{"schemaVersion":3,"id":"SUSE-SU-2022:0798-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for SUSE Manager Server 4.1\n\nThis update fixes the following issues:\n\nc3p0:\n\n- Update to version c3p0 0.9.5.5 and mchange-commons-java 0.2.19\n  * Address CVE-2018-20433\n  * Address CVE-2019-5427 - XML-config parsing related attacks (bsc#1133198)\n  * Properly implement the JDBC 4.1 abort method\n- Build with log4j mapper\n- Enhanced for RHEL8\n\ndhcpd-formula:\n\n- Update to version 0.1.1641480250.d5bd14c\n  * make routers option optional\n- Add arm64 support\n- Update to version 0.1.1615805990.f15c8d9\n\nhub-xmlrpc-api:\n\n- Updated to build on Enterprise Linux 8.\n\npy26-compat-msgpack-python:\n\n- Adapted to build on OBS for Enterprise Linux.\n\npy27-compat-salt:\n\n- Fix inspector module export function (bsc#1097531)\n- Fix possible traceback on ip6_interface grain (bsc#1193565)\n- Don't check for cached pillar errors on state.apply (bsc#1190781)\n- Simplify 'transactional_update' module to not use SSH wrapper and allow more flexible execution\n- Add '--no-return-event' option to salt-call to prevent sending return event back to master.\n- Make 'state.highstate' to acts on concurrent flag.\n- Fix the regression with invalid syntax in test_parse_cpe_name_v23.\n\nspacecmd:\n\n- Version 4.1.17-1\n  * Fix interactive mode for 'system_applyerrata' and 'errata_apply' (bsc#1194363)\n\nspacewalk-java:\n\n- Version 4.1.44-1\n  * allow SCC to display the last check-in time for registered systems\n  * Suggest Product Migration when patch for CVE is in a successor Product (bsc#1191360)\n  * Add store info to Equals and hash methods to fix CVE audit process (bsc#1195282)\n  * fix ClassCastException during action processing (bsc#1195043)\n  * Fix disappearing metadata key files after channel change (bsc#1192822)\n  * Pass only selected servers to taskomatic for cancelation (bsc#1194044)\n\nspacewalk-web:\n\n- Version 4.1.32-1\n  * Suggest Product Migration when patch for CVE is in a successor Product (bsc#1191360)\n\nsusemanager:\n\n- Version 4.1.33-1\n  * set default for registration batch size\n\nsusemanager-doc-indexes:\n\n- Added a warning about the origin of the salt-minion package in the Register on the Command Line (Salt) section of the\n   Client Configuration Guide\n- In the Client Configuration Guide, explain how you find channel names to register older SUSE Linux Enterprise\n  clients.\n- Added grub.cfg for GRUB 2 in the Upgrade chapter of the Client\n\nsusemanager-docs_en:\n\n- Added a warning about the origin of the salt-minion package in the Register on the Command Line (Salt) section of the\n  Client Configuration Guide\n- In the Client Configuration Guide, explain how you find channel\n  names to register older SUSE Linux Enterprise clients.\n- Added grub.cfg for GRUB 2 in the Upgrade chapter of the Client\n  Configuration Guide\n\nsusemanager-schema:\n\n- Version 4.1.25-1\n  * Continue with index migration when the expected indexes do not exist (bsc#1192566)\n\nsusemanager-sls:\n\n- Version 4.1.34-1\n  * Improve `pkgset` beacon with using `salt.cache` to notify about the changes made while the minion was stopped.\n  * Align the code of pkgset beacon to prevent warnings (bsc#1194464)\n- Version 4.1.33-1\n  * Fix errors on calling sed -E ... by force_restart_minion with action chains\n  * Postgres exporter package was renamed\n  * fix deprecation warnings\n  * enforce correct minion configuration similar to bootstrapping (bsc#1192510)\n\nHow to apply this update:\n\n1. Log in as root user to the SUSE Manager server.\n2. Stop the Spacewalk service:\n`spacewalk-service stop`\n3. Apply the patch using either zypper patch or YaST Online Update.\n4. Start the Spacewalk service:\n`spacewalk-service start`","dates":{"published":"2022-03-10T11:17:08.000Z","modified":"2025-05-02T04:29:55.580Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"c3p0&distro=SUSE Manager Server Module 4.1","name":"c3p0","label":"c3p0&distro=SUSE Manager Server Module 4.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/c3p0&distro=SUSE Manager Server Module 4.1","purlType":"rpm","versions":[{"text":"< 0.9.5.5-3.3.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.9.5.5-3.3.2","eol":null,"hubHref":null},{"vendor":"suse","product":"dhcpd-formula&distro=SUSE Manager Server Module 4.1","name":"dhcpd-formula","label":"dhcpd-formula&distro=SUSE Manager Server Module 4.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dhcpd-formula&distro=SUSE Manager Server Module 4.1","purlType":"rpm","versions":[{"text":"< 0.1.1641480250.d5bd14c-3.3.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.1.1641480250.d5bd14c-3.3.2","eol":null,"hubHref":null},{"vendor":"suse","product":"hub-xmlrpc-api&distro=SUSE Manager Server Module 4.1","name":"hub-xmlrpc-api","label":"hub-xmlrpc-api&distro=SUSE Manager Server Module 4.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/hub-xmlrpc-api&distro=SUSE Manager Server Module 4.1","purlType":"rpm","versions":[{"text":"< 0.7-3.9.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.7-3.9.2","eol":null,"hubHref":null},{"vendor":"suse","product":"py26-compat-msgpack-python&distro=SUSE Manager Server Module 4.1","name":"py26-compat-msgpack-python","label":"py26-compat-msgpack-python&distro=SUSE Manager Server Module 4.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/py26-compat-msgpack-python&distro=SUSE Manager Server Module 4.1","purlType":"rpm","versions":[{"text":"< 0.4.6-3.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.4.6-3.6.2","eol":null,"hubHref":null},{"vendor":"suse","product":"py27-compat-salt&distro=SUSE Manager Server Module 4.1","name":"py27-compat-salt","label":"py27-compat-salt&distro=SUSE Manager Server Module 4.