Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Update critical security fixes for Multiple Spacewalk Components
published 7 months ago
Summary
This update fixes several security issues in Spacewalk components, including a potential resource exhaustion vulnerability in Jose4j and security configuration issues in Spacewalk-config. It's essential to apply this update to ensure the security and stability of your Spacewalk infrastructure. You should download and install the latest version of the Spacewalk components as soon as possible.
What to do
- Update suse suse-manager-5.0-aarch64-proxy-httpd-image to version 5.0.7-7.30.13.
- Update suse suse-manager-5.0-aarch64-proxy-salt-broker-image to version 5.0.7-7.32.15.
- Update suse suse-manager-5.0-aarch64-proxy-squid-image to version 5.0.7-7.30.6.
- Update suse suse-manager-5.0-aarch64-proxy-ssh-image to version 5.0.7-7.30.5.
- Update suse suse-manager-5.0-aarch64-proxy-tftpd-image to version 5.0.7-7.30.5.
- Update suse suse-manager-5.0-ppc64le-proxy-httpd-image to version 5.0.7-7.30.13.
- Update suse suse-manager-5.0-ppc64le-proxy-salt-broker-image to version 5.0.7-7.32.15.
- Update suse suse-manager-5.0-ppc64le-proxy-squid-image to version 5.0.7-7.30.6.
- Update suse suse-manager-5.0-ppc64le-proxy-ssh-image to version 5.0.7-7.30.5.
- Update suse suse-manager-5.0-aarch64-server-attestation-image to version 5.0.7-6.34.5.
- Update suse suse-manager-5.0-aarch64-server-hub-xmlrpc-api-image to version 5.0.7-6.30.7.
- Update suse suse-manager-5.0-aarch64-server-image to version 5.0.7-7.37.12.
- Update suse suse-manager-5.0-aarch64-server-migration-14-16-image to version 5.0.7-7.30.7.
- Update suse suse-manager-5.0-ppc64le-server-attestation-image to version 5.0.7-6.34.5.
- Update suse suse-manager-5.0-ppc64le-server-hub-xmlrpc-api-image to version 5.0.7-6.30.7.
- Update suse suse-manager-5.0-ppc64le-server-image to version 5.0.7-7.37.12.
- Update suse suse-manager-5.0-ppc64le-server-migration-14-16-image to version 5.0.7-7.30.7.
- Update suse suse-manager-5.0-s390x-server-attestation-image to version 5.0.7-6.34.5.
- Update suse suse-manager-5.0-s390x-server-hub-xmlrpc-api-image to version 5.0.7-6.30.7.
- Update suse suse-manager-5.0-s390x-server-image to version 5.0.7-7.37.12.
- Update suse suse-manager-5.0-s390x-server-migration-14-16-image to version 5.0.7-7.30.7.
- Update suse suse-manager-5.0-x86_64-server-attestation-image to version 5.0.7-6.34.5.
- Update suse suse-manager-5.0-x86_64-server-hub-xmlrpc-api-image to version 5.0.7-6.30.7.
- Update suse suse-manager-5.0-x86_64-server-image to version 5.0.7-7.37.12.
- Update suse suse-manager-5.0-x86_64-server-migration-14-16-image to version 5.0.7-7.30.7.
- Update suse suse-manager-5.0-ppc64le-proxy-tftpd-image to version 5.0.7-7.30.5.
- Update suse suse-manager-5.0-s390x-proxy-httpd-image to version 5.0.7-7.30.13.
- Update suse suse-manager-5.0-s390x-proxy-salt-broker-image to version 5.0.7-7.32.15.
- Update suse suse-manager-5.0-s390x-proxy-squid-image to version 5.0.7-7.30.6.
- Update suse suse-manager-5.0-s390x-proxy-ssh-image to version 5.0.7-7.30.5.
- Update suse suse-manager-5.0-s390x-proxy-tftpd-image to version 5.0.7-7.30.5.
- Update suse suse-manager-5.0-x86_64-proxy-httpd-image to version 5.0.7-7.30.13.
- Update suse suse-manager-5.0-x86_64-proxy-salt-broker-image to version 5.0.7-7.32.15.
- Update suse suse-manager-5.0-x86_64-proxy-squid-image to version 5.0.7-7.30.6.
- Update suse suse-manager-5.0-x86_64-proxy-ssh-image to version 5.0.7-7.30.5.
