Security update for SUSE Manager Server 4.1 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:2373-1 Final 1 1 2020-08-28T10:58:53Z current 2020-08-28T10:58:53Z 2020-08-28T10:58:53Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for SUSE Manager Server 4.1 This update fixes the following issues: cobbler: - More old modules naming fixes (bsc#1169553) image-sync-formula: - Allow image-sync state on regular minion. Image sync state requires branch-network pillars to get the directory where to sync images. Use default `/srv/saltboot` if that pillar is missing so image-sync can be applied on non branch minions as well. mgr-libmod: - Remove unnecessary array wrap in 'list_modules' response object mgr-osad: - Move uyuni-base-common dependency from mgr-osad to mgr-osa-dispatcher (bsc#1174405) openvpn-formula: - Add hint that ssl certs must be on system (bsc#1172279) patterns-suse-manager: - Add Recommends for golang-github-QubitProducts-exporter_exporter prometheus-exporters-formula: - Bugfix: Handle exporters proxy for unsupported distros (bsc#1175555) - Add support for exporters proxy (exporter_exporter) pxe-default-image-sle15: - Rollback the workaround for bsc#1172807, as dracut is now fixed saltboot-formula: - Better fix for rounding errors (bsc#1136857) spacecmd: - Fix softwarechannel update for vendor channels (bsc#1172709) - Fix escaping of package names (bsc#1171281) spacewalk-backend: - Adds basic functionality for gpg check - Verify GPG signature of Ubuntu/Debian repository metadata (Release file) - Take care of SCC auth tokens on DEB repos GPG checks (bsc#1175485) - Use spacewalk keyring for GPG checks on DEB repos (bsc#1175485) spacewalk-branding: - Implement Maintenance Windows - Fix typo on spacewalk-branding license spacewalk-certs-tools: - Strip SSL Certificate Common Name after 63 Characters (bsc#1173535) - Fix centos detection (bsc#1173584) spacewalk-java: - Use media.1/products from media when not specified different (bsc#1175558) - Upgrade jQuery and adapt the code - CVE-2020-11022 (bsc#1172831) - Fix error when rolling back a system to a snapshot (bsc#1173997) - Implement maintenance windows backend - Add check for maintainence window during executing recurring actions - Implement maintenance windows in struts - XMLRPC: Assign/retract maintenance schedule to/from systems - Fix softwarechannel update for vendor channels (bsc#1172709) - Avoid deadlock when syncing channels and registering minions at the same time (bsc#1173566) - Change system list header text to something better (bsc#1173982) - Set CPU and memory info for virtual instances (bsc#1170244) - Add virtual network Start, Stop and Delete actions - Add virtual network list page - Fix httpcomponents and gson jar symlinks (bsc#1174229) - Enhance RedHat product detection for CentOS and OracleLinux (bsc#1173584) - Provide comps.xml and modules.yaml when using onlinerepo for kickstart - Refresh virtualization pages only on events - Fix up2date detection on RH8 when salt-minion is used for registration - Improve performance of the System Groups page with many clients (bsc#1172839) - Include number of non-patch package updates to non-critical update counts in system group pages (bsc#1170468) - Bump XMLRPC API version number to distinguish from Spacewalk 2.10 - Cluster UI: return to overview page after scheduling actions - Fix NPE on auto installation when no kernel options are given (bsc#1173932) - Fix issue with disabling self_update for autoyast autoupgrade (bsc#1170654) - Adapt expectations for jobs return events after switching Salt states to use 'mgrcompat.module_run' state. spacewalk-utils: - Add aarch64 for openSUSE Leap 15.1 and 15.2 spacewalk-web: - Upgrade jQuery and adapt the code - CVE-2020-11022 (bsc#1172831) - Fix JS linting errors/warnings - Enable Nutanix AHV virtual host gatherer. - Web UI: Implement managing maintenance schedules and calendars - Warn when a system is in multiple groups that configure the same formula in the system formula's UI (bsc#1173554) - Add virtual network start, stop and delete actions - Add virtual network list page - Fix internal server error when creating module filters in CLM (bsc#1174325) - Fix VM creation page when there is no volume in the default storage pool - Refresh virtualization pages only on events - Product list in the Wizard doesn't show SLE products first (bsc#1173522) - Cluster UI: return to overview page after scheduling actions - Changes in the logic to update the tick icon. - For the postgres localhost:5432 case, use the - Fix internal server errors by returning 0 instead of dying - Add missing dependency to spacewalk-base-minimal (bsc#678126) - Change kickstart to autoinstallation in navigation on pxt pages - Debranding