Oval Definition:oval:org.opensuse.security:def:67447
Revision Date:2020-12-01Version:1
Title:Security update for SUSE Manager Server 4.1 (Important)
Description:



This update fixes the following issues:

bind-formula:

- Temporarily disable dnssec-validation as hotfix for bsc#1177790

grafana-formula:

- Use variable for product name - Add HA/SAP dashboards - Add support for system groups in Client Systems dashboard

image-sync-formula:

- Do not use .gz suffix for default initrd symlink - Keep the old symlink 'initrd.gz' for compatibility

prometheus-exporters-formula:

- Fix empty directory values initialization - Add systemd collector as default for node_exporters since otherwise some SAP/HA grafana dashboards will be empty - Disable reverse proxy on default

prometheus-formula:

- Disable Alertmanager clustering (bsc#1178145) - Use variable for product name

pxe-formula:

- Change default to 'initrd' without .gz suffix

py26-compat-salt:

- Properly validate eauth credentials and tokens on SSH calls made by Salt API (bsc#1178319, bsc#1178362, bsc#1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846)

python-susemanager-retail:

- Use name 'initrd' without .gz suffix

salt-netapi-client:

- Version 0.18.0 See: https://github.com/SUSE/salt-netapi-client/releases/tag/v0.18.0

saltboot-formula:

- Allow setting terminal kernel parameters in saltboot formula

spacecmd:

- Python3 fixes for errata in spacecmd (bsc#1169664) - Added support for i18n of user-facing strings - Python3 fix for sorted usage (bsc#1167907)

spacewalk-admin:

- Show info message when applying schema upgrade

spacewalk-backend:

- Prevent IntegrityError during mgr-inter-sync execution (bsc#1177235)

spacewalk-branding:

- Enable to switch to multiple webUI theme

spacewalk-client-tools:

- Remove RH references in Python/Ruby localization and use the product name instead

spacewalk-java:

- Use correct eauth module and credentials for Salt SSH calls (bsc#1178319) - Remove expiration date from ics files (bsc#1177892) - Execute Salt SSH actions in parallel (bsc#1173199) - Enable to switch to multiple webUI theme - Fix action chain resuming when patches updating salt-minion don't cause service to be restarted (bsc#1144447) - Renaming autoinstall distro didn't change the name of the Cobbler distro (bsc#1175876) - Fix the links for downloading the binaries in the package details UI (bsc#1176603) - Allow nightly ISS sync to also cover custom channels - Fix: reinspecting a container image (bsc#1177092) - Add power management xmlrpc api - Remove hostname from /var/lib/salt/.ssh/known_hosts when deleting system (bsc#1176159) - Log exception trace on fatal Taskomatic startup error - Fix max password length check at user creation (bsc#1176765) - Notify about missing libvirt or hypervisor on virtual host - Redesign maintenance schedule systems table to use paginated data from server - Fix SP migration after dry run for cloned channels (bsc#1176307) - Filter not available optional channels out

spacewalk-search:

- Change default maximum memory to 512 MB, preventing OutOfMemoryError

spacewalk-web:

- Enable to switch to multiple webUI theme - Only refresh the virtual storage list when pool events are received - Drop node-fetch to fix CVE-2020-15168 - Notify about missing libvirt or hypervisor on virtual host - Redesign maintenance schedule systems table to use paginated data from server

susemanager:

- Create bootstrap repo should not flush by default (bsc#1175843) - Improve detection of base channels for products (bsc#1177478) - Add LTSS PIDs for SLE12SP1, SLE12SP2, SLE12SP3 and SLE12SP4 to the bootstrap definitions as some packages from LTSS are required (bsc#1177524) - Fix logrotate config - Add missing packages to ubuntu20.04 bootstrap data (bsc#1176629)

susemanager-build-keys:

- Replace 'SuSE' user-facing references with 'SUSE'

susemanager-doc-indexes:

