File _patchinfo of Package patchinfo.32476

<patchinfo incident="32476">
  <category>security</category>
  <rating>important</rating>
  <packager>raulosuna</packager>
  <summary>Security update for SUSE Manager 4.3.11 Release Notes</summary>
  <description>Security update for SUSE Manager 4.3.11 Release Notes:

- This is a codestream only update
</description>
  <releasetarget project="SUSE:SLE-15-SP4:Update"/>
  <issue tracker="ijsc" id="MSQA-719"/>
  <issue tracker="bnc" id="1170848">VUL-0: CVE-2023-32189: Handling SSH key in SUSE Manager when bootstrapping new clients</issue>
  <issue tracker="bnc" id="1210911">VUL-1: SUMA: Reflected XSS in XML RPC handler used between tomcat and taskomatic</issue>
  <issue tracker="bnc" id="1211254">Web Interface slow, especially when selecting "Systems"</issue>
  <issue tracker="bnc" id="1211560">Scheduled events appear to run on client, but still show as pending in the webui</issue>
  <issue tracker="bnc" id="1211912">Job mgr-update-reporting does not complete</issue>
  <issue tracker="bnc" id="1213079">Job mgr-update-reporting does not complete</issue>
  <issue tracker="bnc" id="1213507">The links under API method header points to top for unknown reason</issue>
  <issue tracker="bnc" id="1213738">Unexpected error: &lt;class 'UnboundLocalError'&gt; sync'ing a 3rd party repository</issue>
  <issue tracker="bnc" id="1213981">SLE Micro 5.x: Second reboot on the webUI right after bootstrapping does not work</issue>
  <issue tracker="bnc" id="1214077">Creating a cobbler iso on ppc does not boot using efi</issue>
  <issue tracker="bnc" id="1214791">Cannot patch freshly installed server</issue>
  <issue tracker="bnc" id="1215166">"Internal server error" viewing high state through system event tab after PTF installation</issue>
  <issue tracker="bnc" id="1215514">Enabling OES 23.4 Channels on Suse Manager</issue>
  <issue tracker="bnc" id="1215769">Scheduled task 'system-profile-refresh-default' causing outage.</issue>
  <issue tracker="bnc" id="1215810">mgr-push should be mgrpush</issue>
  <issue tracker="bnc" id="1215813">Choosing always newest tree in profile results in strange behavior</issue>
  <issue tracker="bnc" id="1215982">cobbler-refresh-mkloaders.service fails due to timing issue</issue>
  <issue tracker="bnc" id="1216114">Inter-server-sync import failing with "Error running the SQL script" when importing CLM channels.</issue>
  <issue tracker="bnc" id="1216394">bootstrap SLE Micro 5.4 fails with rpm error "no such file or directory"</issue>
  <issue tracker="bnc" id="1216437">autoinstall kssendmac is deprecated</issue>
  <issue tracker="bnc" id="1216550">PrometheusNotIngestingSamples Alert Firing Incorrectly</issue>
  <issue tracker="bnc" id="1216657">Playbook name shown as {name} instead of real name</issue>
  <issue tracker="bnc" id="1216753">Transfering a system to another organization does not log the name of the user that initiated the transfer</issue>
  <issue tracker="bnc" id="1216781">spacecmd softwarechannel_errata_sync fails with error</issue>
  <issue tracker="bnc" id="1216988">Pending actions can not be canceled: Cannot cancel an action with a pending prerequisite</issue>
  <issue tracker="bnc" id="1217069">Subscription matching should excluded PAYG instances</issue>
  <issue tracker="bnc" id="1217209">"List Page Size" value  setting is not applied for all pages</issue>
  <issue tracker="bnc" id="1217588">SLE Micro 5.x: Bootstrap script configuration is missing the `reboot_info` beacon</issue>
  <issue tracker="bnc" id="1217784">Azure PAYG instances are not detected as such.</issue>
  <issue tracker="bnc" id="1217869">Remote command restriction for salt clients</issue>
  <issue tracker="bnc" id="1218019">Audit -&gt; CVE Audit: CVE number field is not optional, as the documentation says.</issue>
  <issue tracker="bnc" id="1218074">SLE Micro SKU not is recognized in Subscription Matching</issue>
  <issue tracker="bnc" id="1218075">SLE LTSS SKU is not recognized in Subscription Matching</issue>
  <issue tracker="bnc" id="1218089">Duplicate enrties in SUSE Client Registration page</issue>
  <issue tracker="bnc" id="1218094">openSUSE page missing on Supported Clients and Features page</issue>
  <issue tracker="bnc" id="1218146">Salt execution error being displayed when trying to bootstrap an SLE Micro minion through the UI</issue>
  <issue tracker="bnc" id="1218490">Product migration for SLES 15 SP2 for SAP has no migration options</issue>
  <issue tracker="bnc" id="1218615">Unknown Private Key type when running mgr-ssl-cert-setup</issue>
  <issue tracker="bnc" id="1218669">java.salt_check_download_tokens = false not working properly in 4.3.10</issue>
  <issue tracker="bnc" id="1218849">Almalinux 8 gpg key change</issue>
  <issue tracker="bnc" id="1219577">Failing to bootstrap Salt minions - Source file salt://certs/RHN-ORG-TRUSTED-SSL-CERT not found in saltenv 'base'</issue>
  <issue tracker="bnc" id="1219850">deploying ssl certificates on the proxy fail</issue>
  <issue tracker="cve" id="2023-32189"/>
  <issue tracker="cve" id="2024-22231"/>
  <issue tracker="cve" id="2024-22232"/>
</patchinfo>