suseRegisterInfo: - Enhance RedHat product detection for CentOS and OracleLinux (bsc#1173584) susemanager: - Migrate all occurrences of kickstart to autoinstall in cobbler database (bsc#1169780) - Define bootstrap repo data for SUSE Manager Proxies (bsc#1174470) - Add SLE 15 LTSS Product ID to SLE15 bootstrap repositories, as it is required to get python3-M2crypto (bsc#1174167) susemanager-doc-indexes: - Left navigation structure cleaned up - Fixed several broken xrefs - Added hostname admonition for public cloud sections - Clarified Branch Proxy configuration instructions - Fixed index page pdf links, urls were 1 step to deep - SUSECOM 2020 branding update - PDF 2020 branding update - WEBUI 2020 branding update - Added maintenance window documentation - Added SLE client chapter - Added 508 compliance - Added reverse proxy information to Monitoring in Admin Guide - Add note about accessibility to index - In the Upgrade Guide, use Major, Minor, and Patch Level terminology for versioning. - Added docs for nutanix VHM - Ubuntu clients using the CLI in SUMA (bsc#1174025) susemanager-docs_en: - Left navigation structure cleaned up - Fixed several broken xrefs - Added hostname admonition for public cloud sections - Clarified Branch Proxy configuration instructions - Fixed index page pdf links, urls were 1 step to deep - SUSECOM 2020 branding update - PDF 2020 branding update - WEBUI 2020 branding update - Added maintenance window documentation - Added SLE client chapter - Added 508 compliance - Added reverse proxy information to Monitoring in Admin Guide - Add note about accessibility to index - In the Upgrade Guide, use Major, Minor, and Patch Level terminology for versioning. - Added docs for nutanix VHM - Ubuntu clients using the CLI in SUMA (bsc#1174025) susemanager-frontend-libs: - Upgrade jquery to 3.5.1 - CVE-2020-11022 (bsc#1172831) susemanager-schema: - Add new states and types for virtual instances in order to support Nutanix AHV. - Implement Maintenance Windows - Add virtual network state change action - Internal fixes to avoid problems with the idempotency tests susemanager-sls: - Fix the dnf plugin to add the token to the HTTP header (bsc#1175724) - Fix: supply a dnf base when dealing w/repos (bsc#1172504) - Fix: autorefresh in repos is zypper-only - Add virtual network state change state to handle start, stop and delete - Add virtual network state change state to handle start and stop - Fetch oracle-release when looking for RedHat Product Info (bsc#1173584) - Force a refresh after deleting a virtual storage volume - Prevent stuck Hardware Refresh actions on Salt 2016.11.10 based SSH minions (bsc#1173169) - Require PyYAML version >= 5.1 - Log out of Docker registries after image build (bsc#1165572) - Prevent 'module.run' deprecation warnings by using custom mgrcompat module susemanager-sync-data: - Remove version from centos and oracle linux identifier (bsc#1173584) uyuni-common-libs: - Fix issues importing RPM packages with long RPM headers (bsc#1174965) virtual-host-gatherer: - Add new gatherer module for Nutanix AHV. virtualization-host-formula: - Ensure kernel-default and libvirt-python3 are installed - Set bridge network as default - Fix conditionals (bsc#1175791) yomi-formula: - Update to version 0.0.1+git.1595952633.b300be2: * pillar: install always kernel-default * chroot: python3-base is now a capability * Move systemctl calls inside chroot * Network: initial work for network declaration * MicroOS: Remove tmp subvolume * Update format following the new standard * Fix __mount_device wrapper httpcomponents-core: - Include the correct package in SUSE Manager Server (no source changes) httpcomponents-client: - Include the correct package in SUSE Manager Server (no source changes) google-gson: - Include the correct package in SUSE Manager Server (no source changes) How to apply this update: 1. Log in as root user to the SUSE Manager server. 2. Stop the Spacewalk service: spacewalk-service stop 3. Apply the patch using either zypper patch or YaST Online Update. 