SUSE-SU-2020:2648-1

Details

This update for SUSE Manager 3.2 fixes the following issues:

salt-netapi-client:

Refresh authentication module list to newer Salt versions

spacewalk-admin:

Use the Salt API in authenticated and encrypted form (bsc#1175884, CVE-2020-8028)

spacewalk-java:

Use the Salt API in authenticated and encrypted form (bsc#1175884, CVE-2020-8028)

spacewalk-setup:

Use the Salt API in authenticated and encrypted form (bsc#1175884, CVE-2020-8028)

Affected Packages

salt-netapi-client

SUSE Manager Server 3.2

Fixed in:

0.16.0-4.14.1

spacewalk-admin

SUSE Manager Server 3.2

Fixed in:

2.8.4.7-3.15.1

spacewalk-java

SUSE Manager Server 3.2

Fixed in:

2.8.78.30-3.53.1

spacewalk-java-config

SUSE Manager Server 3.2

Fixed in:

2.8.78.30-3.53.1

spacewalk-java-lib

SUSE Manager Server 3.2

Fixed in:

2.8.78.30-3.53.1

spacewalk-java-oracle

SUSE Manager Server 3.2

Fixed in:

2.8.78.30-3.53.1

spacewalk-java-postgresql

SUSE Manager Server 3.2

Fixed in:

2.8.78.30-3.53.1

spacewalk-setup

SUSE Manager Server 3.2

Fixed in:

2.8.7.11-3.28.1

spacewalk-taskomatic

SUSE Manager Server 3.2

Fixed in:

2.8.78.30-3.53.1

References

REPORT

https://bugzilla.suse.com/1175884

WEB

https://www.suse.com/security/cve/CVE-2020-8028

ADVISORY

https://www.suse.com/support/update/announcement/2020/suse-su-20202648-1/