{"schemaVersion":3,"id":"SUSE-SU-2024:4006-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for SUSE Manager Server 4.3\n\nThis update fixes the following issues:\n\ncobbler:\n\n- Security issues fixed:\n\n  * CVE-2024-47533: Prevent privilege escalation from none to admin (bsc#1231332)\n\n- Other bugs fixed:\n\n  * Increase start timeout for cobblerd unit (bsc#1219450)\n  * Provide sync_single_system for DHCP modules to improve performance (bsc#1219450)\n  * Add input_string_*, input_boolean, input_int functions to public API\n  * Add new setting for Uyuni authentication endpoint (bsc#1219887)\n\ngrafana-formula:\n\n- Version 0.11.0\n  * Add SLES 15 SP6 to supported versions (bsc#1228286)\n\ninter-server-sync:\n\n- Version 0.3.5-0\n  * Decode boolean values for export (bsc#1228545)\n\nsaltboot-formula:\n\n- Update to version 0.1.1723628891.ffb1da5\n  * Rework request stop function to avoid unnecessary warnings\n    (bsc#1212985)\n\nspacecmd:\n\n- Version 4.3.29-0\n  * Speed up softwarechannel_removepackages (bsc#1227606)\n\nspacewalk-backend:\n\n- Version 4.3.30-0\n  * Make ISSv1 timezone independent (bsc#1221505)\n  * reposync: introduce timeout when syncing DEB channels (bsc#1225960)\n  * yum_src: use proper name variable name for subprocess.TimeoutExpired\n  * Check and populate PTF attributes at the time of importing\n    packages (bsc#1225619)\n  * reposync: import GPG keys to RPM DB individually (bsc#1217003)\n  * Add log string to the journal when services are stopped\n    because of insufficient disk space\n\nspacewalk-certs-tools:\n\n- Version 4.3.26-0\n  * Fix private key format in jabberd certificate file (bsc#1228851)\n  * Fix parsing Authority Key Identifier when keyid is not prefixed (bsc#1229079)\n  * Support multiple certificates for root-ca-file and server-cert-file\n\nspacewalk-client-tools:\n\n- Version 4.3.21-0\n  * Update translation strings\n\nspacewalk-config:\n\n- Version 4.3.14-0\n  * Trust the Content-Length header from AJP (bsc#1226439)\n\nspacewalk-java:\n\n- Version 4.3.82-0\n  * Limit frontend-log message size (bsc#1231900)\n- Version 4.3.81-0\n  * Add detection of Ubuntu 24.04\n- Version 4.3.80-0\n  * Use custom select instead of errata view for better performance\n    (bsc#1225619)\n- Version 4.3.79-0\n  * Add info URL for cobbler to clean the system profile (bsc#1219645)\n  * Require correct scap packages for Ubuntu\n  * Require correct scap packages for Debian 12 (bsc#1227746)\n  * Fix finding system_checkin_threshold configuration value on Sytems\n    Overview page (bsc#1224108)\n  * Allow changing base channel to SUSE Liberty Linux LTSS when the system is on\n    Liberty (bsc#1228326)\n  * Implement product migration from RHEL and Clones to SUSE Liberty\n    Linux\n  * Remove system also from proxy SSH known_hosts (bsc#1228345)\n  * Fix NullPointerException when generating subscription matcher\n    input (bsc#1228638)\n  * Allow free products and SUSE Manager Proxy being managed by SUSE Manager\n    Server PAYG\n  * Open bootstrap script directory URL in a new page (bsc#1225603)\n  * Delay package list refresh when Salt was updated (bsc#1217978)\n  * Add SLE Micro 5 to the list of systems which support monitoring (bsc#1227334)\n  * Add all SLE Micro systems to the list of systems which get PTF repositories\n  * Update last sync refresh timestamp only when at least one time products\n    were synced before\n  * Prevent NullPointerException when listing history events without completion\n    time (bsc#1146701)\n  * Autoinstallation: prevent issues with duplicate IP address due to some\n    networks (bsc#1226461)\n  * Improve SQL queries and performance to check for PTF packages (bsc#1225619)\n  * Check the correct Salt package before product migration (bsc#1224209)\n  * Fix the date format output when using the HTTP API to use ISO 8601\n    format (bsc#1227543)\n  * Fix transactional update check for SL Micro (bsc#1227406)\n  * Improve score comparison in system search to fix ISE (bsc#1228412)\n  * Fix package profile update on CentOS 7 when yum-utils is not\n    installed (bsc#1227133)\n\nspacewalk-utils:\n\n- Version 4.3.22-0\n  * Add repositories for Ubuntu 24.04 LTS\n- Version 4.3.21-0\n  * Drop unsupported tool spacewalk-final-archive as it is broken\n    and may disclose sensitive information (bsc#1228945)\n\nspacewalk-web:\n\n- Security issues fixed:\n\n  * Version 4.3.42-0\n    + CVE-2024-49503: Escape organization credentials username to\n      mitigate XSS vulnerability (bsc#1231922)\n  * Version 4.3.41-0\n    + CVE-2024-49502: Validate proxy hostname format and escape proxy\n      username to mitigate XSS vulnerabilities (bsc#1231852)\n\n- Bugs fixed:\n\n  * Version 4.3.40-0\n    + Fix channel selection using SSM (bsc#1226917)\n    + Fix datetime selection when using maintenance windows (bsc#1228036)\n\nsusemanager:\n\n- Version 4.3.39-0\n  * Enable bootstrapping for Ubuntu 24.04 LTS\n- Version 4.3.38-0\n  * Add missing package python3-ply to bootstrap repo definition (bsc#1228130)\n  * Create special bootstrap data for SUSE Manager Server 4.3 with LTSS\n    updates for Hub scenario (bsc#1211899)\n  * Add LTSS updates to SUSE Manager Proxy 4.3 bootstrap data\n  * Add traditional stack to boostrap repo on sles15sp6 (bsc#1228147)\n  * Change package to libdbus-glib-1-2 on sle15sp6 (bsc#1228147)\n\nsusemanager-build-keys:\n\n- Extended 2048 bit SUSE SLE 12, 15 GA-SP5 key until 2028. (bsc#1229339)\n\nsusemanager-docs_en:\n\n- Documented Ubuntu 24.04 LTS as a supported client OS in Client\n- SUSE Manager 4.3.14 documentation update\n- In network ports section, deleted partially outdated image, added\n  port 443 for clients, and removed Cobbler only used internally\n  (bsc#1217338)\n- Added installer-updates.suse.com to the list of URLs in Installation\n  and Upgrade Guide (bsc#1229178)\n- Enhanced instructions about the permissions for the IAM role\n  in Public Cloud Guide\n- Fixed OS minor number in Client Configuration Guide (bsc#1218090)\n- Added warning about Package Hub (bsc#1221435)\n- Removed Verify Packages section from Package Management chapter\n  in Client Configuration Guide\n- Added note about usernames in PAM section in Administration Guide\n  (bsc#1227599)\n- Updated Content Lifecycle Management (CLM) examples for Red Hat\n  Enterprise Linux 9 (bsc#1226687)\n- Added VM based proxy installation in Installation and Upgrade Guide\n- Fixed PostgreSQL name entity\n- Improved Large Deployments Guide with better tuning values and\n  extra parameters added\n- Updated lists of SUSE Linux Enterprise hardening profiles in openSCAP\n  chapter in the Administration Guide\n\nsusemanager-schema:\n\n- Version 4.3.27-0\n  * Introduce new attributes to detect PTF packages (bsc#1225619)\n\nsusemanager-sls:\n\n- Version 4.3.45-0\n  * Start using DEB822 format for repository sources beginning with Ubuntu 24.04\n- Version 4.3.44-0\n  * Speed-up mgrutil.remove_ssh_known_host runner (bsc#1223312)\n  * Implement product migration from RHEL and clones to SUSE Liberty Linux\n  * Disable transactional-update.timer on SLEM at bootstrap\n  * Explicitly remove old venv-minion environment when updating Python versions\n  * sumautil: properly detect bridge interfaces (bsc#1226461)\n  * Fix typo on directories to clean up when deleting a system (bsc#1228101)\n  * Translate GPG URL if it has server name and client behind proxy\n    (bsc#1223988)\n  * Fix yum-utils package missing on CentOS7 minions (bsc#1227133)\n  * Implement IMDSv2 for AWS instance detection (bsc#1226090)\n  * Fix package profile update on CentOS 7 when yum-utils is not\n    installed (bsc#1227133)\n  * Fix parsing passwords with special characters for PostgreSQL\n    exporter\n\nsusemanager-sync-data:\n\n- Version 4.3.21-0\n  * Add SLES15-SP5-LTSS channel families\n  * Add MicroOS PPC channel family\n- Version 4.3.20-0\n  * Add Ubuntu 24.04 support\n- Version 4.3.19-0\n  * Fix CentOS 7 repo urls (bsc#1227526)\n  * Add channel family for SLES 12 SP5 LTSS Extended Security\n  * Implement product migration from RHEL and clones to SUSE Liberty Linux\n\nuyuni-common-libs:\n\n- Version 4.3.11-0\n  * Enforce directory permissions at repo-sync when creating\n    directories (bsc#1229260)\n  * Make ISSv1 timezone independent (bsc#1221505)\n\nuyuni-reportdb-schema:\n\n- Version 4.3.11-0\n  * Change Errata CVE column to type text as a varchar reaches the\n    maximum (bsc#1226478)\n\nHow to apply this update:\n\n1. Log in as root user to the SUSE Manager Server.\n2. Stop the Spacewalk service:\n`spacewalk-service stop`\n3. Apply the patch using either zypper patch or YaST Online Update.\n4. Start the Spacewalk service:\n`spacewalk-service start`","dates":{"published":"2024-11-18T13:19:53.000Z","modified":"2025-05-02T04:37:09.133Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"cobbler&distro=SUSE Manager Server Module 4.3","name":"cobbler","label":"cobbler&distro=SUSE Manager Server Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cobbler&distro=SUSE Manager Server Module 4.3","purlType":"rpm","versions":[{"text":"< 3.3.3-150400.5.52.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.3-150400.5.52.3","eol":null,"hubHref":null},{"vendor":"suse","product":"grafana-formula&distro=SUSE Manager Server Module 4.3","name":"grafana-formula","label":"grafana-formula&distro=SUSE Manager Server Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grafana-formula&distro=SUSE Manager Server Module 4.3","purlType":"rpm","versions":[{"text":"< 0.11.0-150400.3.21.