Security update for SUSE Manager Server 3.1
This update fixes the following issues: nutch: - Fix hadoop log dir. (bsc#1061574) osad, rhnlib: - Fix update mechanism when updating the updateservice (bsc#1073619) pxe-default-image: - Spectre and Meltdown mitigation. (CVE-2017-5753, CVE-2017-5715, CVE-2017-5754, bsc#1068032) spacecmd: - Support multiple FQDNs per system. (bsc#1063419) - Added custom JSON encoder in order to parse date fields correctly. (bsc#1070372) spacewalk-backend: - Fix spacewalk-data-fsck restore of broken package database entry. (bsc#1071526) - Support multiple FQDNs per system. (bsc#1063419) - Fix restore hostname and ip*addr in templated documents. (bsc#1075044) - Fix directory name in spacewalk-data-fsck. spacewalk-branding: - Replace custom states with configuration channels. - Fix pre formatted code. (bsc#1067608) - Fix message about package profile sync. (bsc#1073739) - Fix naming of the Tools channel. (bsc#979633) spacewalk-client-tools: - Support multiple FQDNs per system. (bsc#1063419) - Fix update mechanism when updating the updateservice. (bsc#1073619) spacewalk-java: - Fix the file count for deployed files. (bsc#1074300) - Remove previous activation keys when migrating to salt. (bsc#1031081) - Improve webui for comparing files. (bsc#1076201) - Separate Salt calls based on config revisions and server grouping. (bsc#1074854) - For minion, no option to modifiy config file but just view. - Handle gpg_check correctly. (bsc#1076578) - Uniform date formatting in System Details view. (bsc#1045289) - Import content of custom states from filesystem to database on startup, backup old state files. - Change the directory of the (normal) configuration channels from mgr_cfg_org_N to manager_org_N. - Replace custom states with configuration channels. - Hide ownership/permission fields from create/upload config file forms for state channels. (bsc#1072153) - Hide files from state channels from deploy/compare file lists. (bsc#1072160) - Disable and hide deploy files tab for state config channels. (bsc#1072157) - Allow ordering config channels in state revision. - Disallow creating 'normal' config channels when a 'state' channel with the same name and org already exists and vice versa. - UI has been updated to manage state channels. - Support multiple FQDNs per system. (bsc#1063419) - Setting 'Base Channels' as default tab for 'Channels' tab in SSM Overview screen. (bsc#979616) - Log triggers that are in ERROR state. - Refresh pillar data on formular change. (bsc#1028285) - Uniform the notification message when rebooting a system. (bsc#1036302) - Avoid use of the potentially-slow rhnServerNeededPackageCache view. - Speed up scheduling of package updates through the SSM. (bsc#1076034) - Fix encoding/decoding of url_bounce with more parameters. (bsc#1075408) - After dry-run, sync channels back with the server. (bsc#1071468) - Fix message about package profile sync. (bsc#1073739) - On registration, assign server to the organization of the creator when activation key is empty. (bsc#1016377) - Fix logging issues when saving autoyast profiles. (bsc#1073474) - Add VM state as info gathered from VMware. (bsc#1063759) - Improve performance of token checking, when RPMs or metadata are downloaded from minions. (bsc#1061273) - Allow selecting unnamed context in kubeconfig. (bsc#1073482) - Fix action names and date formatting in system event history. (bsc#1073713) - Fix incorrect 'os-release' report after SP migration. (bsc#1071553) - Fix failed package installation when in RES 32 and 64 bit packages are installed together. (bsc#1071314) - Add user preferences in order to change items-per-page. (bsc#1055296) - Order salt formulas alphabetically. (bsc#1022077) - Improved error message. (bsc#1064258) - Display messages about wrong input more end-user friendly. (bsc#1015956) - Add api calls for content staging. - Fix content refresh when product keys change. (bsc#1069943) - Allow 'Package List