- Update suse suse-manager-5.0-x86_64-proxy-tftpd-image to version 5.0.7-7.30.5.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Manager Proxy 5.0 | suse | suse-manager-5.0-aarch64-proxy-httpd-image |
< 5.0.7-7.30.13 Fix: upgrade to 5.0.7-7.30.13
|
| SUSE:Manager Proxy 5.0 | suse | suse-manager-5.0-aarch64-proxy-salt-broker-image |
< 5.0.7-7.32.15 Fix: upgrade to 5.0.7-7.32.15
|
| SUSE:Manager Proxy 5.0 | suse | suse-manager-5.0-aarch64-proxy-squid-image |
< 5.0.7-7.30.6 Fix: upgrade to 5.0.7-7.30.6
|
| SUSE:Manager Proxy 5.0 | suse | suse-manager-5.0-aarch64-proxy-ssh-image |
< 5.0.7-7.30.5 Fix: upgrade to 5.0.7-7.30.5
|
| SUSE:Manager Proxy 5.0 | suse | suse-manager-5.0-aarch64-proxy-tftpd-image |
< 5.0.7-7.30.5 Fix: upgrade to 5.0.7-7.30.5
|
| SUSE:Manager Proxy 5.0 | suse | suse-manager-5.0-ppc64le-proxy-httpd-image |
< 5.0.7-7.30.13 Fix: upgrade to 5.0.7-7.30.13
|
| SUSE:Manager Proxy 5.0 | suse | suse-manager-5.0-ppc64le-proxy-salt-broker-image |
< 5.0.7-7.32.15 Fix: upgrade to 5.0.7-7.32.15
|
| SUSE:Manager Proxy 5.0 | suse | suse-manager-5.0-ppc64le-proxy-squid-image |
< 5.0.7-7.30.6 Fix: upgrade to 5.0.7-7.30.6
|
| SUSE:Manager Proxy 5.0 | suse | suse-manager-5.0-ppc64le-proxy-ssh-image |
< 5.0.7-7.30.5 Fix: upgrade to 5.0.7-7.30.5
|
| SUSE:Manager Retail Branch Server Extension 5.0 | suse | suse-manager-5.0-aarch64-proxy-httpd-image |
< 5.0.7-7.30.13 Fix: upgrade to 5.0.7-7.30.13
|
| SUSE:Manager Retail Branch Server Extension 5.0 | suse | suse-manager-5.0-aarch64-proxy-salt-broker-image |
< 5.0.7-7.32.15 Fix: upgrade to 5.0.7-7.32.15
|
| SUSE:Manager Server 5.0 | suse | suse-manager-5.0-aarch64-server-attestation-image |
< 5.0.7-6.34.5 Fix: upgrade to 5.0.7-6.34.5
|
| SUSE:Manager Server 5.0 | suse | suse-manager-5.0-aarch64-server-hub-xmlrpc-api-image |
< 5.0.7-6.30.7 Fix: upgrade to 5.0.7-6.30.7
|
| SUSE:Manager Server 5.0 | suse | suse-manager-5.0-aarch64-server-image |
< 5.0.7-7.37.12 Fix: upgrade to 5.0.7-7.37.12
|
| SUSE:Manager Server 5.0 | suse | suse-manager-5.0-aarch64-server-migration-14-16-image |
< 5.0.7-7.30.7 Fix: upgrade to 5.0.7-7.30.7
|
| SUSE:Manager Server 5.0 | suse | suse-manager-5.0-ppc64le-server-attestation-image |
< 5.0.7-6.34.5 Fix: upgrade to 5.0.7-6.34.5
|
| SUSE:Manager Server 5.0 | suse | suse-manager-5.0-ppc64le-server-hub-xmlrpc-api-image |
< 5.0.7-6.30.7 Fix: upgrade to 5.0.7-6.30.7
|
| SUSE:Manager Server 5.0 | suse | suse-manager-5.0-ppc64le-server-image |
< 5.0.7-7.37.12 Fix: upgrade to 5.0.7-7.37.12
|
| SUSE:Manager Server 5.0 | suse | suse-manager-5.0-ppc64le-server-migration-14-16-image |
< 5.0.7-7.30.7 Fix: upgrade to 5.0.7-7.30.7
|
| SUSE:Manager Server 5.0 | suse | suse-manager-5.0-s390x-server-attestation-image |
< 5.0.7-6.34.5 Fix: upgrade to 5.0.7-6.34.5
|
| SUSE:Manager Server 5.0 | suse | suse-manager-5.0-s390x-server-hub-xmlrpc-api-image |
< 5.0.7-6.30.7 Fix: upgrade to 5.0.7-6.30.7
|
| SUSE:Manager Server 5.0 | suse | suse-manager-5.0-s390x-server-image |
< 5.0.7-7.37.12 Fix: upgrade to 5.0.7-7.37.12
|
| SUSE:Manager Server 5.0 | suse | suse-manager-5.0-s390x-server-migration-14-16-image |
< 5.0.7-7.30.7 Fix: upgrade to 5.0.7-7.30.7
|
| SUSE:Manager Server 5.0 | suse | suse-manager-5.0-x86_64-server-attestation-image |
< 5.0.7-6.34.5 Fix: upgrade to 5.0.7-6.34.5
|