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/py27-compat-salt&distro=SUSE Manager Server Module 4.1","purlType":"rpm","versions":[{"text":"< 3000.3-6.21.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3000.3-6.21.2","eol":null,"hubHref":null},{"vendor":"suse","product":"spacecmd&distro=SUSE Manager Server Module 4.1","name":"spacecmd","label":"spacecmd&distro=SUSE Manager Server Module 4.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacecmd&distro=SUSE Manager Server Module 4.1","purlType":"rpm","versions":[{"text":"< 4.1.17-4.36.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.17-4.36.2","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-java&distro=SUSE Manager Server Module 4.1","name":"spacewalk-java","label":"spacewalk-java&distro=SUSE Manager Server Module 4.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-java&distro=SUSE Manager Server Module 4.1","purlType":"rpm","versions":[{"text":"< 4.1.44-3.66.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.44-3.66.2","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-web&distro=SUSE Manager Server Module 4.1","name":"spacewalk-web","label":"spacewalk-web&distro=SUSE Manager Server Module 4.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-web&distro=SUSE Manager Server Module 4.1","purlType":"rpm","versions":[{"text":"< 4.1.32-3.42.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.32-3.42.2","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-doc-indexes&distro=SUSE Manager Server Module 4.1","name":"susemanager-doc-indexes","label":"susemanager-doc-indexes&distro=SUSE Manager Server Module 4.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-doc-indexes&distro=SUSE Manager Server Module 4.1","purlType":"rpm","versions":[{"text":"< 4.1-11.52.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1-11.52.2","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-docs_en&distro=SUSE Manager Server Module 4.1","name":"susemanager-docs_en","label":"susemanager-docs_en&distro=SUSE Manager Server Module 4.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-docs_en&distro=SUSE Manager Server Module 4.1","purlType":"rpm","versions":[{"text":"< 4.1-11.52.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1-11.52.2","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-schema&distro=SUSE Manager Server Module 4.1","name":"susemanager-schema","label":"susemanager-schema&distro=SUSE Manager Server Module 4.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-schema&distro=SUSE Manager Server Module 4.1","purlType":"rpm","versions":[{"text":"< 4.1.25-3.42.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.25-3.42.2","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-sls&distro=SUSE Manager Server Module 4.1","name":"susemanager-sls","label":"susemanager-sls&distro=SUSE Manager Server Module 4.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-sls&distro=SUSE Manager Server Module 4.1","purlType":"rpm","versions":[{"text":"< 4.1.34-3.59.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.34-3.59.2","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager&distro=SUSE Manager Server Module 4.1","name":"susemanager","label":"susemanager&distro=SUSE Manager Server Module 4.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager&distro=SUSE Manager Server Module 4.1","purlType":"rpm","versions":[{"text":"< 4.1.33-3.45.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.33-3.45.2","eol":null,"hubHref":null}],"affectedCount":13,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220798-1/","label":"www.suse.com/support/update/announcement/2022/suse-su-20220798-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1097531","label":"bugzilla.suse.com/1097531","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1133198","label":"bugzilla.suse.com/1133198","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1190781","label":"bugzilla.suse.com/1190781","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1191360","label":"bugzilla.suse.com/1191360","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1192510","label":"bugzilla.suse.com/1192510","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1192566","label":"bugzilla.suse.com/1192566","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1192822","label":"bugzilla.suse.com/1192822","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1193565","label":"bugzilla.suse.com/1193565","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194044","label":"bugzilla.suse.com/1194044","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194363","label":"bugzilla.suse.com/1194363","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194464","label":"bugzilla.suse.com/1194464","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1195043","label":"bugzilla.suse.com/1195043","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1195282","label":"bugzilla.suse.com/1195282","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20433","label":"www.suse.com/security/cve/CVE-2018-20433","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5427","label":"www.suse.com/security/cve/CVE-2019-5427","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2018-20433","CVE-2019-5427"],"downstream":[],"duplicates":[],"related":["CVE-2018-20433","CVE-2019-5427"]},"timeline":[{"kind":"published","date":"2022-03-10T11:17:08.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-05-02T04:29:55.580Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T19:56:24.147Z","stale":false,"partial":false}}