4. Upgrade the database schema: spacewalk-schema-upgrade 5. Start the Spacewalk service: spacewalk-service start The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container bci/openjdk-devel:11-2020-2373,Container bci/openjdk-devel:17-2020-2373,Container bci/openjdk-devel:latest-2020-2373,Container containers/apache-pulsar:3.3-2020-2373,Container suse/manager/5.0/x86_64/server:latest-2020-2373,Container suse/multi-linux-manager/5.1/x86_64/server:latest-2020-2373,Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure-2020-2373,Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM-2020-2373,Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE-2020-2373,Image SLES15-SP4-Manager-Server-4-3-2020-2373,Image SLES15-SP4-Manager-Server-4-3-Azure-llc-2020-2373,Image SLES15-SP4-Manager-Server-4-3-Azure-ltd-2020-2373,Image SLES15-SP4-Manager-Server-4-3-BYOS-2020-2373,Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure-2020-2373,Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2-2020-2373,Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE-2020-2373,Image SLES15-SP4-Manager-Server-4-3-EC2-llc-2020-2373,Image SLES15-SP4-Manager-Server-4-3-EC2-ltd-2020-2373,Image server-image-2020-2373,SUSE-2020-2373,SUSE-SLE-Module-SUSE-Manager-Proxy-4.1-2020-2373,SUSE-SLE-Module-SUSE-Manager-Server-4.1-2020-2373 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20202373-1/ Link for SUSE-SU-2020:2373-1 https://lists.suse.com/pipermail/sle-security-updates/2020-August/007314.html E-Mail link for SUSE-SU-2020:2373-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1136857 SUSE Bug 1136857 https://bugzilla.suse.com/1165572 SUSE Bug 1165572 https://bugzilla.suse.com/1169553 SUSE Bug 1169553 https://bugzilla.suse.com/1169780 SUSE Bug 1169780 https://bugzilla.suse.com/1170244 SUSE Bug 1170244 https://bugzilla.suse.com/1170468 SUSE Bug 1170468 https://bugzilla.suse.com/1170654 SUSE Bug 1170654 https://bugzilla.suse.com/1171281 SUSE Bug 1171281 https://bugzilla.suse.com/1172279 SUSE Bug 1172279 https://bugzilla.suse.com/1172504 SUSE Bug 1172504 https://bugzilla.suse.com/1172709 SUSE Bug 1172709 https://bugzilla.suse.com/1172807 SUSE Bug 1172807 https://bugzilla.suse.com/1172831 SUSE Bug 1172831 https://bugzilla.suse.com/1172839 SUSE Bug 1172839 https://bugzilla.suse.com/1173169 SUSE Bug 1173169 https://bugzilla.suse.com/1173522 SUSE Bug 1173522 https://bugzilla.suse.com/1173535 SUSE Bug 1173535 https://bugzilla.suse.com/1173554 SUSE Bug 1173554 https://bugzilla.suse.com/1173566 SUSE Bug 1173566 https://bugzilla.suse.com/1173584 SUSE Bug 1173584 https://bugzilla.suse.com/1173932 SUSE Bug 1173932 https://bugzilla.suse.com/1173982 SUSE Bug 1173982 https://bugzilla.suse.com/1173997 SUSE Bug 1173997 https://bugzilla.suse.com/1174025 SUSE Bug 1174025 https://bugzilla.suse.com/1174167 SUSE Bug 1174167 https://bugzilla.suse.com/1174229 SUSE Bug 1174229 https://bugzilla.suse.com/1174325 SUSE Bug 1174325 https://bugzilla.suse.com/1174405 SUSE Bug 1174405 https://bugzilla.suse.com/1174470 SUSE Bug 1174470 https://bugzilla.suse.com/1174965 SUSE Bug 1174965 https://bugzilla.suse.com/1175485 SUSE Bug 1175485 https://bugzilla.suse.com/1175555 SUSE Bug 1175555 https://bugzilla.suse.com/1175558 SUSE Bug 1175558 https://bugzilla.suse.com/1175724 SUSE Bug 1175724 https://bugzilla.suse.com/1175791 SUSE Bug 1175791 https://bugzilla.suse.com/678126 SUSE Bug 678126 https://www.suse.com/security/cve/CVE-2020-11022/ SUSE CVE CVE-2020-11022 page Container bci/openjdk-devel:11 Container bci/openjdk-devel:17 Container bci/openjdk-devel:latest Container containers/apache-pulsar:3.3 Container suse/manager/5.0/x86_64/server:latest Container suse/multi-linux-manager/5.1/x86_64/server:latest Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE Image SLES15-SP4-Manager-Server-4-3 Image SLES15-SP4-Manager-Server-4-3-Azure-llc Image SLES15-SP4-Manager-Server-4-3-Azure-ltd Image SLES15-SP4-Manager-Server-4-3-BYOS Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE Image SLES15-SP4-Manager-Server-4-3-EC2-llc Image SLES15-SP4-Manager-Server-4-3-EC2-ltd Image server-image SUSE Manager Proxy Module 4.1 SUSE Manager Server Module 4.1 httpcomponents-client-4.5.6-3.2.6 httpcomponents-core-4.4.10-3.2.6 google-gson-2.8.5-3.2.6 google-gson-javadoc-2.8.5-3.2.6 httpcomponents-client-cache-4.5.6-3.2.6 httpcomponents-client-javadoc-4.5.6-3.2.6 httpcomponents-core-javadoc-4.4.10-3.2.6 pxe-default-image-sle15-4.1.0-Build5.3 golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6 mgr-osad-4.1.3-2.3.6 patterns-suma_proxy-4.1-6.3.6 python3-mgr-osa-common-4.1.3-2.3.6 python3-mgr-osad-4.1.3-2.3.6 python3-spacewalk-certs-tools-4.1.12-3.3.6 python3-suseRegisterInfo-4.1.3-4.3.6 python3-uyuni-common-libs-4.1.6-3.3.6 spacecmd-4.1.6-4.3.6 spacewalk-backend-4.1.14-4.5.2 spacewalk-base-minimal-4.1.15-3.3.6 spacewalk-base-minimal-config-4.1.15-3.3.6 spacewalk-certs-tools-4.1.12-3.3.6 spacewalk-proxy-broker-4.1.2-3.3.6 spacewalk-proxy-common-4.1.2-3.3.6 spacewalk-proxy-management-4.1.2-3.3.6 spacewalk-proxy-package-manager-4.1.2-3.3.6 spacewalk-proxy-redirect-4.1.2-3.3.6 spacewalk-proxy-salt-4.1.2-3.3.6 suseRegisterInfo-4.1.3-4.3.6 cobbler-3.0.0+git20190806.32c4bae0-5.3.6 ical4j-3.0.18-3.2.7 image-sync-formula-0.1.1595937550.0285244-3.3.6 mgr-libmod-4.1.4-3.3.6 mgr-osa-dispatcher-4.1.3-2.3.6 openvpn-formula-0.1.1-3.3.6 patterns-suma_retail-4.1-6.3.6 patterns-suma_server-4.1-6.3.6 