SUSE-SU-2017:2257-1: moderate: Security update for SUSE Manager Server 3.1

sle-security-updates at lists.suse.com sle-security-updates at lists.suse.com
Fri Aug 25 10:10:22 MDT 2017


   SUSE Security Update: Security update for SUSE Manager Server 3.1
______________________________________________________________________________

Announcement ID:    SUSE-SU-2017:2257-1
Rating:             moderate
References:         #1009118 #1017513 #1019759 #1028098 #1030898 
                    #1031143 #1031602 #1032324 #1032350 #1033999 
                    #1035728 #1037609 #1038321 #1039458 #1039579 
                    #1039913 #1042199 #1042552 #1042846 #1042975 
                    #1043143 #1043430 #1043795 #1043831 #1044719 
                    #1045152 #1045266 #1045981 #1046176 #1046218 
                    #1046314 #1046865 #1047282 #1047352 #1047513 
                    #1047641 #1047656 #1047680 #1047707 #1048183 
                    #1048968 #1049162 #1049425 #1049471 #1049575 
                    #1049664 #1049665 #1050385 #1051518 #1051719 
                    
Cross-References:   CVE-2017-10807 CVE-2017-7538
Affected Products:
                    SUSE Manager Server 3.1
______________________________________________________________________________

   An update that solves two vulnerabilities and has 48 fixes
   is now available.

Description:

   This update for the SUSE Manager Server 3.1 provides several fixes and
   improvements.

   The following security issues have been fixed:

   jabberd:

   - Fix offered SASL mechanism check. (bsc#1047282, CVE-2017-10807)

   spacewalk-java:

   - Do not allow XSS as Organization name. (bsc#1048968, CVE-2017-7538)

   Additionally, the following non-security issues have been fixed:

   cobbler:

   - Fix missing arguments and location for Xen. (bsc#1048183)

   jabberd:

   - Fix memory leak in pgsql storage driver.
   - Fix two double-frees caused by dangling pointers.
   - wss:// (WebSocket over SSL) support in c2s.
   - Allow BareJID S10N packets.
   - SQLite postconnect SQL support.
   - Support WebSocket fragmented packets.
   - Module to verify users using e-mail.
   - Use OpenSSL functions for base64 en/decoding when available.
   - Option to dump packet-filter matched packets to file.
   - bcrypt support for PostgreSQL and MySQL storage.
   - Option to set authreg module per realm.
   - WebSocket C2S SX plugin.
   - Support for RSA/DH/ECDH key agreement.
   - For a detailed description of all fixes, please refer to the changelog.

   osad:

   - Reduce maximal size of osad log before rotating.
   - Perform osad restart in posttrans. (bsc#1039913)

   salt-netapi-client:

   - Fix date format for Schedule.
   - Fix sending kwarg in payload in RunnerCall.
   - Better error handling in Runner and Wheel calls.
   - Increase the default SOCKET_TIMEOUT to 20 seconds.

   smdba:

   - Add support for postgresql96. (bsc#1045152)

   spacecmd:

   - Configchannel export binary flag to json. (bsc#1044719)

   spacewalk-backend:

   - Make master_label static to keep its value when retrying. (bsc#1038321)
   - Adapt for the new gpgcheck flag for the channels.

   spacewalk-branding:

   - Fix overlapping of elements. (bsc#1031143)
   - Fix overlapping text narrow window. (bsc#1009118)
   - Fix formulas action buttons position. (bsc#1047513)
   - Fix broken link. (bsc#1033999)
   - Alphabar: Change title to 'Select first character'. (bsc#1042199)

   spacewalk-certs-tools:

   - Improve text for bootstrap. (bsc#1032324)

   spacewalk-java:

