Security update for SUSE Manager Server 4.1 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:0906-1 Final 1 1 2021-03-19T15:18:39Z current 2021-03-19T15:18:39Z 2021-03-19T15:18:39Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for SUSE Manager Server 4.1 This update fixes the following issues: cobbler: - Fix string replacement for @@xyz@@ - Better performing string replacements grafana-formula: - Set `supported` to false for unsupported systems (bsc#1182001) - Add SLES 15 SP3 and openSUSE Leap 15.3 to supported versions mgr-libmod: - Fix 'list_modules' JSON serialization (bsc#1182492) mgr-osad: - Adapt to new SSL implementation of rhnlib (bsc#1181807) prometheus-exporters-formula: - Add Ubuntu support for Prometheus exporters' reverse proxy prometheus-formula: - Set server hostname from pillar data (bsc#1180439) py26-compat-salt: - Do not crash when unexpected cmd output at listing patches (bsc#1181290) rhnlib: - Change SSL implementation to python ssl for better SAN and hostname matching support (bsc#1181807) smdba: - Do not remove the database if there is no backup and deal with manifest spacewalk-backend: - Open repomd files as binary (bsc#1173893) - Fix requesting Release file in debian repos (bsc#1182006) - Reposync: Fixed Kickstart functionality. - Reposync: Fixed URLGrabber error handling. - Reposync: Fix modular data handling for cloned channels (bsc#1177508) spacewalk-client-tools: - Adapt to new SSL implementation of rhnlib (bsc#1181807) spacewalk-config: - Increase apache ssl logs to include response code and process time spacewalk-java: - Homogenizes style in filter buttons, facilitating testability - Cleanup sessions via SQL query instead of SQL function (bsc#1180224) - Rebuild and improve rendering of error pages 404 and 500 pages (bsc#1181228) - Fix user creation with pam auth and no password (bsc#1179579) - Fix action chains for saltssh minions (bsc#1182200) - FIX: Slow response of 'Software > Install' in Ubuntu minions (bsc#1181165) - Do not call page decorator in HEAD requests (bsc#1181228) - Add 'mgr_origin_server' to Salt pillar data (bsc#1180439) - Ensure new files are synced just after writing them (bsc#1175660) - Enable openscap auditing for salt systems in SSM (bsc#1157711) - Detect debian products (bsc#1181416) - Show packages from channels assigned to the targeted system (bsc#1181423) - Add an API endpoint to allow/disallow scheduling irrelevant patches (bsc#1180757) - Open raw output in new tab for ScriptRunAction (bsc#1180547) - Default to preferred items per page in content lifecycle lists (bsc#1180558) - Fix modular data handling for cloned channels (bsc#1177508) - Fix: login gets an ISE when SSO is enabled (bsc#1181048) spacewalk-utils: - Fix modular data handling for cloned channels (bsc#1177508) spacewalk-web: - Replace CRLF in ssh priv key when bootstrapping (bsc#1182685) - Upgrade immer to fix CVE-2020-28477 - Default to preferred items per page in content lifecycle lists (bsc#1180558) - Fix sorting in content lifecycle projects and cluster tables (bsc#1180558) susemanager: - Add SLE 15 SP3 bootstrap repository definitions (bsc#1182008) - Python3-dbus-python and dependencies not installed by default on JeOS SLE15 images, add them to the bootstrap repository list of packages for traditional (bsc#1182071) susemanager-doc-indexes: - Updated Command Line Registration with Salt section in the Client Configuration Guide for clarity. - Adds openSUSE Leap SP migration to the SP migration section of the Client Configuration Guide - Adds note that bootstrap procedure for selecting a parent channel is optional in Client Configuration Guide (bsc#1181635) - Adds note about checking for valid UUIDs in fstab when backing up (bsc#1181814) - Updated command for running configure proxy script when replacing a proxy - Fixed bad SUSE Customer Center URL susemanager-docs_en: - Updated Command Line Registration with Salt section in the Client Configuration Guide for clarity. - Adds openSUSE Leap SP migration to the SP migration section of the Client Configuration Guide - Adds note that bootstrap procedure for selecting a parent channel is optional in Client Configuration Guide (bsc#1181635) - Adds note about checking for valid UUIDs in fstab when backing up (bsc#1181814) - Updated command for running configure proxy script when replacing a proxy - Fixed bad SUSE Customer Center URL susemanager-schema: - Drop 'pxt_session_cleanup' function (bsc#1180224) - Enable openscap auditing for salt systems in SSM (bsc#1157711) susemanager-sls: - Ubuntu 18 has version of apt which does not correctly support auth.conf.d directory. Detect the working version and use this feature only when we have a higher version installed xstream: Upgrade to 1.4.15 - fixes bsc#1180146, CVE-2020-26258 and bsc#1180145, CVE-2020-26259 - fixes bsc#1180994, CVE-2020-26217 subscription-matcher: - Update the xstream dependency to 1.4.15 How to apply this update: 1. Log in as root user to the SUSE Manager server. 2. Stop the Spacewalk service: `spacewalk-service stop` 3. Apply the patch using either zypper patch or YaST Online Update. 4. Start the Spacewalk service: `spacewalk-service start` The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/manager/5.0/x86_64/server:latest-2021-906,Container suse/multi-linux-manager/5.1/x86_64/server:latest-2021-906,Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure-2021-906,Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM-2021-906,Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE-2021-906,Image SLES15-SP4-Manager-Server-4-3-2021-906,Image SLES15-SP4-Manager-Server-4-3-Azure-llc-2021-906,Image SLES15-SP4-Manager-Server-4-3-Azure-ltd-2021-906,Image SLES15-SP4-Manager-Server-4-3-BYOS-2021-906,Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure-2021-906,Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2-2021-906,Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE-2021-906,Image SLES15-SP4-Manager-Server-4-3-EC2-llc-2021-906,Image SLES15-SP4-Manager-Server-4-3-EC2-ltd-2021-906,Image server-image-2021-906,SUSE-2021-906,SUSE-SLE-Module-SUSE-Manager-Proxy-4.1-2021-906,SUSE-SLE-Module-SUSE-Manager-Server-4.1-2021-906 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20210906-1/ Link for SUSE-SU-2021:0906-1 