prometheus-exporters-formula-0.7.1-3.5.2 python3-mgr-osa-dispatcher-4.1.3-2.3.6 saltboot-formula-0.1.1595937550.0285244-3.3.6 spacewalk-backend-app-4.1.14-4.5.2 spacewalk-backend-applet-4.1.14-4.5.2 spacewalk-backend-config-files-4.1.14-4.5.2 spacewalk-backend-config-files-common-4.1.14-4.5.2 spacewalk-backend-config-files-tool-4.1.14-4.5.2 spacewalk-backend-iss-4.1.14-4.5.2 spacewalk-backend-iss-export-4.1.14-4.5.2 spacewalk-backend-package-push-server-4.1.14-4.5.2 spacewalk-backend-server-4.1.14-4.5.2 spacewalk-backend-sql-4.1.14-4.5.2 spacewalk-backend-sql-postgresql-4.1.14-4.5.2 spacewalk-backend-tools-4.1.14-4.5.2 spacewalk-backend-xml-export-libs-4.1.14-4.5.2 spacewalk-backend-xmlrpc-4.1.14-4.5.2 spacewalk-base-4.1.15-3.3.6 spacewalk-branding-4.1.9-3.3.6 spacewalk-html-4.1.15-3.3.6 spacewalk-java-4.1.18-3.5.3 spacewalk-java-config-4.1.18-3.5.3 spacewalk-java-lib-4.1.18-3.5.3 spacewalk-java-postgresql-4.1.18-3.5.3 spacewalk-taskomatic-4.1.18-3.5.3 spacewalk-utils-4.1.11-3.3.6 spacewalk-utils-extras-4.1.11-3.3.6 susemanager-4.1.18-3.3.6 susemanager-doc-indexes-4.1-11.7.2 susemanager-docs_en-4.1-11.7.2 susemanager-docs_en-pdf-4.1-11.7.2 susemanager-frontend-libs-4.1.0-3.3.6 susemanager-schema-4.1.12-3.3.6 susemanager-sls-4.1.14-3.5.2 susemanager-sync-data-4.1.7-3.3.6 susemanager-tools-4.1.18-3.3.6 susemanager-web-libs-4.1.15-3.3.6 virtual-host-gatherer-1.0.21-4.3.6 virtual-host-gatherer-Kubernetes-1.0.21-4.3.6 virtual-host-gatherer-Nutanix-1.0.21-4.3.6 virtual-host-gatherer-VMware-1.0.21-4.3.6 virtual-host-gatherer-libcloud-1.0.21-4.3.6 virtualization-host-formula-0.5-3.3.1 yomi-formula-0.0.1+git.1595952633.b300be2-3.3.6 httpcomponents-client-4.5.6-3.2.6 as a component of Container bci/openjdk-devel:11 httpcomponents-core-4.4.10-3.2.6 as a component of Container bci/openjdk-devel:11 httpcomponents-client-4.5.6-3.2.6 as a component of Container bci/openjdk-devel:17 httpcomponents-core-4.4.10-3.2.6 as a component of Container bci/openjdk-devel:17 httpcomponents-client-4.5.6-3.2.6 as a component of Container bci/openjdk-devel:latest httpcomponents-core-4.4.10-3.2.6 as a component of Container bci/openjdk-devel:latest google-gson-2.8.5-3.2.6 as a component of Container containers/apache-pulsar:3.3 httpcomponents-client-4.5.6-3.2.6 as a component of Container containers/apache-pulsar:3.3 httpcomponents-core-4.4.10-3.2.6 as a component of Container containers/apache-pulsar:3.3 google-gson-2.8.5-3.2.6 as a component of Container suse/manager/5.0/x86_64/server:latest httpcomponents-client-4.5.6-3.2.6 as a component of Container suse/manager/5.0/x86_64/server:latest httpcomponents-core-4.4.10-3.2.6 as a component of Container suse/manager/5.0/x86_64/server:latest google-gson-2.8.5-3.2.6 as a component of Container suse/multi-linux-manager/5.1/x86_64/server:latest httpcomponents-client-4.5.6-3.2.6 as a component of Container suse/multi-linux-manager/5.1/x86_64/server:latest httpcomponents-core-4.4.10-3.2.6 as a component of Container suse/multi-linux-manager/5.1/x86_64/server:latest google-gson-2.8.5-3.2.6 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure httpcomponents-client-4.5.6-3.2.6 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure httpcomponents-core-4.4.10-3.2.6 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure google-gson-2.8.5-3.2.6 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM httpcomponents-client-4.5.6-3.2.6 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM httpcomponents-core-4.4.10-3.2.6 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM google-gson-2.8.5-3.2.6 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE httpcomponents-client-4.5.6-3.2.6 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE httpcomponents-core-4.4.10-3.2.6 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE google-gson-2.8.5-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3 httpcomponents-client-4.5.6-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3 httpcomponents-core-4.4.10-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3 google-gson-2.8.5-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3-Azure-llc httpcomponents-client-4.5.6-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3-Azure-llc httpcomponents-core-4.4.10-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3-Azure-llc google-gson-2.8.5-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3-Azure-ltd httpcomponents-client-4.5.6-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3-Azure-ltd httpcomponents-core-4.4.10-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3-Azure-ltd google-gson-2.8.5-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS httpcomponents-client-4.5.6-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS httpcomponents-core-4.4.10-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS google-gson-2.8.5-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure httpcomponents-client-4.5.6-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure httpcomponents-core-4.4.10-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure google-gson-2.8.5-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 httpcomponents-client-4.5.6-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 httpcomponents-core-4.4.10-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 google-gson-2.8.5-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE httpcomponents-client-4.5.6-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE httpcomponents-core-4.4.10-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE google-gson-2.8.5-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3-EC2-llc httpcomponents-client-4.5.6-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3-EC2-llc httpcomponents-core-4.4.10-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3-EC2-llc google-gson-2.8.5-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3-EC2-ltd httpcomponents-client-4.5.6-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3-EC2-ltd httpcomponents-core-4.4.10-3.2.6 as a component of Image SLES15-SP4-Manager-Server-4-3-EC2-ltd google-gson-2.8.5-3.2.6 as a component of Image server-image httpcomponents-client-4.5.6-3.2.6 as a component of Image server-image httpcomponents-core-4.4.10-3.2.6 as a component of Image server-image golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6 as a component of SUSE Manager Proxy Module 4.1 mgr-osad-4.1.3-2.3.6 as a component of SUSE Manager Proxy Module 4.1 patterns-suma_proxy-4.1-6.3.6 as a component of SUSE Manager Proxy Module 4.1 python3-mgr-osa-common-4.1.3-2.3.6 as a component of SUSE Manager Proxy Module 4.1 python3-mgr-osad-4.1.3-2.3.6 as a component of SUSE Manager Proxy Module 4.1 python3-spacewalk-certs-tools-4.1.12-3.3.6 as a component of SUSE Manager Proxy Module 4.1 python3-suseRegisterInfo-4.1.3-4.3.6 as a component of SUSE Manager Proxy Module 4.1 python3-uyuni-common-libs-4.1.6-3.3.6 as a component of SUSE Manager Proxy Module 4.1 spacecmd-4.1.6-4.3.6 as a component of SUSE Manager Proxy Module 4.1 spacewalk-backend-4.1.14-4.5.2 as a component of SUSE Manager Proxy Module 4.1 spacewalk-base-minimal-4.1.15-3.3.6 as a component of SUSE Manager Proxy Module 4.1 spacewalk-base-minimal-config-4.1.15-3.3.6 as a component of SUSE Manager Proxy Module 4.1 spacewalk-certs-tools-4.1.12-3.3.6 as a component of SUSE Manager Proxy Module 4.1 spacewalk-proxy-broker-4.1.2-3.3.6 as a component of SUSE Manager Proxy Module 4.1 spacewalk-proxy-common-4.1.2-3.3.6 as a component of SUSE Manager Proxy Module 4.1 spacewalk-proxy-management-4.1.2-3.3.6 as a component of SUSE Manager Proxy Module 4.1 spacewalk-proxy-package-manager-4.1.2-3.3.6 as a component of SUSE Manager Proxy Module 4.1 spacewalk-proxy-redirect-4.1.2-3.3.6 as a component of SUSE Manager Proxy Module 4.1 spacewalk-proxy-salt-4.1.2-3.3.6 as a component of SUSE Manager Proxy Module 4.1 suseRegisterInfo-4.1.3-4.3.6 as a component of SUSE Manager Proxy Module 4.1 cobbler-3.0.0+git20190806.32c4bae0-5.3.6 as a component of SUSE Manager Server Module 4.1 golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6 as a component of SUSE Manager Server Module 4.1 google-gson-2.8.5-3.2.6 as a component of SUSE Manager Server Module 4.1 httpcomponents-client-4.5.6-3.2.6 as a component of SUSE Manager Server Module 4.1 httpcomponents-core-4.4.10-3.2.6 as a component of SUSE Manager Server Module 4.1 ical4j-3.0.18-3.2.7 as a component of SUSE Manager Server Module 4.1 image-sync-formula-0.1.1595937550.0285244-3.3.6 as a component of SUSE Manager Server Module 4.1 mgr-libmod-4.1.4-3.3.6 as a component of SUSE Manager Server Module 4.1 mgr-osa-dispatcher-4.1.3-2.3.6 as a component of SUSE Manager Server Module 4.1 openvpn-formula-0.1.1-3.3.6 as a component of SUSE Manager Server Module 4.1 patterns-suma_retail-4.1-6.3.6 as a component of SUSE Manager Server Module 4.1 patterns-suma_server-4.1-6.3.6 as a component of SUSE Manager Server Module 4.1 prometheus-exporters-formula-0.7.1-3.5.2 as a component of SUSE Manager Server Module 4.1 pxe-default-image-sle15-4.1.0-Build5.3 as a component of SUSE Manager Server Module 4.1 python3-mgr-osa-common-4.1.3-2.3.6 as a component of SUSE Manager Server Module 4.1 python3-mgr-osa-dispatcher-4.1.3-2.3.6 as a component of SUSE Manager Server Module 4.1 python3-spacewalk-certs-tools-4.1.12-3.3.6 as a component of SUSE Manager Server Module 4.1 python3-suseRegisterInfo-4.1.3-4.3.6 as a component of SUSE Manager Server Module 4.1 python3-uyuni-common-libs-4.1.6-3.3.6 