| SUSE:Manager Server 5.0 | suse | suse-manager-5.0-x86_64-server-hub-xmlrpc-api-image |
< 5.0.7-6.30.7 Fix: upgrade to 5.0.7-6.30.7
|
| SUSE:Manager Server 5.0 | suse | suse-manager-5.0-x86_64-server-image |
< 5.0.7-7.37.12 Fix: upgrade to 5.0.7-7.37.12
|
| SUSE:Manager Server 5.0 | suse | suse-manager-5.0-x86_64-server-migration-14-16-image |
< 5.0.7-7.30.7 Fix: upgrade to 5.0.7-7.30.7
|
| SUSE:Manager Proxy 5.0 | suse | suse-manager-5.0-ppc64le-proxy-tftpd-image |
< 5.0.7-7.30.5 Fix: upgrade to 5.0.7-7.30.5
|
| SUSE:Manager Proxy 5.0 | suse | suse-manager-5.0-s390x-proxy-httpd-image |
< 5.0.7-7.30.13 Fix: upgrade to 5.0.7-7.30.13
|
| SUSE:Manager Proxy 5.0 | suse | suse-manager-5.0-s390x-proxy-salt-broker-image |
< 5.0.7-7.32.15 Fix: upgrade to 5.0.7-7.32.15
|
| SUSE:Manager Proxy 5.0 | suse | suse-manager-5.0-s390x-proxy-squid-image |
< 5.0.7-7.30.6 Fix: upgrade to 5.0.7-7.30.6
|
| SUSE:Manager Proxy 5.0 | suse | suse-manager-5.0-s390x-proxy-ssh-image |
< 5.0.7-7.30.5 Fix: upgrade to 5.0.7-7.30.5
|
| SUSE:Manager Proxy 5.0 | suse | suse-manager-5.0-s390x-proxy-tftpd-image |
< 5.0.7-7.30.5 Fix: upgrade to 5.0.7-7.30.5
|
| SUSE:Manager Proxy 5.0 | suse | suse-manager-5.0-x86_64-proxy-httpd-image |
< 5.0.7-7.30.13 Fix: upgrade to 5.0.7-7.30.13
|
| SUSE:Manager Proxy 5.0 | suse | suse-manager-5.0-x86_64-proxy-salt-broker-image |
< 5.0.7-7.32.15 Fix: upgrade to 5.0.7-7.32.15
|
| SUSE:Manager Proxy 5.0 | suse | suse-manager-5.0-x86_64-proxy-squid-image |
< 5.0.7-7.30.6 Fix: upgrade to 5.0.7-7.30.6
|
| SUSE:Manager Proxy 5.0 | suse | suse-manager-5.0-x86_64-proxy-ssh-image |
< 5.0.7-7.30.5 Fix: upgrade to 5.0.7-7.30.5
|
| SUSE:Manager Proxy 5.0 | suse | suse-manager-5.0-x86_64-proxy-tftpd-image |
< 5.0.7-7.30.5 Fix: upgrade to 5.0.7-7.30.5
|
| SUSE:Manager Retail Branch Server Extension 5.0 | suse | suse-manager-5.0-aarch64-proxy-squid-image |
< 5.0.7-7.30.6 Fix: upgrade to 5.0.7-7.30.6
|
| SUSE:Manager Retail Branch Server Extension 5.0 | suse | suse-manager-5.0-aarch64-proxy-ssh-image |
< 5.0.7-7.30.5 Fix: upgrade to 5.0.7-7.30.5
|
| SUSE:Manager Retail Branch Server Extension 5.0 | suse | suse-manager-5.0-aarch64-proxy-tftpd-image |
< 5.0.7-7.30.5 Fix: upgrade to 5.0.7-7.30.5
|
| SUSE:Manager Retail Branch Server Extension 5.0 | suse | suse-manager-5.0-ppc64le-proxy-httpd-image |
< 5.0.7-7.30.13 Fix: upgrade to 5.0.7-7.30.13
|
| SUSE:Manager Retail Branch Server Extension 5.0 | suse | suse-manager-5.0-ppc64le-proxy-salt-broker-image |
< 5.0.7-7.32.15 Fix: upgrade to 5.0.7-7.32.15
|
| SUSE:Manager Retail Branch Server Extension 5.0 | suse | suse-manager-5.0-ppc64le-proxy-squid-image |
< 5.0.7-7.30.6 Fix: upgrade to 5.0.7-7.30.6
|
| SUSE:Manager Retail Branch Server Extension 5.0 | suse | suse-manager-5.0-ppc64le-proxy-ssh-image |
< 5.0.7-7.30.5 Fix: upgrade to 5.0.7-7.30.5
|
| SUSE:Manager Retail Branch Server Extension 5.0 | suse | suse-manager-5.0-ppc64le-proxy-tftpd-image |
< 5.0.7-7.30.5 Fix: upgrade to 5.0.7-7.30.5
|
| SUSE:Manager Retail Branch Server Extension 5.0 | suse | suse-manager-5.0-s390x-proxy-httpd-image |
< 5.0.7-7.30.13 Fix: upgrade to 5.0.7-7.30.13
|
| SUSE:Manager Retail Branch Server Extension 5.0 | suse | suse-manager-5.0-s390x-proxy-salt-broker-image |
< 5.0.7-7.32.15 Fix: upgrade to 5.0.7-7.32.15
|
| SUSE:Manager Retail Branch Server Extension 5.0 | suse | suse-manager-5.0-s390x-proxy-squid-image |