https://lists.suse.com/pipermail/sle-security-updates/2021-March/008524.html E-Mail link for SUSE-SU-2021:0906-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1157711 SUSE Bug 1157711 https://bugzilla.suse.com/1173893 SUSE Bug 1173893 https://bugzilla.suse.com/1175660 SUSE Bug 1175660 https://bugzilla.suse.com/1177508 SUSE Bug 1177508 https://bugzilla.suse.com/1179579 SUSE Bug 1179579 https://bugzilla.suse.com/1180145 SUSE Bug 1180145 https://bugzilla.suse.com/1180146 SUSE Bug 1180146 https://bugzilla.suse.com/1180224 SUSE Bug 1180224 https://bugzilla.suse.com/1180439 SUSE Bug 1180439 https://bugzilla.suse.com/1180547 SUSE Bug 1180547 https://bugzilla.suse.com/1180558 SUSE Bug 1180558 https://bugzilla.suse.com/1180757 SUSE Bug 1180757 https://bugzilla.suse.com/1180994 SUSE Bug 1180994 https://bugzilla.suse.com/1181048 SUSE Bug 1181048 https://bugzilla.suse.com/1181165 SUSE Bug 1181165 https://bugzilla.suse.com/1181228 SUSE Bug 1181228 https://bugzilla.suse.com/1181290 SUSE Bug 1181290 https://bugzilla.suse.com/1181416 SUSE Bug 1181416 https://bugzilla.suse.com/1181423 SUSE Bug 1181423 https://bugzilla.suse.com/1181635 SUSE Bug 1181635 https://bugzilla.suse.com/1181807 SUSE Bug 1181807 https://bugzilla.suse.com/1181814 SUSE Bug 1181814 https://bugzilla.suse.com/1182001 SUSE Bug 1182001 https://bugzilla.suse.com/1182006 SUSE Bug 1182006 https://bugzilla.suse.com/1182008 SUSE Bug 1182008 https://bugzilla.suse.com/1182071 SUSE Bug 1182071 https://bugzilla.suse.com/1182200 SUSE Bug 1182200 https://bugzilla.suse.com/1182492 SUSE Bug 1182492 https://bugzilla.suse.com/1182685 SUSE Bug 1182685 https://www.suse.com/security/cve/CVE-2020-26217/ SUSE CVE CVE-2020-26217 page https://www.suse.com/security/cve/CVE-2020-26258/ SUSE CVE CVE-2020-26258 page https://www.suse.com/security/cve/CVE-2020-26259/ SUSE CVE CVE-2020-26259 page https://www.suse.com/security/cve/CVE-2020-28477/ SUSE CVE CVE-2020-28477 page Container suse/manager/5.0/x86_64/server:latest Container suse/multi-linux-manager/5.1/x86_64/server:latest Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE Image SLES15-SP4-Manager-Server-4-3 Image SLES15-SP4-Manager-Server-4-3-Azure-llc Image SLES15-SP4-Manager-Server-4-3-Azure-ltd Image SLES15-SP4-Manager-Server-4-3-BYOS Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE Image SLES15-SP4-Manager-Server-4-3-EC2-llc Image SLES15-SP4-Manager-Server-4-3-EC2-ltd Image server-image SUSE Manager Proxy Module 4.1 SUSE Manager Server Module 4.1 xpp3-1.1.4c-11.2.2 xpp3-minimal-1.1.4c-11.2.2 xstream-1.4.15-3.5.2 cobbler-3.0.0+git20190806.32c4bae0-5.6.4 cobbler-tests-3.0.0+git20190806.32c4bae0-5.6.4 cobbler-web-3.0.0+git20190806.32c4bae0-5.6.4 grafana-formula-0.4.0-3.6.2 mgr-libmod-4.1.7-3.16.2 mgr-osa-dispatcher-4.1.5-2.9.4 mgr-osad-4.1.5-2.9.4 prometheus-exporters-formula-0.9.0-3.19.2 prometheus-formula-0.3.1-3.6.2 py26-compat-salt-2016.11.10-6.11.2 python2-mgr-osa-common-4.1.5-2.9.4 python2-mgr-osa-dispatcher-4.1.5-2.9.4 python2-mgr-osad-4.1.5-2.9.4 python2-rhnlib-4.1.3-4.3.2 python2-spacewalk-check-4.1.9-4.12.4 python2-spacewalk-client-setup-4.1.9-4.12.4 python2-spacewalk-client-tools-4.1.9-4.12.4 python3-mgr-osa-common-4.1.5-2.9.4 python3-mgr-osa-dispatcher-4.1.5-2.9.4 python3-mgr-osad-4.1.5-2.9.4 python3-rhnlib-4.1.3-4.3.2 python3-spacewalk-check-4.1.9-4.12.4 python3-spacewalk-client-setup-4.1.9-4.12.4 python3-spacewalk-client-tools-4.1.9-4.12.4 smdba-1.7.8-0.3.6.2 spacewalk-backend-4.1.21-4.22.7 spacewalk-backend-app-4.1.21-4.22.7 spacewalk-backend-applet-4.1.21-4.22.7 spacewalk-backend-cdn-4.1.21-4.22.7 spacewalk-backend-config-files-4.1.21-4.22.7 spacewalk-backend-config-files-common-4.1.21-4.22.7 spacewalk-backend-config-files-tool-4.1.21-4.22.7 spacewalk-backend-iss-4.1.21-4.22.7 spacewalk-backend-iss-export-4.1.21-4.22.7 spacewalk-backend-package-push-server-4.1.21-4.22.7 spacewalk-backend-server-4.1.21-4.22.7 spacewalk-backend-sql-4.1.21-4.22.7 spacewalk-backend-sql-postgresql-4.1.21-4.22.7 spacewalk-backend-tools-4.1.21-4.22.7 spacewalk-backend-xml-export-libs-4.1.21-4.22.7 spacewalk-backend-xmlrpc-4.1.21-4.22.7 spacewalk-base-4.1.23-3.18.6 spacewalk-base-minimal-4.1.23-3.18.6 spacewalk-base-minimal-config-4.1.23-3.18.6 spacewalk-check-4.1.9-4.12.4 spacewalk-client-setup-4.1.9-4.12.4 spacewalk-client-tools-4.1.9-4.12.4 spacewalk-config-4.1.5-3.3.2 spacewalk-dobby-4.1.23-3.18.6 spacewalk-html-4.1.23-3.18.6 spacewalk-html-debug-4.1.23-3.18.6 spacewalk-java-4.1.30-3.31.7 spacewalk-java-apidoc-sources-4.1.30-3.31.7 spacewalk-java-config-4.1.30-3.31.7 spacewalk-java-lib-4.1.30-3.31.7 spacewalk-java-postgresql-4.1.30-3.31.7 spacewalk-proxy-broker-4.1.4-3.9.4 spacewalk-proxy-common-4.1.4-3.9.4 spacewalk-proxy-installer-4.1.6-3.3.2 spacewalk-proxy-management-4.1.4-3.9.4 spacewalk-proxy-package-manager-4.1.4-3.9.4 spacewalk-proxy-redirect-4.1.4-3.9.4 spacewalk-proxy-salt-4.1.4-3.9.4 spacewalk-taskomatic-4.1.30-3.31.7 spacewalk-utils-4.1.14-3.12.2 spacewalk-utils-extras-4.1.14-3.12.2 subscription-matcher-0.26-3.6.2 susemanager-4.1.24-3.20.2 susemanager-doc-indexes-4.1-11.28.4 susemanager-docs_en-4.1-11.28.2 susemanager-docs_en-pdf-4.1-11.28.2 susemanager-nodejs-sdk-devel-4.1.10-3.15.2 susemanager-schema-4.1.19-3.24.4 susemanager-schema-sanity-4.1.19-3.24.4 susemanager-sls-4.1.21-3.26.2 susemanager-tools-4.1.24-3.20.2 susemanager-web-libs-4.1.23-3.18.6 susemanager-web-libs-debug-4.1.23-3.18.6 uyuni-config-modules-4.1.21-3.26.2 xpp3-javadoc-1.1.4c-11.2.2 xstream-1.4.15~susemanager-3.3.8 xstream-benchmark-1.4.15~susemanager-3.3.8 xstream-javadoc-1.4.15~susemanager-3.3.8 xstream-parent-1.4.15~susemanager-3.3.8 xpp3-1.1.4c-11.2.2 as a component of Container suse/manager/5.0/x86_64/server:latest xpp3-minimal-1.1.4c-11.2.2 as a component of Container suse/manager/5.0/x86_64/server:latest xstream-1.4.15-3.5.2 as a component of Container suse/manager/5.0/x86_64/server:latest xpp3-1.1.4c-11.2.2 as a component of Container suse/multi-linux-manager/5.1/x86_64/server:latest xpp3-minimal-1.1.4c-11.2.2 as a component of Container suse/multi-linux-manager/5.1/x86_64/server:latest xstream-1.4.15-3.5.2 as a component of Container suse/multi-linux-manager/5.1/x86_64/server:latest xpp3-1.1.4c-11.2.2 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure xpp3-minimal-1.1.4c-11.2.2 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure xstream-1.4.15-3.5.2 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure xpp3-1.1.4c-11.2.2 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM xpp3-minimal-1.1.4c-11.2.2 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM xstream-1.4.15-3.5.2 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM xpp3-1.1.4c-11.2.2 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE xpp3-minimal-1.1.4c-11.2.2 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE xstream-1.4.15-3.5.2 as a component of Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE xpp3-1.1.4c-11.2.2 as a component of Image SLES15-SP4-Manager-Server-4-3 xpp3-minimal-1.1.4c-11.2.2 as a component of Image SLES15-SP4-Manager-Server-4-3 xstream-1.4.15-3.5.2 as a component of Image SLES15-SP4-Manager-Server-4-3 xpp3-1.1.4c-11.2.2 as a component of Image SLES15-SP4-Manager-Server-4-3-Azure-llc xpp3-minimal-1.1.4c-11.2.2 as a component of Image SLES15-SP4-Manager-Server-4-3-Azure-llc xstream-1.4.15-3.5.2 as a component of Image SLES15-SP4-Manager-Server-4-3-Azure-llc xpp3-1.1.4c-11.2.2 as a component of Image SLES15-SP4-Manager-Server-4-3-Azure-ltd xpp3-minimal-1.1.4c-11.2.2 as a component of Image SLES15-SP4-Manager-Server-4-3-Azure-ltd xstream-1.4.15-3.5.2 as a component of Image SLES15-SP4-Manager-Server-4-3-Azure-ltd xpp3-1.1.4c-11.2.2 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS xpp3-minimal-1.1.4c-11.2.2 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS xstream-1.4.15-3.5.2 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS xpp3-1.1.4c-11.2.2 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure xpp3-minimal-1.1.4c-11.2.2 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure xstream-1.4.15-3.5.2 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure xpp3-1.1.4c-11.2.2 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 xpp3-minimal-1.1.4c-11.2.2 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 xstream-1.4.15-3.5.2 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 xpp3-1.1.4c-11.2.2 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE xpp3-minimal-1.1.4c-11.2.2 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE xstream-1.4.15-3.5.2 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE xpp3-1.1.4c-11.2.2 as a component of Image SLES15-SP4-Manager-Server-4-3-EC2-llc xpp3-minimal-1.1.4c-11.2.2 as a component of Image SLES15-SP4-Manager-Server-4-3-EC2-llc xstream-1.4.15-3.5.2 as a component of Image SLES15-SP4-Manager-Server-4-3-EC2-llc xpp3-1.1.4c-11.2.2 as a component of Image SLES15-SP4-Manager-Server-4-3-EC2-ltd xpp3-minimal-1.1.4c-11.2.2 as a component of Image SLES15-SP4-Manager-Server-4-3-EC2-ltd xstream-1.4.15-3.5.2 as a component of Image SLES15-SP4-Manager-Server-4-3-EC2-ltd xpp3-1.1.4c-11.2.2 as a component of Image server-image xpp3-minimal-1.1.4c-11.2.2 as a component of Image server-image xstream-1.4.15-3.5.2 as a component of Image server-image mgr-osad-4.1.5-2.9.4 as a component of SUSE Manager Proxy Module 4.1 python3-mgr-osa-common-4.1.5-2.9.4 as a component of SUSE Manager Proxy Module 4.1 python3-mgr-osad-4.1.5-2.9.4 as a component of SUSE Manager Proxy Module 4.1 python3-rhnlib-4.1.3-4.3.2 as a component of SUSE Manager Proxy Module 4.1 python3-spacewalk-check-4.1.9-4.12.4 as a component of SUSE Manager Proxy Module 4.1 python3-spacewalk-client-setup-4.1.9-4.12.4 as a component of SUSE Manager Proxy Module 4.1 python3-spacewalk-client-tools-4.1.9-4.12.4 as a component of SUSE Manager Proxy Module 4.1 spacewalk-backend-4.1.21-4.22.7 as a component of SUSE Manager Proxy Module 4.1 spacewalk-base-minimal-4.1.23-3.18.6 as a component of SUSE Manager Proxy Module 4.1 spacewalk-base-minimal-config-4.1.23-3.18.6 as a component of SUSE Manager Proxy Module 4.1 spacewalk-check-4.1.9-4.12.4 as a component of SUSE Manager Proxy Module 4.1 spacewalk-client-setup-4.1.9-4.12.4 as a component of SUSE Manager Proxy Module 4.1 spacewalk-client-tools-4.1.9-4.12.4 as a component of SUSE Manager Proxy Module 4.1 spacewalk-proxy-broker-4.1.4-3.9.4 as a component of SUSE Manager Proxy Module 4.1 spacewalk-proxy-common-4.1.4-3.9.4 as a component of SUSE Manager Proxy Module 4.1 spacewalk-proxy-installer-4.1.6-3.3.2 as a component of SUSE Manager Proxy Module 4.1 spacewalk-proxy-management-4.1.4-3.9.4 as a component of SUSE Manager Proxy Module 4.1 spacewalk-proxy-package-manager-4.1.4-3.9.4 as a component of SUSE Manager Proxy Module 4.1 spacewalk-proxy-redirect-4.1.4-3.9.4 as a component of SUSE Manager Proxy Module 4.1 spacewalk-proxy-salt-4.1.4-3.9.4 as a component of SUSE Manager Proxy Module 4.1 cobbler-3.0.0+git20190806.32c4bae0-5.6.4 as a component of SUSE Manager Server Module 4.1 grafana-formula-0.4.0-3.6.2 as a component of SUSE Manager Server Module 4.1 mgr-libmod-4.1.7-3.16.2 as a component of SUSE Manager Server Module 4.1 mgr-osa-dispatcher-4.1.5-2.9.4 as a component of SUSE Manager Server Module 4.1 prometheus-exporters-formula-0.9.0-3.19.2 as a component of SUSE Manager Server Module 4.1 prometheus-formula-0.3.1-3.6.2 as a component of SUSE Manager Server Module 4.1 py26-compat-salt-2016.11.10-6.11.2 as a component of SUSE Manager Server Module 4.1 python3-mgr-osa-common-4.1.5-2.9.4 as a component of SUSE Manager Server Module 4.1 python3-mgr-osa-dispatcher-4.1.5-2.9.4 as a component of SUSE Manager Server Module 4.1 python3-rhnlib-4.1.3-4.3.2 as a component of SUSE Manager Server Module 4.1 python3-spacewalk-client-tools-4.1.9-4.12.4 as a component of SUSE Manager Server Module 4.1 smdba-1.7.8-0.3.6.2 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-4.1.21-4.22.7 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-app-4.1.21-4.22.7 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-applet-4.1.21-4.22.7 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-config-files-4.1.21-4.22.7 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-config-files-common-4.1.21-4.22.7 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-config-files-tool-4.1.21-4.22.7 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-iss-4.1.21-4.22.7 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-iss-export-4.1.21-4.22.7 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-package-push-server-4.1.21-4.22.7 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-server-4.1.21-4.22.7 