as a component of SUSE Manager Server Module 4.1 saltboot-formula-0.1.1595937550.0285244-3.3.6 as a component of SUSE Manager Server Module 4.1 spacecmd-4.1.6-4.3.6 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-4.1.14-4.5.2 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-app-4.1.14-4.5.2 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-applet-4.1.14-4.5.2 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-config-files-4.1.14-4.5.2 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-config-files-common-4.1.14-4.5.2 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-config-files-tool-4.1.14-4.5.2 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-iss-4.1.14-4.5.2 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-iss-export-4.1.14-4.5.2 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-package-push-server-4.1.14-4.5.2 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-server-4.1.14-4.5.2 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-sql-4.1.14-4.5.2 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-sql-postgresql-4.1.14-4.5.2 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-tools-4.1.14-4.5.2 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-xml-export-libs-4.1.14-4.5.2 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-xmlrpc-4.1.14-4.5.2 as a component of SUSE Manager Server Module 4.1 spacewalk-base-4.1.15-3.3.6 as a component of SUSE Manager Server Module 4.1 spacewalk-base-minimal-4.1.15-3.3.6 as a component of SUSE Manager Server Module 4.1 spacewalk-base-minimal-config-4.1.15-3.3.6 as a component of SUSE Manager Server Module 4.1 spacewalk-branding-4.1.9-3.3.6 as a component of SUSE Manager Server Module 4.1 spacewalk-certs-tools-4.1.12-3.3.6 as a component of SUSE Manager Server Module 4.1 spacewalk-html-4.1.15-3.3.6 as a component of SUSE Manager Server Module 4.1 spacewalk-java-4.1.18-3.5.3 as a component of SUSE Manager Server Module 4.1 spacewalk-java-config-4.1.18-3.5.3 as a component of SUSE Manager Server Module 4.1 spacewalk-java-lib-4.1.18-3.5.3 as a component of SUSE Manager Server Module 4.1 spacewalk-java-postgresql-4.1.18-3.5.3 as a component of SUSE Manager Server Module 4.1 spacewalk-taskomatic-4.1.18-3.5.3 as a component of SUSE Manager Server Module 4.1 spacewalk-utils-4.1.11-3.3.6 as a component of SUSE Manager Server Module 4.1 spacewalk-utils-extras-4.1.11-3.3.6 as a component of SUSE Manager Server Module 4.1 suseRegisterInfo-4.1.3-4.3.6 as a component of SUSE Manager Server Module 4.1 susemanager-4.1.18-3.3.6 as a component of SUSE Manager Server Module 4.1 susemanager-doc-indexes-4.1-11.7.2 as a component of SUSE Manager Server Module 4.1 susemanager-docs_en-4.1-11.7.2 as a component of SUSE Manager Server Module 4.1 susemanager-docs_en-pdf-4.1-11.7.2 as a component of SUSE Manager Server Module 4.1 susemanager-frontend-libs-4.1.0-3.3.6 as a component of SUSE Manager Server Module 4.1 susemanager-schema-4.1.12-3.3.6 as a component of SUSE Manager Server Module 4.1 susemanager-sls-4.1.14-3.5.2 as a component of SUSE Manager Server Module 4.1 susemanager-sync-data-4.1.7-3.3.6 as a component of SUSE Manager Server Module 4.1 susemanager-tools-4.1.18-3.3.6 as a component of SUSE Manager Server Module 4.1 susemanager-web-libs-4.1.15-3.3.6 as a component of SUSE Manager Server Module 4.1 virtual-host-gatherer-1.0.21-4.3.6 as a component of SUSE Manager Server Module 4.1 virtual-host-gatherer-Kubernetes-1.0.21-4.3.6 as a component of SUSE Manager Server Module 4.1 virtual-host-gatherer-Nutanix-1.0.21-4.3.6 as a component of SUSE Manager Server Module 4.1 virtual-host-gatherer-VMware-1.0.21-4.3.6 as a component of SUSE Manager Server Module 4.1 virtual-host-gatherer-libcloud-1.0.21-4.3.6 as a component of SUSE Manager Server Module 4.1 virtualization-host-formula-0.5-3.3.1 as a component of SUSE Manager Server Module 4.1 yomi-formula-0.0.1+git.1595952633.b300be2-3.3.6 as a component of SUSE Manager Server Module 4.1 In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0. CVE-2020-11022 Container bci/openjdk-devel:11:httpcomponents-client-4.5.6-3.2.6 Container bci/openjdk-devel:11:httpcomponents-core-4.4.10-3.2.6 Container bci/openjdk-devel:17:httpcomponents-client-4.5.6-3.2.6 Container bci/openjdk-devel:17:httpcomponents-core-4.4.10-3.2.6 Container bci/openjdk-devel:latest:httpcomponents-client-4.5.6-3.2.6 Container bci/openjdk-devel:latest:httpcomponents-core-4.4.10-3.2.6 Container containers/apache-pulsar:3.3:google-gson-2.8.5-3.2.6 Container containers/apache-pulsar:3.3:httpcomponents-client-4.5.6-3.2.6 Container containers/apache-pulsar:3.3:httpcomponents-core-4.4.10-3.2.6 Container suse/manager/5.0/x86_64/server:latest:google-gson-2.8.5-3.2.6 Container