{"id":"CVE-2023-31582","aliases":["CLSA-2026-1784769507","CLSA-2026-1793123186","DEBIAN-CVE-2023-31582","EUVD-2023-2687","GHSA-7g24-qg88-p43q","SUSE-SU-2024:0485-1","UBUNTU-CVE-2023-31582"],"status":"published","title":"jose4j uses weak cryptographic algorithm","description":"jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00766,"percentile":0.55933,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-327","CWE-331"],"published":"2023-10-24T00:00:00Z","modified":"2026-10-27T19:30:05Z","fixes":[{"ecosystem":"Maven","package":"org.bitbucket.b_c:jose4j","fixed_in":["0.9.3"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:13","package":"libjose4j-java","fixed_in":["0.7.12-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libjose4j-java","fixed_in":["0.7.12-2"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.bitbucket.b_c:jose4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.3"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.bitbucket.b_c:jose4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.8.0"},{"fixed":"0.8.0-tuxcare.1"}]}],"versions":["0.8.0"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.bitbucket.b_c:jose4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.7.9"},{"fixed":"0.7.9-tuxcare.1"}]}],"versions":["0.7.9"],"bundled":2},{"source":"osv","ecosystem":"Debian:13","package":"libjose4j-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.12-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libjose4j-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.12-2"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.bitbucket.b_c:jose4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.3"}]}],"versions":["0.3.6","0.3.7","0.3.8","0.3.9","0.4.0","0.4.1","0.4.2","0.4.3","0.4.4","0.5.0","0.5.1","0.5.2","0.5.3","0.5.4","0.5.5","0.5.6","0.5.7","0.5.8","0.6.0","0.6.1","0.6.2","0.6.3","0.6.4","0.6.5","0.7.0","0.7.1","0.7.10","0.7.11","0.7.12","0.7.2","0.7.3","0.7.4","0.7.5","0.7.6","0.7.7","0.7.8","0.7.9","0.8.0","0.9.0","0.9.1","0.9.2"]},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"mgr-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.8-150400.3.12.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"patterns-suse-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3-150400.5.9.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.26-150400.3.33.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.27-150400.3.38.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"spacewalk-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.22-150400.3.25.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.18-150400.3.24.7"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.37-150400.3.39.7"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"susemanager-build-keys","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.4.10-150400.3.23.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-150400.5.39.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"grafana-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.0-150400.3.15.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"inter-server-sync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.2-150400.3.27.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"jose4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.1-150400.3.6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"liberate-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.0-150400.10.3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"patterns-suse-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3-150400.5.9.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"prometheus-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-150400.3.6.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"prometheus-postgres_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.1-150400.3.9.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"saltboot-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.1701196218.b6b8ca1-150400.3.15.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.26-150400.3.33.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.27-150400.3.38.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.22-150400.3.25.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.18-150400.3.24.7"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.71-150400.3.74.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.19-150400.3.30.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.19-150400.3.21.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.37-150400.3.39.7"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"subscription-matcher","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35-150400.3.19.