualization chapter in the Client Configuration Guide\n- Added information about registering RHEL clients on Azure in the Import\n  Entitlements and Certificates section of the Client Configuration Guide\n  (bsc#1198944)\n- In the Client Configuration Guide, package locking is now supported for \n  Ubuntu and Debian\n- Fixed VisibleIf documentation in the Formula section of the Salt Guide\n- Added note about importing CA certifcates in the Installation and Upgrade\n  Guide (bsc#1198358)\n- Documented how to define monitored targets using the file-based service\n  discovery provided in the Prometheus formula of the Salt Guide\n- Add note about OpenSCAP security profile support in OpenSCAP section of\n  the Administration Guide\n- Fixed spacewalk-remove-channel command in Delete Channels section of the\n  Administration Guide (bsc#1199596)\n- Large deployments guide now includes a mention of the proxy (bsc#1199577)\n- Enhanced the Product Migration chapter of the Client Configuration Guide\n  with a SUSE Linux Enterprise example\n\nsusemanager-docs_en:\n\n- Fixed the 'fast' switch ('-f') of the database migration script in\n  the Installation and Upgrade Guides\n- Updated the Virtualization chapter in the Client Configuration Guide\n- Added information about registering RHEL clients on Azure in the Import\n  Entitlements and Certificates section of the Client Configuration Guide\n  (bsc#1198944)\n- In the Client Configuration Guide, package locking is now supported for \n  Ubuntu and Debian\n- Fixed VisibleIf documentation in the Formula section of the Salt Guide\n- Added note about importing CA certifcates in the Installation and Upgrade \n  Guide (bsc#1198358)\n- Documented how to define monitored targets using the file-based service \n  discovery provided in the Prometheus formula of the Salt Guide\n- Add note about OpenSCAP security profile support in OpenSCAP section of\n  the Administration Guide\n- Fixed spacewalk-remove-channel command in Delete Channels section of the\n  Administration Guide (bsc#1199596)\n- Large deployments guide now includes a mention of the proxy (bsc#1199577)\n- Enhanced the Product Migration chapter of the Client Configuration Guide \n  with a SUSE Linux Enterprise example \n\nsusemanager-schema:\n\n- Version 4.2.23-1\n  * Add schema directory for susemanager-schema-4.2.22\n\nsusemanager-sls:\n\n- version 4.2.26-1\n  * Fix issue bootstrap issue with Debian 9 because missing python3-contextvars (bsc#1201782)\n- Version 4.2.25-1\n  * use RES bootstrap repo as a fallback for Red Hat downstream OS (bsc#1200087)\n  * Add support to packages.pkgremove to deal with duplicated pkg names (bsc#1198686)\n  * do not install products and gpg keys when performing distupgrade\n    dry-run (bsc#1199466)\n  * Fix deprecated warning when getting pillar data (bsc#1192850)\n  * remove unknown repository flags on EL\n  * add packages.pkgupdate state (bsc#1197507)\n- Version 4.2.24-1\n  * Manage the correct minion config file when venv-salt-minion is installed (bsc#1200703)\n  * Fix bootstrapping for Ubuntu 18.04 with classic Salt package (bsc#1200707)\n\nsusemanager-sync-data:\n\n- Version 4.2.13-1\n  * change release status of Debian 11 to released\n\nvirtual-host-gatherer:\n\n- Declare the LICENSE file as license and not doc\n\nwoodstox:\n\n- Declare the LICENSE file as license and not doc\n\nxmlpull-api:\n\n- Declare the LICENSE file as license and not doc\n\nHow to apply this update:\n\n1. Log in as root user to the SUSE Manager server.\n2. Stop the Spacewalk service:\n`spacewalk-service stop`\n3. Apply the patch using either zypper patch or YaST Online Update.