Refresh' when package arch has changed. (bsc#1065259) - New API call for scheduling highstate application. - Adding initial version of web ui notifications. - Show the time on the event history page in the users preferred timezone. spacewalk-reports, spacewalk-search: - More rhnServerNetwork refactoring (bsc#1063419) spacewalk-utils: - Remove restrictions imposed on regex used in 'removelist' parameter passed to spacewalk-clone-by-date that allowed only exact match. (bsc#1075254) spacewalk-web: - Replace custom states with configuration channels. - Add 'yaml' option for Ace editor. - Add links to salt formula list and adjust behavior. (bsc#1022078) - Allow selecting unnamed context in kubeconfig. (bsc#1073482) - Add user preferences in order to change items-per-page. (bsc#1055296) - Fix main menu column height. - Adding initial version of web ui notifications. susemanager: - Fix custom SERVER_KEY overriding. (bsc#1075862) - Detect subvolumes on /var even with newer btrfs tools. (bsc#1077076) - Notify admin that database backups need reconfiguration after db upgrade. - Add syslinux-x86_64 dependency for ppc64le. (bsc#1065023) - Do not try to force db encoding on db upgrade; use same value as for installation. (bsc#1077730) susemanager-schema: - Make migration idempotent. (bsc#1078749) - Fix schema with proper extension. (bsc#1079820) - Migrate old custom states to state channels, assign systems to these new channels, delete old custom-state-to-system assignments, delete the custom states from the db; Before migrating, rename custom states with same name as existing configuration channel labels. - Update queries for global channels. - Check if channel is already subscribed even before checking if parent channel is subscribed or not. (bsc#1072797) - Support multiple FQDNs per system. (bsc#1063419) - Avoid use of the potentially-slow rhnServerNeededPackageCache view. - Handle duplicate serverpackage entries while fixing duplicate evr ids. (bsc#1075345) - Fix duplicate entries in channel listings. - Handle nevra not found case while fixing duplicate evr ids. (bsc#1074508) - Added a script which will remove existing server locks against minions. (bsc#1064258) - Add column to store the 'test' option for state apply actions. - Adding initial version of web ui notifications. susemanager-sls: - Compare osmajorrelease in jinja always as integer. - Python3 compatibility fixes in modules and states. - Fix cleanup state error when deleting ssh-push minion. (bsc#1070161) - Fix image inspect when entrypoint is used by overwriting it. (bsc#1070782) susemanager-sync-data: - Use TLS for mirroring OES2018 channels. (bsc#1074430) - Add SUSE Manager Server 3.0 and 3.1 channels for mirroring. virtual-host-gatherer: - Add VM state as info gathered from VMware. (bsc#1063759) - Explore the entire tree of nodes from VMware. (bsc#1070597)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update fixes the following issues: nutch: - Fix hadoop log dir. (bsc#1061574) osad, rhnlib: - Fix update mechanism when updating the updateservice (bsc#1073619) pxe-default-image: - Spectre and Meltdown mitigation. (CVE-2017-5753, CVE-2017-5715, CVE-2017-5754, bsc#1068032) spacecmd: - Support multiple FQDNs per system. (bsc#1063419) - Added custom JSON encoder in order to parse date fields correctly. (bsc#1070372) spacewalk-backend: - Fix spacewalk-data-fsck restore of broken package database entry. (bsc#1071526) - Support multiple FQDNs per system. (bsc#1063419) - Fix restore hostname and ip*addr in templated documents. (bsc#1075044) - Fix directory name in spacewalk-data-fsck. spacewalk-branding: - Replace custom states with configuration channels. - Fix pre formatted code. (bsc#1067608) - Fix message about package profile sync. (bsc#1073739) - Fix naming of the Tools channel. (bsc#979633) spacewalk-client-tools: - Support multiple FQDNs per system. (bsc#1063419) - Fix update mechanism when updating the updateservice. (bsc#1073619) spacewalk-java: - Fix the file count for deployed files. (bsc#1074300) - Remove previous activation keys when migrating to salt. (bsc#1031081) - Improve webui for comparing files. (bsc#1076201) - Separate Salt calls based on config revisions and server grouping. (bsc#1074854) - For minion, no option to modifiy config file but just view. - Handle gpg_check correctly. (bsc#1076578) - Uniform date formatting in System Details view. (bsc#1045289) - Import content of custom states from filesystem to database on startup, backup old state files. - Change the directory of the (normal) configuration channels from mgr_cfg_org_N to manager_org_N. - Replace custom states with configuration channels. - Hide ownership/permission fields from create/upload config file forms for state channels. (bsc#1072153) - Hide files from state channels from deploy/compare file lists. (bsc#1072160) - Disable and hide deploy files tab for state config channels. (bsc#1072157) - Allow ordering config channels in state revision. - Disallow creating 'normal' config channels when a 'state' channel with the same name and org already exists and vice versa. - UI has been updated to manage state channels. - Support multiple FQDNs per system. (bsc#1063419) - Setting 'Base Channels' as default tab for 'Channels' tab in SSM Overview screen. (bsc#979616) - Log triggers that are in ERROR state. - Refresh pillar data on formular change. (bsc#1028285) - Uniform the notification message when rebooting a system. (bsc#1036302) - Avoid use of the potentially-slow rhnServerNeededPackageCache view. - Speed up scheduling of package updates through the SSM. (bsc#1076034) - Fix encoding/decoding of url_bounce with more parameters. (bsc#1075408) - After dry-run, sync channels back with the server. (bsc#1071468) - Fix message about package profile sync. (bsc#1073739) - On registration, assign server to the organization of the creator when activation key is empty. (bsc#1016377) - Fix logging issues when saving autoyast profiles. (bsc#1073474) - Add VM state as info gathered from VMware. (bsc#1063759) - Improve performance of token checking, when RPMs or metadata are downloaded from minions. (bsc#1061273) - Allow selecting unnamed context in kubeconfig. (bsc#1073482) - Fix action names and date formatting in system event history. (bsc#1073713) - Fix incorrect 'os-release' report after SP migration. (bsc#1071553) - Fix failed package installation when in RES 32 and 64 bit packages are installed together. (bsc#1071314) - Add user preferences in order to change items-per-page. (bsc#1055296) - Order salt formulas alphabetically. (bsc#1022077) - Improved error message. (bsc#1064258) - Display messages about wrong input more end-user friendly. (bsc#1015956) - Add api calls for content staging. - Fix content refresh when product keys change. (bsc#1069943) - Allow 'Package List Refresh' when package arch has changed. (bsc#1065259) - New API call for scheduling highstate application. - Adding initial version of web ui notifications. - Show the time on the event history page in the users preferred timezone. spacewalk-reports, spacewalk-search: - More rhnServerNetwork refactoring (bsc#1063419) spacewalk-utils: - Remove restrictions imposed on regex used in 'removelist' parameter passed to spacewalk-clone-by-date that allowed only exact match. (bsc#1075254) spacewalk-web: - Replace custom states with configuration channels. - Add 'yaml' option for Ace editor. - Add links to salt formula list and adjust behavior. (bsc#1022078) - Allow selecting unnamed context in kubeconfig. (bsc#1073482) - Add user preferences in order to change items-per-page. (bsc#1055296) - Fix main menu column height. - Adding initial version of web ui notifications. susemanager: - Fix custom SERVER_KEY overriding. (bsc#1075862) - Detect subvolumes on /var even with newer btrfs tools. (bsc#1077076) - Notify admin that database backups need reconfiguration after db upgrade. - Add