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"supportutils-plugin-susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.10-150400.3.18.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.34-150400.3.45.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager-build-keys","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.4.10-150400.3.23.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager-docs_en","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3-150400.9.53.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.24-150400.3.36.7"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager-sls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.40-150400.3.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager-sync-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.16-150400.3.22.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"uyuni-reportdb-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.9-150400.3.12.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libjose4j-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.7.7-2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libjose4j-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.7.12-1","0.7.12-2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libjose4j-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9.6-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libjose4j-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9.6-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libjose4j-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9.6-1"]}],"products":[{"vendor":"jose4j_project","product":"jose4j"}],"references":[{"url":"https://bitbucket.org/b_c/jose4j/issues/203/insecure-support-of-setting-pbe-less-then","tags":["x_transferred","Issue Tracking","report","web"]},{"url":"https://github.com/KANIXB/JWTIssues/blob/main/jose4j%20issue.md","tags":["x_transferred","Third Party Advisory","advisory","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-31582","tags":["advisory"]},{"url":"https://bitbucket.org/b_c/jose4j/commits/1929fe3","tags":["web"]},{"url":"https://github.com/advisories/GHSA-7g24-qg88-p43q"},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-31582","tags":["advisory"]},{"url":"https://bitbucket.org/b_c/jose4j","tags":["package"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240485-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1170848","tags":["report"]},{"url":"https://bugzilla.suse.com/1210911","tags":["report"]},{"url":"https://bugzilla.suse.com/1211254","tags":["report"]},{"url":"https://bugzilla.suse.com/1211560","tags":["report"]},{"url":"https://bugzilla.suse.com/1211912","tags":["report"]},{"url":"https://bugzilla.suse.com/1213079","tags":["report"]},{"url":"https://bugzilla.suse.com/1213507","tags":["report"]},{"url":"https://bugzilla.suse.com/1213738","tags":["report"]},{"url":"https://bugzilla.suse.com/1213981","tags":["report"]},{"url":"https://bugzilla.suse.com/1214077","tags":["report"]},{"url":"https://bugzilla.suse.com/1214791","tags":["report"]},{"url":"https://bugzilla.suse.com/1215166","tags":["report"]},{"url":"https://bugzilla.suse.com/1215514","tags":["report"]},{"url":"https://bugzilla.suse.com/1215769","tags":["report"]},{"url":"https://bugzilla.suse.com/1215810","tags":["report"]},{"url":"https://bugzilla.suse.com/1215813","tags":["report"]},{"url":"https://bugzilla.suse.com/1215982","tags":["report"]},{"url":"https://bugzilla.suse.com/1216114","tags":["report"]},{"url":"https://bugzilla.suse.com/1216394","tags":["report"]},{"url":"https://bugzilla.suse.com/1216437","tags":["report"]},{"url":"https://bugzilla.suse.com/1216550","tags":["report"]},{"url":"https://bugzilla.suse.com/1216609","tags":["report"]},{"url":"https://bugzilla.suse.com/1216657","tags":["report"]},{"url":"https://bugzilla.suse.com/1216753","tags":["report"]},{"url":"https://bugzilla.suse.com/1216781","tags":["report"]},{"url":"https://bugzilla.suse.com/1216988","tags":["report"]},{"url":"https://bugzilla.suse.com/1217069","tags":["report"]},{"url":"https://bugzilla.suse.com/1217209","tags":["report"]},{"url":"https://bugzilla.suse.com/1217588","tags":["report"]},{"url":"https://bugzilla.suse.com/1217784","tags":["report"]},{"url":"https://bugzilla.suse.com/1217869","tags":["report"]},{"url":"https://bugzilla.suse.com/1218019","tags":["report"]},{"url":"https://bugzilla.suse.com/1218074","tags":["report"]},{"url":"https://bugzilla.suse.com/1218075","tags":["report"]},{"url":"https://bugzilla.suse.com/1218089","tags":["report"]},{"url":"https://bugzilla.suse.com/1218094","tags":["report