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.11.0-150400.3.21.4","eol":null,"hubHref":null},{"vendor":"suse","product":"inter-server-sync&distro=SUSE Manager Server Module 4.3","name":"inter-server-sync","label":"inter-server-sync&distro=SUSE Manager Server Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/inter-server-sync&distro=SUSE Manager Server Module 4.3","purlType":"rpm","versions":[{"text":"< 0.3.5-150400.3.36.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.3.5-150400.3.36.13","eol":null,"hubHref":null},{"vendor":"suse","product":"mgr-daemon&distro=SUSE Manager Proxy Module 4.3","name":"mgr-daemon","label":"mgr-daemon&distro=SUSE Manager Proxy Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/mgr-daemon&distro=SUSE Manager Proxy Module 4.3","purlType":"rpm","versions":[{"text":"< 4.3.11-150400.3.21.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.11-150400.3.21.6","eol":null,"hubHref":null},{"vendor":"suse","product":"saltboot-formula&distro=SUSE Manager Server Module 4.3","name":"saltboot-formula","label":"saltboot-formula&distro=SUSE Manager Server Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/saltboot-formula&distro=SUSE Manager Server Module 4.3","purlType":"rpm","versions":[{"text":"< 0.1.1723628891.ffb1da5-150400.3.18.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.1.1723628891.ffb1da5-150400.3.18.4","eol":null,"hubHref":null},{"vendor":"suse","product":"spacecmd&distro=SUSE Manager Proxy Module 4.3","name":"spacecmd","label":"spacecmd&distro=SUSE Manager Proxy Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacecmd&distro=SUSE Manager Proxy Module 4.3","purlType":"rpm","versions":[{"text":"< 4.3.29-150400.3.42.8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.29-150400.3.42.8","eol":null,"hubHref":null},{"vendor":"suse","product":"spacecmd&distro=SUSE Manager Server Module 4.3","name":"spacecmd","label":"spacecmd&distro=SUSE Manager Server Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacecmd&distro=SUSE Manager Server Module 4.3","purlType":"rpm","versions":[{"text":"< 4.3.29-150400.3.42.8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.29-150400.3.42.8","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-backend&distro=SUSE Manager Proxy Module 4.3","name":"spacewalk-backend","label":"spacewalk-backend&distro=SUSE Manager Proxy Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-backend&distro=SUSE Manager Proxy Module 4.3","purlType":"rpm","versions":[{"text":"< 4.3.30-150400.3.47.16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.30-150400.3.47.16","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-backend&distro=SUSE Manager Server Module 4.3","name":"spacewalk-backend","label":"spacewalk-backend&distro=SUSE Manager Server Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-backend&distro=SUSE Manager Server Module 4.3","purlType":"rpm","versions":[{"text":"< 4.3.30-150400.3.47.16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.30-150400.3.47.16","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-certs-tools&distro=SUSE Manager Proxy Module 4.3","name":"spacewalk-certs-tools","label":"spacewalk-certs-tools&distro=SUSE Manager Proxy Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-certs-tools&distro=SUSE Manager Proxy Module 4.3","purlType":"rpm","versions":[{"text":"< 4.3.26-150400.3.36.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.26-150400.3.36.7","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-certs-tools&distro=SUSE Manager Server Module 4.3","name":"spacewalk-certs-tools","label":"spacewalk-certs-tools&distro=SUSE Manager Server Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-certs-tools&distro=SUSE Manager Server Module 4.3","purlType":"rpm","versions":[{"text":"< 4.3.26-150400.3.36.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.26-150400.3.36.7","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-client-tools&distro=SUSE Manager Proxy Module 4.3","name":"spacewalk-client-tools","label":"spacewalk-client-tools&distro=SUSE Manager Proxy Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-client-tools&distro=SUSE Manager Proxy Module 4.3","purlType":"rpm","versions":[{"text":"< 4.3.21-150400.3.33.11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.21-150400.3.33.11","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-client-tools&distro=SUSE Manager Server Module 4.3","name":"spacewalk-client-tools","label":"spacewalk-client-tools&distro=SUSE Manager Server Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-client-tools&distro=SUSE Manager Server Module 4.3","purlType":"rpm","versions":[{"text":"< 4.3.21-150400.3.33.11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.21-150400.3.33.11","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-config&distro=SUSE Manager Server Module 4.3","name":"spacewalk-config","label":"spacewalk-config&distro=SUSE Manager Server Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-config&distro=SUSE Manager Server Module 4.3","purlType":"rpm","versions":[{"text":"< 4.3.14-150400.3.18.