< 5.0.7-7.30.6 Fix: upgrade to 5.0.7-7.30.6
|
| SUSE:Manager Retail Branch Server Extension 5.0 | suse | suse-manager-5.0-s390x-proxy-ssh-image |
< 5.0.7-7.30.5 Fix: upgrade to 5.0.7-7.30.5
|
Showing 50 of 56. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Manager Retail Branch Server Extension 5.0 | suse | suse-manager-5.0-s390x-proxy-tftpd-image |
< 5.0.7-7.30.5 Fix: upgrade to 5.0.7-7.30.5
|
| SUSE:Manager Retail Branch Server Extension 5.0 | suse | suse-manager-5.0-x86_64-proxy-httpd-image |
< 5.0.7-7.30.13 Fix: upgrade to 5.0.7-7.30.13
|
| SUSE:Manager Retail Branch Server Extension 5.0 | suse | suse-manager-5.0-x86_64-proxy-salt-broker-image |
< 5.0.7-7.32.15 Fix: upgrade to 5.0.7-7.32.15
|
| SUSE:Manager Retail Branch Server Extension 5.0 | suse | suse-manager-5.0-x86_64-proxy-squid-image |
< 5.0.7-7.30.6 Fix: upgrade to 5.0.7-7.30.6
|
| SUSE:Manager Retail Branch Server Extension 5.0 | suse | suse-manager-5.0-x86_64-proxy-ssh-image |
< 5.0.7-7.30.5 Fix: upgrade to 5.0.7-7.30.5
|
| SUSE:Manager Retail Branch Server Extension 5.0 | suse | suse-manager-5.0-x86_64-proxy-tftpd-image |
< 5.0.7-7.30.5 Fix: upgrade to 5.0.7-7.30.5
|
Original advisory text
Security update 5.0.7 for Multi-Linux Manager Server
This update fixes the following issues:
branch-network-formula:
- Update to version 1.1.0
* Enable containers on SLE15SP7
* Exclude podman interfaces from sysctl setting
cobbler:
- Compatibility fixes for tftpboot directory setup
inter-server-sync:
- Version 0.3.10-0
* Write log to a rotated file without rsyslog and logrotate
* Recreate cobbler entries on the import (bsc#1220899)
* remove support for 4.2 file based pillars
* use correct hostname detection for 5.x servers
(bsc#1253322)
jose4j:
- CVE-2024-29371: Safeguard against excessive resource utilization by
restricting the size of data during JWE payload decompression (bsc#1255298)
liberate-formula:
- Version 0.1.2
* Add option to prevent logo packages from being installed
spacecmd:
- Version 5.0.15-0
* Fix typo in spacecmd help ca-cert flag (bsc#1253174)
* Convert cached IDs to int (bsc#1251995)
* Fix spacecmd binary file upload (bsc#1253659)
spacewalk-backend:
- Version 5.0.17-0
* Fix reposync mediaproduct fetch when
URL contains auth token (bsc#1252388)
spacewalk-certs-tools:
- Version 5.0.13-0
* Fix bootstrap script for SLM 6.2 (bsc#1257992)
* Fix failing bootstrap with bootstrap script on SLES 16
and SL Micro 6.2 (bsc#1256991)
spacewalk-client-tools:
- Version 5.0.12-0
* Update translation strings
spacewalk-config:
- Version 5.0.9-0
* Enable HSTS in Apache config (bsc#1255176)
* Force SameSite=Lax on all Set-Cookie headers (bsc#1253711)
spacewalk-java:
- Version 5.0.31-0
* Commit DB changes before refreshing pillar for SSH push minions
(bsc#1253712)
* Fix http proxy verification (bsc#1253501)
* Fix: Broken URL in API docs (bsc#1244177)
* Fix crash in ubuntu errata sync on deleted channel ids
(bsc#1250561)
* Fix dnf updateinfo showing wrong severity for
security updates (bsc#1252937)
* Add details on config channels and state order in UI
(bsc#1253285)
* fix reposync crashing at metadata generation (bsc#1257538)
* Block multiple versions of the same package
from being locked (bsc#1246315)
* Use PackageEvr instead of string for fix_version (bsc#1252638)