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-sql-4.1.21-4.22.7 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-sql-postgresql-4.1.21-4.22.7 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-tools-4.1.21-4.22.7 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-xml-export-libs-4.1.21-4.22.7 as a component of SUSE Manager Server Module 4.1 spacewalk-backend-xmlrpc-4.1.21-4.22.7 as a component of SUSE Manager Server Module 4.1 spacewalk-base-4.1.23-3.18.6 as a component of SUSE Manager Server Module 4.1 spacewalk-base-minimal-4.1.23-3.18.6 as a component of SUSE Manager Server Module 4.1 spacewalk-base-minimal-config-4.1.23-3.18.6 as a component of SUSE Manager Server Module 4.1 spacewalk-client-tools-4.1.9-4.12.4 as a component of SUSE Manager Server Module 4.1 spacewalk-config-4.1.5-3.3.2 as a component of SUSE Manager Server Module 4.1 spacewalk-html-4.1.23-3.18.6 as a component of SUSE Manager Server Module 4.1 spacewalk-java-4.1.30-3.31.7 as a component of SUSE Manager Server Module 4.1 spacewalk-java-config-4.1.30-3.31.7 as a component of SUSE Manager Server Module 4.1 spacewalk-java-lib-4.1.30-3.31.7 as a component of SUSE Manager Server Module 4.1 spacewalk-java-postgresql-4.1.30-3.31.7 as a component of SUSE Manager Server Module 4.1 spacewalk-taskomatic-4.1.30-3.31.7 as a component of SUSE Manager Server Module 4.1 spacewalk-utils-4.1.14-3.12.2 as a component of SUSE Manager Server Module 4.1 spacewalk-utils-extras-4.1.14-3.12.2 as a component of SUSE Manager Server Module 4.1 subscription-matcher-0.26-3.6.2 as a component of SUSE Manager Server Module 4.1 susemanager-4.1.24-3.20.2 as a component of SUSE Manager Server Module 4.1 susemanager-doc-indexes-4.1-11.28.4 as a component of SUSE Manager Server Module 4.1 susemanager-docs_en-4.1-11.28.2 as a component of SUSE Manager Server Module 4.1 susemanager-docs_en-pdf-4.1-11.28.2 as a component of SUSE Manager Server Module 4.1 susemanager-schema-4.1.19-3.24.4 as a component of SUSE Manager Server Module 4.1 susemanager-sls-4.1.21-3.26.2 as a component of SUSE Manager Server Module 4.1 susemanager-tools-4.1.24-3.20.2 as a component of SUSE Manager Server Module 4.1 susemanager-web-libs-4.1.23-3.18.6 as a component of SUSE Manager Server Module 4.1 uyuni-config-modules-4.1.21-3.26.2 as a component of SUSE Manager Server Module 4.1 xpp3-1.1.4c-11.2.2 as a component of SUSE Manager Server Module 4.1 xpp3-minimal-1.1.4c-11.2.2 as a component of SUSE Manager Server Module 4.1 xstream-1.4.15-3.5.2 as a component of SUSE Manager Server Module 4.1 XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XStream's Security Framework allowlist is not affected. The linked advisory provides code workarounds for users who cannot upgrade. The issue is fixed in version 1.4.14. CVE-2020-26217 Container suse/manager/5.0/x86_64/server:latest:xpp3-1.1.4c-11.2.2 Container suse/manager/5.0/x86_64/server:latest:xpp3-minimal-1.1.4c-11.2.2 Container suse/manager/5.0/x86_64/server:latest:xstream-1.4.15-3.5.2 Container suse/multi-linux-manager/5.1/x86_64/server:latest:xpp3-1.1.4c-11.2.2 Container suse/multi-linux-manager/5.1/x86_64/server:latest:xpp3-minimal-1.1.4c-11.2.2 Container suse/multi-linux-manager/5.1/x86_64/server:latest:xstream-1.4.15-3.5.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:xpp3-1.1.4c-11.2.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:xstream-1.4.15-3.5.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:xpp3-1.1.4c-11.2.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:xstream-1.4.15-3.5.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:xpp3-1.1.4c-11.2.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-Azure-llc:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-Azure-llc:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-Azure-llc:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-Azure-ltd:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-Azure-ltd:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-Azure-ltd:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-BYOS:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-EC2-llc:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-EC2-llc:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-EC2-llc:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-EC2-ltd:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-EC2-ltd:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-EC2-ltd:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3:xstream-1.4.15-3.5.2 Image server-image:xpp3-1.1.4c-11.2.2 Image server-image:xpp3-minimal-1.1.4c-11.2.2 Image server-image:xstream-1.4.15-3.5.2 SUSE Manager Proxy Module 4.1:mgr-osad-4.1.5-2.9.4 SUSE Manager Proxy Module 4.1:python3-mgr-osa-common-4.1.5-2.9.4 SUSE Manager Proxy Module 4.1:python3-mgr-osad-4.1.5-2.9.4 SUSE Manager Proxy Module 4.1:python3-rhnlib-4.1.3-4.3.2 SUSE Manager Proxy Module 4.1:python3-spacewalk-check-4.1.9-4.12.4 SUSE Manager Proxy Module 4.1:python3-spacewalk-client-setup-4.1.9-4.12.4 SUSE Manager Proxy Module 4.1:python3-spacewalk-client-tools-4.1.9-4.12.4 SUSE Manager Proxy Module 4.1:spacewalk-backend-4.1.21-4.22.7 SUSE Manager Proxy Module 4.1:spacewalk-base-minimal-4.1.23-3.18.6 SUSE Manager Proxy Module 4.1:spacewalk-base-minimal-config-4.1.23-3.18.6 SUSE Manager Proxy Module 4.1:spacewalk-check-4.1.9-4.12.4 SUSE Manager Proxy Module 4.1:spacewalk-client-setup-4.1.9-4.12.4 SUSE Manager Proxy Module 4.1:spacewalk-client-tools-4.1.9-4.12.4 SUSE Manager Proxy Module 4.1:spacewalk-proxy-broker-4.1.4-3.9.4 SUSE Manager Proxy Module 4.1:spacewalk-proxy-common-4.1.4-3.9.4 SUSE Manager Proxy Module 4.1:spacewalk-proxy-installer-4.1.6-3.3.2 SUSE Manager Proxy Module 4.1:spacewalk-proxy-management-4.1.4-3.9.4 SUSE Manager Proxy Module 4.1:spacewalk-proxy-package-manager-4.1.4-3.9.4 SUSE Manager Proxy Module 4.1:spacewalk-proxy-redirect-4.1.4-3.9.4 SUSE Manager Proxy Module 4.1:spacewalk-proxy-salt-4.1.4-3.9.4 SUSE Manager Server Module 4.1:cobbler-3.0.0+git20190806.32c4bae0-5.6.4 SUSE Manager Server Module 4.1:grafana-formula-0.4.0-3.6.2 SUSE Manager Server Module 4.1:mgr-libmod-4.1.7-3.16.2 SUSE Manager Server Module 4.1:mgr-osa-dispatcher-4.1.5-2.9.4 SUSE Manager Server Module 4.1:prometheus-exporters-formula-0.9.0-3.19.2 SUSE Manager Server Module 