- Documented zypper autorefresh feature in Upgrade Guide - Update SP Migration chapter in Client Configuration Guide - In Client Configuration and Upgrade Guide, add link to valid autoyast upgrade settings - Move client upgrade related sections from Reference and Upgrade Guide to Client Configuration Guide - Updated Requirements chapter in Installation Guide. - Edits OpenSCAP section in Admin Guide (bsc#1176413) - Updated Terminology section in Salt Guide - Added on-demand images content to Install Guide - Adds webUI locale choice to Ref & Admin Guides - Adds new System Types section to Client Cfg - Updates supported client matrix in Install Guide - Add note about log file to Upgrade Guide - Removes outdated content from Activation Keys section (bsc#1177396) - Adds note about PAM Auth during migration (bsc#1177730) - Fixed broken table in admin guide

susemanager-docs_en:

- Documented zypper autorefresh feature in Upgrade Guide - Update SP Migration chapter in Client Configuration Guide - In Client Configuration and Upgrade Guide, add link to valid autoyast upgrade settings - Move client upgrade related sections from Reference and Upgrade Guide to Client Configuration Guide - Updated Requirements chapter in Installation Guide. - Edits OpenSCAP section in Admin Guide (bsc#1176413) - Updated Terminology section in Salt Guide - Added on-demand images content to Install Guide - Adds webUI locale choice to Ref & Admin Guides - Adds new System Types section to Client Cfg - Updates supported client matrix in Install Guide - Add note about log file to Upgrade Guide - Removes outdated content from Activation Keys section (bsc#1177396) - Adds note about PAM Auth during migration (bsc#1177730) - Fixed broken table in admin guide

susemanager-schema:

- Add web_theme user preferences column (bsc#1178204) - Execute Salt SSH actions in parallel (bsc#1173199) - Show info message when applying schema upgrade

susemanager-sls:

- Fix action chain resuming when patches updating salt-minion don't cause service to be restarted (bsc#1144447) - Make grub2 autoinstall kernel path relative to the boot partition root (bsc#1175876) - Move channel token information from sources.list to auth.conf on Debian 10 and Ubuntu 18 and newer - Add support for activation keys on server configuration Salt modules - Ensure the yum/dnf plugins are enabled - Remove hostname from /var/lib/salt/.ssh/known_hosts when deleting system (bsc#1176159) - Fix grub2 autoinstall kernel path (bsc#1178060)

