SUSE-SU-2025:02475-1

This update fixes the following issues:

cobbler:

• Prevent crash during Cobbler startup on NFS environments (bsc#1240666)
• Synchronize cobbler add and sync actions (bsc#1233371)
• Exclude disabled profiles from buildiso gen (bsc#1230908)

grafana-formula:

• Version 4.3.0:
  • Added SUSE Linux Enterprise Server 15 SP7 to the supported versions (bsc#1245368)
  • Dropped old unsupported SUSE versions from the supported versions list
  • Migrated from deprecated Graph panels to new timeseries panels

inter-server-sync:

• Version 0.3.7-0:
  • Added SSL signed export and import validation (bsc#1241239)
• Version 0.3.6-0:
  • Included /var/log/hub (bsc#1243724)

spacecmd:

• Version 4.3.31-0:
  • Improved translation update process

spacewalk-admin:

• Version 4.3.33-0
  • Security issues fixed:
    • CVE-2025-46809: Do not expose HTTP Proxy password when breaking URL format (bsc#1245005)
  • Other bugs fixed:
    • Enhance permissions for reposync zypper cache
• Version 4.3.14-0:
  • Added support for environment variables in rhn-config-satellite (bsc#1242148)
  • mgr-monitoring-ctl: avoid possible errors due to non-ascii characters (bsc#1242030)

spacewalk-backend:

• Version 4.3.32-0
  • Removed python3-simplejson use in spacewalk-repo-sync (bsc#1236635)
  • Improved translation update process
  • Make reposync allow commas as part of HTTP Proxy password (bsc#1243460)
  • Removed bootloader linux and initrd files from spacewalk-debug
  • Use libzypp's Curl2 backend during reposync (bsc#1245222)

spacewalk-client-tools:

• Version 4.3.23-0
  • Improved translation update process

spacewalk-config:

• Version 4.3.16-0
  • Allow passing environment variables to rhn-config-satellite (bsc#1242148)

spacewalk-java:

• Version 4.3.87-0
  • Security issues fixed:
    • CVE-2025-46811: Clean up stale sessions on websocket open (bsc#1246119)
• Version 4.3.86-0:
  • Security issues fixed:
    • CVE-2025-23393: Filter user input in systems list page (bsc#1240386)
  • Other bugs fixed:
    • Fixed tooltip text for icons in the patches list (bsc#1234608)
    • Fixed openscap audit is running immediately even when scheduled for next days (bsc#1239743)
    • Adds calling a highstate in the API for actionchain (bsc#1157520)
    • Fixed behavior of reboot_suggested or restart_suggested by API (bsc#1236910)
    • Fixed action chain scheduled within SSM creates no link for the new action chain (bsc#1243825)
    • Fixed severity levels missing in API output of errata.getDetails (bsc#1240038)
    • Fixed internal server error when accessing groups in activation keys (bsc#1237581)
    • Fixed http_proxy_password stored as clear text in /var/log/messages (bsc#1242148)
    • Fixed manage errors in user-defined pillars (bsc#1230403)
    • In CLM live-patching template form, show kernel versions from base product as well (bsc#1239907)
    • Improved handling of system list filtering (bsc#1242004)
    • Fixed issue preventing OES products from showing up (bsc#1237082)
    • Fixed config channels not following priority in highstate (bsc#1237694)
    • Improved performance when changing channels on multiple system through SSM (bsc#1239154)
    • Fixed package locking for packages not available anymore in the assigned repositories (bsc#1236877)
    • Do not show Vendor Advisory link for SL-Micro 6.0 and 6.1 products (bsc#1237770)
    • Fixed API namespace for AdminPaygHandler
    • Fixed CLM channel name definition (bsc#1239868)
    • Fixed XMLRPC API endpoint updateRepoSsl repository property
    • Fixed API documentation for system config listFiles (bsc#1245027)
    • Fixed inconsistency in task schedule deactivation and add activation capability (bsc#1225740)

spacewalk-utils:

• Version 4.3.24-0:
  • Removed spacewalk-clone-by-date dependency on python3-simplejson

spacewalk-web:

• Version 4.3.45-0:
  • Security issues fixed:
    • CVE-2025-23392, CVE-2025-23393: Filter user input in systems list page (bsc#1239826, bsc#1240386)
  • Other bugs fixed:
    • Fix: Filters of type Product Temporary Fix cannot be created (bsc#1238922)
    • Improved handling of system list filtering (bsc#1242004)
    • Improved translation update process

subscription-matcher:

