Security update for SUSE Manager Server 3.1
This update fixes the following issues: cobbler: - Fixes case where distribution detection returns None (bsc#1130658) - SUSE texmode fix (bsc#1109316) - Fix for SUSE distribution detection in ISO building (bsc#1123991) py26-compat-salt: - Remove arch from name when pkg.list_pkgs is called with 'attr' (bsc#1114029) spacecmd: - Fix importing state channels using configchannel_import - Fix getting file info for latest revision (via configchannel_filedetails) spacewalk-branding: - Update jquery.timepicker dependency to 1.11.14 to allow parsing the time format without depending on the language. (bsc#1119081) spacewalk-java: - Fix a problem when cloning public child channels with a private base channel (bsc#1124639) - Keep assigned channels on traditional to minion migration (bsc#1122836) - Fix 'Add Selected to SSM' on System Groups -> systems page (bsc#1121856) - Disable notification types with 'java.notifications_type_disabled' in rhn.conf (bsc#1111910) - XMLRPC API: Include init.sls in channel file list (bsc#1111191) - Fix the config channels assignment via SSM (bsc#1117759) spacewalk-utils: - Create /etc/rhn with correct ownership to prevent file conflicts spacewalk-web: - Fix action scheduler time picker prefill when the server is on 'UTC/GMT' timezone (bsc#1121195) - Fix initializing of the datetime picker (bsc#1126862) - Show feedback messages after using the retry option on the notification messages page subscription-matcher: - Old style hard bundle merging fix (bsc#1114059) susemanager: - Fix creation of bootstrap repositories for SLE12 (no SP) by requiring python-setuptools only for SLE12 >= SP1 (bsc#1129765) - Add `python-setuptools` package dependency to SLES12 bootstrap repo (bsc#1119964) - Rhnlib was renamed to python2-rhnlib. Change bootstrap data accordingly. susemanager-schema: - Fix performance regression in inter-server-sync (bsc#1128781) susemanager-docs_en: - Update text and image files - 2.1 comparison: clarify profile syncing support - Adjust documentation about notification settings - Fix internal link (SMT documentation). - Remove documentation about the 'mgr-sync enable-scc' subcommand. This subcommand is no longer available. susemanager-frontend-libs: - Update jquery.timepicker to 1.11.14 (bsc#1119081) tika-core: - New upstream version (1.20). Fixes infinite loop in SQLite3Parser (CVE-2018-17197) (bsc#1121038)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update fixes the following issues: cobbler: - Fixes case where distribution detection returns None (bsc#1130658) - SUSE texmode fix (bsc#1109316) - Fix for SUSE distribution detection in ISO building (bsc#1123991) py26-compat-salt: - Remove arch from name when pkg.list_pkgs is called with 'attr' (bsc#1114029) spacecmd: - Fix importing state channels using configchannel_import - Fix getting file info for latest revision (via configchannel_filedetails) spacewalk-branding: - Update jquery.timepicker dependency to 1.11.14 to allow parsing the time format without depending on the language. (bsc#1119081) spacewalk-java: - Fix a problem when cloning public child channels with a private base channel (bsc#1124639) - Keep assigned channels on traditional to minion migration (bsc#1122836) - Fix 'Add Selected to SSM' on System Groups -> systems page (bsc#1121856) - Disable notification types with 'java.notifications_type_disabled' in rhn.conf (bsc#1111910) - XMLRPC API: Include init.sls in channel file list (bsc#1111191) - Fix the config channels assignment via SSM (bsc#1117759) spacewalk-utils: - Create /etc/rhn with correct ownership to prevent file conflicts spacewalk-web: - Fix action scheduler time picker prefill when the server is on 'UTC/GMT' timezone (bsc#1121195) - Fix initializing of the datetime picker (bsc#1126862) - Show feedback messages after using the retry option on the notification messages page subscription-matcher: - Old style hard bundle merging fix (bsc#1114059) susemanager: - Fix creation of bootstrap repositories for SLE12 (no SP) by requiring python-setuptools only for SLE12 >= SP1 (bsc#1129765) - Add `python-setuptools` package dependency to SLES12 bootstrap repo (bsc#1119964) - Rhnlib was renamed to python2-rhnlib. Change bootstrap data accordingly. susemanager-schema: - Fix performance regression in inter-server-sync (bsc#1128781) susemanager-docs_en: - Update text and image files - 2.1 comparison: clarify profile syncing support - Adjust documentation about notification settings - Fix internal link (SMT documentation). - Remove documentation about the 'mgr-sync enable-scc' subcommand. This subcommand is no longer available. susemanager-frontend-libs: - Update jquery.timepicker to 1.11.14 (bsc#1119081) tika-core: - New upstream version (1.20). Fixes infinite loop in SQLite3Parser (CVE-2018-17197) (bsc#1121038)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1109316
- https://bugzilla.suse.com/1111191
- https://bugzilla.suse.com/1111910
- https://bugzilla.suse.com/1114029
- https://bugzilla.suse.com/1114059
- https://bugzilla.suse.com/1114157
- https://bugzilla.suse.com/1114169
- https://bugzilla.suse.com/1117759
- https://bugzilla.suse.com/1119081
- https://bugzilla.suse.com/1119964
- https://bugzilla.suse.com/1121038
- https://bugzilla.suse.com/1121195
- https://bugzilla.suse.com/1121856
- https://bugzilla.suse.com/1122836
- https://bugzilla.suse.com/1123991
- https://bugzilla.suse.com/1124639
- https://bugzilla.suse.com/1126862
- https://bugzilla.suse.com/1128781
- https://bugzilla.suse.com/1129765
- https://bugzilla.suse.com/1130658
- https://www.suse.com/security/cve/CVE-2018-10851
- https://www.suse.com/security/cve/CVE-2018-14626
- https://www.suse.com/security/cve/CVE-2018-17197
- https://www.suse.com/support/update/announcement/-2019-863/suse-ru-20190863-1/