How to apply this update: 1. Log in as root user to the SUSE Manager server. 2. Stop the Spacewalk service: spacewalk-service stop 3. Apply the patch using either zypper patch or YaST Online Update. 4. Upgrade the database schema: spacewalk-schema-upgrade 5. Start the Spacewalk service: spacewalk-service start
Family:unixClass:patch
Status:Reference(s):1144447
1167907
1169664
1173199
1175843
1175876
1176159
1176307
1176413
1176603
1176629
1176765
1177092
1177235
1177396
1177478
1177524
1177730
1177790
1177892
1178060
1178145
1178204
1178319
1178361
1178362
CVE-2013-2877
CVE-2014-0191
CVE-2015-1819
CVE-2015-5312
CVE-2015-7497
CVE-2015-7498
CVE-2015-7499
CVE-2015-7500
CVE-2015-7941
CVE-2015-7942
CVE-2015-7995
CVE-2015-8035
CVE-2015-8241
CVE-2015-8242
CVE-2015-8317
CVE-2016-4658
CVE-2016-4738
CVE-2016-5131
CVE-2017-15412
CVE-2017-5029
CVE-2020-15168
CVE-2020-16846
CVE-2020-17490
CVE-2020-25592
SUSE-SU-2020:3235-1
Platform(s):SUSE Linux Enterprise High Availability 15 SP1
SUSE Linux Enterprise Module for SUSE Manager Server 4.1
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise High Availability 15 SP1 is installed
  • AND ruby2.5-rubygem-nokogiri-1.8.2-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for SUSE Manager Server 4.1 is installed
  • AND Package Information
  • bind-formula-0.1.1603299886.60e4bcf-3.3 is installed
  • OR grafana-formula-0.3.0-3.3 is installed
  • OR image-sync-formula-0.1.1602150122.f08af0a-3.6 is installed
  • OR prometheus-exporters-formula-0.8.0-3.16 is installed
  • OR prometheus-formula-0.3.0-3.3 is installed
  • OR pxe-formula-0.1.1602490840.4f32148-3.3 is installed
  • OR py26-compat-salt-2016.11.10-6.3 is installed
  • OR python-susemanager-retail-1.0.1602150122.f08af0a-3.3 is installed
  • OR python3-spacewalk-client-tools-4.1.7-4.6 is installed
  • OR python3-susemanager-retail-1.0.1602150122.f08af0a-3.3 is installed
  • OR salt-netapi-client-0.18.0-15.7 is installed
  • OR saltboot-formula-0.1.1602150122.f08af0a-3.6 is installed
  • OR spacecmd-4.1.8-4.9 is installed
  • OR spacewalk-admin-4.1.7-3.6 is installed
  • OR spacewalk-backend-4.1.16-4.11 is installed
  • OR spacewalk-backend-app-4.1.16-4.11 is installed
  • OR spacewalk-backend-applet-4.1.16-4.11 is installed
  • OR spacewalk-backend-config-files-4.1.16-4.11 is installed
  • OR spacewalk-backend-config-files-common-4.1.16-4.11 is installed
  • OR spacewalk-backend-config-files-tool-4.1.16-4.11 is installed
  • OR spacewalk-backend-iss-4.1.16-4.11 is installed
  • OR spacewalk-backend-iss-export-4.1.16-4.11 is installed
  • OR spacewalk-backend-package-push-server-4.1.16-4.11 is installed
  • OR spacewalk-backend-server-4.1.16-4.11 is installed
  • OR spacewalk-backend-sql-4.1.16-4.11 is installed
  • OR spacewalk-backend-sql-postgresql-4.1.16-4.11 is installed
  • OR spacewalk-backend-tools-4.1.16-4.11 is installed
  • OR spacewalk-backend-xml-export-libs-4.1.16-4.11 is installed
  • OR spacewalk-backend-xmlrpc-4.1.16-4.11 is installed
  • OR spacewalk-base-4.1.19-3.9 is installed
  • OR spacewalk-base-minimal-4.1.19-3.9 is installed
  • OR spacewalk-base-minimal-config-4.1.19-3.9 is installed
  • OR spacewalk-branding-4.1.11-3.9 is installed
  • OR spacewalk-client-tools-4.1.7-4.6 is installed
  • OR spacewalk-html-4.1.19-3.9 is installed
  • OR spacewalk-java-4.1.22-3.16 is installed
  • OR spacewalk-java-config-4.1.22-3.16 is installed
  • OR spacewalk-java-lib-4.1.22-3.16 is installed
  • OR spacewalk-java-postgresql-4.1.22-3.16 is installed
  • OR spacewalk-search-4.1.3-3.3 is installed
  • OR spacewalk-taskomatic-4.1.22-3.16 is installed
  • OR spacewalk-web-4.1.19-3.9 is installed
  • OR susemanager-4.1.21-3.11 is installed
  • OR susemanager-build-keys-15.2.2-3.6 is installed
  • OR susemanager-build-keys-web-15.2.2-3.6 is installed
  • OR susemanager-doc-indexes-4.1-11.17 is installed
  • OR susemanager-docs_en-4.1-11.17 is installed
  • OR susemanager-docs_en-pdf-4.1-11.17 is installed
  • OR susemanager-retail-tools-1.0.1602150122.f08af0a-3.3 is installed
  • OR susemanager-schema-4.1.15-3.11 is installed
  • OR susemanager-sls-4.1.17-3.13 is installed
  • OR susemanager-tools-4.1.21-3.11 is installed
  • OR susemanager-web-libs-4.1.19-3.9 is installed
  • OR uyuni-config-modules-4.1.17-3.13 is installed
  • BACK