Skip to content
OpenAdvisories
Medium SUSE-RU-2020:1238-1 1 CVE

Recommended update for SUSE Manager Server 4.0

Published May 11, 2020 · Updated Feb 4, 2026

Summary

This update fixes the following issues:

branch-network-formula:

- Handle application/efi mime type
- Allow http access to saltboot directory

cobbler:

- Signatures file now uses 'default_autoinstall' which fixes import
problem happening with some distributions (bsc#1159010)
- Fix for kernel and initrd detection (bsc#1159010)

dhcpd-formula:

- UEFI HTTPBoot support
- Changed default of filename_efi to shim.efi for secure boot

grafana-formula:

- Add CaaSP datasource and dashboards

image-sync-formula:

- Install dosfstools package for sync_image_usb module to work

patterns-suse-manager:

- Require yast2-migration to allow online OS migrations (bsc#1167777)

prometheus-formula:

- Add meta-monitoring configuration
- Add federation configuration

pxe-formula:

- Add non-EFI grub menu variant
- Use /usr/lib64/efi/shim.efi path (workaround for bsc#1166523)
- Use grub2 variable 'prefix' instead of hardcoded /boot
- Prepare configuration for UEFI with Secure Boot
- Add support fot new terminal naming for UEFI network boot

py26-compat-salt:

- Do not make py26-compat-salt to require python-tornado on SLE15 (all SPs)
- Backport saltutil state module to 2016.11 codebase (bsc#1167556)
- Add new custom SUSE capability for saltutil state module

python-susemanager-retail:

- Fix retail_branch_init python error due to change in branch id
handling

saltboot-formula:

- Add grain to force image redeployment and repartition
- Allow pillar customizable download urls
Saltboot now recognizes following pillars:
- saltboot_download_server: specifies from where download the images, kernel, etc.
- saltboot_download_protocol: specifies what protocol to use for download
- Use more reliable progress output
- Python3 compatibility fix
- Use file.read instead of cp.get_file_str
- Improve image cache debug messages

spacewalk:

- Explicitly require postgresql10 package (bsc#1165926)

spacewalk-backend:

- Validate cached package entries on ISS slave (bsc#1159184)
- Do not break when syncing Oracle 7 yum channel (bsc#1158463)
- Always use the same RPM database when running 'spacewalk-repo-sync'
from the command line or via taskomatic (bsc#1163468)

spacewalk-certs-tools:

- Add minion option in config file to disable salt mine when generated by
bootstrap script (bsc#1163001)
- Disable modularity failsafe mechanism for RHEL 8 bootstrap repos (bsc#1164875)

spacewalk-client-tools:

- Use 'int' instead of 'long' on rhn_check for both Python 2 and 3
- Do not crash 'mgr-update-status' because 'long' type is not defined in Python 3
- Add workaround for uptime overflow to spacewalk-update-status as well (bsc#1165921)

spacewalk-java:

- Hide message about changed Update Tag change (bsc#1169109)
- Refresh pillar after channel change
- Use 'changes' field if 'pchanges' field doesn't exist (bsc#1159202)
- Fix the original-clone channel relationship for CLM channels (bsc#1163121)
- Fix serializer and documentation for system.listSystems (bsc#1168083)
- Skip and show migration targets which do not have a successor
for all installed extension products (bsc#1168227)
- Fix resource leak in taskomatic (bsc#1168696)
- Add XMLRPC API method: proxy.listProxyClients (bsc#1166408)
- Hide Virtualization > Provisioning tab for Salt systems (bsc#1167329)
- Remove no longer necessary check for retail TERMINALS group membership
- Fix error when adding systems to ssm with 'add to ssm' button (bsc#1160246)
- Prevent build/promote on content projects which have build/promote in progress
- Clean stale Content Lifecycle targets on Tomcat startup (bsc#1164121)
- Show warning on products page when no SUSE Manager Server Subscription is available
- Improve performance for States view in SystemGroups detail view (bsc#1158752)
- Validate the suseproductchannel table and update missing date when running mgr-sync refresh (bsc#1163538)
- Add 'init.repo' kernel option to RHEL 8 kickstart tree (bsc#1163884)

spacewalk-utils:

