SUSE-SU-2024:0513-1: Security update for SUSE Manager 4.3.11 Release Notes

Q: Which SUSE Manager deployments are in scope for this update?

The listed software includes SUSE Manager Server 4.3, SUSE Manager Proxy 4.3, and SUSE Manager Retail Branch Server 4.3. It also lists the SUSE Manager and SUSE Manager Proxy release-notes packages for openSUSE Leap 15.4.

Q: Does the provided advisory information include exploitation requirements or temporary mitigations?

No exploitation prerequisites, affected configuration details, fixed package versions, or temporary mitigations are included in the provided data. The advisory references two Bugzilla entries and the SUSE update announcement for further investigation.

Published Feb 15, 2024

Updated

Affected Software

9 affected componentsFixes available

All of the following

SUSE openSUSE Leap 15.4 (noarch)

Any of the following

suse/release-notes-susemanager<4.3.11-150400.3.100.1

4.3.11-150400.3.100.1

suse/release-notes-susemanager-proxy<4.3.11-150400.3.79.1

4.3.11-150400.3.79.1

All of the following

SUSE SUSE Manager Proxy 4.3 (noarch)

suse/release-notes-susemanager-proxy<4.3.11-150400.3.79.1

4.3.11-150400.3.79.1

All of the following

SUSE SUSE Manager Retail Branch Server 4.3 (noarch)

suse/release-notes-susemanager-proxy<4.3.11-150400.3.79.1

4.3.11-150400.3.79.1

All of the following

SUSE SUSE Manager Server 4.3 (noarch)

suse/release-notes-susemanager<4.3.11-150400.3.100.1

4.3.11-150400.3.100.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade suse/release-notes-susemanager to a version that resolves this vulnerability.
Fixed in 4.3.11-150400.3.100.1
Upgrade
Upgrade suse/release-notes-susemanager-proxy to a version that resolves this vulnerability.
Fixed in 4.3.11-150400.3.79.1
Upgrade
Upgrade openSUSE Leap 15.4 to a version that resolves this vulnerability.
Patch SUSE-2024-513
Upgrade
Upgrade SUSE Manager Proxy 4.3 to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-513
Upgrade
Upgrade SUSE Manager Retail Branch Server 4.3 to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.3-2024-513
Upgrade
Upgrade SUSE Manager Server 4.3 to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-513

Event History

Feb 15, 2024

Advisory Published

via SUSE·04:30 PM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Which SUSE Manager deployments are in scope for this update?

The listed software includes SUSE Manager Server 4.3, SUSE Manager Proxy 4.3, and SUSE Manager Retail Branch Server 4.3. It also lists the SUSE Manager and SUSE Manager Proxy release-notes packages for openSUSE Leap 15.4.

Does the provided advisory information include exploitation requirements or temporary mitigations?

No exploitation prerequisites, affected configuration details, fixed package versions, or temporary mitigations are included in the provided data. The advisory references two Bugzilla entries and the SUSE update announcement for further investigation.

SUSE-SU-2024:0513-1: Security update for SUSE Manager 4.3.11 Release Notes

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which SUSE Manager deployments are in scope for this update?

Does the provided advisory information include exploitation requirements or temporary mitigations?

Company

Resources

Contact

Frequently Asked Questions

Which SUSE Manager deployments are in scope for this update?

Does the provided advisory information include exploitation requirements or temporary mitigations?