Skip to content
OpenAdvisories
Medium SUSE-RU-2019:0341-1 1 CVE

Security update for SUSE Manager Server 3.2

Published Feb 13, 2019 · Updated Feb 4, 2026

Summary

This update fixes the following issues:

branch-network-formula:

- Netconfig update requires bind directory to exists for bind
forward, ensure it (bsc#1116365)
- Rework network update in branch-network formula (bsc#1116365)

py26-compat-salt:

- Remove arch from name when pkg.list_pkgs is called with 'attr' (bsc#1114029)

python-susemanager-retail:

- Force one python version for SLE12 (python2) and SLE15 (python3)
- Add disklabel: none to migrated RAID

saltboot-formula:

- Use FTP active mode for image download
- Always deploy image when image is specified in partitioning
pillar (bsc#1119807)
- Call blockdev.formatted with force=True
- Allow RAID images to be defined by saltboot formula
- image information can be provided directly for disk
- allow 'none' disk label in formula and in that case
hide partitioning information

smdba:

- Tuning: add cpu_tuple_cost (bsc#1105791)

spacecmd:

- Fix importing state channels using configchannel_import
- Fix getting file info for latest revision (via configchannel_filedetails)
- Add functions to merge errata (softwarechannel_errata_merge) and
packages (softwarechannel_mergepackages) through spacecmd (bsc#987798)

spacewalk-admin:

- Use a Salt engine to process return results (bsc#1099988)

spacewalk-backend:

- Move channel update close to commit to avoid long lock (bsc#1121424)
- Adapt Inter Server Sync code to new SCC sync backend
- Fix issue raising exceptions 'with_traceback' on Python 2
- Hide Python traceback and show only error message (bsc#1110427)
- Honor renamed postgresql10 log directory for supportconfig

spacewalk-branding:

- Better label visualization when the input is disabled. (bsc#1110772)

spacewalk-client-tools:

- Fix XML-RPC type serialization (bsc#1116610)

spacewalk-java:

- Improve salt events processing performance (bsc#1125097)
- Prevent an error when onboarding a RES 6 minion (bsc#1124794)
- Support products with multiple base channels
- Fix ordering of base channels to prevent synchronization errors (bsc#1123902)
- Support products with multiple base channels
- Avoid a NullPointerException error in Taskomatic (bsc#1119271)
- Reset channel assignments when base channel changes on registration (bsc#1118917)
- Allow bootstrapping minions with a pending minion key being present (bsc#1119727)
- Hide 'unknown virtual host manager' when virtual host manager of all hosts is known (bsc#1119320)
- Disable notification types with 'java.notifications_type_disabled' in rhn.conf (bsc#1111910)
- Change SCC sync backend to adapt quicker to SCC changes and improve
speed of syncing metadata and checking for channel dependencies (bsc#1089121)
- Read OEM Orderitems from DB instead of create always new items (bsc#1098826)
- Fix mgr-sync refresh when subscription was removed (bsc#1105720)
- XMLRPC API: Include init.sls in channel file list (bsc#1111191)
- Fix the config channels assignment via SSM (bsc#1117759)
- Install product packages during bootstrapping minions (bsc#1104680)
- Fix cloning channels when managing the same errata for both vendor and private orgs (bsc#1111686)
- Introduce Loggerhead-module.js to store logs from the frontend
- Removed 'Manage Channels' shortcut for vendor channels (bsc#1115978)
- Hide already applied errata and channel entries from the output list in
audit.listSystemsByPatchStatus (bsc#1111963)
- Prevent failing KickstartCommand when customPosition is null (bsc#1112121)
- Automatically schedule an Action to refresh minion repos after deletion of an assigned channel (bsc#1115029)
- Performance improvements in channel management functionalities (bsc#1114877)
- Handle with an error message if state file fails to render (bsc#1110757)
- When changing basechannel the compatible old childchannels are now selected by default. (bsc#1110772)
- Add check for yast autoinstall profiles when setting kickstartTree (bsc#1114115)
- Use a Salt engine to process return results (bsc#1099988)
- Fix handling of CVEs including multiple patches in CVE audit (bsc#1111963)
- Fix synchronizing Expanded Support Channel with missing architecture (bsc#1122565)

spacewalk-setup:

- Use a Salt engine to process return results (bsc#1099988)

spacewalk-utils:

- Exit with an error if spacewalk-common-channels does not match
any channel

spacewalk-web:

- Show feedback messages after using the retry option on the notification messages page
- Change SCC sync backend to adapt quicker to SCC changes and improve
speed of syncing metadata and checking for channel dependencies
- Fix wording for taskotop (cosmetical only)(bsc#1118112)
- When changing basechannel the compatible old childchannels are now selected by default. (bsc#1110772)

subscription-matcher:

- Old style hard bundle merging fix (bsc#1114059)

susemanager:

- Add bootstrap repo definition for OES 2018 SP1 (bsc#1116826)
- Rhnlib was renamed to python2-rhnlib. Change bootstrap data accordingly.
- Change SCC sync backend to adapt quicker to SCC changes and improve
speed of syncing metadata and checking for channel dependencies
- Adapt mgr-create-bootstrap-repo for Uyuni and let it create
bootstrap repos for openSUSE and CentOS
- Fetch packages from correct channel when creating a bootstrap
repository
- Fix not found package on mgr-create-bootstrap-repo for SLE-15-s390x
(bsc#1116566)
- Add python3-six to bootstrap repo for SLES15 (bsc#1118478)

susemanager-docs_en:

- Update text and image files.
- Enhance forms documentation (more attributes).
- Proxy: for example, migration from traditional to Salt not supported.
- RAM requirements for host running kiwi OS images.
- Notification properties.
- Update scalability documentation.

susemanager-schema:

- Change SCC sync backend to adapt quicker to SCC changes and improve
speed of syncing metadata and checking for channel dependencies
- Performance improvements in channel management functionalities (bsc#1114877)
- Use a Salt engine to process return results (bsc#1099988)

susemanager-sls:

- Improve sal

Fixed packages 26

ReleasePackageFixed in
SUSE · Manager Proxy 3.2 spacewalk-backend 2.8.57.8-3.10.14
SUSE · Manager Proxy 3.2 spacewalk-client-tools 2.8.22.4-3.3.13
SUSE · Manager Proxy 3.2 spacewalk-proxy-installer 2.8.6.4-3.6.13
SUSE · Manager Proxy 3.2 spacewalk-web 2.8.7.12-3.16.12
SUSE · Manager Server 3.2 branch-network-formula 0.1.1545038754.c983fa6-3.6.13
SUSE · Manager Server 3.2 netty 4.1.8.Final-2.7.4
SUSE · Manager Server 3.2 py26-compat-salt 2016.11.10-6.18.14
SUSE · Manager Server 3.2 python-susemanager-retail 1.0.1544459934.07229ad-2.9.13
SUSE · Manager Server 3.2 saltboot-formula 0.1.1546527519.591e925-3.9.13
SUSE · Manager Server 3.2 smdba 1.6.3-0.3.6.13
SUSE · Manager Server 3.2 spacecmd 2.8.25.8-3.12.13
SUSE · Manager Server 3.2 spacewalk-admin 2.8.4.3-3.3.13
SUSE · Manager Server 3.2 spacewalk-backend 2.8.57.8-3.10.14
SUSE · Manager Server 3.2 spacewalk-branding 2.8.5.13-3.13.14
SUSE · Manager Server 3.2 spacewalk-client-tools 2.8.22.4-3.3.13
SUSE · Manager Server 3.2 spacewalk-java 2.8.78.18-3.21.1
SUSE · Manager Server 3.2 spacewalk-setup 2.8.7.6-3.13.13
SUSE · Manager Server 3.2 spacewalk-utils 2.8.18.4-3.6.13
SUSE · Manager Server 3.2 spacewalk-web 2.8.7.12-3.16.12
SUSE · Manager Server 3.2 subscription-matcher 0.22-4.9.13
SUSE · Manager Server 3.2 susemanager 3.2.15-3.16.13
SUSE · Manager Server 3.2 susemanager-docs_en 3.2-11.15.12
SUSE · Manager Server 3.2 susemanager-schema 3.2.16-3.16.13
SUSE · Manager Server 3.2 susemanager-sls 3.2.20-3.18.1
SUSE · Manager Server 3.2 susemanager-sync-data 3.2.12-3.14.2
SUSE · Manager Server 3.2 tika-core 1.20-3.6.13

Vulnerabilities 1

References

  • report
    https://bugzilla.suse.com/1089121
  • report
    https://bugzilla.suse.com/1098826
  • report
    https://bugzilla.suse.com/1099988
  • report
    https://bugzilla.suse.com/1104680
  • report
    https://bugzilla.suse.com/1105720
  • report
    https://bugzilla.suse.com/1105791
  • report
    https://bugzilla.suse.com/1110427
  • report
    https://bugzilla.suse.com/1110757
  • report
    https://bugzilla.suse.com/1110772
  • report
    https://bugzilla.suse.com/1111191
  • report
    https://bugzilla.suse.com/1111686
  • report
    https://bugzilla.suse.com/1111910
  • report
    https://bugzilla.suse.com/1111963
  • report
    https://bugzilla.suse.com/1112121
  • report
    https://bugzilla.suse.com/1114029
  • report
    https://bugzilla.suse.com/1114059
  • report
    https://bugzilla.suse.com/1114115
  • report
    https://bugzilla.suse.com/1114268
  • report
    https://bugzilla.suse.com/1114877
  • report
    https://bugzilla.suse.com/1115029
  • report
    https://bugzilla.suse.com/1115978
  • report
    https://bugzilla.suse.com/1116365
  • report
    https://bugzilla.suse.com/1116566
  • report
    https://bugzilla.suse.com/1116610
  • report
    https://bugzilla.suse.com/1116826
  • report
    https://bugzilla.suse.com/1117759
  • report
    https://bugzilla.suse.com/1118112
  • report
    https://bugzilla.suse.com/1118478
  • report
    https://bugzilla.suse.com/1118917
  • report
    https://bugzilla.suse.com/1119233
  • report
    https://bugzilla.suse.com/1119271
  • report
    https://bugzilla.suse.com/1119320
  • report
    https://bugzilla.suse.com/1119727
  • report
    https://bugzilla.suse.com/1119807
  • report
    https://bugzilla.suse.com/1121038
  • report
    https://bugzilla.suse.com/1121424
  • report
    https://bugzilla.suse.com/1122565
  • report
    https://bugzilla.suse.com/1123902
  • report
    https://bugzilla.suse.com/1123983