- Check for delimiter as well when detecting current phase (bsc#1164771)
- Common-channels: Fix repo type assignment for type YUM (bsc#1151683)

spacewalk-web:

- Show warning on products page when no SUSE Manager Server Subscription is available
- Scheme is not allowed for URI of image store's API endpoint (bsc#1165571)

susemanager:

- Require python3-tornado only for SLE15/SLE15SP1/openSUSE Leap 15.1 (bsc#1169865)
- Use python3-M2Crypto for all SLE15 versions and openSUSE Leap 15.1
bootstrap repositories
- Add missing packages to OES2018-SP1-x86_64 target for bootstrap data (bsc#1169144)
- Add dbus-1-glib to SLE12SP5 x86_64 to allow onboarding of AWS Cloud SLE12SP5
clients (they do not have it by defaul anymore)
- Add package redhat-rpm-config to bootstrap repo for RH and CentOS systems (bsc#1168069)
- Add 'python-singledispatch' to SLE12 (all SPs) and RES7 bootstrap repos.
- Fix salt bootstrapping on SLE15 (require python3-pycrypto or
python3-M2Crypto to support all variants) (bsc#1164563)

susemanager-doc-indexes:

- Removed incorrect version number attribute
- On IBM Z by default use the Unified Installer
- Improve nav link descriptions CLI section layout fixes
- Update example in SUSE Manager salt configuration
- Update salt file locations
- Removed incorrect version number attribute
- On IBM Z by default use the Unified Installer
- Improve nav link descriptions CLI section layout fixes
- Update example in SUSE Manager salt configuration
- Update salt file locations

susemanager-docs_en:

- Removed incorrect version number attribute
- On IBM Z by default use the Unified Installer
- Improve nav link descriptions CLI section layout fixes
- Update example in SUSE Manager salt configuration
- Update salt file locations
- Removed incorrect version number attribute
- On IBM Z by default use the Unified Installer
- Improve nav link descriptions CLI section layout fixes
- Update example in SUSE Manager salt configuration
- Update salt file locations