4.1:prometheus-formula-0.3.1-3.6.2 SUSE Manager Server Module 4.1:py26-compat-salt-2016.11.10-6.11.2 SUSE Manager Server Module 4.1:python3-mgr-osa-common-4.1.5-2.9.4 SUSE Manager Server Module 4.1:python3-mgr-osa-dispatcher-4.1.5-2.9.4 SUSE Manager Server Module 4.1:python3-rhnlib-4.1.3-4.3.2 SUSE Manager Server Module 4.1:python3-spacewalk-client-tools-4.1.9-4.12.4 SUSE Manager Server Module 4.1:smdba-1.7.8-0.3.6.2 SUSE Manager Server Module 4.1:spacewalk-backend-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-app-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-applet-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-config-files-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-config-files-common-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-config-files-tool-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-iss-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-iss-export-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-package-push-server-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-server-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-sql-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-sql-postgresql-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-tools-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-xml-export-libs-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-xmlrpc-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-base-4.1.23-3.18.6 SUSE Manager Server Module 4.1:spacewalk-base-minimal-4.1.23-3.18.6 SUSE Manager Server Module 4.1:spacewalk-base-minimal-config-4.1.23-3.18.6 SUSE Manager Server Module 4.1:spacewalk-client-tools-4.1.9-4.12.4 SUSE Manager Server Module 4.1:spacewalk-config-4.1.5-3.3.2 SUSE Manager Server Module 4.1:spacewalk-html-4.1.23-3.18.6 SUSE Manager Server Module 4.1:spacewalk-java-4.1.30-3.31.7 SUSE Manager Server Module 4.1:spacewalk-java-config-4.1.30-3.31.7 SUSE Manager Server Module 4.1:spacewalk-java-lib-4.1.30-3.31.7 SUSE Manager Server Module 4.1:spacewalk-java-postgresql-4.1.30-3.31.7 SUSE Manager Server Module 4.1:spacewalk-taskomatic-4.1.30-3.31.7 SUSE Manager Server Module 4.1:spacewalk-utils-4.1.14-3.12.2 SUSE Manager Server Module 4.1:spacewalk-utils-extras-4.1.14-3.12.2 SUSE Manager Server Module 4.1:subscription-matcher-0.26-3.6.2 SUSE Manager Server Module 4.1:susemanager-4.1.24-3.20.2 SUSE Manager Server Module 4.1:susemanager-doc-indexes-4.1-11.28.4 SUSE Manager Server Module 4.1:susemanager-docs_en-4.1-11.28.2 SUSE Manager Server Module 4.1:susemanager-docs_en-pdf-4.1-11.28.2 SUSE Manager Server Module 4.1:susemanager-schema-4.1.19-3.24.4 SUSE Manager Server Module 4.1:susemanager-sls-4.1.21-3.26.2 SUSE Manager Server Module 4.1:susemanager-tools-4.1.24-3.20.2 SUSE Manager Server Module 4.1:susemanager-web-libs-4.1.23-3.18.6 SUSE Manager Server Module 4.1:uyuni-config-modules-4.1.21-3.26.2 SUSE Manager Server Module 4.1:xpp3-1.1.4c-11.2.2 SUSE Manager Server Module 4.1:xpp3-minimal-1.1.4c-11.2.2 SUSE Manager Server Module 4.1:xstream-1.4.15-3.5.2 important 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20210906-1/ https://www.suse.com/security/cve/CVE-2020-26217.html CVE-2020-26217 https://bugzilla.suse.com/1180994 SUSE Bug 1180994 XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, a Server-Side Forgery Request vulnerability can be activated when unmarshalling. The vulnerability may allow a remote attacker to request data from internal resources that are not publicly available only by manipulating the processed input stream. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.15. The reported vulnerability does not exist if running Java 15 or higher. No user is affected who followed the recommendation to setup XStream's Security Framework with a whitelist! Anyone relying on XStream's default blacklist can immediately switch to a whilelist for the allowed types to avoid the vulnerability. Users of XStream 1.4.14 or below who still want to use XStream default blacklist can use a workaround described in more detailed in the referenced advisories. CVE-2020-26258 Container suse/manager/5.0/x86_64/server:latest:xpp3-1.1.4c-11.2.2 Container suse/manager/5.0/x86_64/server:latest:xpp3-minimal-1.1.4c-11.2.2 Container suse/manager/5.0/x86_64/server:latest:xstream-1.4.15-3.5.2 Container suse/multi-linux-manager/5.1/x86_64/server:latest:xpp3-1.1.4c-11.2.2 Container suse/multi-linux-manager/5.1/x86_64/server:latest:xpp3-minimal-1.1.4c-11.2.2 Container suse/multi-linux-manager/5.1/x86_64/server:latest:xstream-1.4.15-3.5.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:xpp3-1.1.4c-11.2.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:xstream-1.4.15-3.5.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:xpp3-1.1.4c-11.2.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:xstream-1.4.15-3.5.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:xpp3-1.1.4c-11.2.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-Azure-llc:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-Azure-llc:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-Azure-llc:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-Azure-ltd:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-Azure-ltd:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-Azure-ltd:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-BYOS:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-EC2-llc:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-EC2-llc:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-EC2-llc:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-EC2-ltd:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-EC2-ltd:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-EC2-ltd:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3:xstream-1.4.15-3.5.2 Image server-image:xpp3-1.1.4c-11.2.2 Image server-image:xpp3-minimal-1.1.4c-11.2.2 Image server-image:xstream-1.4.15-3.5.2 SUSE Manager Proxy Module 4.1:mgr-osad-4.1.5-2.9.4 SUSE Manager Proxy Module 4.1:python3-mgr-osa-common-4.1.5-2.9.4 SUSE Manager Proxy Module 4.1:python3-mgr-osad-4.1.5-2.9.4 SUSE Manager Proxy Module 4.1:python3-rhnlib-4.1.3-4.3.2 SUSE Manager Proxy Module 4.1:python3-spacewalk-check-4.1.9-4.12.4 SUSE Manager Proxy Module 4.1:python3-spacewalk-client-setup-4.1.9-4.12.4 SUSE Manager Proxy Module 