\n4. Start the Spacewalk service:\n`spacewalk-service start`\n","status":"published","published":"2022-07-27T13:44:40Z","modified":"2026-02-04T03:50:03.608845Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:3194-1","title":"Security update for SUSE Manager Server 4.3","description":"\nThis update fixes the following issues:\n\napache-commons-csv:\n\n- Fix the URL for the package\n- Declare the LICENSE file as license and not doc\n\napache-commons-math3:\n\n- Fix the URL for the package\n- Declare the LICENSE file as license and not doc\n\ndrools:\n\n- Declare the LICENSE file as license and not doc\n\nimage-sync-formula:\n\n- Update to version 0.1.1658330139.861779d\n  * Fix deleting of unused boot images\n  * Support deltas for system images (bsc#1201498)\n  * Do not try to show changes in images (bsc#1199998)\n\ninter-server-sync:\n\n- Version 0.2.3\n  * Compress exported sql data #16631\n\njakarta-commons-validator:\n\n- Declare the LICENSE file as license and not doc\n\njose4j:\n\n- Declare the LICENSE file as license and not doc\n\nkie-api:\n\n- Declare the LICENSE file as license and not doc\n\nmvel2:\n\n- Declare the LICENSE file as license and not doc\n\noptaplanner:\n\n- Declare the LICENSE file as license and not doc\n\npython-susemanager-retail:\n\n- Update to version 0.1.1658330139.861779d\n  * Support deltas for system images (bsc#1201498)\n  * Fix error message on incorrect --log-level arg (bsc#1199727)\n\npython-urlgrabber:\n\n- Fix wrong logic on find_proxy method causing proxy not being used\n\nreprepro:\n\n- Bump up the maxsize on a fixed-size C buffer to avoid breaking on some\n  autogenerated rust packages\n- Flush stdout and stderr before execv of an end hook\n- Add support for Zstd compressed debs\n- Added alternative package name for db4-devel.\n\nsalt-netapi-client:\n\n- Declare the LICENSE file as license and not doc\n\nsmdba:\n\n- Declare the LICENSE file as license and not doc\n\nspacecmd:\n\n- Version 4.3.14-1\n  * Fix missing argument on system_listmigrationtargets (bsc#1201003)\n  * Show correct help on calling kickstart_importjson with no arguments\n  * Fix tracebacks on spacecmd kickstart_export (bsc#1200591)\n  * Change proxy container config default filename to end with tar.gz\n\nspacewalk:\n\n- Version 4.3.5-1\n  * Simplified PostgreSQL14 requirement.\n  * Update server-migrator to dist-upgrade to openSUSE 15.4\n\nspacewalk-backend:\n\n- Version 4.3.15-1\n  * cleanup leftovers from removing unused xmlrpc endpoint\n  * Fix issues with 'http proxy' not being used by reposync in some cases\n\nspacewalk-certs-tools:\n\n- Version 4.3.14-1\n  * traditional stack bootstrap: install product packages (bsc#1201142)\n  * display messages to restart services after certificate change\n  * improve CA Chain checking by comparing authorityKeyIdentifier\n    with subjectKeyIdentifier\n\nspacewalk-client-tools:\n\n- Version 4.3.11-1\n  * Update translation strings\n\nspacewalk-config:\n\n- Version 4.3.9-1\n  * fix posttrans error 'RHN-ORG-TRUSTED-SSL-CERT' not found\n\nspacewalk-java:\n\n- Version 4.3.35-1\n  * Modify parameter type when communicating with the search server (bsc#1187028)\n  * Fix hibernate error on deleting an image with delta\n  * Changed logout method to POST on HTTP API (bsc#1199663)\n  * Turned API information endpoints public (bsc#1199817)\n  * Fix typo and ordering of JSON over HTTP API example scripts\n  * Improved log handling in HTTP API (bsc#1199662)\n  * set Channel GPG Key info from SCC data\n  * set GPG Key Url as channel pillar data (bsc#1199984)\n  * new API endpoint for addErrataUpdate, that take \n    multiple servers as argument\n  * Move ImageSync pillars to database (bsc#1199157)\n  * Fix conflict when system is assigned to multiple instances of\n    the same formula (bsc#1194394)\n  * Fix initial profile and build host on Image Build page (bsc#1199659)\n  * Convert formula integer values when upgrading (bsc#1200347)\n  * Cleanup salt known_hosts when generating proxy containers config\n  * Modify proxy containers configuration files set output\n  * Change proxy containers config to tarball with yaml files\n  * Fixed date format on scheduler related messages (bsc#1195455)\n  * Improved dropdown layout handling\n  * Fix download CSV\n  * Hide authentication data in PAYG UI (bsc#1199679)\n  * Clean grub2 reinstall entry in autoyast snippet (bsc#1199950)\n  * Show reboot alert message on all system detail pages (bsc#1199779)\n  * Show patch as installed in CVE Audit even if successor patch affects\n    additional packages (bsc#1199646)\n  * Fix refresh action confirmation message when no system is selected\n  * Fix Intenal Server Error when URI contains invalid sysid (bsc#1186011)\n  * Fix notification message on system properties update to ensure\n    style consistency (bsc#1172179)\n  * Fix containerized proxy configuration machine name\n  * Improve CLM channel cloning performance (bsc#1199523)\n  * Keep the websocket connections alive with ping/pong frames (bsc#1199874)\n  * add detection of Ubuntu 22.04\n  * fix missing remote command history events for big output (bsc#1199656)\n  * fix api log message references the wrong user (bsc#1179962)\n  * Consistently use conf value for SPA engine timeout\n  * fix download of packages with caret sign in the version due\n    to missing url decode\n  * Add specific requirement for Cobbler 3.2.1 to not conflict with Leap 15.4\n  * Fix send login(s) and send password actions to avoid user\n    enumeration (bsc#1199629) (CVE-2022-31248)\n\nspacewalk-search:\n\n- Version 4.3.6-1\n  * Add method to handle session id as String\n  * Migrated from log4j1.x.x to log4j2.x.x\n  * update ivy development files\n\nspacewalk-setup:\n\n- Version 4.3.10-1\n  * spacewalk-setup-cobbler assumes /etc/apache2/conf.d now as a\n    default instead of /etc/httpd/conf.d (bsc#1198356)\n  * Allow alternative usage of perl-Net-LibIDN2.\n\nspacewalk-utils:\n\n- Version 4.3.13-1\n  * change gpg key urls to file urls where possible\n  * spacewalk-hostname-rename now correctly replaces the hostname for\n    the mgr-sync configuration file (bsc#1198356)\n  * spacewalk-hostname-rename now utilizes the '--apache2-conf-dir'\n    flag for spacewalk-setup-cobbler\n  * Add repositories for Ubuntu 22.04 LTS\n  * Add AlmaLinux 9 and Oracle Linux 9 to spacewalk-common-channels\n  * Add missing SLES 15 SP4 client tools repositories to\n    spacewalk-common-channels.ini\n  * add deprecation warning for spacewalk-clone-by-date\n  * Add EPEL8 for Almalinux 8 and Rocky 8 in spacewalk-common-channels.ini\n  * openSUSE Leap 15.4 repositories\n\nspacewalk-web:\n\n- Version 4.3.23-1\n  * Update the version for the WebUI\n  * Fix initial profile and build host on Image Build page (bsc#1199659)\n  * Handle multi line error messages in proxy containers config creation\n  * Hide authentication data in PAYG UI (bsc#1199679)\n  * add textarea to formulas\n  * Consistently use conf value for SPA engine timeout\n  * Remove nodejs-packaging as a build requirement\n  * Update translation strings\n\nsubscription-matcher:\n\n- Declare the LICENSE file as license and not doc\n\nsusemanager:\n\n- Version 4.3.18-1\n  * Add missing python3-gnupg to Debian10 bootstrap repo (bsc#1201842)\n  * Add clients tool product to generate \n    bootstrap repo on OpenSUSE 15.x (bsc#1201189)\n  * Add Oracle Linux 9 bootstrap repositories for Uyuni\n  * Add AlmaLinux 9 bootstrap repositories for Uyuni\n  * Add Red Hat Enterprise Linux 9 repositories for Uyuni\n  * Make the Salt Bundle optional for bootstrap repositories\n    for Debian 9 and SUSE Manager Proxy 4.2\n  * Enable bootstrapping for Ubuntu 22.04 LTS\n  * fix pg-migrate-x-to-y.sh comment: migration without creating backup \n    use -f option\n  * bootstrap repo: set optional packages\n  * Add python3-contextvars and python3-immutables to missing bootstrap repos (bsc#1200606)\n  * Update server-migrator to dist-upgrade