susemanager-nodejs-sdk-devel:
- upgrade node_modul

Fixed packages 34

ReleasePackageFixed in
SUSE · Manager Proxy Module 4.0 patterns-suse-manager 4.0-9.13.2
SUSE · Manager Proxy Module 4.0 spacewalk-backend 4.0.31-3.26.3
SUSE · Manager Proxy Module 4.0 spacewalk-certs-tools 4.0.16-3.18.2
SUSE · Manager Proxy Module 4.0 spacewalk-client-tools 4.0.13-3.16.2
SUSE · Manager Proxy Module 4.0 spacewalk-proxy-installer 4.0.12-3.3.2
SUSE · Manager Proxy Module 4.0 spacewalk-web 4.0.20-3.21.3
SUSE · Manager Proxy Module 4.0 susemanager-tftpsync-recv 4.0.6-3.3.2
SUSE · Manager Server Module 4.0 branch-network-formula 0.1.1583842676.2fc2fa6-3.13.2
SUSE · Manager Server Module 4.0 cobbler 3.0.0+git20190806.32c4bae0-7.10.2
SUSE · Manager Server Module 4.0 dhcpd-formula 0.1.1583829431.db6edda-3.11.2
SUSE · Manager Server Module 4.0 grafana-formula 0.2-4.7.2
SUSE · Manager Server Module 4.0 image-sync-formula 0.1.1585064259.12b97ef-3.14.2
SUSE · Manager Server Module 4.0 openvpn-formula 0.1-4.3.1
SUSE · Manager Server Module 4.0 patterns-suse-manager 4.0-9.13.2
SUSE · Manager Server Module 4.0 prometheus-formula 0.2-4.10.2
SUSE · Manager Server Module 4.0 pxe-formula 0.1.1586937953.e458f5c-3.14.2
SUSE · Manager Server Module 4.0 py26-compat-salt 2016.11.10-10.14.2
SUSE · Manager Server Module 4.0 python-susemanager-retail 1.0.1583842676.2fc2fa6-3.16.2
SUSE · Manager Server Module 4.0 saltboot-formula 0.1.1587051918.6bc9e88-3.10.2
SUSE · Manager Server Module 4.0 spacewalk 4.0.5-3.3.2
SUSE · Manager Server Module 4.0 spacewalk-backend 4.0.31-3.26.3
SUSE · Manager Server Module 4.0 spacewalk-certs-tools 4.0.16-3.18.2
SUSE · Manager Server Module 4.0 spacewalk-client-tools 4.0.13-3.16.2
SUSE · Manager Server Module 4.0 spacewalk-java 4.0.32-3.26.2
SUSE · Manager Server Module 4.0 spacewalk-utils 4.0.17-3.18.2
SUSE · Manager Server Module 4.0 spacewalk-web 4.0.20-3.21.3
SUSE · Manager Server Module 4.0 susemanager 4.0.23-3.23.3
SUSE · Manager Server Module 4.0 susemanager-doc-indexes 4.0-10.21.2
SUSE · Manager Server Module 4.0 susemanager-docs_en 4.0-10.21.2
SUSE · Manager Server Module 4.0 susemanager-schema 4.0.19-3.20.2
SUSE · Manager Server Module 4.0 susemanager-sls 4.0.25-3.20.2
SUSE · Manager Server Module 4.0 susemanager-tftpsync 4.0.6-3.3.2
SUSE · Manager Server Module 4.0 virtual-host-gatherer 1.0.20-3.6.2
SUSE · Manager Server Module 4.0 virtualization-host-formula 0.3-4.6.2

Vulnerabilities 1

References

  • report
    https://bugzilla.suse.com/1151683
  • report
    https://bugzilla.suse.com/1158463
  • report
    https://bugzilla.suse.com/1158752
  • report
    https://bugzilla.suse.com/1159010
  • report
    https://bugzilla.suse.com/1159184
  • report
    https://bugzilla.suse.com/1159202
  • report
    https://bugzilla.suse.com/1160246
  • report
    https://bugzilla.suse.com/1163001
  • report
    https://bugzilla.suse.com/1163121
  • report
    https://bugzilla.suse.com/1163468
  • report
    https://bugzilla.suse.com/1163538
  • report
    https://bugzilla.suse.com/1163884
  • report
    https://bugzilla.suse.com/1164111
  • report
    https://bugzilla.suse.com/1164121
  • report
    https://bugzilla.suse.com/1164563
  • report
    https://bugzilla.suse.com/1164771
  • report
    https://bugzilla.suse.com/1164875
  • report
    https://bugzilla.suse.com/1165571
  • report
    https://bugzilla.suse.com/1165921
  • report
    https://bugzilla.suse.com/1165926
  • report
    https://bugzilla.suse.com/1166408
  • report
    https://bugzilla.suse.com/1166523
  • report
    https://bugzilla.suse.com/1166613
  • report
    https://bugzilla.suse.com/1166699
  • report
    https://bugzilla.suse.com/1167052
  • report
    https://bugzilla.suse.com/1167237
  • report
    https://bugzilla.suse.com/1167329
  • report
    https://bugzilla.suse.com/1167556
  • report
    https://bugzilla.suse.com/1167777
  • report
    https://bugzilla.suse.com/1168069
  • report
    https://bugzilla.suse.com/1168083
  • report
    https://bugzilla.suse.com/1168227
  • report
    https://bugzilla.suse.com/1168696
  • report
    https://bugzilla.suse.com/1169109
  • report
    https://bugzilla.suse.com/1169144
  • report
    https://bugzilla.suse.com/1169865
  • web
    https://www.suse.com/security/cve/CVE-2020-7598