SUSE-SU-2019:2521-1: cobbler&distro=SUSE Manager Server 3.2 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2019:2521-1 is a vulnerability in cobbler&distro=SUSE Manager Server 3.2 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 02-10-2019
   PublishedVulnerability first disclosed.
2. 04-02-2026
   Last modifiedVulnerability information updated.

Description

Security update for SUSE Manager Server 3.2 This update fixes the following issues: cobbler: - Jinja2 template library fix (bsc#1141661) pgjdbc-ng: - Allow dots in database name (bsc#1146416) py26-compat-salt: - Get tornado dependency from the system on SLE12 (bsc#1149409) - Catch SSLError for TLS 1.2 bootstraps with RES/RHEL6 and SLE11 (bsc#1147126) spacecmd: - Check that a channel doesn't have clones before deleting it (bsc#1138454) spacewalk-backend: - Remove credentials also from potential rhn.conf backup files in spacewalk-debug (bsc#1146419) - Do not make 'rhn-satellite-exporter' to crash with 'AttributeError' (bsc#1146869) - Spacewalk-remove-channel check that channel doesn't have cloned channels before deleting it (bsc#1138454) - Prevent duplicate changelog entries due VARCHAR(3000) db text column (bsc#1144889) - Avoid traceback on mgr-inter-sync when exception message contains UTF8 characters or there are problems with the package cache (bsc#1143016) registered guest (bsc#1093381) spacewalk-branding: - Add missing strings for task status page spacewalk-client-tools: - Invalidate cache 5 minutes before actual expiration(bsc#1143562) spacewalk-java: - Add UI message when salt-formulas system folders are unreachable (bsc#1142309) - Don't convert localhost repositories URL in mirror case (bsc#1135957) - Check that a channel doesn't have clones before deleting it (bsc#1138454) - Improve websocket authentication to prevent errors in logs (bsc#1138454) - Normalize date formats for actions, notifications and clm (bsc#1142774) - Cloning Errata from a specific channel should not take packages from other channels (bsc#1142764) - Add susemanager as prerequired for spacewalk-java - Improve performance for retrieving the user permissions on channels (bsc#1140644) - Prerequire salt package to avoid not existing user issues - Support partly patched CVEs in CVE audit (bsc#1137229) spacewalk-setup: - Configure 150 Tomcat workers by default, matching httpds MaxClients spacewalk-utils: - Common-channels: Fix repo type assignment for type YUM - Adds support for Ubuntu and Debian channels to spacewalk-common-channels. spacewalk-web: - Fix the 'include recommended' button on channels selection in SSM (bsc#1145086) - Normalize date formats for actions, notifications and clm (bsc#1142774) - Add unsupported browser warning when using Internet Explorer susemanager: - Dmidecode does not exist on s390x (bsc#1145119) susemanager-docs_en: - Add link to the creation of the bootstrap script (bsc#1146895). - Improve adoc tagging. - LimitNOFILE back-port. - Fix command-line error (bsc#1096426). susemanager-schema: - Improve performance for retrieving the user permissions on channels (bsc#1140644) susemanager-sls: - Bootstrapping RES6/RHEL6/SLE11 with TLS1.2 now shows error message. (bsc#1147126) - Dmidecode does not exist on ppc64le and s390x (bsc#1145119) - Update susemanager.conf to use adler32 for computing the server_id for new minions tika-core: New upstream version 1.2.2. Fixes security issues: - CVE-2019-10088: Fixed an OOM from a crafted Zip File in Apache Tika's RecursiveParserWrapper (bsc#1144500). - CVE-2019-10093: Fixed a Denial of Service in Apache Tika's 2003ml and 2006ml Parsers (bsc#1144510). - CVE-2019-10094: Fixed a stack overflow from crafted compressed files in Apache Tika's RecursiveParserWrapper (bsc#1144515).

No weakness data has been published for this record.