{"id":"CVE-2023-32189","aliases":["EUVD-2023-36454","GHSA-6hvm-8v29-cgp8","SUSE-SU-2024:0485-1","SUSE-SU-2024:0513-1"],"status":"published","title":"Insecure handling SSH key in SUSE Manager when bootstrapping new clients","description":"Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys","severity":{"version":"4.0","score":6.4,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00146,"percentile":0.03879,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-639"],"published":"2024-02-15T13:35:13Z","modified":"2026-06-17T05:58:16Z","affected":[{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"mgr-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.8-150400.3.12.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"patterns-suse-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3-150400.5.9.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.26-150400.3.33.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.27-150400.3.38.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"spacewalk-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.22-150400.3.25.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.18-150400.3.24.7"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.37-150400.3.39.7"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"susemanager-build-keys","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.4.10-150400.3.23.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-150400.5.39.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"grafana-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.0-150400.3.15.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"inter-server-sync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.2-150400.3.27.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"jose4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.1-150400.3.6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"liberate-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.0-150400.10.3.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"patterns-suse-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3-150400.5.9.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"prometheus-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-150400.3.6.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"prometheus-postgres_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.1-150400.3.9.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"saltboot-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.1701196218.b6b8ca1-150400.3.15.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.26-150400.3.33.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.27-150400.3.38.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.22-150400.3.25.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.18-150400.3.24.7"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.71-150400.3.74.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.19-150400.3.30.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.19-150400.3.21.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.37-150400.3.39.7"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"subscription-matcher","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35-150400.3.19.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"supportutils-plugin-susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.10-150400.3.18.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.34-150400.3.45.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager-build-keys","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.4.10-150400.3.23.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager-docs_en","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3-150400.9.53.5"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.24-150400.3.36.7"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager-sls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.40-150400.3.44.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager-sync-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.16-150400.3.22.