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.14-150400.3.18.6","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-java&distro=SUSE Manager Server Module 4.3","name":"spacewalk-java","label":"spacewalk-java&distro=SUSE Manager Server Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-java&distro=SUSE Manager Server Module 4.3","purlType":"rpm","versions":[{"text":"< 4.3.82-150400.3.96.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.82-150400.3.96.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-proxy&distro=SUSE Manager Proxy Module 4.3","name":"spacewalk-proxy","label":"spacewalk-proxy&distro=SUSE Manager Proxy Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-proxy&distro=SUSE Manager Proxy Module 4.3","purlType":"rpm","versions":[{"text":"< 4.3.19-150400.3.29.9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.19-150400.3.29.9","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-utils&distro=SUSE Manager Server Module 4.3","name":"spacewalk-utils","label":"spacewalk-utils&distro=SUSE Manager Server Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-utils&distro=SUSE Manager Server Module 4.3","purlType":"rpm","versions":[{"text":"< 4.3.22-150400.3.29.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.22-150400.3.29.2","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-web&distro=SUSE Manager Proxy Module 4.3","name":"spacewalk-web","label":"spacewalk-web&distro=SUSE Manager Proxy Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-web&distro=SUSE Manager Proxy Module 4.3","purlType":"rpm","versions":[{"text":"< 4.3.42-150400.3.52.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.42-150400.3.52.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-web&distro=SUSE Manager Server Module 4.3","name":"spacewalk-web","label":"spacewalk-web&distro=SUSE Manager Server Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-web&distro=SUSE Manager Server Module 4.3","purlType":"rpm","versions":[{"text":"< 4.3.42-150400.3.52.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.42-150400.3.52.1","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-build-keys&distro=SUSE Manager Proxy Module 4.3","name":"susemanager-build-keys","label":"susemanager-build-keys&distro=SUSE Manager Proxy Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-build-keys&distro=SUSE Manager Proxy Module 4.3","purlType":"rpm","versions":[{"text":"< 15.4.10-150400.3.29.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.4.10-150400.3.29.4","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-build-keys&distro=SUSE Manager Server Module 4.3","name":"susemanager-build-keys","label":"susemanager-build-keys&distro=SUSE Manager Server Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-build-keys&distro=SUSE Manager Server Module 4.3","purlType":"rpm","versions":[{"text":"< 15.4.10-150400.3.29.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.4.10-150400.3.29.4","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-docs_en&distro=SUSE Manager Server Module 4.3","name":"susemanager-docs_en","label":"susemanager-docs_en&distro=SUSE Manager Server Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-docs_en&distro=SUSE Manager Server Module 4.3","purlType":"rpm","versions":[{"text":"< 4.3.14-150400.9.66.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.14-150400.9.66.2","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-schema&distro=SUSE Manager Server Module 4.3","name":"susemanager-schema","label":"susemanager-schema&distro=SUSE Manager Server Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-schema&distro=SUSE Manager Server Module 4.3","purlType":"rpm","versions":[{"text":"< 4.3.27-150400.3.45.11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.27-150400.3.45.11","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-sls&distro=SUSE Manager Server Module 4.3","name":"susemanager-sls","label":"susemanager-sls&distro=SUSE Manager Server Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-sls&distro=SUSE Manager Server Module 4.3","purlType":"rpm","versions":[{"text":"< 4.3.45-150400.3.55.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.45-150400.3.55.4","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-sync-data&distro=SUSE Manager Server Module 4.3","name":"susemanager-sync-data","label":"susemanager-sync-data&distro=SUSE Manager Server Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-sync-data&distro=SUSE Manager Server Module 4.3","purlType":"rpm","versions":[{"text":"< 4.3.21-150400.3.35.