   - Don't add default channel if AK is not valid. (bsc#1047656)
   - Add 'Enable GPG check' function for channels.
   - No legend icon for Activity Ocurring. (bsc#1051719)
   - Implement API call for bootstrapping systems.
   - Fix product ids reported for SUSE Manager Server to the subscription
     matcher.
   - Fix adding products when assigning channels. (bsc#1049664)
   - Set default memory size for SLES 12 installations to 1024MB.
     (bsc#1047707)
   - Enable remote-command for Salt clients in SSM. (bsc#1050385)
   - Add missing help icons/links. (bsc#1049425)
   - Fix invalid help links. (bsc#1049425)
   - Fix wrong openscap xid. (bsc#1030898)
   - Fix overlapping text narrow window. (bsc#1009118)
   - Fixes alignment on the orgdetails. (bsc#1017513)
   - Fix text for activation key buttons. (bsc#1042975)
   - Correctly set, check and cut textarea maxlength. (bsc#1043430)
   - MinionActionExecutor: Raise skip timeout. (bsc#1046865)
   - Update channels.xml with OpenStack Cloud Continuous Delivery 6.
     (bsc#1039458)
   - Do not create VirtualInstance duplicates for the same 'uuid'.
   - Add taskomatic task to cleanup duplicated uuids for same system id.
   - Handle possible wrong UUIDs on SLE11 minions. (bsc#1046218)
   - Removed duplicate overview menu item. (bsc#1045981)
   - Enable act-key name empty on creation. (bsc#1032350)
   - Fix NPE when there's not udev results. (bsc#1042552)
   - Alphabar: Change title to 'Select first character'. (bsc#1042199)
   - Duplicate Systems: Correct language not to mention 'profiles'.
     (bsc#1035728)
   - Fix list filters to work with URL special characters. (bsc#1042846)
   - Use getActive() instead of isActive() for JavaBeans compliance.
     (bsc#1043143)
   - Fix hide non-org event details. (bsc#1039579)

   spacewalk-search:

   - Remove executable bit from service files. (bsc#1051518)

   spacewalk-utils:

   - Don't show password on input in spacewalk-manage-channel-lifecycle.
     (bsc#1043795)

   spacewalk-web:

   - Fix overlapping of elements. (bsc#1031143)
   - Fix formulas action buttons position. (bsc#1047513)
   - Do not show old messages. (bsc#1043831)
   - Add a dynamic counter of the remaining textarea length.
   - Confirm if navigating away while bootstrapping.

   susemanager:

   - Assert correct java version. (bsc#1049575)
   - Create bootstrap repository for SLES for SAP 11 SP1. (bsc#1049471)
   - Adjust the bootstrap repository with SLE 12 SP3 repositories.

   susemanager-docs_en:

   - Improve Icinga services example. (bsc#1019759)
   - Make Section reference Configuration Management more clear. (bsc#1047352)
   - Add missing "host_name" in service definition example for Icinga.
     (bsc#1049162)
   - Fix documentation on moving database. (bsc#1031602)
   - Add missing Autoinstallation page in Advanced Topics guide. (bsc#1047680)
   - Make API documentation available online. (bsc#1047641)
   - Fix Reference Guide Documentation issues. (bsc#1045266)
   - Update online documentation components. (bsc#1046314)
   - Update online documentation. (bsc#1046176)

   susemanager-schema:

   - Adapt for the new gpgcheck flag for the channels.

   susemanager-sync-data:

   - Add support for SLE 12 SP3 product family, SUSE Enterprise Storage 5,
     OpenStack Cloud 6 Continuous Delivery and Public Cloud for ppc64le.
     (bsc#1028098, bsc#1039458, bsc#1037609, bsc#1049665)

   How to apply this update: 1. Log in as root user to the SUSE Manager
   server. 2. Stop the Spacewalk service: spacewalk-service stop 3. Apply the
   patch using either zypper patch or YaST Online Update. 4. Upgrade the
   database schema: spacewalk-schema-upgrade 5. Start the Spacewalk service:
   spacewalk-service start


Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Manager Server 3.1:

      zypper in -t patch SUSE-SUSE-Manager-Server-3.1-2017-1387=1

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Manager Server 3.1 (ppc64le s390x x86_64):

      jabberd-2.6.1-3.3.1
      jabberd-db-2.6.1-3.3.1
      jabberd-db-debuginfo-2.6.1-3.3.1
      jabberd-debuginfo-2.6.1-3.3.1
      jabberd-debugsource-2.6.1-3.3.1
      jabberd-sqlite-2.6.1-3.3.1
      jabberd-sqlite-debuginfo-2.6.1-3.3.1
      smdba-1.5.8-0.2.3.1
      spacewalk-branding-2.7.2.7-2.3.1
      susemanager-3.1.8-2.3.1
      susemanager-tools-3.1.8-2.3.1

   - SUSE Manager Server 3.1 (noarch):