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"uyuni-reportdb-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.9-150400.3.12.7"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"release-notes-susemanager-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.11-150400.3.79.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"release-notes-susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.11-150400.3.100.1"}]}],"bundled":3}],"products":[{"vendor":"suse","product":"suse manager server module 4.3"}],"references":[{"url":"https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32189"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32189"},{"url":"https://github.com/advisories/GHSA-6hvm-8v29-cgp8"},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240485-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1170848","tags":["report"]},{"url":"https://bugzilla.suse.com/1210911","tags":["report"]},{"url":"https://bugzilla.suse.com/1211254","tags":["report"]},{"url":"https://bugzilla.suse.com/1211560","tags":["report"]},{"url":"https://bugzilla.suse.com/1211912","tags":["report"]},{"url":"https://bugzilla.suse.com/1213079","tags":["report"]},{"url":"https://bugzilla.suse.com/1213507","tags":["report"]},{"url":"https://bugzilla.suse.com/1213738","tags":["report"]},{"url":"https://bugzilla.suse.com/1213981","tags":["report"]},{"url":"https://bugzilla.suse.com/1214077","tags":["report"]},{"url":"https://bugzilla.suse.com/1214791","tags":["report"]},{"url":"https://bugzilla.suse.com/1215166","tags":["report"]},{"url":"https://bugzilla.suse.com/1215514","tags":["report"]},{"url":"https://bugzilla.suse.com/1215769","tags":["report"]},{"url":"https://bugzilla.suse.com/1215810","tags":["report"]},{"url":"https://bugzilla.suse.com/1215813","tags":["report"]},{"url":"https://bugzilla.suse.com/1215982","tags":["report"]},{"url":"https://bugzilla.suse.com/1216114","tags":["report"]},{"url":"https://bugzilla.suse.com/1216394","tags":["report"]},{"url":"https://bugzilla.suse.com/1216437","tags":["report"]},{"url":"https://bugzilla.suse.com/1216550","tags":["report"]},{"url":"https://bugzilla.suse.com/1216609","tags":["report"]},{"url":"https://bugzilla.suse.com/1216657","tags":["report"]},{"url":"https://bugzilla.suse.com/1216753","tags":["report"]},{"url":"https://bugzilla.suse.com/1216781","tags":["report"]},{"url":"https://bugzilla.suse.com/1216988","tags":["report"]},{"url":"https://bugzilla.suse.com/1217069","tags":["report"]},{"url":"https://bugzilla.suse.com/1217209","tags":["report"]},{"url":"https://bugzilla.suse.com/1217588","tags":["report"]},{"url":"https://bugzilla.suse.com/1217784","tags":["report"]},{"url":"https://bugzilla.suse.com/1217869","tags":["report"]},{"url":"https://bugzilla.suse.com/1218019","tags":["report"]},{"url":"https://bugzilla.suse.com/1218074","tags":["report"]},{"url":"https://bugzilla.suse.com/1218075","tags":["report"]},{"url":"https://bugzilla.suse.com/1218089","tags":["report"]},{"url":"https://bugzilla.suse.com/1218094","tags":["report"]},{"url":"https://bugzilla.suse.com/1218146","tags":["report"]},{"url":"https://bugzilla.suse.com/1218490","tags":["report"]},{"url":"https://bugzilla.suse.com/1218615","tags":["report"]},{"url":"https://bugzilla.suse.com/1218669","tags":["report"]},{"url":"https://bugzilla.suse.com/1218837","tags":["report"]},{"url":"https://bugzilla.suse.com/1218849","tags":["report"]},{"url":"https://bugzilla.suse.com/1219151","tags":["report"]},{"url":"https://bugzilla.suse.com/1219449","tags":["report"]},{"url":"https://bugzilla.suse.com/1219577","tags":["report"]},{"url":"https://bugzilla.suse.com/1219850","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-31582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32189","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240513-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-22231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-22232","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-32189","title":"Insecure handling SSH key in SUSE Manager when bootstrapping new