suse/manager/5.0/x86_64/server:latest:httpcomponents-client-4.5.6-3.2.6 Container suse/manager/5.0/x86_64/server:latest:httpcomponents-core-4.4.10-3.2.6 Container suse/multi-linux-manager/5.1/x86_64/server:latest:google-gson-2.8.5-3.2.6 Container suse/multi-linux-manager/5.1/x86_64/server:latest:httpcomponents-client-4.5.6-3.2.6 Container suse/multi-linux-manager/5.1/x86_64/server:latest:httpcomponents-core-4.4.10-3.2.6 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:google-gson-2.8.5-3.2.6 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:httpcomponents-client-4.5.6-3.2.6 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:httpcomponents-core-4.4.10-3.2.6 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:google-gson-2.8.5-3.2.6 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:httpcomponents-client-4.5.6-3.2.6 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:httpcomponents-core-4.4.10-3.2.6 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:google-gson-2.8.5-3.2.6 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:httpcomponents-client-4.5.6-3.2.6 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:httpcomponents-core-4.4.10-3.2.6 Image SLES15-SP4-Manager-Server-4-3-Azure-llc:google-gson-2.8.5-3.2.6 Image SLES15-SP4-Manager-Server-4-3-Azure-llc:httpcomponents-client-4.5.6-3.2.6 Image SLES15-SP4-Manager-Server-4-3-Azure-llc:httpcomponents-core-4.4.10-3.2.6 Image SLES15-SP4-Manager-Server-4-3-Azure-ltd:google-gson-2.8.5-3.2.6 Image SLES15-SP4-Manager-Server-4-3-Azure-ltd:httpcomponents-client-4.5.6-3.2.6 Image SLES15-SP4-Manager-Server-4-3-Azure-ltd:httpcomponents-core-4.4.10-3.2.6 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:google-gson-2.8.5-3.2.6 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:httpcomponents-client-4.5.6-3.2.6 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:httpcomponents-core-4.4.10-3.2.6 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:google-gson-2.8.5-3.2.6 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:httpcomponents-client-4.5.6-3.2.6 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:httpcomponents-core-4.4.10-3.2.6 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:google-gson-2.8.5-3.2.6 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:httpcomponents-client-4.5.6-3.2.6 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:httpcomponents-core-4.4.10-3.2.6 Image SLES15-SP4-Manager-Server-4-3-BYOS:google-gson-2.8.5-3.2.6 Image SLES15-SP4-Manager-Server-4-3-BYOS:httpcomponents-client-4.5.6-3.2.6 Image SLES15-SP4-Manager-Server-4-3-BYOS:httpcomponents-core-4.4.10-3.2.6 Image SLES15-SP4-Manager-Server-4-3-EC2-llc:google-gson-2.8.5-3.2.6 Image SLES15-SP4-Manager-Server-4-3-EC2-llc:httpcomponents-client-4.5.6-3.2.6 Image SLES15-SP4-Manager-Server-4-3-EC2-llc:httpcomponents-core-4.4.10-3.2.6 Image SLES15-SP4-Manager-Server-4-3-EC2-ltd:google-gson-2.8.5-3.2.6 Image SLES15-SP4-Manager-Server-4-3-EC2-ltd:httpcomponents-client-4.5.6-3.2.6 Image SLES15-SP4-Manager-Server-4-3-EC2-ltd:httpcomponents-core-4.4.10-3.2.6 Image SLES15-SP4-Manager-Server-4-3:google-gson-2.8.5-3.2.6 Image SLES15-SP4-Manager-Server-4-3:httpcomponents-client-4.5.6-3.2.6 Image SLES15-SP4-Manager-Server-4-3:httpcomponents-core-4.4.10-3.2.6 Image server-image:google-gson-2.8.5-3.2.6 Image server-image:httpcomponents-client-4.5.6-3.2.6 Image server-image:httpcomponents-core-4.4.10-3.2.6 SUSE Manager Proxy Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6 SUSE Manager Proxy Module 4.1:mgr-osad-4.1.3-2.3.6 SUSE Manager Proxy Module 4.1:patterns-suma_proxy-4.1-6.3.6 SUSE Manager Proxy Module 4.1:python3-mgr-osa-common-4.1.3-2.3.6 SUSE Manager Proxy Module 4.1:python3-mgr-osad-4.1.3-2.3.6 SUSE Manager Proxy Module 4.1:python3-spacewalk-certs-tools-4.1.12-3.3.6 SUSE Manager Proxy Module 4.1:python3-suseRegisterInfo-4.1.3-4.3.6 SUSE Manager Proxy Module 4.1:python3-uyuni-common-libs-4.1.6-3.3.6 SUSE Manager Proxy Module 4.1:spacecmd-4.1.6-4.3.6 SUSE Manager Proxy Module 4.1:spacewalk-backend-4.1.14-4.5.2 SUSE Manager Proxy Module 4.1:spacewalk-base-minimal-4.1.15-3.3.6 SUSE Manager Proxy Module 4.1:spacewalk-base-minimal-config-4.1.15-3.3.6 SUSE Manager Proxy Module 4.1:spacewalk-certs-tools-4.1.12-3.3.6 SUSE Manager Proxy Module 4.1:spacewalk-proxy-broker-4.1.2-3.3.6 SUSE Manager Proxy Module 4.1:spacewalk-proxy-common-4.1.2-3.3.6 SUSE Manager Proxy Module 4.1:spacewalk-proxy-management-4.1.2-3.3.6 SUSE Manager Proxy Module 4.1:spacewalk-proxy-package-manager-4.1.2-3.3.6 SUSE Manager Proxy Module 4.1:spacewalk-proxy-redirect-4.1.2-3.3.6 SUSE Manager Proxy Module 4.1:spacewalk-proxy-salt-4.1.2-3.3.6 SUSE Manager Proxy Module 4.1:suseRegisterInfo-4.1.3-4.3.6 SUSE Manager Server Module 