      cobbler-2.6.6-5.3.1
      osa-common-5.11.80.3-2.3.1
      osa-dispatcher-5.11.80.3-2.3.1
      rhnpush-5.5.104.3-2.3.2
      salt-netapi-client-0.12.0-3.3.1
      spacecmd-2.7.8.6-2.3.1
      spacewalk-backend-2.7.73.7-2.3.1
      spacewalk-backend-app-2.7.73.7-2.3.1
      spacewalk-backend-applet-2.7.73.7-2.3.1
      spacewalk-backend-config-files-2.7.73.7-2.3.1
      spacewalk-backend-config-files-common-2.7.73.7-2.3.1
      spacewalk-backend-config-files-tool-2.7.73.7-2.3.1
      spacewalk-backend-iss-2.7.73.7-2.3.1
      spacewalk-backend-iss-export-2.7.73.7-2.3.1
      spacewalk-backend-libs-2.7.73.7-2.3.1
      spacewalk-backend-package-push-server-2.7.73.7-2.3.1
      spacewalk-backend-server-2.7.73.7-2.3.1
      spacewalk-backend-sql-2.7.73.7-2.3.1
      spacewalk-backend-sql-oracle-2.7.73.7-2.3.1
      spacewalk-backend-sql-postgresql-2.7.73.7-2.3.1
      spacewalk-backend-tools-2.7.73.7-2.3.1
      spacewalk-backend-xml-export-libs-2.7.73.7-2.3.1
      spacewalk-backend-xmlrpc-2.7.73.7-2.3.1
      spacewalk-base-2.7.1.10-2.3.1
      spacewalk-base-minimal-2.7.1.10-2.3.1
      spacewalk-base-minimal-config-2.7.1.10-2.3.1
      spacewalk-certs-tools-2.7.0.7-2.3.1
      spacewalk-html-2.7.1.10-2.3.1
      spacewalk-java-2.7.46.5-2.3.1
      spacewalk-java-config-2.7.46.5-2.3.1
      spacewalk-java-lib-2.7.46.5-2.3.1
      spacewalk-java-oracle-2.7.46.5-2.3.1
      spacewalk-java-postgresql-2.7.46.5-2.3.1
      spacewalk-search-2.7.3.2-2.3.4
      spacewalk-taskomatic-2.7.46.5-2.3.1
      spacewalk-utils-2.7.10.5-2.3.1
      susemanager-advanced-topics_en-pdf-3-10.3.1
      susemanager-best-practices_en-pdf-3-10.3.1
      susemanager-docs_en-3-10.3.1
      susemanager-getting-started_en-pdf-3-10.3.1
      susemanager-jsp_en-3-10.3.1
      susemanager-reference_en-pdf-3-10.3.1
      susemanager-schema-3.1.9-2.3.1
      susemanager-sync-data-3.1.6-2.3.1


References:

   https://www.suse.com/security/cve/CVE-2017-10807.html
   https://www.suse.com/security/cve/CVE-2017-7538.html
   https://bugzilla.suse.com/1009118
   https://bugzilla.suse.com/1017513
   https://bugzilla.suse.com/1019759
   https://bugzilla.suse.com/1028098
   https://bugzilla.suse.com/1030898
   https://bugzilla.suse.com/1031143
   https://bugzilla.suse.com/1031602
   https://bugzilla.suse.com/1032324
   https://bugzilla.suse.com/1032350
   https://bugzilla.suse.com/1033999
   https://bugzilla.suse.com/1035728
   https://bugzilla.suse.com/1037609
   https://bugzilla.suse.com/1038321
   https://bugzilla.suse.com/1039458
   https://bugzilla.suse.com/1039579
   https://bugzilla.suse.com/1039913
   https://bugzilla.suse.com/1042199
   https://bugzilla.suse.com/1042552
   https://bugzilla.suse.com/1042846
   https://bugzilla.suse.com/1042975
   https://bugzilla.suse.com/1043143
   https://bugzilla.suse.com/1043430
   https://bugzilla.suse.com/1043795
   https://bugzilla.suse.com/1043831
   https://bugzilla.suse.com/1044719
   https://bugzilla.suse.com/1045152
   https://bugzilla.suse.com/1045266
   https://bugzilla.suse.com/1045981
   https://bugzilla.suse.com/1046176
   https://bugzilla.suse.com/1046218
   https://bugzilla.suse.com/1046314
   https://bugzilla.suse.com/1046865
   https://bugzilla.suse.com/1047282
   https://bugzilla.suse.com/1047352
   https://bugzilla.suse.com/1047513
   https://bugzilla.suse.com/1047641
   https://bugzilla.suse.com/1047656
   https://bugzilla.suse.com/1047680
   https://bugzilla.suse.com/1047707
   https://bugzilla.suse.com/1048183
   https://bugzilla.suse.com/1048968
   https://bugzilla.suse.com/1049162
   https://bugzilla.suse.com/1049425
   https://bugzilla.suse.com/1049471
   https://bugzilla.suse.com/1049575
   https://bugzilla.suse.com/1049664
   https://bugzilla.suse.com/1049665
   https://bugzilla.suse.com/1050385
   https://bugzilla.suse.com/1051518
   https://bugzilla.suse.com/1051719



More information about the sle-security-updates mailing list