clients","description":"Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys","status":"published","published":"2024-10-16T13:48:39.236Z","modified":"2024-10-29T19:27:29.996Z","cvss":[{"version":"4.0","score":6.4,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H","level":"medium","assessor":"cna"},{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-639"],"updated_at":"2026-11-02T14:35:29.381004Z"}],"euvd":[{"id":"EUVD-2023-36454","description":"Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys","status":"published","published":"2024-10-16T13:48:39Z","modified":"2024-10-29T19:27:29Z","cvss":[{"version":"4.0","score":6.4,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H","level":"medium"}],"updated_at":"2026-11-03T00:05:14.718275Z"}],"ghsa":[{"id":"GHSA-6hvm-8v29-cgp8","title":"Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially...","description":"Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys","status":"published","published":"2024-10-16T15:32:07Z","modified":"2024-10-29T21:30:49Z","cvss":[{"version":"4.0","score":6.4,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-639"],"updated_at":"2026-11-02T14:58:38.744187Z"}],"nvd":[{"id":"CVE-2023-32189","description":"Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys","status":"published","published":"2024-10-16T14:15:04.14Z","modified":"2026-06-17T05:58:16.817Z","cvss":[{"version":"4.0","score":6.4,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-639"],"updated_at":"2026-11-02T14:09:19.052418Z"}],"osv":[{"id":"SUSE-SU-2024:0485-1","title":"Security update for SUSE Manager Server 4.3","description":"\nThis update fixes the following issues:\n\ncobbler:\n\n- Build the appendline correctly for RHEL-family \u003c= 9 (bsc#1216437)\n- Notify to 'systemd' when cobblerd startup is finished (bsc#1215982)\n- Enable ppc64(le) buildiso support (bsc#1214077)\n\ngrafana-formula:\n\n- Version 0.10.0\n  * Replace legacy message queue metrics with Salt queue metrics\n  * Grafana formula should not be supported in a Proxy/Retail\n\ninter-server-sync:\n\n- Version 0.3.2-1\n  * Fix conflict in rhndistchannelmap (bsc#1216114)\n\njose4j:\n\n- CVE-2023-31582: Insecure Password-Based Encryption Iteration Count (bsc#1216609)\n\nliberate-formula:\n\n- Version 0.1.0\n  * Provide liberate-formula, a formula for converting a system to SUSE Liberty Linux\n\npatterns-suse-manager:\n\n- Add liberate-formula to the required packages for the server\n  to get it installed by default\n\nprometheus-formula:\n\n- Version 0.8.0\n  * Fix federation endpoint\n  * Add remote write configuration\n  * Add group filtering for service discovery relabeling\n    configuration\n- Version 0.7.1\n  * Fix PrometheusNotIngestingSamples false positive alerts\n    (bsc#1216550)\n\nprometheus-postgres_exporter:\n\n- Do not build debug if RHEL \u003e= 8\n- Do not strip if SUSE Linux Enterprise 15 SP3\n- Build at least with with Go \u003e= 1.18 on RHEL\n- Build with Go \u003e= 1.20 elsewhere\n\nsaltboot-formula:\n\n- Update to version 0.1.1701196218.b6b8ca1\n  * Remove f-formating to be compatible with python \u003c 3.6\n  * Update packaging not to package salt directories\n- Update to version 0.1.1692188980.9aa0455\n\nspacecmd:\n\n- Version 4.3.26-1\n  * Update translation strings\n\nspacewalk-backend:\n\n- Version 4.3.27-1\n  * Fix issue in 'spacewalk-repo-sync' when RPM packages contains files with\n    size greater than 4GB (bsc#1219151)\n- Version 4.3.26-1\n  * Fix decompressing and renaming bzip2 comps files in reposync\n  * Update query to the new credentials structure\n  * Remove normalize_orphan_vendor_packages and move it to taskomatic (bsc#1216781)\n  * Skip syncing packages with incorrect metadata (bsc#1213738)\n  * Update translation strings\n\nspacewalk-certs-tools:\n\n- version 4.3.22-1\n  * Skip deploying the CA into the Salt directory on proxies (bsc#1219850)\n- Version 4.3.21-1\n  * Deploy the CA certificate also into the Salt filesystem (bsc#1219577)\n- Version 4.3.20-1\n  * Handle server keys in PKCS8 format in mgr-ssl-cert-setup (bsc#1218615)\n  * Include reboot info beacon in the bootstrap script for transactional systems (bsc#1217588)\n\nspacewalk-client-tools:\n\n- Version 4.3.18-1\n  * Update translation strings\n\nspacewalk-java:\n\n- Version 4.3.71-1\n  * Generate server SSH key also when bootstrapping regular Minions (bsc#1219449)\n- Version 