to openSUSE 15.4\n\nsusemanager-build-keys:\n\n- Version 15.4.3\n  * Add Uyuni Client Tools key\n  * Install keys for Client Tools Channels in salt filesystem to\n    be able to deploy them to clients\n  * Add openEuler 22.03 key\n  * Add AlmaLinux 9 key\n  * Add Oracle Linux 9 keys\n  * RPM-GPG-KEY-openEuler\n  * RPM-GPG-KEY-AlmaLinux-9\n  * RPM-GPG-KEY-oracle\n  * RPM-GPG-KEY-oracle-backup\n\nsusemanager-docs_en:\n\n- Described disabling local repositories in Client Configuration \n  Guide\n- Remove misleading installation screen shots in the Installation \n  and Upgrade Guide (bsc#1201411)\n- Fixed Ubuntu 18 Client registration in Client Configuration Guide \n  (bsc#1201224)\n- Removed sle-module-pythonX in VM Installation chapter of \n  Installation and Upgrade Guide because SUSE Manager 4.3 does not \n  require it\n- In the Custom Channel section of the Administration Guide add a \n  note about synchronizing repositories regularly\n- Removed SUSE Linux Enterprise 11 from the list of supported \n  client systems\n- Update section about changing SSL certificates\n- Added ports 1232 and 1233 in the Ports section of the Installation \n  and Upgrade Guide; required for Salt SSH Push (bsc#1200532)\n- Fixed 'fast' switch ('-f') of the database migration script in \n  Installation and Upgrade Guide\n- Updated Virtualization chapter in Client Configuration Guide; more \n  on limitation other than Xen and KVM\n- Added information about registering RHEL clients on Azure in the \n  Import Entitlements and Certificates section of the Client \n  Configuration Guide (bsc#1198944)\n- Fixed VisibleIf documentation in Formula section of the Salt Guide\n- Added note about importing CA certifcate in Installation and Upgrade \n  Guide (bsc#1198358)\n- Documented defining monitored targets using file-based service \n  discovery provided in the Prometheus formula in the Salt Guide\n- In Supported Clients and Features chapter in Client Configuration \n  Guide, remove SUSE Linux Enterprise 11 (bsc#1199147)\n- Improve traditional client deprecation statement in Client \n  Configuration Guide (bsc#1199714) \n\nsusemanager-schema:\n\n- Version 4.3.13-1\n  * update GPG key urls in channels set by spacewalk-common-channels\n  * add gpg key info to suseProductSCCRepository (bsc#1199984)\n  * Move ImageSync pillars to database (bsc#1199157)\n\nsusemanager-sls:\n\n- Version 4.3.24-1\n  * Fix issue bootstrap issue with Debian 9 because missing python3-contextvars (bsc#1201782)\n  * Fix deploy of SLE Micro CA Certificate (bsc#1200276)\n  * disable local repos before bootstrap and at highstate (bsc#1191925)\n  * deploy GPG keys to the clients and define trust in channels (bsc#1199984)\n  * Enable basic support for Ubuntu 22.04\n  * Add port parameter to mgrutil.remove_ssh_known_host\n  * Prevent possible tracebacks on calling module.run from mgrcompat\n    by setting proper globals with using LazyLoader\n  * Fix bootstrapping for Ubuntu 18.04 with classic Salt package (bsc#1200707)\n  * create CA certificate symlink on Proxies which might get lost due\n    to de-installation of the ca package\n\nuyuni-common-libs:\n\n- Version 4.3.5-1\n  * Fix reposync issue about 'rpm.hdr' object has no attribute 'get'\n\nvirtual-host-gatherer:\n\n- Declare the LICENSE file as license and not doc\n\nwoodstox:\n\n- Declare the LICENSE file as license and not doc\n\nxmlpull-api:\n\n- Declare the LICENSE file as license and not doc\n\nHow to apply this update:\n\n1. Log in as root user to the SUSE Manager server.\n2. Stop the Spacewalk service:\n`spacewalk-service stop`\n3. Apply the patch using either zypper patch or YaST Online Update.\n4. Start the Spacewalk service:\n`spacewalk-service start`\n","status":"published","published":"2022-09-08T08:04:43Z","modified":"2026-02-04T04:34:06.919585Z","updated_at":"2026-11-02T15:53:50.965375Z"}]}}