"]},{"url":"https://bugzilla.suse.com/1218146","tags":["report"]},{"url":"https://bugzilla.suse.com/1218490","tags":["report"]},{"url":"https://bugzilla.suse.com/1218615","tags":["report"]},{"url":"https://bugzilla.suse.com/1218669","tags":["report"]},{"url":"https://bugzilla.suse.com/1218837","tags":["report"]},{"url":"https://bugzilla.suse.com/1218849","tags":["report"]},{"url":"https://bugzilla.suse.com/1219151","tags":["report"]},{"url":"https://bugzilla.suse.com/1219449","tags":["report"]},{"url":"https://bugzilla.suse.com/1219577","tags":["report"]},{"url":"https://bugzilla.suse.com/1219850","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-31582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32189","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-31582","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-31582","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-31582","description":"jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less.","status":"published","published":"2023-10-24T00:00:00Z","modified":"2024-09-11T18:37:34.066Z","updated_at":"2026-11-02T14:35:27.430605Z"}],"euvd":[{"id":"EUVD-2023-2687","description":"jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less.","status":"published","published":"2023-10-24T00:00:00Z","modified":"2024-09-11T18:37:34Z","updated_at":"2026-11-03T00:55:57.81164Z"}],"ghsa":[{"id":"GHSA-7g24-qg88-p43q","title":"jose4j uses weak cryptographic algorithm","description":"jose4j before v0.9.3 allows attackers to set a low PBES2 iteration count of 1000 or less.","status":"published","published":"2023-10-25T18:32:21Z","modified":"2023-11-10T05:04:21Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-327","CWE-331"],"updated_at":"2026-11-02T14:37:19.438667Z"}],"nvd":[{"id":"CVE-2023-31582","description":"jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less.","status":"published","published":"2023-10-25T18:17:27.777Z","modified":"2026-06-17T05:57:12.1Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-331"],"updated_at":"2026-11-02T14:08:39.058878Z"}],"osv":[{"id":"CVE-2023-31582","description":"jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less.","status":"published","published":"2023-10-25T18:17:27.777Z","modified":"2026-03-14T12:06:58.971228Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:31.790231Z"},{"id":"DEBIAN-CVE-2023-31582","description":"jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less.","status":"published","published":"2023-10-25T18:17:27.777Z","modified":"2026-10-26T18:00:56.768379883Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:39.679062Z"},{"id":"GHSA-7g24-qg88-p43q","title":"jose4j uses weak cryptographic algorithm","description":"jose4j before v0.9.3 allows attackers to set a low PBES2 iteration count of 1000 or less.","status":"published","published":"2023-10-25T18:32:21Z","modified":"2026-09-10T03:49:58.667384204Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-327","CWE-331"],"updated_at":"2026-11-02T15:46:41.002603Z"},{"id":"UBUNTU-CVE-2023-31582","description":"jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less.","status":"published","published":"2023-10-25T18:17:00Z","modified":"2026-10-17T12:57:18.169224937Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T16:54:20.997471Z"},{"id":"CLSA-2026-1784769507","title":"TuxCare security update for org.bitbucket.b_c:jose4j (3 CVEs)","description":"TuxCare rebuilt org.bitbucket.b_c:jose4j to address 3 CVEs. Fixed in 0.8.0-tuxcare.1.","status":"published","published":"2026-08-04T14:52:47Z","modified":"2026-10-19T19:28:22.656811011Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1793123186","title":"TuxCare security update for org.bitbucket.b_c:jose4j (2 CVEs)","description":"TuxCare rebuilt org.bitbucket.b_c:jose4j to address 2 CVEs. Fixed in 0.7.9-tuxcare.1.","status":"published","published":"2026-10-27T17:46:26Z","modified":"2026-10-27T19:30:05.32678024Z","updated_at":"2026-11-02T15:43:55.34846Z"},{"id":"SUSE-SU-2024:0485-1","title":"Security update for SUSE Manager Server 4.3","description":"\nThis update fixes the following issues:\n\ncobbler:\n\n- Build the appendline correctly for RHEL-family \u003c= 9 (bsc#1216437)\n- Notify to 'systemd' when cobblerd startup is finished (bsc#1215982)\n- Enable ppc64(le) buildiso support (bsc#1214077)\n\ngrafana-formula:\n\n- Version 0.10.0\n  * Replace legacy message queue metrics with Salt queue metrics\n  * Grafana formula should not be supported in a Proxy/Retail\n\ninter-server-sync:\n\n- Version 0.3.2-1\n  * Fix conflict in rhndistchannelmap (bsc#1216114)\n\njose4j:\n\n- CVE-2023-31582: Insecure Password-Based