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.21-150400.3.35.2","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager&distro=SUSE Manager Server Module 4.3","name":"susemanager","label":"susemanager&distro=SUSE Manager Server Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager&distro=SUSE Manager Server Module 4.3","purlType":"rpm","versions":[{"text":"< 4.3.39-150400.3.58.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.39-150400.3.58.5","eol":null,"hubHref":null},{"vendor":"suse","product":"uyuni-common-libs&distro=SUSE Manager Proxy Module 4.3","name":"uyuni-common-libs","label":"uyuni-common-libs&distro=SUSE Manager Proxy Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/uyuni-common-libs&distro=SUSE Manager Proxy Module 4.3","purlType":"rpm","versions":[{"text":"< 4.3.11-150400.3.21.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.11-150400.3.21.6","eol":null,"hubHref":null},{"vendor":"suse","product":"uyuni-common-libs&distro=SUSE Manager Server Module 4.3","name":"uyuni-common-libs","label":"uyuni-common-libs&distro=SUSE Manager Server Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/uyuni-common-libs&distro=SUSE Manager Server Module 4.3","purlType":"rpm","versions":[{"text":"< 4.3.11-150400.3.21.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.11-150400.3.21.6","eol":null,"hubHref":null},{"vendor":"suse","product":"uyuni-proxy-systemd-services&distro=SUSE Manager Client Tools 15","name":"uyuni-proxy-systemd-services","label":"uyuni-proxy-systemd-services&distro=SUSE Manager Client Tools 15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/uyuni-proxy-systemd-services&distro=SUSE Manager Client Tools 15","purlType":"rpm","versions":[{"text":"< 4.3.14-150000.1.27.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.14-150000.1.27.4","eol":null,"hubHref":null},{"vendor":"suse","product":"uyuni-proxy-systemd-services&distro=SUSE Manager Client Tools for SLE Micro 5","name":"uyuni-proxy-systemd-services","label":"uyuni-proxy-systemd-services&distro=SUSE Manager Client Tools for SLE Micro 5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/uyuni-proxy-systemd-services&distro=SUSE Manager Client Tools for SLE Micro 5","purlType":"rpm","versions":[{"text":"< 4.3.14-150000.1.27.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.14-150000.1.27.4","eol":null,"hubHref":null},{"vendor":"suse","product":"uyuni-proxy-systemd-services&distro=SUSE Manager Proxy Module 4.3","name":"uyuni-proxy-systemd-services","label":"uyuni-proxy-systemd-services&distro=SUSE Manager Proxy Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/uyuni-proxy-systemd-services&distro=SUSE Manager Proxy Module 4.3","purlType":"rpm","versions":[{"text":"< 4.3.14-150000.1.27.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.14-150000.1.27.4","eol":null,"hubHref":null},{"vendor":"suse","product":"uyuni-reportdb-schema&distro=SUSE Manager Server Module 4.3","name":"uyuni-reportdb-schema","label":"uyuni-reportdb-schema&distro=SUSE Manager Server Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/uyuni-reportdb-schema&distro=SUSE Manager Server Module 4.3","purlType":"rpm","versions":[{"text":"< 4.3.11-150400.3.18.12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.11-150400.3.18.12","eol":null,"hubHref":null}],"affectedCount":32,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20244006-1/","label":"www.suse.com/support/update/announcement/2024/suse-su-20244006-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1146701","label":"bugzilla.suse.com/1146701","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1211899","label":"bugzilla.suse.com/1211899","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1212985","label":"bugzilla.suse.com/1212985","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1217003","label":"bugzilla.suse.com/1217003","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1217338","label":"bugzilla.suse.com/1217338","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1217978","label":"bugzilla.suse.com/1217978","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1218090","label":"bugzilla.suse.com/1218090","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1219450","label":"bugzilla.suse.com/1219450","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1219645","label":"bugzilla.suse.com/1219645","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1219887","label":"bugzilla.suse.com/1219887","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1221435","label":"bugzilla.suse.com/1221435","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1221505","label":"bugzilla.suse.com/1221505","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1223312","