SUSE-SU-2017:1352-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2017/suse-su-20171352-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2017:1352-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2017:1352-1
Upstream
  • CVE-2017-7470
Related
  • CVE-2017-7470
Published
2017-05-18T22:18:32Z
Modified
2026-02-04T03:35:54Z
Summary
Security update for SUSE Manager Client Tools
Details

The following security issue in spacewalk-backend has been fixed:

  • Non admin or disabled user cannot make changes to a system anymore using spacewalk-channel. (bsc#1026633, CVE-2017-7470)

Additionally, the following non-security issues have been fixed:

cobbler:

  • Support UEFI boot with cobbler generated tftp tree. (bsc#1020376)
  • Refresh patch for fuzzless appliance.

rhnlib:

  • Support all TLS versions in rpclib. (bsc#1025312)

spacecmd:

  • Improve output on error for listrepo. (bsc#1027426)
  • Reword spacecmd removal message. (bsc#1024406)

spacewalk-backend:

  • Do not fail with traceback when media.1 does not exist. (bsc#1032256)
  • Create scap files directory beforehand. (bsc#1029755)
  • Fix error if SPACEWALK_DEBUG_NO_REPORTS env variable is not present.
  • Don't skip 'rhnErrataPackage' cleanup during an errata update. (bsc#1023233)
  • Add support for running spacewalk-debug without creating reports. (bsc#1024714)
  • Set scap store directory mod to 775 and group owner to susemanager.
  • incomplete_package_import: Do import rhnPackageFile as it breaks some package installations.
  • Added traceback printing to the exception block.
  • Change postgresql starting commands.

spacewalk-client-tools:

  • Fix reboot message to use correct product name. (bsc#1031667)
References

Affected packages

SUSE:Manager Client Tools 12
cobbler

Package

Name
cobbler
Purl
pkg:rpm/suse/cobbler&distro=SUSE%20Manager%20Client%20Tools%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.6.6-45.1

Ecosystem specific 

{
    "binaries": [
        {
            "koan": "2.6.6-45.1",
            "rhnlib": "2.5.84.4-17.1",
            "spacecmd": "2.5.5.5-34.1",
            "spacewalk-backend-libs": "2.5.24.9-51.1",
            "spacewalk-check": "2.5.13.8-48.1",
            "spacewalk-client-setup": "2.5.13.8-48.1",
            "spacewalk-client-tools": "2.5.13.8-48.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2017:1352-1.json"
rhnlib

Package

Name
rhnlib
Purl
pkg:rpm/suse/rhnlib&distro=SUSE%20Manager%20Client%20Tools%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.5.84.4-17.1

Ecosystem specific 

{
    "binaries": [
        {
            "koan": "2.6.6-45.1",
            "rhnlib": "2.5.84.4-17.1",
            "spacecmd": "2.5.5.5-34.1",
            "spacewalk-backend-libs": "2.5.24.9-51.1",
            "spacewalk-check": "2.5.13.8-48.1",
            "spacewalk-client-setup": "2.5.13.8-48.1",
            "spacewalk-client-tools": "2.5.13.8-48.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2017:1352-1.json"
spacecmd

Package

Name
spacecmd
Purl
pkg:rpm/suse/spacecmd&distro=SUSE%20Manager%20Client%20Tools%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.5.5.5-34.1

Ecosystem specific 

{
    "binaries": [
        {
            "koan": "2.6.6-45.1",
            "rhnlib": "2.5.84.4-17.1",
            "spacecmd": "2.5.5.5-34.1",
            "spacewalk-backend-libs": "2.5.24.9-51.1",
            "spacewalk-check": "2.5.13.8-48.1",
            "spacewalk-client-setup": "2.5.13.8-48.1",
            "spacewalk-client-tools": "2.5.13.8-48.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2017:1352-1.json"
spacewalk-backend

Package

Name
spacewalk-backend
Purl
pkg:rpm/suse/spacewalk-backend&distro=SUSE%20Manager%20Client%20Tools%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.5.24.9-51.1

Ecosystem specific 

{
    "binaries": [
        {
            "koan": "2.6.6-45.1",
            "rhnlib": "2.5.84.4-17.1",
            "spacecmd": "2.5.5.5-34.1",
            "spacewalk-backend-libs": "2.5.24.9-51.1",
            "spacewalk-check": "2.5.13.8-48.1",
            "spacewalk-client-setup": "2.5.13.8-48.1",
            "spacewalk-client-tools": "2.5.13.8-48.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2017:1352-1.json"
spacewalk-client-tools

Package

Name
spacewalk-client-tools
Purl
pkg:rpm/suse/spacewalk-client-tools&distro=SUSE%20Manager%20Client%20Tools%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.5.13.8-48.1

Ecosystem specific 

{
    "binaries": [
        {
            "koan": "2.6.6-45.1",
            "rhnlib": "2.5.84.4-17.1",
            "spacecmd": "2.5.5.5-34.1",
            "spacewalk-backend-libs": "2.5.24.9-51.1",
            "spacewalk-check": "2.5.13.8-48.1",
            "spacewalk-client-setup": "2.5.13.8-48.1",
            "spacewalk-client-tools": "2.5.13.8-48.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2017:1352-1.json"