SUSE-SU-2020:0856-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 02 Apr 2020, 14:48
Last modified:04 Feb 2026, 02:19

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

02 Apr 2020, 14:48
Published
Vulnerability first disclosed
04 Feb 2026, 02:19
Last Modified
Vulnerability information updated

Description

Security update for SUSE Manager Server 3.2 This update fixes the following issues: py26-compat-salt: - Replace pycrypto with M2Crypto as dependency for SLE15+ (bsc#1165425) redstone-xmlrpc: - Disable external entity parsing (1790381, bsc#1164120, CVE-2020-1693) - Do not download external entities (1555429, bsc#1085414, CVE-2018-1077) spacecmd: - Bugfix: attempt to purge SSM when it is empty (bsc#1155372) spacewalk-admin: - Spell correctly 'successful' and 'successfully' spacewalk-backend: - When downloading repo metadata, don't add '/' to the repo url if it already ends with one (bsc#1158899) - Enhance suseProducts via ISS to fix SP migration on slave server (bsc#1159184) spacewalk-certs-tools: - Add minion option in config file to disable salt mine when generated by bootstrap script (bsc#1163001) spacewalk-client-tools: - Do not crash 'mgr-update-status' because 'long' type is not defined in Python 3 - Add workaround for uptime overflow to spacewalk-update-status as well (bsc#1165921) - Spell correctly 'successful' and 'successfully' spacewalk-java: - Fix error when adding systems to ssm with 'add to ssm' button (bsc#1160246) - Validate the suseproductchannel table and update missing date when running mgr-sync refresh (bsc#1163538) - Read the subscriptions from the output instead of input (bsc#1140332) - Show additional headers and dependencies for deb packages - Use channel name from product tree instead of constructing it (bsc#1157317) spacewalk-setup: - Spell correctly 'successful' and 'successfully' spacewalk-utils: - Check for delimiter as well when detecting current phase (bsc#1164771) spacewalk-web: - Report merge_subscriptions message in a readable way (bsc#1140332) subscription-matcher: - Add missing library for SLE15 SP2 (slf4j-log4j12) - Make the code usable with Math3 on SLES - Use log4j12 package on newer SLE versions - Aggregate stackable subscriptions with same parameters - Implement new 'swap move' used in optaplanner (bsc#1140332) - Enable aarch64 builds, except for SLE < 15 susemanager: - Fix salt bootstrapping on SLE15 (require python3-pycrypto or python3-M2Crypto to support all variants) (bsc#1164563) - Add bootstrap-repo data for OES 2018 SP2 (bsc#1161862) - Add bootstrap-repo data for SLE15 SP2 Family susemanager-sls: - Adapt 'mgractionchains' module to work with Salt 3000 - Do not workaround util.syncmodules for SSH minions (bsc#1162609) - Force to run util.synccustomall when triggering action chains on SSH minions (bsc#1162683). susemanager-sync-data: - Add OES 2018 SP2 (bsc#1161862) - Rename RHEL 8 Base product - Change channel family name according to SCC data How to apply this update: 1. Log in as root user to the SUSE Manager server. 2. Stop the Spacewalk service: spacewalk-service stop 3. Apply the patch using either zypper patch or YaST Online Update. 4. Upgrade the database schema: spacewalk-schema-upgrade 5. Start the Spacewalk service: spacewalk-service start

Affected Systems

  • suse•py26-compat-salt&distro=SUSE Manager Server 3.2

    < 2016.11.10-6.35.1

  • suse•redstone-xmlrpc&distro=SUSE Manager Server 3.2

    < 1.1_20071120-0.11.3.1

  • suse•spacecmd&distro=SUSE Manager Server 3.2

    < 2.8.25.14-3.32.1

  • suse•spacewalk-admin&distro=SUSE Manager Server 3.2

    < 2.8.4.6-3.12.1

  • suse•spacewalk-backend&distro=SUSE Manager Server 3.2

    < 2.8.57.22-3.48.1

  • suse•spacewalk-certs-tools&distro=SUSE Manager Server 3.2

    < 2.8.8.14-3.23.1

  • suse•spacewalk-client-tools&distro=SUSE Manager Server 3.2

    < 2.8.22.7-3.12.1

  • suse•spacewalk-java&distro=SUSE Manager Server 3.2

    < 2.8.78.28-3.47.1

  • suse•spacewalk-setup&distro=SUSE Manager Server 3.2

    < 2.8.7.10-3.25.1

  • suse•spacewalk-utils&distro=SUSE Manager Server 3.2

    < 2.8.18.6-3.12.1

  • suse•spacewalk-web&distro=SUSE Manager Server 3.2

    < 2.8.7.23-3.45.1

  • suse•subscription-matcher&distro=SUSE Manager Server 3.2

    < 0.25-4.15.1

  • suse•susemanager-sls&distro=SUSE Manager Server 3.2

    < 3.2.30-3.44.1

  • suse•susemanager-sync-data&distro=SUSE Manager Server 3.2

    < 3.2.19-3.35.1

  • suse•susemanager&distro=SUSE Manager Server 3.2

    < 3.2.23-3.40.2

References (20)