Encryption Iteration Count (bsc#1216609)\n\nliberate-formula:\n\n- Version 0.1.0\n  * Provide liberate-formula, a formula for converting a system to SUSE Liberty Linux\n\npatterns-suse-manager:\n\n- Add liberate-formula to the required packages for the server\n  to get it installed by default\n\nprometheus-formula:\n\n- Version 0.8.0\n  * Fix federation endpoint\n  * Add remote write configuration\n  * Add group filtering for service discovery relabeling\n    configuration\n- Version 0.7.1\n  * Fix PrometheusNotIngestingSamples false positive alerts\n    (bsc#1216550)\n\nprometheus-postgres_exporter:\n\n- Do not build debug if RHEL \u003e= 8\n- Do not strip if SUSE Linux Enterprise 15 SP3\n- Build at least with with Go \u003e= 1.18 on RHEL\n- Build with Go \u003e= 1.20 elsewhere\n\nsaltboot-formula:\n\n- Update to version 0.1.1701196218.b6b8ca1\n  * Remove f-formating to be compatible with python \u003c 3.6\n  * Update packaging not to package salt directories\n- Update to version 0.1.1692188980.9aa0455\n\nspacecmd:\n\n- Version 4.3.26-1\n  * Update translation strings\n\nspacewalk-backend:\n\n- Version 4.3.27-1\n  * Fix issue in 'spacewalk-repo-sync' when RPM packages contains files with\n    size greater than 4GB (bsc#1219151)\n- Version 4.3.26-1\n  * Fix decompressing and renaming bzip2 comps files in reposync\n  * Update query to the new credentials structure\n  * Remove normalize_orphan_vendor_packages and move it to taskomatic (bsc#1216781)\n  * Skip syncing packages with incorrect metadata (bsc#1213738)\n  * Update translation strings\n\nspacewalk-certs-tools:\n\n- version 4.3.22-1\n  * Skip deploying the CA into the Salt directory on proxies (bsc#1219850)\n- Version 4.3.21-1\n  * Deploy the CA certificate also into the Salt filesystem (bsc#1219577)\n- Version 4.3.20-1\n  * Handle server keys in PKCS8 format in mgr-ssl-cert-setup (bsc#1218615)\n  * Include reboot info beacon in the bootstrap script for transactional systems (bsc#1217588)\n\nspacewalk-client-tools:\n\n- Version 4.3.18-1\n  * Update translation strings\n\nspacewalk-java:\n\n- Version 4.3.71-1\n  * Generate server SSH key also when bootstrapping regular Minions (bsc#1219449)\n- Version 4.3.70-1\n  * Fix the use of page size preference in systems and packages lists (bsc#1217209)\n  * Fix issue with disabling token check not working (bsc#1218669)\n  * Enforce snakeyaml version requirement (bsc#1215166)\n  * Improve the performance of paginated queries when syncing the\n    reporting database (bsc#1211912, bsc#1213079)\n  * Do not require entitlement for Pay-as-you-go SUSE Linux Enterprise Server for SAP (bsc#1217069)\n  * Use the base product file to show the correct SUSE Manager\n    product in the subscription matching results page\n  * Do not require entitlements if SUSE Manager is Pay-as-you-go\n  * Exclude SUSE Manager from subscription matching if it's Pay-as-you-go\n  * Refactor Credentials to a proper class hierarchy\n  * Fix unit test about duplicated packages\n  * Prevent installation of packages with same name\n    in a single action (bsc#1214791)\n  * When canceling an action which has prerequisites, return hints to\n    get the first action id which can be canceled (bsc#1216988)\n  * Fix exception when removing a Debian package (bsc#1216781)\n  * Fix XSS in taskomatic XML RPC handler (bsc#1210911)\n  * Improve logging for Product Migration (bsc#1218490)\n  * Add only 1 IP for Cloud RMT Host in /etc/hosts\n  * Change org for orphan vendor packages that an admin can delete (bsc#1216781)\n  * Expose the monitoring data for the Salt queue handling the Salt results\n  * Provide total number of CPUs for SUSE Linux Enterprise Micro systems to subscription matcher\n    when it is not used as hypervisor to match vCore subscriptions correctly\n    (bsc#1218074)\n  * Try to download compressed Ubuntu USN database\n  * Add user information to system organization transfer message (bsc#1216753)\n  * CVE-2023-32189: Fix issue with Salt SSH keys for Salt SSH Minions (bsc#1170848)\n  * Add notification in daily email in addition to in SUSE Manager home page when\n    SUSE Manager Pay-as-you-go is not compliant\n  * Fix apidoc link from #top to $call.name (bsc#1213507)\n  * Add config option to disable remote commands from web UI (bsc#1217869)\n  * Address high rating Sonar issues\n  * Refactor SUSE Customer Center registration flow\n  * Avoid blocking Taskomatic thread when waiting for queued action (bsc#1211560)\n  * Fix modify kickstart profile when using 'Always newest tree' option (bsc#1215813)\n  * Configure reboot method for SUSE Linux Enterprise Micro when applying bootstrap state (bsc#1213981)\n  * Handle not existing known_host file in permission check\n  * Fix handling of proxy ssh public keys\n  * Include reboot required indication for non-Suse distros\n\nspacewalk-setup:\n\n- Version 4.3.19-1\n  * Update query to the new credentials structure\n  * Fix setting SUSE Customer Center password during setup\n\nspacewalk-utils:\n\n- Version 4.3.19-1\n  * Add SUSE Linux Enterprise Micro 5.4 and 5.5 to spacewalk-commons-channels\n\nspacewalk-web:\n\n- Version 4.3.37-1\n  * Fix the use of page size preference in systems and packages lists (bsc#1217209)\n  * Fix issue displaying Ansible playbook name (bsc#1216657) \n  * Add support for `PaygNotCompliantWarning` notification\n  * Bump web.version to 4.3.11\n\nsubscription-matcher:\n\n- Version 0.35\n  * Added missing part number\n- Version 0.34\n  * Enabled support for Long Term Service Pack Support subscriptions (bsc#1218075)\n  * Added SUSE Linux Enterprise Micro vCore handling (bsc#1218074)\n  * Added new SKUs and new bundles\n\nsupportutils-plugin-susemanager:\n\n- Version 4.3.10-1\n  * Update query to the new credentials structure\n\nsusemanager:\n\n- Version 4.3.34-1\n  * Rename Open Enterprise Server label to OES23.4 (bsc#1215514)\n  * Verify in Yast FQDN with name returned via DNS reverse lookup\n  * CVE-2023-32189: Fix issue with Salt SSH keys for Salt SSH Minions (bsc#1170848)\n\nsusemanager-build-keys:\n\n- Version 15.4.10\n  * Add new Almalinux 8 GPG Key (bsc#1218849)\n  * Refresh extended Uyuni GPG public key\n\nsusemanager-docs_en:\n\n- Removed obsolete traditional to Salt migration documentation from \n  the System Types section of the Client Configuration Guide and \n  updated the Migrate traditional clients to Salt clients section\n- Fixed navigation bar of Client Configuration Guide (bsc#1218089)\n- Added openSUSE Leap to Supported Features navigation list in Client\n  Configuration Guide (bsc#1218094)\n- Described new monitoring metrics for Salt queue in Administration\n  Guide\n- Fixed xrefs for internal book references\n- Removed mentioning that CVE number for CVE auditing is optional\n  (bsc#1218019)\n- Corrected channel names for CentOS 7 Updates and Extras in CentOS \n  Client Configuration Guide\n- Documented bootstrap settings for SUSE Linux Enterprise Micro in\n  Client Configuration Guide (bsc#1216394)\n- Corrected command mgr-push to mgrpush in Administration Guide \n  (bsc#1215810)\n- Updated Red Hat OVAL data URL and file in CentOS Clients Registration\n  in Client Configution Guide\n- Added Pay-as-you-go for Azure documentation to the Specialized Guides\n  book\n- Added Pay-as-you-go limitations chapter to Pay-as-you-go Guide\n- Removed Ubuntu 18.04 from the list of supported clients\n- Fixed file location in Custom Salt Formulas section of Salt Guide\n- Documented using Virtualization Host formula in Client Configuration\n\nsusemanager-schema:\n\n- Version 4.3.24-1\n  * Refactor susecredentials to support the new hierarchy\n  * Improve performance of System (bsc#1211254)\n  * Change schedule of system-profile-refresh to run on the 2nd Saturday\n    of a month to not collide with normal working times (bsc#1215769)\n\nsusemanager-sls:\n\n- version 4.3.40-1\n  * Remove automatic reboot from transactional systems bootstrap (bsc#1218146)\n- Version 4.3.39-1\n  * Change certs/RHN-ORG-TRUSTED-SSL-CERT from symlink into a real file (bsc#1219577)\n- Version 4.3.38-1\n  * Improve Pay-as-you-go instance detection (bsc#1217784)\n  * CVE-2023-32189: Fix issue with Salt SSH keys for Salt SSH Minions (bsc#1170848)\n  * Configure reboot method for SUSE Linux Enterprise Micro when applying bootstrap state (bsc#1213981)\n  * Include reboot required indication for non SUSE distros\n\nsusemanager-sync-data:\n\n- Version 4.3.16-1\n  * Fix OES 23.4 internal name (bsc#1218837)\n- Version 4.3.15-1\n  * Update release status and repository description of Open Enterprise Server 23.4 (bsc#1215514)\n  * Add new SUSE Liberty Linux 7 Long Term Service Pack Support channel families\n  * Rename Red Hat Enterprise Linux and Liberty 8 Base product to remove EOL CentOS 8 from the name\n\nuyuni-reportdb-schema:\n\n- Version 4.3.9-1\n  * Provide reportdb upgrade schema path structure\n\nHow to apply this update:\n\n1. Log in as root user to the SUSE Manager Server.\n2. Stop the Spacewalk service:\n`spacewalk-service stop`\n3. Apply the patch using either zypper patch or YaST Online Update.\n4. Start the Spacewalk service:\n`spacewalk-service start`\n","status":"published","published":"2024-02-15T13:35:13Z","modified":"2026-02-04T03:18:32.592881Z","updated_at":"2026-11-02T15:53:54.239786Z"}]}}