4.3.70-1\n  * Fix the use of page size preference in systems and packages lists (bsc#1217209)\n  * Fix issue with disabling token check not working (bsc#1218669)\n  * Enforce snakeyaml version requirement (bsc#1215166)\n  * Improve the performance of paginated queries when syncing the\n    reporting database (bsc#1211912, bsc#1213079)\n  * Do not require entitlement for Pay-as-you-go SUSE Linux Enterprise Server for SAP (bsc#1217069)\n  * Use the base product file to show the correct SUSE Manager\n    product in the subscription matching results page\n  * Do not require entitlements if SUSE Manager is Pay-as-you-go\n  * Exclude SUSE Manager from subscription matching if it's Pay-as-you-go\n  * Refactor Credentials to a proper class hierarchy\n  * Fix unit test about duplicated packages\n  * Prevent installation of packages with same name\n    in a single action (bsc#1214791)\n  * When canceling an action which has prerequisites, return hints to\n    get the first action id which can be canceled (bsc#1216988)\n  * Fix exception when removing a Debian package (bsc#1216781)\n  * Fix XSS in taskomatic XML RPC handler (bsc#1210911)\n  * Improve logging for Product Migration (bsc#1218490)\n  * Add only 1 IP for Cloud RMT Host in /etc/hosts\n  * Change org for orphan vendor packages that an admin can delete (bsc#1216781)\n  * Expose the monitoring data for the Salt queue handling the Salt results\n  * Provide total number of CPUs for SUSE Linux Enterprise Micro systems to subscription matcher\n    when it is not used as hypervisor to match vCore subscriptions correctly\n    (bsc#1218074)\n  * Try to download compressed Ubuntu USN database\n  * Add user information to system organization transfer message (bsc#1216753)\n  * CVE-2023-32189: Fix issue with Salt SSH keys for Salt SSH Minions (bsc#1170848)\n  * Add notification in daily email in addition to in SUSE Manager home page when\n    SUSE Manager Pay-as-you-go is not compliant\n  * Fix apidoc link from #top to $call.name (bsc#1213507)\n  * Add config option to disable remote commands from web UI (bsc#1217869)\n  * Address high rating Sonar issues\n  * Refactor SUSE Customer Center registration flow\n  * Avoid blocking Taskomatic thread when waiting for queued action (bsc#1211560)\n  * Fix modify kickstart profile when using 'Always newest tree' option (bsc#1215813)\n  * Configure reboot method for SUSE Linux Enterprise Micro when applying bootstrap state (bsc#1213981)\n  * Handle not existing known_host file in permission check\n  * Fix handling of proxy ssh public keys\n  * Include reboot required indication for non-Suse distros\n\nspacewalk-setup:\n\n- Version 4.3.19-1\n  * Update query to the new credentials structure\n  * Fix setting SUSE Customer Center password during setup\n\nspacewalk-utils:\n\n- Version 4.3.19-1\n  * Add SUSE Linux Enterprise Micro 5.4 and 5.5 to spacewalk-commons-channels\n\nspacewalk-web:\n\n- Version 4.3.37-1\n  * Fix the use of page size preference in systems and packages lists (bsc#1217209)\n  * Fix issue displaying Ansible playbook name (bsc#1216657) \n  * Add support for `PaygNotCompliantWarning` notification\n  * Bump web.version to 4.3.11\n\nsubscription-matcher:\n\n- Version 0.35\n  * Added missing part number\n- Version 0.34\n  * Enabled support for Long Term Service Pack Support subscriptions (bsc#1218075)\n  * Added SUSE Linux Enterprise Micro vCore handling (bsc#1218074)\n  * Added new SKUs and new bundles\n\nsupportutils-plugin-susemanager:\n\n- Version 4.3.10-1\n  * Update query to the new credentials structure\n\nsusemanager:\n\n- Version 4.3.34-1\n  * Rename Open Enterprise Server label to OES23.4 (bsc#1215514)\n  * Verify in Yast FQDN with name returned via DNS reverse lookup\n  * CVE-2023-32189: Fix issue with Salt SSH keys for Salt SSH Minions (bsc#1170848)\n\nsusemanager-build-keys:\n\n- Version 15.4.10\n  * Add new Almalinux 8 GPG Key (bsc#1218849)\n  * Refresh extended Uyuni GPG public key\n\nsusemanager-docs_en:\n\n- Removed obsolete traditional to Salt migration documentation from \n  the System Types section of the Client Configuration Guide and \n  updated the Migrate traditional