{"schemaVersion":3,"id":"SUSE-SU-2019:2521-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for SUSE Manager Server 3.2\n\n\nThis update fixes the following issues:\n\ncobbler:\n\n- Jinja2 template library fix (bsc#1141661)\n\npgjdbc-ng:\n\n- Allow dots in database name (bsc#1146416)\n\npy26-compat-salt:\n\n- Get tornado dependency from the system on SLE12 (bsc#1149409)\n- Catch SSLError for TLS 1.2 bootstraps with RES/RHEL6 and SLE11 (bsc#1147126)\n\nspacecmd:\n\n- Check that a channel doesn't have clones before deleting it (bsc#1138454)\n\nspacewalk-backend:\n\n- Remove credentials also from potential rhn.conf backup files in spacewalk-debug (bsc#1146419)\n- Do not make 'rhn-satellite-exporter' to crash with 'AttributeError' (bsc#1146869)\n- Spacewalk-remove-channel check that channel doesn't have cloned channels before deleting it (bsc#1138454)\n- Prevent duplicate changelog entries due VARCHAR(3000)\n  db text column (bsc#1144889)\n- Avoid traceback on mgr-inter-sync when exception message\n  contains UTF8 characters or there are problems with the\n  package cache (bsc#1143016)\n  registered guest (bsc#1093381)\n\nspacewalk-branding:\n\n- Add missing strings for task status page\n\nspacewalk-client-tools:\n\n- Invalidate cache 5 minutes before actual expiration(bsc#1143562)\n\nspacewalk-java:\n\n- Add UI message when salt-formulas system folders are unreachable (bsc#1142309)\n- Don't convert localhost repositories URL in mirror case (bsc#1135957)\n- Check that a channel doesn't have clones before deleting it (bsc#1138454)\n- Improve websocket authentication to prevent errors in logs (bsc#1138454)\n- Normalize date formats for actions, notifications and clm (bsc#1142774)\n- Cloning Errata from a specific channel should not take packages\n  from other channels (bsc#1142764)\n- Add susemanager as prerequired for spacewalk-java\n- Improve performance for retrieving the user permissions on channels (bsc#1140644)\n- Prerequire salt package to avoid not existing user issues\n- Support partly patched CVEs in CVE audit (bsc#1137229)\n\nspacewalk-setup:\n\n- Configure 150 Tomcat workers by default, matching httpds MaxClients\n\nspacewalk-utils:\n\n- Common-channels: Fix repo type assignment for type YUM\n- Adds support for Ubuntu and Debian channels to spacewalk-common-channels.\n\nspacewalk-web:\n\n- Fix the 'include recommended' button on channels selection in SSM (bsc#1145086)\n- Normalize date formats for actions, notifications and clm (bsc#1142774)\n- Add unsupported browser warning when using Internet Explorer\n\nsusemanager:\n\n- Dmidecode does not exist on s390x (bsc#1145119)\n\nsusemanager-docs_en:\n\n- Add link to the creation of the bootstrap script (bsc#1146895).\n- Improve adoc tagging.\n- LimitNOFILE back-port.\n- Fix command-line error (bsc#1096426).\n\nsusemanager-schema:\n\n- Improve performance for retrieving the user permissions on channels (bsc#1140644)\n\nsusemanager-sls:\n\n- Bootstrapping RES6/RHEL6/SLE11 with TLS1.2 now shows error message. (bsc#1147126)\n- Dmidecode does not exist on ppc64le and s390x (bsc#1145119)\n- Update susemanager.conf to use adler32 for computing the server_id for new minions\n\ntika-core:\n\nNew upstream version 1.2.2. Fixes security issues:\n\n- CVE-2019-10088: Fixed an OOM from a crafted Zip File in Apache Tika's RecursiveParserWrapper (bsc#1144500).\n- CVE-2019-10093: Fixed a Denial of Service in Apache Tika's 2003ml and 2006ml Parsers (bsc#1144510).\n- CVE-2019-10094: Fixed a stack overflow from crafted compressed files in Apache Tika's RecursiveParserWrapper (bsc#1144515).","dates":{"published":"2019-10-02T12:50:20.000Z","modified":"2026-02-04T04:30:58.027Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"cobbler&distro=SUSE Manager Server 3.2","name":"cobbler","label":"cobbler&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cobbler&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.6.6-6.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.6-6.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"pgjdbc-ng&distro=SUSE Manager Server 3.2","name":"pgjdbc-ng","label":"pgjdbc-ng&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/pgjdbc-ng&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 0.7.1-2.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.7.1-2.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"py26-compat-salt&distro=SUSE Manager Server 3.2","name":"py26-compat-salt","label":"py26-compat-salt&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/py26-compat-salt&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2016.11.10-6.32.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2016.11.10-6.32.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacecmd&distro=SUSE Manager Server 3.2","name":"spacecmd","label":"spacecmd&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacecmd&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.8.25.11-3.23.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.25.11-3.23.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-backend&distro=SUSE Manager Server 3.2","name":"spacewalk-backend","label":"spacewalk-backend&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-backend&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.8.57.19-3.39.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.57.19-3.39.2","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-branding&distro=SUSE Manager Server 3.2","name":"spacewalk-branding","label":"spacewalk-branding&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-branding&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.8.5.16-3.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.5.16-3.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-client-tools&distro=SUSE Manager Server 3.2","name":"spacewalk-client-tools","label":"spacewalk-client-tools&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-client-tools&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.8.22.5-3.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.22.5-3.6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-java&distro=SUSE Manager Server 3.2","name":"spacewalk-java","label":"spacewalk-java&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-java&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.8.78.24-3.38.