SUSE-SU-2017:1347-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2017/suse-su-20171347-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2017:1347-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2017:1347-1
Upstream
  • CVE-2017-7470
Related
  • CVE-2017-7470
Published
2017-05-18T22:19:15Z
Modified
2025-05-02T04:07:01Z
Summary
Security update for SUSE Manager Client Tools
Details

The following security issue in spacewalk-backend has been fixed:

  • Non admin or disabled user cannot make changes to a system anymore using spacewalk-channel. (bsc#1026633, CVE-2017-7470)

Additionally, the following non-security issues have been fixed:

rhnlib:

  • Support all TLS versions in rpclib. (bsc#1025312)

spacecmd:

  • Improve output on error for listrepo. (bsc#1027426)
  • Reword spacecmd removal message. (bsc#1024406)

spacewalk-backend:

  • Do not fail with traceback when media.1 does not exist. (bsc#1032256)
  • Create scap files directory beforehand. (bsc#1029755)
  • Fix error if SPACEWALK_DEBUG_NO_REPORTS environment variable is not present.
  • Don't skip 'rhnErrataPackage' cleanup during an errata update. (bsc#1023233)
  • Add support for running spacewalk-debug without creating reports. (bsc#1024714)
  • Set scap store directory mod to 775 and group owner to susemanager.
  • incomplete_package_import: Do import rhnPackageFile as it breaks some package installations.
  • Added traceback printing to the exception block.
  • Change postgresql starting commands.

spacewalk-client-tools:

  • Fix reboot message to use correct product name. (bsc#1031667)
References

Affected packages

SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS
rhnlib

Package

Name
rhnlib
Purl
pkg:rpm/suse/rhnlib&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-CLIENT-TOOLS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.5.84.4-8.1

Ecosystem specific 

{
    "binaries":  [
        {
            "rhnlib":  "2.5.84.4-8.1",
            "spacecmd":  "2.5.5.5-14.1",
            "spacewalk-backend-libs":  "2.5.24.9-24.1",
            "spacewalk-check":  "2.5.13.8-23.1",
            "spacewalk-client-setup":  "2.5.13.8-23.1",
            "spacewalk-client-tools":  "2.5.13.8-23.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2017:1347-1.json"
spacecmd

Package

Name
spacecmd
Purl
pkg:rpm/suse/spacecmd&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-CLIENT-TOOLS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.5.5.5-14.1

Ecosystem specific 

{
    "binaries":  [
        {
            "rhnlib":  "2.5.84.4-8.1",
            "spacecmd":  "2.5.5.5-14.1",
            "spacewalk-backend-libs":  "2.5.24.9-24.1",
            "spacewalk-check":  "2.5.13.8-23.1",
            "spacewalk-client-setup":  "2.5.13.8-23.1",
            "spacewalk-client-tools":  "2.5.13.8-23.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2017:1347-1.json"
spacewalk-backend

Package

Name
spacewalk-backend
Purl
pkg:rpm/suse/spacewalk-backend&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-CLIENT-TOOLS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.5.24.9-24.1

Ecosystem specific 

{
    "binaries":  [
        {
            "rhnlib":  "2.5.84.4-8.1",
            "spacecmd":  "2.5.5.5-14.1",
            "spacewalk-backend-libs":  "2.5.24.9-24.1",
            "spacewalk-check":  "2.5.13.8-23.1",
            "spacewalk-client-setup":  "2.5.13.8-23.1",
            "spacewalk-client-tools":  "2.5.13.8-23.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2017:1347-1.json"
spacewalk-client-tools

Package

Name
spacewalk-client-tools
Purl
pkg:rpm/suse/spacewalk-client-tools&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-CLIENT-TOOLS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.5.13.8-23.1

Ecosystem specific 

{
    "binaries":  [
        {
            "rhnlib":  "2.5.84.4-8.1",
            "spacecmd":  "2.5.5.5-14.1",
            "spacewalk-backend-libs":  "2.5.24.9-24.1",
            "spacewalk-check":  "2.5.13.8-23.1",
            "spacewalk-client-setup":  "2.5.13.8-23.1",
            "spacewalk-client-tools":  "2.5.13.8-23.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2017:1347-1.json"
SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS
rhnlib

Package

Name
rhnlib
Purl
pkg:rpm/suse/rhnlib&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-CLIENT-TOOLS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.5.84.4-8.1

Ecosystem specific 

{
    "binaries":  [
        {
            "rhnlib":  "2.5.84.4-8.1",
            "spacecmd":  "2.5.5.5-14.1",
            "spacewalk-backend-libs":  "2.5.24.9-24.1",
            "spacewalk-check":  "2.5.13.8-23.1",
            "spacewalk-client-setup":  "2.5.13.8-23.1",
            "spacewalk-client-tools":  "2.5.13.8-23.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2017:1347-1.json"
spacecmd

Package

Name
spacecmd
Purl
pkg:rpm/suse/spacecmd&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-CLIENT-TOOLS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.5.5.5-14.1

Ecosystem specific 

{
    "binaries":  [
        {
            "rhnlib":  "2.5.84.4-8.1",
            "spacecmd":  "2.5.5.5-14.1",
            "spacewalk-backend-libs":  "2.5.24.9-24.1",
            "spacewalk-check":  "2.5.13.8-23.1",
            "spacewalk-client-setup":  "2.5.13.8-23.1",
            "spacewalk-client-tools":  "2.5.13.8-23.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2017:1347-1.json"
spacewalk-backend

Package

Name
spacewalk-backend
Purl
pkg:rpm/suse/spacewalk-backend&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-CLIENT-TOOLS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.5.24.9-24.1

Ecosystem specific 

{
    "binaries":  [
        {
            "rhnlib":  "2.5.84.4-8.1",
            "spacecmd":  "2.5.5.5-14.1",
            "spacewalk-backend-libs":  "2.5.24.9-24.1",
            "spacewalk-check":  "2.5.13.8-23.1",
            "spacewalk-client-setup":  "2.5.13.8-23.1",
            "spacewalk-client-tools":  "2.5.13.8-23.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2017:1347-1.json"
spacewalk-client-tools

Package

Name
spacewalk-client-tools
Purl
pkg:rpm/suse/spacewalk-client-tools&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-CLIENT-TOOLS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.5.13.8-23.1

Ecosystem specific 

{
    "binaries":  [
        {
            "rhnlib":  "2.5.84.4-8.1",
            "spacecmd":  "2.5.5.5-14.1",
            "spacewalk-backend-libs":  "2.5.24.9-24.1",
            "spacewalk-check":  "2.5.13.8-23.1",
            "spacewalk-client-setup":  "2.5.13.8-23.1",
            "spacewalk-client-tools":  "2.5.13.8-23.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2017:1347-1.json"