FlawAtlas
Search the atlas
SUSE-SU-2020:2373-1 Not scored

Security update for SUSE Manager Server 4.1

This update fixes the following issues: cobbler: - More old modules naming fixes (bsc#1169553) image-sync-formula: - Allow image-sync state on regular minion. Image sync state requires branch-network pillars to get the directory where to sync images. Use default `/srv/saltboot` if that pillar is missing so image-sync can be applied on non branch minions as well. mgr-libmod: - Remove unnecessary array wrap in 'list_modules' response object mgr-osad: - Move uyuni-base-common dependency from mgr-osad to mgr-osa-dispatcher (bsc#1174405) openvpn-formula: - Add hint that ssl certs must be on system (bsc#1172279) patterns-suse-manager: - Add Recommends for golang-github-QubitProducts-exporter_exporter prometheus-exporters-formula: - Bugfix: Handle exporters proxy for unsupported distros (bsc#1175555) - Add support for exporters proxy (exporter_exporter) pxe-default-image-sle15: - Rollback the workaround for bsc#1172807, as dracut is now fixed saltboot-formula: - Better fix for rounding errors (bsc#1136857) spacecmd: - Fix softwarechannel update for vendor channels (bsc#1172709) - Fix escaping of package names (bsc#1171281) spacewalk-backend: - Adds basic functionality for gpg check - Verify GPG signature of Ubuntu/Debian repository metadata (Release file) - Take care of SCC auth tokens on DEB repos GPG checks (bsc#1175485) - Use spacewalk keyring for GPG checks on DEB repos (bsc#1175485) spacewalk-branding: - Implement Maintenance Windows - Fix typo on spacewalk-branding license spacewalk-certs-tools: - Strip SSL Certificate Common Name after 63 Characters (bsc#1173535) - Fix centos detection (bsc#1173584) spacewalk-java: - Use media.1/products from media when not specified different (bsc#1175558) - Upgrade jQuery and adapt the code - CVE-2020-11022 (bsc#1172831) - Fix error when rolling back a system to a snapshot (bsc#1173997) - Implement maintenance windows backend - Add check for maintainence window during executing recurring actions - Implement maintenance windows in struts - XMLRPC: Assign/retract maintenance schedule to/from systems - Fix softwarechannel update for vendor channels (bsc#1172709) - Avoid deadlock when syncing channels and registering minions at the same time (bsc#1173566) - Change system list header text to something better (bsc#1173982) - Set CPU and memory info for virtual instances (bsc#1170244) - Add virtual network Start, Stop and Delete actions - Add virtual network list page - Fix httpcomponents and gson jar symlinks (bsc#1174229) - Enhance RedHat product detection for CentOS and OracleLinux (bsc#1173584) - Provide comps.xml and modules.yaml when using onlinerepo for kickstart - Refresh virtualization pages only on events - Fix up2date detection on RH8 when salt-minion is used for registration - Improve performance of the System Groups page with many clients (bsc#1172839) - Include number of non-patch package updates to non-critical update counts in system group pages (bsc#1170468) - Bump XMLRPC API version number to distinguish from Spacewalk 2.10 - Cluster UI: return to overview page after scheduling actions - Fix NPE on auto installation when no kernel options are given (bsc#1173932) - Fix issue with disabling self_update for autoyast autoupgrade (bsc#1170654) - Adapt expectations for jobs return events after switching Salt states to use 'mgrcompat.module_run' state. spacewalk-utils: - Add aarch64 for openSUSE Leap 15.1 and 15.2 spacewalk-web: - Upgrade jQuery and adapt the code - CVE-2020-11022 (bsc#1172831) - Fix JS linting errors/warnings - Enable Nutanix AHV virtual host gatherer. - Web UI: Implement managing maintenance schedules and calendars - Warn when a system is in multiple groups that configure the same formula in the system formula's UI (bsc#1173554) - Add virtual network start, stop and delete actions - Add virtual network list page - Fix internal server error when creating module filters in CLM (bsc#1174325) - Fix VM creation page when there is no volume in the default storage pool - Refresh virtualization pages only on events - Product list in the Wizard doesn't show SLE products first (bsc#1173522) - Cluster UI: return to overview page after scheduling actions - Changes in the logic to update the tick icon. - For the postgres localhost:5432 case, use the - Fix internal server errors by returning 0 instead of dying - Add missing dependency to spacewalk-base-minimal (bsc#678126) - Change kickstart to autoinstallation in navigation on pxt pages - Debranding suseRegisterInfo: - Enhance RedHat product detection for CentOS and OracleLinux (bsc#1173584) susemanager: - Migrate all occurrences of kickstart to autoinstall in cobbler database (bsc#1169780) - Define bootstrap repo data for SUSE Manager Proxies (bsc#1174470) - Add SLE 15 LTSS Product ID to SLE15 bootstrap repositories, as it is required to get python3-M2crypto (bsc#1174167) susemanager-doc-indexes: - Left navigation structure cleaned up - Fixed several broken xrefs - Added hostname admonition for public cloud sections - Clarified Branch Proxy configuration instructions - Fixed index page pdf links, urls were 1 step to deep - SUSECOM 2020 branding update - PDF 2020 branding update - WEBUI 2020 branding update - Added maintenance window documentation - Added SLE client chapter - Added 508 compliance - Added reverse proxy information to Monitoring in Admin Guide - Add note about accessibility to index - In the Upgrade Guide, use Major, Minor, and Patch Level terminology for versioning. - Added docs for nutanix VHM - Ubuntu clients using the CLI in SUMA (bsc#1174025) susemanager-docs_en: - Left navigation structure cleaned up - Fixed several broken xrefs - Added hostname admonition for public cloud sections - Clarified Branch Proxy configuration instructions - Fixed index page pdf links, urls were 1 step to deep - SUSECOM 2020 branding update - PDF 2020 branding update - WEBUI 2020 branding update - Added maintenance window documentation - Added SLE client chapter - Added 508 compliance - Added reverse proxy information to Monitoring in Admin Guide - Add note about accessibility to index - In the Upgrade Guide, use Major, Minor, and Patch Level terminology for versioning. - Added docs for nutanix VHM - Ubuntu clients using the CLI in SUMA (bsc#1174025) susemanager-frontend-libs: - Upgrade jquery to 3.5.1 - CVE-2020-11022 (bsc#1172831) susemanager-schema: - Add new states and types for virtual instances in order to support Nutanix AHV. - Implement Maintenance Windows - Add virtual network state change action - Internal fixes to avoid problems with the idempotency tests susemanager-sls: - Fix the dnf plugin to add the token to the HTTP header (bsc#1175724) - Fix: supply a dnf base when dealing w/repos (bsc#1172504) - Fix: autorefresh in repos is zypper-only - Add virtual network state change state to handle start, stop and delete - Add virtual network state change state to handle start and stop - Fetch oracle-release when looking for RedHat Product Info (bsc#1173584) - Force a refresh after deleting a virtual storage volume - Prevent stuck Hardware Refresh actions on Salt 2016.11.10 based SSH minions (bsc#1173169) - Require PyYAML version >= 5.1 - Log out of Docker registries after image build (bsc#1165572) - Prevent 'module.run' deprecation warnings by using custom mgrcompat module susemanager-sync-data: - Remove version from centos and oracle linux identifier (bsc#1173584) uyuni-common-libs: - Fix issues importing RPM packages with long RPM headers (bsc#1174965) virtual-host-gatherer: - Add new gatherer module for Nutanix AHV. virtualization-host-formula: - Ensure kernel-default and libvirt-python3 are installed - Set bridge network as default - Fix conditionals (bsc#1175791) yomi-formula: - Update to version 0.0.1+git.1595952633.b300be2: * pillar: install always kernel-default * chroot: python3-base is now a capability * Move systemctl calls inside chroot * Network: initial work for network declaration * MicroOS: Remove tmp subvolume * Update format following the new standard * Fix __mount_device wrapper httpcomponents-core: - Include the correct package in SUSE Manager Server (no source changes) httpcomponents-client: - Include the correct package in SUSE Manager Server (no source changes) google-gson: - Include the correct package in SUSE Manager Server (no source changes) How to apply this update: 1. Log in as root user to the SUSE Manager server. 2. Stop the Spacewalk service: spacewalk-service stop 3. Apply the patch using either zypper patch or YaST Online Update. 4. Upgrade the database schema: spacewalk-schema-upgrade 5. Start the Spacewalk service: spacewalk-service start

Exploit probability Not scored
Published August 28, 2020
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Manager Proxy Module 4.1 patterns-suse-manager
SUSE:Manager Proxy Module 4.1 spacewalk-backend
SUSE:Manager Server Module 4.1 virtualization-host-formula
SUSE:Manager Server Module 4.1 susemanager-doc-indexes
SUSE:Manager Server Module 4.1 spacewalk-branding
SUSE:Manager Proxy Module 4.1 uyuni-common-libs
SUSE:Manager Proxy Module 4.1 spacewalk-web
SUSE:Manager Server Module 4.1 susemanager-docs_en
SUSE:Manager Server Module 4.1 golang-github-QubitProducts-exporter_exporter
SUSE:Manager Server Module 4.1 pxe-default-image-sle15
SUSE:Manager Server Module 4.1 google-gson
SUSE:Manager Server Module 4.1 mgr-osad
SUSE:Manager Server Module 4.1 susemanager-frontend-libs
SUSE:Manager Proxy Module 4.1 spacewalk-certs-tools
SUSE:Manager Server Module 4.1 spacewalk-web
SUSE:Manager Server Module 4.1 susemanager-schema
SUSE:Manager Server Module 4.1 httpcomponents-core
SUSE:Manager Proxy Module 4.1 suseRegisterInfo
SUSE:Manager Proxy Module 4.1 mgr-osad
SUSE:Manager Server Module 4.1 uyuni-common-libs
SUSE:Manager Server Module 4.1 patterns-suse-manager
SUSE:Manager Proxy Module 4.1 golang-github-QubitProducts-exporter_exporter
SUSE:Manager Server Module 4.1 saltboot-formula
SUSE:Manager Proxy Module 4.1 spacewalk-proxy
SUSE:Manager Server Module 4.1 virtual-host-gatherer
SUSE:Manager Server Module 4.1 susemanager-sls
SUSE:Manager Server Module 4.1 prometheus-exporters-formula
SUSE:Manager Server Module 4.1 suseRegisterInfo
SUSE:Manager Server Module 4.1 mgr-libmod
SUSE:Manager Server Module 4.1 spacewalk-utils
SUSE:Manager Server Module 4.1 yomi-formula
SUSE:Manager Server Module 4.1 image-sync-formula
SUSE:Manager Server Module 4.1 spacewalk-backend
SUSE:Manager Proxy Module 4.1 spacecmd
SUSE:Manager Server Module 4.1 spacecmd
SUSE:Manager Server Module 4.1 susemanager-sync-data
SUSE:Manager Server Module 4.1 spacewalk-java
SUSE:Manager Server Module 4.1 susemanager
SUSE:Manager Server Module 4.1 httpcomponents-client
SUSE:Manager Server Module 4.1 spacewalk-certs-tools
SUSE:Manager Server Module 4.1 openvpn-formula
SUSE:Manager Server Module 4.1 ical4j
SUSE:Manager Server Module 4.1 cobbler

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2020:2373-1

This update fixes the following issues: cobbler: - More old modules naming fixes (bsc#1169553) image-sync-formula: - Allow image-sync state on regular minion. Image sync state requires branch-network pillars to get the directory where to sync images. Use default `/srv/saltboot` if that pillar is missing so image-sync can be applied on non branch minions as well. mgr-libmod: - Remove unnecessary array wrap in 'list_modules' response object mgr-osad: - Move uyuni-base-common dependency from mgr-osad to mgr-osa-dispatcher (bsc#1174405) openvpn-formula: - Add hint that ssl certs must be on system (bsc#1172279) patterns-suse-manager: - Add Recommends for golang-github-QubitProducts-exporter_exporter prometheus-exporters-formula: - Bugfix: Handle exporters proxy for unsupported distros (bsc#1175555) - Add support for exporters proxy (exporter_exporter) pxe-default-image-sle15: - Rollback the workaround for bsc#1172807, as dracut is now fixed saltboot-formula: - Better fix for rounding errors (bsc#1136857) spacecmd: - Fix softwarechannel update for vendor channels (bsc#1172709) - Fix escaping of package names (bsc#1171281) spacewalk-backend: - Adds basic functionality for gpg check - Verify GPG signature of Ubuntu/Debian repository metadata (Release file) - Take care of SCC auth tokens on DEB repos GPG checks (bsc#1175485) - Use spacewalk keyring for GPG checks on DEB repos (bsc#1175485) spacewalk-branding: - Implement Maintenance Windows - Fix typo on spacewalk-branding license spacewalk-certs-tools: - Strip SSL Certificate Common Name after 63 Characters (bsc#1173535) - Fix centos detection (bsc#1173584) spacewalk-java: - Use media.1/products from media when not specified different (bsc#1175558) - Upgrade jQuery and adapt the code - CVE-2020-11022 (bsc#1172831) - Fix error when rolling back a system to a snapshot (bsc#1173997) - Implement maintenance windows backend - Add check for maintainence window during executing recurring actions - Implement maintenance windows in struts - XMLRPC: Assign/retract maintenance schedule to/from systems - Fix softwarechannel update for vendor channels (bsc#1172709) - Avoid deadlock when syncing channels and registering minions at the same time (bsc#1173566) - Change system list header text to something better (bsc#1173982) - Set CPU and memory info for virtual instances (bsc#1170244) - Add virtual network Start, Stop and Delete actions - Add virtual network list page - Fix httpcomponents and gson jar symlinks (bsc#1174229) - Enhance RedHat product detection for CentOS and OracleLinux (bsc#1173584) - Provide comps.xml and modules.yaml when using onlinerepo for kickstart - Refresh virtualization pages only on events - Fix up2date detection on RH8 when salt-minion is used for registration - Improve performance of the System Groups page with many clients (bsc#1172839) - Include number of non-patch package updates to non-critical update counts in system group pages (bsc#1170468) - Bump XMLRPC API version number to distinguish from Spacewalk 2.10 - Cluster UI: return to overview page after scheduling actions - Fix NPE on auto installation when no kernel options are given (bsc#1173932) - Fix issue with disabling self_update for autoyast autoupgrade (bsc#1170654) - Adapt expectations for jobs return events after switching Salt states to use 'mgrcompat.module_run' state. spacewalk-utils: - Add aarch64 for openSUSE Leap 15.1 and 15.2 spacewalk-web: - Upgrade jQuery and adapt the code - CVE-2020-11022 (bsc#1172831) - Fix JS linting errors/warnings - Enable Nutanix AHV virtual host gatherer. - Web UI: Implement managing maintenance schedules and calendars - Warn when a system is in multiple groups that configure the same formula in the system formula's UI (bsc#1173554) - Add virtual network start, stop and delete actions - Add virtual network list page - Fix internal server error when creating module filters in CLM (bsc#1174325) - Fix VM creation page when there is no volume in the default storage pool - Refresh virtualization pages only on events - Product list in the Wizard doesn't show SLE products first (bsc#1173522) - Cluster UI: return to overview page after scheduling actions - Changes in the logic to update the tick icon. - For the postgres localhost:5432 case, use the - Fix internal server errors by returning 0 instead of dying - Add missing dependency to spacewalk-base-minimal (bsc#678126) - Change kickstart to autoinstallation in navigation on pxt pages - Debranding suseRegisterInfo: - Enhance RedHat product detection for CentOS and OracleLinux (bsc#1173584) susemanager: - Migrate all occurrences of kickstart to autoinstall in cobbler database (bsc#1169780) - Define bootstrap repo data for SUSE Manager Proxies (bsc#1174470) - Add