4.1:python3-spacewalk-client-tools-4.1.9-4.12.4 SUSE Manager Proxy Module 4.1:spacewalk-backend-4.1.21-4.22.7 SUSE Manager Proxy Module 4.1:spacewalk-base-minimal-4.1.23-3.18.6 SUSE Manager Proxy Module 4.1:spacewalk-base-minimal-config-4.1.23-3.18.6 SUSE Manager Proxy Module 4.1:spacewalk-check-4.1.9-4.12.4 SUSE Manager Proxy Module 4.1:spacewalk-client-setup-4.1.9-4.12.4 SUSE Manager Proxy Module 4.1:spacewalk-client-tools-4.1.9-4.12.4 SUSE Manager Proxy Module 4.1:spacewalk-proxy-broker-4.1.4-3.9.4 SUSE Manager Proxy Module 4.1:spacewalk-proxy-common-4.1.4-3.9.4 SUSE Manager Proxy Module 4.1:spacewalk-proxy-installer-4.1.6-3.3.2 SUSE Manager Proxy Module 4.1:spacewalk-proxy-management-4.1.4-3.9.4 SUSE Manager Proxy Module 4.1:spacewalk-proxy-package-manager-4.1.4-3.9.4 SUSE Manager Proxy Module 4.1:spacewalk-proxy-redirect-4.1.4-3.9.4 SUSE Manager Proxy Module 4.1:spacewalk-proxy-salt-4.1.4-3.9.4 SUSE Manager Server Module 4.1:cobbler-3.0.0+git20190806.32c4bae0-5.6.4 SUSE Manager Server Module 4.1:grafana-formula-0.4.0-3.6.2 SUSE Manager Server Module 4.1:mgr-libmod-4.1.7-3.16.2 SUSE Manager Server Module 4.1:mgr-osa-dispatcher-4.1.5-2.9.4 SUSE Manager Server Module 4.1:prometheus-exporters-formula-0.9.0-3.19.2 SUSE Manager Server Module 4.1:prometheus-formula-0.3.1-3.6.2 SUSE Manager Server Module 4.1:py26-compat-salt-2016.11.10-6.11.2 SUSE Manager Server Module 4.1:python3-mgr-osa-common-4.1.5-2.9.4 SUSE Manager Server Module 4.1:python3-mgr-osa-dispatcher-4.1.5-2.9.4 SUSE Manager Server Module 4.1:python3-rhnlib-4.1.3-4.3.2 SUSE Manager Server Module 4.1:python3-spacewalk-client-tools-4.1.9-4.12.4 SUSE Manager Server Module 4.1:smdba-1.7.8-0.3.6.2 SUSE Manager Server Module 4.1:spacewalk-backend-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-app-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-applet-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-config-files-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-config-files-common-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-config-files-tool-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-iss-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-iss-export-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-package-push-server-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-server-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-sql-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-sql-postgresql-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-tools-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-xml-export-libs-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-xmlrpc-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-base-4.1.23-3.18.6 SUSE Manager Server Module 4.1:spacewalk-base-minimal-4.1.23-3.18.6 SUSE Manager Server Module 4.1:spacewalk-base-minimal-config-4.1.23-3.18.6 SUSE Manager Server Module 4.1:spacewalk-client-tools-4.1.9-4.12.4 SUSE Manager Server Module 4.1:spacewalk-config-4.1.5-3.3.2 SUSE Manager Server Module 4.1:spacewalk-html-4.1.23-3.18.6 SUSE Manager Server Module 4.1:spacewalk-java-4.1.30-3.31.7 SUSE Manager Server Module 4.1:spacewalk-java-config-4.1.30-3.31.7 SUSE Manager Server Module 4.1:spacewalk-java-lib-4.1.30-3.31.7 SUSE Manager Server Module 4.1:spacewalk-java-postgresql-4.1.30-3.31.7 SUSE Manager Server Module 4.1:spacewalk-taskomatic-4.1.30-3.31.7 SUSE Manager Server Module 4.1:spacewalk-utils-4.1.14-3.12.2 SUSE Manager Server Module 4.1:spacewalk-utils-extras-4.1.14-3.12.2 SUSE Manager Server Module 4.1:subscription-matcher-0.26-3.6.2 SUSE Manager Server Module 4.1:susemanager-4.1.24-3.20.2 SUSE Manager Server Module 4.1:susemanager-doc-indexes-4.1-11.28.4 SUSE Manager Server Module 4.1:susemanager-docs_en-4.1-11.28.2 SUSE Manager Server Module 4.1:susemanager-docs_en-pdf-4.1-11.28.2 SUSE Manager Server Module 4.1:susemanager-schema-4.1.19-3.24.4 SUSE Manager Server Module 4.1:susemanager-sls-4.1.21-3.26.2 SUSE Manager Server Module 4.1:susemanager-tools-4.1.24-3.20.2 SUSE Manager Server Module 4.1:susemanager-web-libs-4.1.23-3.18.6 SUSE Manager Server Module 4.1:uyuni-config-modules-4.1.21-3.26.2 SUSE Manager Server Module 4.1:xpp3-1.1.4c-11.2.2 SUSE Manager Server Module 4.1:xpp3-minimal-1.1.4c-11.2.2 SUSE Manager Server Module 4.1:xstream-1.4.15-3.5.2 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20210906-1/ https://www.suse.com/security/cve/CVE-2020-26258.html CVE-2020-26258 https://bugzilla.suse.com/1180146 SUSE Bug 1180146 XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling. The vulnerability may allow a remote attacker to delete arbitrary know files on the host as log as the executing process has sufficient rights only by manipulating the processed input stream. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.15. The reported vulnerability does not exist running Java 15 or higher. No user is affected, who followed the recommendation to setup XStream's Security Framework with a whitelist! Anyone relying on XStream's default blacklist can immediately switch to a whilelist for the allowed types to avoid the vulnerability. Users of XStream 1.4.14 or below who still want to use XStream default blacklist can use a workaround described in more detailed in the referenced advisories. CVE-2020-26259 Container suse/manager/5.0/x86_64/server:latest:xpp3-1.1.4c-11.2.2 Container suse/manager/5.0/x86_64/server:latest:xpp3-minimal-1.1.4c-11.2.2 Container suse/manager/5.0/x86_64/server:latest:xstream-1.4.15-3.5.2 Container suse/multi-linux-manager/5.1/x86_64/server:latest:xpp3-1.1.4c-11.2.2 Container suse/multi-linux-manager/5.1/x86_64/server:latest:xpp3-minimal-1.1.4c-11.2.2 Container suse/multi-linux-manager/5.1/x86_64/server:latest:xstream-1.4.15-3.5.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:xpp3-1.1.4c-11.2.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:xstream-1.4.15-3.5.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:xpp3-1.1.4c-11.2.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:xstream-1.4.15-3.5.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:xpp3-1.1.4c-11.2.