• Version 0.40:
  • Fixed integer overflow which can cause a division by zero error (bsc#1243239)
• Version 0.39:
  • Fixed the wrong matching for 2 Sockets or 2 VMs subscription string (bsc#1238924)
  • Fixed logging issues
  • Updated runtime dependencies

supportutils-plugin-susemanager:

• Version 4.3.15-0:
  • Backported supportutils plugin resource functions, replacing the removed supportutils scplugin.rc functions with those provided by supportconfig.rc

susemanager:

• Version 4.3.42-0:
  • Fixed bootstrap repository definition for SLE 15 SP7 and support only bootstrapping with salt-bundle (bsc#1246788)
• Version 4.3.41-0:
  • Improved translation update process

susemanager-build-keys:

• Changed keys to use SHA256 UIDs instead of SHA1 (bsc#1237294, bsc#1236779, jsc#PED-12321)
  • Renamed build-alp-09d9ea69-645b99ce.asc to build-alp-09d9ea69.asc
  • Renamed gpg-pubkey-3fa1d6ce-63c9481c.asc to gpg-pubkey-3fa1d6ce.asc
  • Adjusted suse_ptf_key_2023.asc and suse_ptf_key.asc

susemanager-docs_en:

• SUSE Manager 4.3.16 Update
• Added information about missing monitoring package to Administration Guide (bsc#1191142)
• Added missing script parameters in Installation and Upgrade Guide (bsc#1216187)
• Added reference to the list of supported SCAP profiles (bsc#1213952)
• Extended information in an admonition in Specialized Guides (bsc#1221031)
• Added missing 4505 and 4506 Salt ports in network requirements in Installation and Upgrade Guide
• Removed references to the methods no longer used from Reference Guide (bsc#1209060)
• Fixed Python script in Administration Guide (bsc#1244290)
• Extended troubleshooting section with a reposync example (bsc#1211373)
• Added section about enabling SUSE Manager 4.3 LTS in Installation and Upgrade Guide
• Added missing Task Schedules to the list and updated the Task Schedule page to reflect changes—now only allowing disabling of tasks, not deletion in the Administration Guide
• Added SUSE Linux Enterprise 15 SP7 as a supported client
• Fixed asciidoc menu macro issue with duplicate css class, menu items now display correctly
• Added note about autoyast profiles not having passwords
• Added details about the behavior of the rescheduled failed action (bsc#1244065)
• Updated Network Requirement section to add settings for server configuration behind HTTP OSI level 7 Proxy
• Clarified that NFS with Cobbler is not supported (bsc#1240666)
• Fixed a URL link in Common Workflows Guide (bsc#1242911)
• Documented uptodate action in Common Workflows Guide as background information
• Documented renaming the journal folder when changing machine ID in Administration Guide (bsc#1241286)
• Fixed removing Salt bundle client procedure in Client Configuration Guide
• Added referenced target and remove obsolete section in Common Workflows (bsc#1240842, bsc#1242554)
• Fixed GPG key import command in Administration Guide (bsc#1239102)
• Added java.smtp_server parameter for mail configuration in Administration Guide (bsc#1241490)
• Added system_listeventhistory to spacecmd reference in Reference Guide (bsc#1239604)
• Added links to supported features tables for third party operating systems (bsc#1236810)
• Fixed typo in Installation and Upgrade Guide (bsc#1237403)
• Added note to limit Squid's cache_dir size to 60% of available free space in Installation and Upgrade Guide

susemanager-schema:

• Version 4.3.29-0:
  • Fixed typo in OES 24.4 channel definition

susemanager-sls:

• Version 4.3.47-0:
  • Change uptodate recurring action to use dist-upgrade instead of upgrade for Debian systems (bsc#1237060)
  • Adjust SLS files for SUSE Linux Enterprise SP7 and other systems running higher Python versions
  • Optimize SAP module to prevent high IO workload (bsc#1241455)

susemanager-sync-data:

• Version 4.3.24-0:
  • Fixed typo in OES 24.4 product definition

How to apply this update:

1. Log in as root user to the SUSE Multi-Linux Manager Server.
2. Stop the Spacewalk service: spacewalk-service stop
3. Apply the patch using either zypper patch or YaST Online Update.
4. Start the Spacewalk service: spacewalk-service start