* Add multi-thread support for message queue (bsc#1247722)
* Fix ungrouped systems list menu item (bsc#1254251)
spacewalk-proxy:
- Version 5.0.8-0
* Disable listing the content of /icons (bsc#1247544)
spacewalk-proxy-installer:
- Version 5.0.3-0
* Configure squid replacement policy properly before cache dir
(bsc#1253773)
spacewalk-web:
- Version 5.0.26-0
* Update web UI dependencies
* Add details on config channels and state order in UI
(bsc#1253285)
susemanager:
- Version 5.0.17-0
* Fix the product ids of client tools channels
* Fixed the package name to correct one (bsc#1255089)
susemanager-build-keys:
- Add openSUSE Backports for SUSE Linux 16 key (bsc#1257255)
susemanager-docs_en:
- Updated the screenshots in multiple sections in Installation and Upgrade Guide
- Reformatted storage-scripts table to use plain paragraphs instead of bullet
lists to fix po4a extraction issue causing missing bullets in CJK translations
- Added a warning for all instances where mgradm upgrade podman is used
- Added section about container-based Kiwi image build support to Administration
guide (bsc#1251865)
- Included global GPG decryption for pillar data in specialized guide
(bsc#1255743)
- CIS removed from list of supported OpenSCAP profiles
- Changes example for the third-party repository GPG keys (bsc#1255857)
- Added SLE16 and openSUSE Leap 16 as supported clients
- Explained how to generate the proxy certificates on a peripheral server
(bsc#1249425)
- Improved procedure formatting for better clarity in Administration Guide
(bsc#1253660)
- Added links to man pages for createrepo_c and reprepro to Administration
Guide (bsc#1237181)
- Added missing options to command example in Installation and Upgrade Guide
(bsc#1252908)
- Added non-SUSE URLs to requirements in installation and Upgrade Guide
(bsc#1252665)
- Fixed typo for command options in Reference Guide (bsc#1253174)
- Added additional step for client deletion in Client Configuration Guide
(bsc#1253249)
- Clarified server config option for spacemd in Refrence Guide (bsc#1253197)
- Changed the installation instructions to use product instead of packages
(bsc#1249041)
susemanager-schema:
- Version 5.0.18-0
* Refactor oval related tables (bsc#1252638)
* Increase size of column 'context' on tables
'suseappstream' and 'suseserverappstream' (bsc#1255653)
* Add leftovers of partially missing ARMHF for Debian (bsc#1248783)
susemanager-sls:
- Version 5.0.21-0
* Fix error on shutdown for sles 12 (bsc#1255634)
* Fix bootstrap for SLM 6.2 and newer (bsc#1257992)
* Make mgr_events salt engine non-blocking on reading events
* Avoid losing the events on DB connection issues (bsc#1252098)
branch-network-formula:
- Update to version 1.1.0
* Enable containers on SLE15SP7
* Exclude podman interfaces from sysctl setting
cobbler:
- Compatibility fixes for tftpboot directory setup
inter-server-sync:
- Version 0.3.10-0
* Write log to a rotated file without rsyslog and logrotate
* Recreate cobbler entries on the import (bsc#1220899)
* remove support for 4.2 file based pillars
* use correct hostname detection for 5.x servers
(bsc#1253322)
jose4j:
- CVE-2024-29371: Safeguard against excessive resource utilization by
restricting the size of data during JWE payload decompression (bsc#1255298)
liberate-formula:
- Version 0.1.2