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-Azure-llc:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-Azure-llc:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-Azure-llc:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-Azure-ltd:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-Azure-ltd:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-Azure-ltd:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-BYOS:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-EC2-llc:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-EC2-llc:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-EC2-llc:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-EC2-ltd:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-EC2-ltd:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-EC2-ltd:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3:xstream-1.4.15-3.5.2 Image server-image:xpp3-1.1.4c-11.2.2 Image server-image:xpp3-minimal-1.1.4c-11.2.2 Image server-image:xstream-1.4.15-3.5.2 SUSE Manager Proxy Module 4.1:mgr-osad-4.1.5-2.9.4 SUSE Manager Proxy Module 4.1:python3-mgr-osa-common-4.1.5-2.9.4 SUSE Manager Proxy Module 4.1:python3-mgr-osad-4.1.5-2.9.4 SUSE Manager Proxy Module 4.1:python3-rhnlib-4.1.3-4.3.2 SUSE Manager Proxy Module 4.1:python3-spacewalk-check-4.1.9-4.12.4 SUSE Manager Proxy Module 4.1:python3-spacewalk-client-setup-4.1.9-4.12.4 SUSE Manager Proxy Module 4.1:python3-spacewalk-client-tools-4.1.9-4.12.4 SUSE Manager Proxy Module 4.1:spacewalk-backend-4.1.21-4.22.7 SUSE Manager Proxy Module 4.1:spacewalk-base-minimal-4.1.23-3.18.6 SUSE Manager Proxy Module 4.1:spacewalk-base-minimal-config-4.1.23-3.18.6 SUSE Manager Proxy Module 4.1:spacewalk-check-4.1.9-4.12.4 SUSE Manager Proxy Module 4.1:spacewalk-client-setup-4.1.9-4.12.4 SUSE Manager Proxy Module 4.1:spacewalk-client-tools-4.1.9-4.12.4 SUSE Manager Proxy Module 4.1:spacewalk-proxy-broker-4.1.4-3.9.4 SUSE Manager Proxy Module 4.1:spacewalk-proxy-common-4.1.4-3.9.4 SUSE Manager Proxy Module 4.1:spacewalk-proxy-installer-4.1.6-3.3.2 SUSE Manager Proxy Module 4.1:spacewalk-proxy-management-4.1.4-3.9.4 SUSE Manager Proxy Module 4.1:spacewalk-proxy-package-manager-4.1.4-3.9.4 SUSE Manager Proxy Module 4.1:spacewalk-proxy-redirect-4.1.4-3.9.4 SUSE Manager Proxy Module 4.1:spacewalk-proxy-salt-4.1.4-3.9.4 SUSE Manager Server Module 4.1:cobbler-3.0.0+git20190806.32c4bae0-5.6.4 SUSE Manager Server Module 4.1:grafana-formula-0.4.0-3.6.2 SUSE Manager Server Module 4.1:mgr-libmod-4.1.7-3.16.2 SUSE Manager Server Module 4.1:mgr-osa-dispatcher-4.1.5-2.9.4 SUSE Manager Server Module 4.1:prometheus-exporters-formula-0.9.0-3.19.2 SUSE Manager Server Module 4.1:prometheus-formula-0.3.1-3.6.2 SUSE Manager Server Module 4.1:py26-compat-salt-2016.11.10-6.11.2 SUSE Manager Server Module 4.1:python3-mgr-osa-common-4.1.5-2.9.4 SUSE Manager Server Module 4.1:python3-mgr-osa-dispatcher-4.1.5-2.9.4 SUSE Manager Server Module 4.1:python3-rhnlib-4.1.3-4.3.2 SUSE Manager Server Module 4.1:python3-spacewalk-client-tools-4.1.9-4.12.4 SUSE Manager Server Module 4.1:smdba-1.7.8-0.3.6.2 SUSE Manager Server Module 4.1:spacewalk-backend-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-app-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-applet-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-config-files-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-config-files-common-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-config-files-tool-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-iss-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-iss-export-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-package-push-server-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-server-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-sql-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-sql-postgresql-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-tools-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-xml-export-libs-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-xmlrpc-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-base-4.1.23-3.18.6 SUSE Manager Server Module 4.1:spacewalk-base-minimal-4.1.23-3.18.6 SUSE Manager Server Module 4.1:spacewalk-base-minimal-config-4.1.23-3.18.6 SUSE Manager Server Module 4.1:spacewalk-client-tools-4.1.9-4.12.4 SUSE Manager Server Module 4.1:spacewalk-config-4.1.5-3.3.2 SUSE Manager Server Module 4.1:spacewalk-html-4.1.23-3.18.6 SUSE Manager Server Module 4.1:spacewalk-java-4.1.30-3.31.7 SUSE Manager Server Module 4.1:spacewalk-java-config-4.1.30-3.31.7 SUSE Manager Server Module 4.1:spacewalk-java-lib-4.1.30-3.31.7 SUSE Manager Server Module 4.1:spacewalk-java-postgresql-4.1.30-3.31.7 SUSE Manager Server Module 4.1:spacewalk-taskomatic-4.1.30-3.31.7 SUSE Manager Server Module 4.1:spacewalk-utils-4.1.14-3.12.2 SUSE Manager Server Module 4.1:spacewalk-utils-extras-4.1.14-3.12.2 SUSE Manager Server Module 4.1:subscription-matcher-0.26-3.6.2 SUSE Manager Server Module 4.1:susemanager-4.1.24-3.20.2 SUSE Manager Server Module 4.1:susemanager-doc-indexes-4.1-11.28.4 SUSE Manager Server Module 4.1:susemanager-docs_en-4.1-11.28.2 SUSE Manager Server Module 4.1:susemanager-docs_en-pdf-4.1-11.28.2 SUSE Manager Server Module 4.1:susemanager-schema-4.1.19-3.24.4 SUSE Manager Server Module 4.1:susemanager-sls-4.1.21-3.26.2 SUSE Manager Server Module 4.1:susemanager-tools-4.1.24-3.20.2 SUSE Manager Server Module 4.1:susemanager-web-libs-4.1.23-3.18.6 SUSE Manager Server Module 4.1:uyuni-config-modules-4.1.21-3.26.2 SUSE Manager Server Module 4.1:xpp3-1.1.4c-11.2.2 SUSE Manager Server Module 4.1:xpp3-minimal-1.1.4c-11.2.2 SUSE Manager Server Module 4.1:xstream-1.4.15-3.5.2 moderate 6.4 AV:N/AC:L/Au:N/C:N/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20210906-1/ https://www.suse.com/security/cve/CVE-2020-26259.html CVE-2020-26259 https://bugzilla.suse.com/1180145 SUSE Bug 1180145 This affects all versions of package immer. CVE-2020-28477 Container suse/manager/5.0/x86_64/server:latest:xpp3-1.1.4c-11.2.2 Container suse/manager/5.0/x86_64/server:latest:xpp3-minimal-1.1.4c-11.2.2 Container suse/manager/5.0/x86_64/server:latest:xstream-1.4.15-3.5.2 Container suse/multi-linux-manager/5.1/x86_64/server:latest:xpp3-1.1.4c-11.2.2 Container suse/multi-linux-manager/5.1/x86_64/server:latest:xpp3-minimal-1.1.4c-11.2.2 Container suse/multi-linux-manager/5.1/x86_64/server:latest:xstream-1.4.15-3.5.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:xpp3-1.1.4c-11.2.