4.1:cobbler-3.0.0+git20190806.32c4bae0-5.3.6 SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-6.3.6 SUSE Manager Server Module 4.1:google-gson-2.8.5-3.2.6 SUSE Manager Server Module 4.1:httpcomponents-client-4.5.6-3.2.6 SUSE Manager Server Module 4.1:httpcomponents-core-4.4.10-3.2.6 SUSE Manager Server Module 4.1:ical4j-3.0.18-3.2.7 SUSE Manager Server Module 4.1:image-sync-formula-0.1.1595937550.0285244-3.3.6 SUSE Manager Server Module 4.1:mgr-libmod-4.1.4-3.3.6 SUSE Manager Server Module 4.1:mgr-osa-dispatcher-4.1.3-2.3.6 SUSE Manager Server Module 4.1:openvpn-formula-0.1.1-3.3.6 SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-6.3.6 SUSE Manager Server Module 4.1:patterns-suma_server-4.1-6.3.6 SUSE Manager Server Module 4.1:prometheus-exporters-formula-0.7.1-3.5.2 SUSE Manager Server Module 4.1:pxe-default-image-sle15-4.1.0-Build5.3 SUSE Manager Server Module 4.1:python3-mgr-osa-common-4.1.3-2.3.6 SUSE Manager Server Module 4.1:python3-mgr-osa-dispatcher-4.1.3-2.3.6 SUSE Manager Server Module 4.1:python3-spacewalk-certs-tools-4.1.12-3.3.6 SUSE Manager Server Module 4.1:python3-suseRegisterInfo-4.1.3-4.3.6 SUSE Manager Server Module 4.1:python3-uyuni-common-libs-4.1.6-3.3.6 SUSE Manager Server Module 4.1:saltboot-formula-0.1.1595937550.0285244-3.3.6 SUSE Manager Server Module 4.1:spacecmd-4.1.6-4.3.6 SUSE Manager Server Module 4.1:spacewalk-backend-4.1.14-4.5.2 SUSE Manager Server Module 4.1:spacewalk-backend-app-4.1.14-4.5.2 SUSE Manager Server Module 4.1:spacewalk-backend-applet-4.1.14-4.5.2 SUSE Manager Server Module 4.1:spacewalk-backend-config-files-4.1.14-4.5.2 SUSE Manager Server Module 4.1:spacewalk-backend-config-files-common-4.1.14-4.5.2 SUSE Manager Server Module 4.1:spacewalk-backend-config-files-tool-4.1.14-4.5.2 SUSE Manager Server Module 4.1:spacewalk-backend-iss-4.1.14-4.5.2 SUSE Manager Server Module 4.1:spacewalk-backend-iss-export-4.1.14-4.5.2 SUSE Manager Server Module 4.1:spacewalk-backend-package-push-server-4.1.14-4.5.2 SUSE Manager Server Module 4.1:spacewalk-backend-server-4.1.14-4.5.2 SUSE Manager Server Module 4.1:spacewalk-backend-sql-4.1.14-4.5.2 SUSE Manager Server Module 4.1:spacewalk-backend-sql-postgresql-4.1.14-4.5.2 SUSE Manager Server Module 4.1:spacewalk-backend-tools-4.1.14-4.5.2 SUSE Manager Server Module 4.1:spacewalk-backend-xml-export-libs-4.1.14-4.5.2 SUSE Manager Server Module 4.1:spacewalk-backend-xmlrpc-4.1.14-4.5.2 SUSE Manager Server Module 4.1:spacewalk-base-4.1.15-3.3.6 SUSE Manager Server Module 4.1:spacewalk-base-minimal-4.1.15-3.3.6 SUSE Manager Server Module 4.1:spacewalk-base-minimal-config-4.1.15-3.3.6 SUSE Manager Server Module 4.1:spacewalk-branding-4.1.9-3.3.6 SUSE Manager Server Module 4.1:spacewalk-certs-tools-4.1.12-3.3.6 SUSE Manager Server Module 4.1:spacewalk-html-4.1.15-3.3.6 SUSE Manager Server Module 4.1:spacewalk-java-4.1.18-3.5.3 SUSE Manager Server Module 4.1:spacewalk-java-config-4.1.18-3.5.3 SUSE Manager Server Module 4.1:spacewalk-java-lib-4.1.18-3.5.3 SUSE Manager Server Module 4.1:spacewalk-java-postgresql-4.1.18-3.5.3 SUSE Manager Server Module 4.1:spacewalk-taskomatic-4.1.18-3.5.3 SUSE Manager Server Module 4.1:spacewalk-utils-4.1.11-3.3.6 SUSE Manager Server Module 4.1:spacewalk-utils-extras-4.1.11-3.3.6 SUSE Manager Server Module 4.1:suseRegisterInfo-4.1.3-4.3.6 SUSE Manager Server Module 4.1:susemanager-4.1.18-3.3.6 SUSE Manager Server Module 4.1:susemanager-doc-indexes-4.1-11.7.2 SUSE Manager Server Module 4.1:susemanager-docs_en-4.1-11.7.2 SUSE Manager Server Module 4.1:susemanager-docs_en-pdf-4.1-11.7.2 SUSE Manager Server Module 4.1:susemanager-frontend-libs-4.1.0-3.3.6 SUSE Manager Server Module 4.1:susemanager-schema-4.1.12-3.3.6 SUSE Manager Server Module 4.1:susemanager-sls-4.1.14-3.5.2 SUSE Manager Server Module 4.1:susemanager-sync-data-4.1.7-3.3.6 SUSE Manager Server Module 4.1:susemanager-tools-4.1.18-3.3.6 SUSE Manager Server Module 4.1:susemanager-web-libs-4.1.15-3.3.6 SUSE Manager Server Module 4.1:virtual-host-gatherer-1.0.21-4.3.6 SUSE Manager Server Module 4.1:virtual-host-gatherer-Kubernetes-1.0.21-4.3.6 SUSE Manager Server Module 4.1:virtual-host-gatherer-Nutanix-1.0.21-4.3.6 SUSE Manager Server Module 4.1:virtual-host-gatherer-VMware-1.0.21-4.3.6 SUSE Manager Server Module 4.1:virtual-host-gatherer-libcloud-1.0.21-4.3.6 SUSE Manager Server Module 4.1:virtualization-host-formula-0.5-3.3.1 SUSE Manager Server Module 4.1:yomi-formula-0.0.1+git.1595952633.b300be2-3.3.6 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202373-1/ https://www.suse.com/security/cve/CVE-2020-11022.html CVE-2020-11022 https://bugzilla.suse.com/1173090 SUSE Bug 1173090 https://bugzilla.suse.com/1178434 SUSE Bug 1178434 https://bugzilla.suse.com/1190663 SUSE Bug 1190663