clients to Salt clients section\n- Fixed navigation bar of Client Configuration Guide (bsc#1218089)\n- Added openSUSE Leap to Supported Features navigation list in Client\n  Configuration Guide (bsc#1218094)\n- Described new monitoring metrics for Salt queue in Administration\n  Guide\n- Fixed xrefs for internal book references\n- Removed mentioning that CVE number for CVE auditing is optional\n  (bsc#1218019)\n- Corrected channel names for CentOS 7 Updates and Extras in CentOS \n  Client Configuration Guide\n- Documented bootstrap settings for SUSE Linux Enterprise Micro in\n  Client Configuration Guide (bsc#1216394)\n- Corrected command mgr-push to mgrpush in Administration Guide \n  (bsc#1215810)\n- Updated Red Hat OVAL data URL and file in CentOS Clients Registration\n  in Client Configution Guide\n- Added Pay-as-you-go for Azure documentation to the Specialized Guides\n  book\n- Added Pay-as-you-go limitations chapter to Pay-as-you-go Guide\n- Removed Ubuntu 18.04 from the list of supported clients\n- Fixed file location in Custom Salt Formulas section of Salt Guide\n- Documented using Virtualization Host formula in Client Configuration\n\nsusemanager-schema:\n\n- Version 4.3.24-1\n  * Refactor susecredentials to support the new hierarchy\n  * Improve performance of System (bsc#1211254)\n  * Change schedule of system-profile-refresh to run on the 2nd Saturday\n    of a month to not collide with normal working times (bsc#1215769)\n\nsusemanager-sls:\n\n- version 4.3.40-1\n  * Remove automatic reboot from transactional systems bootstrap (bsc#1218146)\n- Version 4.3.39-1\n  * Change certs/RHN-ORG-TRUSTED-SSL-CERT from symlink into a real file (bsc#1219577)\n- Version 4.3.38-1\n  * Improve Pay-as-you-go instance detection (bsc#1217784)\n  * CVE-2023-32189: Fix issue with Salt SSH keys for Salt SSH Minions (bsc#1170848)\n  * Configure reboot method for SUSE Linux Enterprise Micro when applying bootstrap state (bsc#1213981)\n  * Include reboot required indication for non SUSE distros\n\nsusemanager-sync-data:\n\n- Version 4.3.16-1\n  * Fix OES 23.4 internal name (bsc#1218837)\n- Version 4.3.15-1\n  * Update release status and repository description of Open Enterprise Server 23.4 (bsc#1215514)\n  * Add new SUSE Liberty Linux 7 Long Term Service Pack Support channel families\n  * Rename Red Hat Enterprise Linux and Liberty 8 Base product to remove EOL CentOS 8 from the name\n\nuyuni-reportdb-schema:\n\n- Version 4.3.9-1\n  * Provide reportdb upgrade schema path structure\n\nHow to apply this update:\n\n1. Log in as root user to the SUSE Manager Server.\n2. Stop the Spacewalk service:\n`spacewalk-service stop`\n3. Apply the patch using either zypper patch or YaST Online Update.\n4. Start the Spacewalk service:\n`spacewalk-service start`\n","status":"published","published":"2024-02-15T13:35:13Z","modified":"2026-02-04T03:18:32.592881Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0513-1","title":"Security update for SUSE Manager Server 4.3","description":"\nThis update fixes the following issues:\n\nrelease-notes-susemanager:\n\n- Update to SUSE Manager 4.3.11\n  * Migrate from RHEL and its clones to SUSE Liberty Linux\n  * Reboot required indication for non-SUSE distributions\n  * SSH key rotation for enhanced security\n  * Configure remote command execution\n  * End of Debian 10 support\n  * CVEs fixed: \n    CVE-2023-32189, CVE-2024-22231, CVE-2024-22232\n  * Bugs mentioned:    \n    bsc#1170848, bsc#1210911, bsc#1211254, bsc#1211560, bsc#1211912\n    bsc#1213079, bsc#1213507, bsc#1213738, bsc#1213981, bsc#1214077\n    bsc#1214791, bsc#1215166, bsc#1215514, bsc#1215769, bsc#1215810\n    bsc#1215813, bsc#1215982, bsc#1216114, bsc#1216394, bsc#1216437\n    bsc#1216550, bsc#1216657, bsc#1216753, bsc#1216781, bsc#1216988\n    bsc#1217069, bsc#1217209, bsc#1217588, bsc#1217784, bsc#1217869\n    bsc#1218019, bsc#1218074, bsc#1218075, bsc#1218089, bsc#1218094\n    bsc#1218490, bsc#1218615, bsc#1218669, bsc#1218849, bsc#1219577\n    bsc#1219850, bsc#1218146\n","status":"published","published":"2024-02-15T13:43:22Z","modified":"2026-02-04T03:55:28.73898Z","updated_at":"2026-11-02T15:53:54.239786Z"}]}}