* Add option to prevent logo packages from being installed
spacecmd:
- Version 5.0.15-0
* Fix typo in spacecmd help ca-cert flag (bsc#1253174)
* Convert cached IDs to int (bsc#1251995)
* Fix spacecmd binary file upload (bsc#1253659)
spacewalk-backend:
- Version 5.0.17-0
* Fix reposync mediaproduct fetch when
URL contains auth token (bsc#1252388)
spacewalk-certs-tools:
- Version 5.0.13-0
* Fix bootstrap script for SLM 6.2 (bsc#1257992)
* Fix failing bootstrap with bootstrap script on SLES 16
and SL Micro 6.2 (bsc#1256991)
spacewalk-client-tools:
- Version 5.0.12-0
* Update translation strings
spacewalk-config:
- Version 5.0.9-0
* Enable HSTS in Apache config (bsc#1255176)
* Force SameSite=Lax on all Set-Cookie headers (bsc#1253711)
spacewalk-java:
- Version 5.0.31-0
* Commit DB changes before refreshing pillar for SSH push minions
(bsc#1253712)
* Fix http proxy verification (bsc#1253501)
* Fix: Broken URL in API docs (bsc#1244177)
* Fix crash in ubuntu errata sync on deleted channel ids
(bsc#1250561)
* Fix dnf updateinfo showing wrong severity for
security updates (bsc#1252937)
* Add details on config channels and state order in UI
(bsc#1253285)
* fix reposync crashing at metadata generation (bsc#1257538)
* Block multiple versions of the same package
from being locked (bsc#1246315)
* Use PackageEvr instead of string for fix_version (bsc#1252638)
* Add multi-thread support for message queue (bsc#1247722)
* Fix ungrouped systems list menu item (bsc#1254251)
spacewalk-proxy:
- Version 5.0.8-0
* Disable listing the content of /icons (bsc#1247544)
spacewalk-proxy-installer:
- Version 5.0.3-0
* Configure squid replacement policy properly before cache dir
(bsc#1253773)
spacewalk-web:
- Version 5.0.26-0
* Update web UI dependencies
* Add details on config channels and state order in UI
(bsc#1253285)
susemanager:
- Version 5.0.17-0
* Fix the product ids of client tools channels
* Fixed the package name to correct one (bsc#1255089)
susemanager-build-keys:
- Add openSUSE Backports for SUSE Linux 16 key (bsc#1257255)
susemanager-docs_en:
- Updated the screenshots in multiple sections in Installation and Upgrade Guide
- Reformatted storage-scripts table to use plain paragraphs instead of bullet
lists to fix po4a extraction issue causing missing bullets in CJK translations
- Added a warning for all instances where mgradm upgrade podman is used
- Added section about container-based Kiwi image build support to Administration
guide (bsc#1251865)
- Included global GPG decryption for pillar data in specialized guide
(bsc#1255743)
- CIS removed from list of supported OpenSCAP profiles
- Changes example for the third-party repository GPG keys (bsc#1255857)
- Added SLE16 and openSUSE Leap 16 as supported clients
- Explained how to generate the proxy certificates on a peripheral server
(bsc#1249425)
- Improved procedure formatting for better clarity in Administration Guide
(bsc#1253660)
- Added links to man pages for createrepo_c and reprepro to Administration
Guide (bsc#1237181)
- Added missing options to command example in Installation and Upgrade Guide
(bsc#1252908)
- Added non-SUSE URLs to requirements in installation and Upgrade Guide
(bsc#1252665)
- Fixed typo for command options in Reference Guide (bsc#1253174)
- Added additional step for client deletion in Client Configuration Guide
(bsc#1253249)