label":"bugzilla.suse.com/1223312","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1223988","label":"bugzilla.suse.com/1223988","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1224108","label":"bugzilla.suse.com/1224108","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1224209","label":"bugzilla.suse.com/1224209","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1225603","label":"bugzilla.suse.com/1225603","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1225619","label":"bugzilla.suse.com/1225619","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1225960","label":"bugzilla.suse.com/1225960","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1226090","label":"bugzilla.suse.com/1226090","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1226439","label":"bugzilla.suse.com/1226439","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1226461","label":"bugzilla.suse.com/1226461","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1226478","label":"bugzilla.suse.com/1226478","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1226687","label":"bugzilla.suse.com/1226687","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1226917","label":"bugzilla.suse.com/1226917","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1227133","label":"bugzilla.suse.com/1227133","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1227334","label":"bugzilla.suse.com/1227334","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1227406","label":"bugzilla.suse.com/1227406","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1227526","label":"bugzilla.suse.com/1227526","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1227543","label":"bugzilla.suse.com/1227543","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1227599","label":"bugzilla.suse.com/1227599","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1227606","label":"bugzilla.suse.com/1227606","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1227746","label":"bugzilla.suse.com/1227746","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1228036","label":"bugzilla.suse.com/1228036","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1228101","label":"bugzilla.suse.com/1228101","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1228130","label":"bugzilla.suse.com/1228130","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1228147","label":"bugzilla.suse.com/1228147","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1228286","label":"bugzilla.suse.com/1228286","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1228326","label":"bugzilla.suse.com/1228326","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1228345","label":"bugzilla.suse.com/1228345","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1228412","label":"bugzilla.suse.com/1228412","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1228545","label":"bugzilla.suse.com/1228545","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1228638","label":"bugzilla.suse.com/1228638","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1228851","label":"bugzilla.suse.com/1228851","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1228945","label":"bugzilla.suse.com/1228945","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1229079","label":"bugzilla.suse.com/1229079","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1229178","label":"bugzilla.suse.com/1229178","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1229260","label":"bugzilla.suse.com/1229260","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1229339","label":"bugzilla.suse.com/1229339","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1231332","label":"bugzilla.suse.com/1231332","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1231852","label":"bugzilla.suse.com/1231852","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1231900","label":"bugzilla.suse.com/1231900","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1231922","label":"bugzilla.suse.com/1231922","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47533","label":"www.suse.com/security/cve/CVE-2024-47533","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49502","label":"www.suse.com/security/cve/CVE-2024-49502","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49503","label":"www.suse.com/security/cve/CVE-2024-49503","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2024-47533","CVE-2024-49502","CVE-2024-49503"],"downstream":[],"duplicates":[],"related":["CVE-2024-47533","CVE-2024-49502","CVE-2024-49503"]},"timeline":[{"kind":"published","date":"2024-11-18T13:19:53.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-05-02T04:37:09.133Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T19:56:00.952Z","stale":false,"partial":false}}