SLE 15 LTSS Product ID to SLE15 bootstrap repositories, as it is required to get python3-M2crypto (bsc#1174167) susemanager-doc-indexes: - Left navigation structure cleaned up - Fixed several broken xrefs - Added hostname admonition for public cloud sections - Clarified Branch Proxy configuration instructions - Fixed index page pdf links, urls were 1 step to deep - SUSECOM 2020 branding update - PDF 2020 branding update - WEBUI 2020 branding update - Added maintenance window documentation - Added SLE client chapter - Added 508 compliance - Added reverse proxy information to Monitoring in Admin Guide - Add note about accessibility to index - In the Upgrade Guide, use Major, Minor, and Patch Level terminology for versioning. - Added docs for nutanix VHM - Ubuntu clients using the CLI in SUMA (bsc#1174025) susemanager-docs_en: - Left navigation structure cleaned up - Fixed several broken xrefs - Added hostname admonition for public cloud sections - Clarified Branch Proxy configuration instructions - Fixed index page pdf links, urls were 1 step to deep - SUSECOM 2020 branding update - PDF 2020 branding update - WEBUI 2020 branding update - Added maintenance window documentation - Added SLE client chapter - Added 508 compliance - Added reverse proxy information to Monitoring in Admin Guide - Add note about accessibility to index - In the Upgrade Guide, use Major, Minor, and Patch Level terminology for versioning. - Added docs for nutanix VHM - Ubuntu clients using the CLI in SUMA (bsc#1174025) susemanager-frontend-libs: - Upgrade jquery to 3.5.1 - CVE-2020-11022 (bsc#1172831) susemanager-schema: - Add new states and types for virtual instances in order to support Nutanix AHV. - Implement Maintenance Windows - Add virtual network state change action - Internal fixes to avoid problems with the idempotency tests susemanager-sls: - Fix the dnf plugin to add the token to the HTTP header (bsc#1175724) - Fix: supply a dnf base when dealing w/repos (bsc#1172504) - Fix: autorefresh in repos is zypper-only - Add virtual network state change state to handle start, stop and delete - Add virtual network state change state to handle start and stop - Fetch oracle-release when looking for RedHat Product Info (bsc#1173584) - Force a refresh after deleting a virtual storage volume - Prevent stuck Hardware Refresh actions on Salt 2016.11.10 based SSH minions (bsc#1173169) - Require PyYAML version >= 5.1 - Log out of Docker registries after image build (bsc#1165572) - Prevent 'module.run' deprecation warnings by using custom mgrcompat module susemanager-sync-data: - Remove version from centos and oracle linux identifier (bsc#1173584) uyuni-common-libs: - Fix issues importing RPM packages with long RPM headers (bsc#1174965) virtual-host-gatherer: - Add new gatherer module for Nutanix AHV. virtualization-host-formula: - Ensure kernel-default and libvirt-python3 are installed - Set bridge network as default - Fix conditionals (bsc#1175791) yomi-formula: - Update to version 0.0.1+git.1595952633.b300be2: * pillar: install always kernel-default * chroot: python3-base is now a capability * Move systemctl calls inside chroot * Network: initial work for network declaration * MicroOS: Remove tmp subvolume * Update format following the new standard * Fix __mount_device wrapper httpcomponents-core: - Include the correct package in SUSE Manager Server (no source changes) httpcomponents-client: - Include the correct package in SUSE Manager Server (no source changes) google-gson: - Include the correct package in SUSE Manager Server (no source changes) How to apply this update: 1. Log in as root user to the SUSE Manager server. 2. Stop the Spacewalk service: spacewalk-service stop 3. Apply the patch using either zypper patch or YaST Online Update. 4. Upgrade the database schema: spacewalk-schema-upgrade 5. Start the Spacewalk service: spacewalk-service start

View original source

05 / REFERENCES

Further evidence