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.78.24-3.38.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-setup&distro=SUSE Manager Server 3.2","name":"spacewalk-setup","label":"spacewalk-setup&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-setup&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.8.7.8-3.19.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.7.8-3.19.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-utils&distro=SUSE Manager Server 3.2","name":"spacewalk-utils","label":"spacewalk-utils&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-utils&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.8.18.5-3.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.18.5-3.9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-web&distro=SUSE Manager Server 3.2","name":"spacewalk-web","label":"spacewalk-web&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-web&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 2.8.7.19-3.36.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.8.7.19-3.36.1","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-docs_en&distro=SUSE Manager Server 3.2","name":"susemanager-docs_en","label":"susemanager-docs_en&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-docs_en&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 3.2-11.32.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2-11.32.1","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-schema&distro=SUSE Manager Server 3.2","name":"susemanager-schema","label":"susemanager-schema&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-schema&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 3.2.21-3.31.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.21-3.31.1","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-sls&distro=SUSE Manager Server 3.2","name":"susemanager-sls","label":"susemanager-sls&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-sls&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 3.2.27-3.35.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.27-3.35.1","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager&distro=SUSE Manager Server 3.2","name":"susemanager","label":"susemanager&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 3.2.20-3.31.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.20-3.31.2","eol":null,"hubHref":null},{"vendor":"suse","product":"tika-core&distro=SUSE Manager Server 3.2","name":"tika-core","label":"tika-core&distro=SUSE Manager Server 3.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/tika-core&distro=SUSE Manager Server 3.2","purlType":"rpm","versions":[{"text":"< 1.22-3.9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.22-3.9.1","eol":null,"hubHref":null}],"affectedCount":16,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192521-1/","label":"www.suse.com/support/update/announcement/2019/suse-su-20192521-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1093381","label":"bugzilla.suse.com/1093381","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1096426","label":"bugzilla.suse.com/1096426","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1135957","label":"bugzilla.suse.com/1135957","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1137229","label":"bugzilla.suse.com/1137229","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1138454","label":"bugzilla.suse.com/1138454","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1140644","label":"bugzilla.suse.com/1140644","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1141661","label":"bugzilla.suse.com/1141661","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1142309","label":"bugzilla.suse.com/1142309","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1142764","label":"bugzilla.suse.com/1142764","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1142774","label":"bugzilla.suse.com/1142774","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1143016","label":"bugzilla.suse.com/1143016","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1143562","label":"bugzilla.suse.com/1143562","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1144500","label":"bugzilla.suse.com/1144500","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1144510","label":"bugzilla.suse.com/1144510","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1144515","label":"bugzilla.suse.com/1144515","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1144889","label":"bugzilla.suse.com/1144889","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1145086","label":"bugzilla.suse.com/1145086","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1145119","label":"bugzilla.suse.com/1145119","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1146416","label":"bugzilla.suse.com/1146416","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1146419","label":"bugzilla.suse.com/1146419","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1146869","label":"bugzilla.suse.com/1146869","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1146895","label":"bugzilla.suse.com/1146895","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1147126","label":"bugzilla.suse.com/1147126","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1149409","label":"bugzilla.suse.com/1149409","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10088","label":"www.suse.com/security/cve/CVE-2019-10088","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10093","label":"www.suse.com/security/cve/CVE-2019-10093","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10094","label":"www.suse.com/security/cve/CVE-2019-10094","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2019-10088","CVE-2019-10093","CVE-2019-10094"],"downstream":[],"duplicates":[],"related":["CVE-2019-10088","CVE-2019-10093","CVE-2019-10094"]},"timeline":[{"kind":"published","date":"2019-10-02T12:50:20.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T04:30:58.027Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T15:05:46.784Z","stale":false,"partial":false}}