- Clarified server config option for spacemd in Refrence Guide (bsc#1253197)
- Changed the installation instructions to use product instead of packages
(bsc#1249041)
susemanager-schema:
- Version 5.0.18-0
* Refactor oval related tables (bsc#1252638)
* Increase size of column 'context' on tables
'suseappstream' and 'suseserverappstream' (bsc#1255653)
* Add leftovers of partially missing ARMHF for Debian (bsc#1248783)
susemanager-sls:
- Version 5.0.21-0
* Fix error on shutdown for sles 12 (bsc#1255634)
* Fix bootstrap for SLM 6.2 and newer (bsc#1257992)
* Make mgr_events salt engine non-blocking on reading events
* Avoid losing the events on DB connection issues (bsc#1252098)
References
- https://www.suse.com/support/update/announcement/2026/suse-su-20261010-1/ Vendor Advisory
- https://bugzilla.suse.com/1220899 Third Party Advisory
- https://bugzilla.suse.com/1237181 Third Party Advisory
- https://bugzilla.suse.com/1244177 Third Party Advisory
- https://bugzilla.suse.com/1246315 Third Party Advisory
- https://bugzilla.suse.com/1247544 Third Party Advisory
- https://bugzilla.suse.com/1247722 Third Party Advisory
- https://bugzilla.suse.com/1248783 Third Party Advisory
- https://bugzilla.suse.com/1249041 Third Party Advisory
- https://bugzilla.suse.com/1249425 Third Party Advisory
- https://bugzilla.suse.com/1250561 Third Party Advisory
- https://bugzilla.suse.com/1251865 Third Party Advisory
- https://bugzilla.suse.com/1251995 Third Party Advisory
- https://bugzilla.suse.com/1252098 Third Party Advisory
- https://bugzilla.suse.com/1252388 Third Party Advisory
- https://bugzilla.suse.com/1252638 Third Party Advisory
- https://bugzilla.suse.com/1252665 Third Party Advisory
- https://bugzilla.suse.com/1252908 Third Party Advisory
- https://bugzilla.suse.com/1252937 Third Party Advisory
- https://bugzilla.suse.com/1253174 Third Party Advisory
- https://bugzilla.suse.com/1253197 Third Party Advisory
- https://bugzilla.suse.com/1253249 Third Party Advisory
- https://bugzilla.suse.com/1253285 Third Party Advisory
- https://bugzilla.suse.com/1253322 Third Party Advisory
- https://bugzilla.suse.com/1253501 Third Party Advisory
- https://bugzilla.suse.com/1253659 Third Party Advisory
- https://bugzilla.suse.com/1253660 Third Party Advisory
- https://bugzilla.suse.com/1253711 Third Party Advisory
- https://bugzilla.suse.com/1253712 Third Party Advisory
- https://bugzilla.suse.com/1253773 Third Party Advisory
- https://bugzilla.suse.com/1254251 Third Party Advisory
- https://bugzilla.suse.com/1255089 Third Party Advisory
- https://bugzilla.suse.com/1255176 Third Party Advisory
- https://bugzilla.suse.com/1255298 Third Party Advisory
- https://bugzilla.suse.com/1255634 Third Party Advisory
- https://bugzilla.suse.com/1255653 Third Party Advisory
- https://bugzilla.suse.com/1255743 Third Party Advisory
- https://bugzilla.suse.com/1255857 Third Party Advisory
- https://bugzilla.suse.com/1256991 Third Party Advisory
- https://bugzilla.suse.com/1257255 Third Party Advisory
- https://bugzilla.suse.com/1257538 Third Party Advisory
- https://bugzilla.suse.com/1257992 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2024-29371 URL
Timeline
Published25 Mar 2026
Updated26 Mar 2026
First seen26 Mar 2026
Sources
SUSE-SU-2026:1010-1 · OSV
Track software like this
Free during beta