Summary
This update fixes the following issues:
cobbler:
- Fixes case where distribution detection returns None (bsc#1130658)
- SUSE texmode fix (bsc#1109316)
- Fix for SUSE distribution detection in ISO building
(bsc#1123991)
py26-compat-salt:
- Remove arch from name when pkg.list_pkgs is called with 'attr' (bsc#1114029)
spacecmd:
- Fix importing state channels using configchannel_import
- Fix getting file info for latest revision (via configchannel_filedetails)
spacewalk-branding:
- Update jquery.timepicker dependency to 1.11.14 to allow parsing
the time format without depending on the language. (bsc#1119081)
spacewalk-java:
- Fix a problem when cloning public child channels with a private base channel (bsc#1124639)
- Keep assigned channels on traditional to minion migration (bsc#1122836)
- Fix 'Add Selected to SSM' on System Groups -> systems page (bsc#1121856)
- Disable notification types with 'java.notifications_type_disabled' in rhn.conf (bsc#1111910)
- XMLRPC API: Include init.sls in channel file list (bsc#1111191)
- Fix the config channels assignment via SSM (bsc#1117759)
spacewalk-utils:
- Create /etc/rhn with correct ownership to prevent file conflicts
spacewalk-web:
- Fix action scheduler time picker prefill when the server is on 'UTC/GMT' timezone (bsc#1121195)
- Fix initializing of the datetime picker (bsc#1126862)
- Show feedback messages after using the retry option on the notification messages page
subscription-matcher:
- Old style hard bundle merging fix (bsc#1114059)
susemanager:
- Fix creation of bootstrap repositories for SLE12 (no SP) by requiring python-setuptools
only for SLE12 >= SP1 (bsc#1129765)
- Add `python-setuptools` package dependency to SLES12 bootstrap repo (bsc#1119964)
- Rhnlib was renamed to python2-rhnlib. Change bootstrap data accordingly.
susemanager-schema:
- Fix performance regression in inter-server-sync (bsc#1128781)
susemanager-docs_en:
- Update text and image files
- 2.1 comparison: clarify profile syncing support
- Adjust documentation about notification settings
- Fix internal link (SMT documentation).
- Remove documentation about the 'mgr-sync enable-scc' subcommand. This
subcommand is no longer available.
susemanager-frontend-libs:
- Update jquery.timepicker to 1.11.14 (bsc#1119081)
tika-core:
- New upstream version (1.20). Fixes infinite loop in SQLite3Parser (CVE-2018-17197) (bsc#1121038)
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| SUSE · Manager Proxy 3.1 | spacewalk-web | 2.7.1.21-2.35.1 |
| SUSE · Manager Server 3.1 | cobbler | 2.6.6-5.25.1 |
| SUSE · Manager Server 3.1 | py26-compat-salt | 2016.11.10-1.19.3 |
| SUSE · Manager Server 3.1 | spacecmd | 2.7.8.15-2.32.1 |
| SUSE · Manager Server 3.1 | spacewalk-branding | 2.7.2.17-2.31.3 |
| SUSE · Manager Server 3.1 | spacewalk-java | 2.7.46.19-2.41.3 |
| SUSE · Manager Server 3.1 | spacewalk-utils | 2.7.10.11-2.23.3 |
| SUSE · Manager Server 3.1 | spacewalk-web | 2.7.1.21-2.35.1 |
| SUSE · Manager Server 3.1 | subscription-matcher | 0.22-4.9.2 |
| SUSE · Manager Server 3.1 | susemanager | 3.1.19-2.34.2 |
| SUSE · Manager Server 3.1 | susemanager-docs_en | 3.1-10.29.4 |
| SUSE · Manager Server 3.1 | susemanager-frontend-libs | 3.1.2-3.10.1 |
| SUSE · Manager Server 3.1 | susemanager-schema | 3.1.21-2.36.1 |
| SUSE · Manager Server 3.1 | tika-core | 1.20-1.6.2 |
Vulnerabilities 3
-
Medium 6.5
Apache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser
A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika.
-
Medium 5.3
PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 exclud…
-
Medium 5.3
PowerDNS Authoritative Server 4.1.0 up to 4.1.4 inclusive and PowerDNS Recursor 4.0.0 up to 4.1.4 inclusive are vulnera…
References
-
report
https://bugzilla.suse.com/1109316
-
report
https://bugzilla.suse.com/1111191
-
report
https://bugzilla.suse.com/1111910
-
report
https://bugzilla.suse.com/1114029
-
report
https://bugzilla.suse.com/1114059
-
report
https://bugzilla.suse.com/1114157
-
report
https://bugzilla.suse.com/1114169
-
report
https://bugzilla.suse.com/1117759
-
report
https://bugzilla.suse.com/1119081
-
report
https://bugzilla.suse.com/1119964
-
report
https://bugzilla.suse.com/1121038
-
report
https://bugzilla.suse.com/1121195
-
report
https://bugzilla.suse.com/1121856
-
report
https://bugzilla.suse.com/1122836
-
report
https://bugzilla.suse.com/1123991
-
report
https://bugzilla.suse.com/1124639
-
report
https://bugzilla.suse.com/1126862
-
report
https://bugzilla.suse.com/1128781
-
report
https://bugzilla.suse.com/1129765
-
report
https://bugzilla.suse.com/1130658
-
web
https://www.suse.com/security/cve/CVE-2018-10851
-
web
https://www.suse.com/security/cve/CVE-2018-14626
-
web
https://www.suse.com/security/cve/CVE-2018-17197