syslinux-x86_64 dependency for ppc64le. (bsc#1065023) - Do not try to force db encoding on db upgrade; use same value as for installation. (bsc#1077730) susemanager-schema: - Make migration idempotent. (bsc#1078749) - Fix schema with proper extension. (bsc#1079820) - Migrate old custom states to state channels, assign systems to these new channels, delete old custom-state-to-system assignments, delete the custom states from the db; Before migrating, rename custom states with same name as existing configuration channel labels. - Update queries for global channels. - Check if channel is already subscribed even before checking if parent channel is subscribed or not. (bsc#1072797) - Support multiple FQDNs per system. (bsc#1063419) - Avoid use of the potentially-slow rhnServerNeededPackageCache view. - Handle duplicate serverpackage entries while fixing duplicate evr ids. (bsc#1075345) - Fix duplicate entries in channel listings. - Handle nevra not found case while fixing duplicate evr ids. (bsc#1074508) - Added a script which will remove existing server locks against minions. (bsc#1064258) - Add column to store the 'test' option for state apply actions. - Adding initial version of web ui notifications. susemanager-sls: - Compare osmajorrelease in jinja always as integer. - Python3 compatibility fixes in modules and states. - Fix cleanup state error when deleting ssh-push minion. (bsc#1070161) - Fix image inspect when entrypoint is used by overwriting it. (bsc#1070782) susemanager-sync-data: - Use TLS for mirroring OES2018 channels. (bsc#1074430) - Add SUSE Manager Server 3.0 and 3.1 channels for mirroring. virtual-host-gatherer: - Add VM state as info gathered from VMware. (bsc#1063759) - Explore the entire tree of nodes from VMware. (bsc#1070597)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1015956
- https://bugzilla.suse.com/1016377
- https://bugzilla.suse.com/1022077
- https://bugzilla.suse.com/1022078
- https://bugzilla.suse.com/1028285
- https://bugzilla.suse.com/1031081
- https://bugzilla.suse.com/1036302
- https://bugzilla.suse.com/1045289
- https://bugzilla.suse.com/1055296
- https://bugzilla.suse.com/1061273
- https://bugzilla.suse.com/1061574
- https://bugzilla.suse.com/1063419
- https://bugzilla.suse.com/1063759
- https://bugzilla.suse.com/1064258
- https://bugzilla.suse.com/1065023
- https://bugzilla.suse.com/1065259
- https://bugzilla.suse.com/1067608
- https://bugzilla.suse.com/1068032
- https://bugzilla.suse.com/1069943
- https://bugzilla.suse.com/1070161
- https://bugzilla.suse.com/1070372
- https://bugzilla.suse.com/1070597
- https://bugzilla.suse.com/1070782
- https://bugzilla.suse.com/1071314
- https://bugzilla.suse.com/1071468
- https://bugzilla.suse.com/1071526
- https://bugzilla.suse.com/1071553
- https://bugzilla.suse.com/1072153
- https://bugzilla.suse.com/1072157
- https://bugzilla.suse.com/1072160
- https://bugzilla.suse.com/1072797
- https://bugzilla.suse.com/1073474
- https://bugzilla.suse.com/1073482
- https://bugzilla.suse.com/1073619
- https://bugzilla.suse.com/1073713
- https://bugzilla.suse.com/1073739
- https://bugzilla.suse.com/1074300
- https://bugzilla.suse.com/1074430
- https://bugzilla.suse.com/1074508
- https://bugzilla.suse.com/1074854
- https://bugzilla.suse.com/1075044
- https://bugzilla.suse.com/1075254
- https://bugzilla.suse.com/1075345
- https://bugzilla.suse.com/1075408
- https://bugzilla.suse.com/1075862
- https://bugzilla.suse.com/1076034
- https://bugzilla.suse.com/1076201
- https://bugzilla.suse.com/1076578
- https://bugzilla.suse.com/1077076
- https://bugzilla.suse.com/1077730
- https://bugzilla.suse.com/1078749
- https://bugzilla.suse.com/1079820
- https://bugzilla.suse.com/979616
- https://bugzilla.suse.com/979633
- https://www.suse.com/security/cve/CVE-2017-5715
- https://www.suse.com/security/cve/CVE-2017-5753
- https://www.suse.com/security/cve/CVE-2017-5754
- https://www.suse.com/support/update/announcement/2018/suse-su-20180552-2/