The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4006-1 advisory. cobbler: – Security issues fixed: * CVE-2024-47533: Prevent privilege escalation from none to admin (bsc#1231332) – Other bugs fixed: * Increase start timeout for cobblerd unit (bsc#1219450) * Provide sync_single_system for DHCP modules to improve performance (bsc#1219450) * Add input_string_*, input_boolean, input_int functions to public API * Add new setting for Uyuni authentication endpoint (bsc#1219887) grafana-formula: – Version 0.11.0 * Add SLES 15 SP6 to supported versions (bsc#1228286) inter-server-sync: – Version 0.3.5-0 * Decode boolean values for export (bsc#1228545) saltboot-formula: – Update to version 0.1.1723628891.ffb1da5 * Rework request stop function to avoid unnecessary warnings (bsc#1212985) spacecmd: – Version 4.3.29-0 * Speed up softwarechannel_removepackages (bsc#1227606) spacewalk-backend: – Version 4.3.30-0 * Make ISSv1 timezone independent (bsc#1221505) * reposync: introduce timeout when syncing DEB channels (bsc#1225960) * yum_src: use proper name variable name for subprocess.TimeoutExpired * Check and populate PTF attributes at the time of importing packages (bsc#1225619) * reposync: import GPG keys to RPM DB individually (bsc#1217003) * Add log string to the journal when services are stopped because of insufficient disk space …Read More
SUSE SLES15 Security Update : SUSE Manager Proxy and Retail Branch Server 4.3 (SUSE-SU-2024:4006-1)
