Description
SUSE Manager until version 4.0.7 and Uyuni until commit 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade created world-readable swap files on systems that don't have a swap already configured and don't have btrfs as filesystem
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SUSE | SUSE Manager | unspecified – < 4.0.7 | 4.0.7 |
| Uyuni | Uyuni | unspecified – < 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade | 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE Manager Server 3.2 | cobbler | 2.6.6-6.19.1 | SUSE-SU-2019:1703-1, SUSE-RU-2019:1703-1 |
| SUSE Manager Server 3.2 | py26-compat-salt | 2016.11.10-6.26.1 | SUSE-SU-2019:1703-1, SUSE-RU-2019:1703-1 |
| SUSE Manager Server 3.2 | salt-netapi-client | 0.16.0-4.11.1 | SUSE-SU-2019:1703-1, SUSE-RU-2019:1703-1 |
| SUSE Manager Server 3.2 | spacewalk-backend | 2.8.57.16-3.30.1 | SUSE-SU-2019:1703-1, SUSE-RU-2019:1703-1 |
| SUSE Manager Server 3.2 | spacewalk-certs-tools | 2.8.8.10-3.11.1 | SUSE-SU-2019:1703-1, SUSE-RU-2019:1703-1 |
| SUSE Manager Server 3.2 | spacewalk-config | 2.8.5.7-3.16.1 | SUSE-SU-2019:1703-1, SUSE-RU-2019:1703-1 |
| SUSE Manager Server 3.2 | spacewalk-java | 2.8.78.22-3.32.1 | SUSE-SU-2019:1703-1, SUSE-RU-2019:1703-1 |
| SUSE Manager Server 3.2 | spacewalk-web | 2.8.7.16-3.27.1 | SUSE-SU-2019:1703-1, SUSE-RU-2019:1703-1 |
| SUSE Manager Server 3.2 | susemanager | 3.2.18-3.25.2 | SUSE-SU-2019:1703-1, SUSE-RU-2019:1703-1 |
| SUSE Manager Server 3.2 | susemanager-docs_en | 3.2-11.26.1 | SUSE-SU-2019:1703-1, SUSE-RU-2019:1703-1 |
| SUSE Manager Server 3.2 | susemanager-schema | 3.2.19-3.25.1 | SUSE-SU-2019:1703-1, SUSE-RU-2019:1703-1 |
| SUSE Manager Server 3.2 | susemanager-sls | 3.2.25-3.29.1 | SUSE-SU-2019:1703-1, SUSE-RU-2019:1703-1 |
| SUSE Manager Server 3.2 | susemanager-sync-data | 3.2.15-3.23.1 | SUSE-SU-2019:1703-1, SUSE-RU-2019:1703-1 |
| SUSE Manager Proxy 3.2 | rhncfg | 5.10.122.3-3.3.1 | SUSE-SU-2019:1703-1, SUSE-RU-2019:1703-1 |
| SUSE Manager Proxy 3.2 | spacewalk-backend | 2.8.57.16-3.30.1 | SUSE-SU-2019:1703-1, SUSE-RU-2019:1703-1 |
| SUSE Manager Proxy 3.2 | spacewalk-certs-tools | 2.8.8.10-3.11.1 | SUSE-SU-2019:1703-1, SUSE-RU-2019:1703-1 |
| SUSE Manager Proxy 3.2 | spacewalk-proxy | 2.8.5.5-3.6.2 | SUSE-SU-2019:1703-1, SUSE-RU-2019:1703-1 |
| SUSE Manager Proxy 3.2 | spacewalk-proxy-installer | 2.8.6.6-3.12.1 | SUSE-SU-2019:1703-1, SUSE-RU-2019:1703-1 |
| SUSE Manager Proxy 3.2 | spacewalk-web | 2.8.7.16-3.27.1 | SUSE-SU-2019:1703-1, SUSE-RU-2019:1703-1 |
| SUSE Manager Proxy 3.2 | zypp-plugin-spacewalk | 1.0.5-3.7.1 | SUSE-SU-2019:1703-1, SUSE-RU-2019:1703-1 |
Advisories 2
- SUSE-SU-2019:1703-1 Security update for SUSE Manager Server 3.2 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-RU-2019:1703-1 Security update for SUSE Manager Server 3.2 SUSE / openSUSE Security Updates · Feb 4, 2026