SUSE-SU-2018:0552-1: nutch&distro=SUSE Manager Server 3.1 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2018:0552-1 is a vulnerability in nutch&distro=SUSE Manager Server 3.1 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 08-03-2018
   PublishedVulnerability first disclosed.
2. 04-02-2026
   Last modifiedVulnerability information updated.

Description

Security update for SUSE Manager Server 3.1 This update fixes the following issues: nutch: - Fix hadoop log dir. (bsc#1061574) osad, rhnlib: - Fix update mechanism when updating the updateservice (bsc#1073619) pxe-default-image: - Spectre and Meltdown mitigation. (CVE-2017-5753, CVE-2017-5715, CVE-2017-5754, bsc#1068032) spacecmd: - Support multiple FQDNs per system. (bsc#1063419) - Added custom JSON encoder in order to parse date fields correctly. (bsc#1070372) spacewalk-backend: - Fix spacewalk-data-fsck restore of broken package database entry. (bsc#1071526) - Support multiple FQDNs per system. (bsc#1063419) - Fix restore hostname and ip*addr in templated documents. (bsc#1075044) - Fix directory name in spacewalk-data-fsck. spacewalk-branding: - Replace custom states with configuration channels. - Fix pre formatted code. (bsc#1067608) - Fix message about package profile sync. (bsc#1073739) - Fix naming of the Tools channel. (bsc#979633) spacewalk-client-tools: - Support multiple FQDNs per system. (bsc#1063419) - Fix update mechanism when updating the updateservice. (bsc#1073619) spacewalk-java: - Fix the file count for deployed files. (bsc#1074300) - Remove previous activation keys when migrating to salt. (bsc#1031081) - Improve webui for comparing files. (bsc#1076201) - Separate Salt calls based on config revisions and server grouping. (bsc#1074854) - For minion, no option to modifiy config file but just view. - Handle gpg_check correctly. (bsc#1076578) - Uniform date formatting in System Details view. (bsc#1045289) - Import content of custom states from filesystem to database on startup, backup old state files. - Change the directory of the (normal) configuration channels from mgr_cfg_org_N to manager_org_N. - Replace custom states with configuration channels. - Hide ownership/permission fields from create/upload config file forms for state channels. (bsc#1072153) - Hide files from state channels from deploy/compare file lists. (bsc#1072160) - Disable and hide deploy files tab for state config channels. (bsc#1072157) - Allow ordering config channels in state revision. - Disallow creating 'normal' config channels when a 'state' channel with the same name and org already exists and vice versa. - UI has been updated to manage state channels. - Support multiple FQDNs per system. (bsc#1063419) - Setting 'Base Channels' as default tab for 'Channels' tab in SSM Overview screen. (bsc#979616) - Log triggers that are in ERROR state. - Refresh pillar data on formular change. (bsc#1028285) - Uniform the notification message when rebooting a system. (bsc#1036302) - Avoid use of the potentially-slow rhnServerNeededPackageCache view. - Speed up scheduling of package updates through the SSM. (bsc#1076034) - Fix encoding/decoding of url_bounce with more parameters. (bsc#1075408) - After dry-run, sync channels back with the server. (bsc#1071468) - Fix message about package profile sync. (bsc#1073739) - On registration, assign server to the organization of the creator when activation key is empty. (bsc#1016377) - Fix logging issues when saving autoyast profiles. (bsc#1073474) - Add VM state as info gathered from VMware. (bsc#1063759) - Improve performance of token checking, when RPMs or metadata are downloaded from minions. (bsc#1061273) - Allow selecting unnamed context in kubeconfig. (bsc#1073482) - Fix action names and date formatting in system event history. (bsc#1073713) - Fix incorrect 'os-release' report after SP migration. (bsc#1071553) - Fix failed package installation when in RES 32 and 64 bit packages are installed together. (bsc#1071314) - Add user preferences in order to change items-per-page. (bsc#1055296) - Order salt formulas alphabetically. (bsc#1022077) - Improved error message. (bsc#1064258) - Display messages about wrong input more end-user friendly. (bsc#1015956) - Add api calls for content staging. - Fix content refresh when product keys change. (bsc#1069943) - Allow 'Package List Refresh' when package arch has changed. (bsc#1065259) - New API call for scheduling highstate application. - Adding initial version of web ui notifications. - Show the time on the event history page in the users preferred timezone. spacewalk-reports, spacewalk-search: - More rhnServerNetwork refactoring (bsc#1063419) spacewalk-utils: - Remove restrictions imposed on regex used in 'removelist' parameter passed to spacewalk-clone-by-date that allowed only exact match. (bsc#1075254) spacewalk-web: - Replace custom states with configuration channels. - Add 'yaml' option for Ace editor. - Add links to salt formula list and adjust behavior. (bsc#1022078) - Allow selecting unnamed context in kubeconfig. (bsc#1073482) - Add user preferences in order to change items-per-page. (bsc#1055296) - Fix main menu column height. - Adding initial version of web ui notifications. susemanager: - Fix custom SERVER_KEY overriding. (bsc#1075862) - Detect subvolumes on /var even with newer btrfs tools. (bsc#1077076) - Notify admin that database backups need reconfiguration after db upgrade. - Add syslinux-x86_64 dependency for ppc64le. (bsc#1065023) - Do not try to force db encoding on db upgrade; use same value as for installation. (bsc#1077730) susemanager-schema: - Make migration idempotent. (bsc#1078749) - Fix schema with proper extension. (bsc#1079820) - Migrate old custom states to state channels, assign systems to these new channels, delete old custom-state-to-system assignments, delete the custom states from the db; Before migrating, rename custom states with same name as existing configuration channel labels. - Update queries for global channels. - Check if channel is already subscribed even before checking if parent channel is subscribed or not. (bsc#1072797) - Support multiple FQDNs per system. (bsc#1063419) - Avoid use of the potentially-slow rhnServerNeededPackageCache view. - Handle duplicate serverpackage entries while fixing duplicate evr ids. (bsc#1075345) - Fix duplicate entries in channel listings. - Handle nevra not found case while fixing duplicate evr ids. (bsc#1074508) - Added a script which will remove existing server locks against minions. (bsc#1064258) - Add column to store the 'test' option for state apply actions. - Adding initial version of web ui notifications. susemanager-sls: - Compare osmajorrelease in jinja always as integer. - Python3 compatibility fixes in modules and states. - Fix cleanup state error when deleting ssh-push minion. (bsc#1070161) - Fix image inspect when entrypoint is used by overwriting it. (bsc#1070782) susemanager-sync-data: - Use TLS for mirroring OES2018 channels. (bsc#1074430) - Add SUSE Manager Server 3.0 and 3.1 channels for mirroring. virtual-host-gatherer: - Add VM state as info gathered from VMware. (bsc#1063759) - Explore the entire tree of nodes from VMware. (bsc#1070597)

No weakness data has been published for this record.