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure:xstream-1.4.15-3.5.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:xpp3-1.1.4c-11.2.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM:xstream-1.4.15-3.5.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:xpp3-1.1.4c-11.2.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-Azure-llc:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-Azure-llc:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-Azure-llc:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-Azure-ltd:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-Azure-ltd:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-Azure-ltd:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-BYOS:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-BYOS:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-EC2-llc:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-EC2-llc:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-EC2-llc:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3-EC2-ltd:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-EC2-ltd:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3-EC2-ltd:xstream-1.4.15-3.5.2 Image SLES15-SP4-Manager-Server-4-3:xpp3-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3:xpp3-minimal-1.1.4c-11.2.2 Image SLES15-SP4-Manager-Server-4-3:xstream-1.4.15-3.5.2 Image server-image:xpp3-1.1.4c-11.2.2 Image server-image:xpp3-minimal-1.1.4c-11.2.2 Image server-image:xstream-1.4.15-3.5.2 SUSE Manager Proxy Module 4.1:mgr-osad-4.1.5-2.9.4 SUSE Manager Proxy Module 4.1:python3-mgr-osa-common-4.1.5-2.9.4 SUSE Manager Proxy Module 4.1:python3-mgr-osad-4.1.5-2.9.4 SUSE Manager Proxy Module 4.1:python3-rhnlib-4.1.3-4.3.2 SUSE Manager Proxy Module 4.1:python3-spacewalk-check-4.1.9-4.12.4 SUSE Manager Proxy Module 4.1:python3-spacewalk-client-setup-4.1.9-4.12.4 SUSE Manager Proxy Module 4.1:python3-spacewalk-client-tools-4.1.9-4.12.4 SUSE Manager Proxy Module 4.1:spacewalk-backend-4.1.21-4.22.7 SUSE Manager Proxy Module 4.1:spacewalk-base-minimal-4.1.23-3.18.6 SUSE Manager Proxy Module 4.1:spacewalk-base-minimal-config-4.1.23-3.18.6 SUSE Manager Proxy Module 4.1:spacewalk-check-4.1.9-4.12.4 SUSE Manager Proxy Module 4.1:spacewalk-client-setup-4.1.9-4.12.4 SUSE Manager Proxy Module 4.1:spacewalk-client-tools-4.1.9-4.12.4 SUSE Manager Proxy Module 4.1:spacewalk-proxy-broker-4.1.4-3.9.4 SUSE Manager Proxy Module 4.1:spacewalk-proxy-common-4.1.4-3.9.4 SUSE Manager Proxy Module 4.1:spacewalk-proxy-installer-4.1.6-3.3.2 SUSE Manager Proxy Module 4.1:spacewalk-proxy-management-4.1.4-3.9.4 SUSE Manager Proxy Module 4.1:spacewalk-proxy-package-manager-4.1.4-3.9.4 SUSE Manager Proxy Module 4.1:spacewalk-proxy-redirect-4.1.4-3.9.4 SUSE Manager Proxy Module 4.1:spacewalk-proxy-salt-4.1.4-3.9.4 SUSE Manager Server Module 4.1:cobbler-3.0.0+git20190806.32c4bae0-5.6.4 SUSE Manager Server Module 4.1:grafana-formula-0.4.0-3.6.2 SUSE Manager Server Module 4.1:mgr-libmod-4.1.7-3.16.2 SUSE Manager Server Module 4.1:mgr-osa-dispatcher-4.1.5-2.9.4 SUSE Manager Server Module 4.1:prometheus-exporters-formula-0.9.0-3.19.2 SUSE Manager Server Module 4.1:prometheus-formula-0.3.1-3.6.2 SUSE Manager Server Module 4.1:py26-compat-salt-2016.11.10-6.11.2 SUSE Manager Server Module 4.1:python3-mgr-osa-common-4.1.5-2.9.4 SUSE Manager Server Module 4.1:python3-mgr-osa-dispatcher-4.1.5-2.9.4 SUSE Manager Server Module 4.1:python3-rhnlib-4.1.3-4.3.2 SUSE Manager Server Module 4.1:python3-spacewalk-client-tools-4.1.9-4.12.4 SUSE Manager Server Module 4.1:smdba-1.7.8-0.3.6.2 SUSE Manager Server Module 4.1:spacewalk-backend-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-app-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-applet-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-config-files-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-config-files-common-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-config-files-tool-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-iss-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-iss-export-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-package-push-server-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-server-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-sql-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-sql-postgresql-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-tools-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-xml-export-libs-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-backend-xmlrpc-4.1.21-4.22.7 SUSE Manager Server Module 4.1:spacewalk-base-4.1.23-3.18.6 SUSE Manager Server Module 4.1:spacewalk-base-minimal-4.1.23-3.18.6 SUSE Manager Server Module 4.1:spacewalk-base-minimal-config-4.1.23-3.18.6 SUSE Manager Server Module 4.1:spacewalk-client-tools-4.1.9-4.12.4 SUSE Manager Server Module 4.1:spacewalk-config-4.1.5-3.3.2 SUSE Manager Server Module 4.1:spacewalk-html-4.1.23-3.18.6 SUSE Manager Server Module 4.1:spacewalk-java-4.1.30-3.31.7 SUSE Manager Server Module 4.1:spacewalk-java-config-4.1.30-3.31.7 SUSE Manager Server Module 4.1:spacewalk-java-lib-4.1.30-3.31.7 SUSE Manager Server Module 4.1:spacewalk-java-postgresql-4.1.30-3.31.7 SUSE Manager Server Module 4.1:spacewalk-taskomatic-4.1.30-3.31.7 SUSE Manager Server Module 4.1:spacewalk-utils-4.1.14-3.12.2 SUSE Manager Server Module 4.1:spacewalk-utils-extras-4.1.14-3.12.2 SUSE Manager Server Module 4.1:subscription-matcher-0.26-3.6.2 SUSE Manager Server Module 4.1:susemanager-4.1.24-3.20.2 SUSE Manager Server Module 4.1:susemanager-doc-indexes-4.1-11.28.4 SUSE Manager Server Module 4.1:susemanager-docs_en-4.1-11.28.2 SUSE Manager Server Module 4.1:susemanager-docs_en-pdf-4.1-11.28.2 SUSE Manager Server Module 4.1:susemanager-schema-4.1.19-3.24.4 SUSE Manager Server Module 4.1:susemanager-sls-4.1.21-3.26.2 SUSE Manager Server Module 4.1:susemanager-tools-4.1.24-3.20.2 SUSE Manager Server Module 4.1:susemanager-web-libs-4.1.23-3.18.6 SUSE Manager Server Module 4.1:uyuni-config-modules-4.1.21-3.26.2 SUSE Manager Server Module 4.1:xpp3-1.1.4c-11.2.2 SUSE Manager Server Module 4.1:xpp3-minimal-1.1.4c-11.2.2 SUSE Manager Server Module 4.1:xstream-1.4.15-3.5.2 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20210906-1/ https://www.suse.com/security/cve/CVE-2020-28477.html CVE-2020-28477