SUSE-SU-2019:1789-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2019/suse-su-20191789-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1789-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2019:1789-1

Upstream

CVE (2)

CVE-2019-10136
CVE-2019-10137

Related

CVE (2)

CVE-2019-10136
CVE-2019-10137

Published

2019-07-09T13:21:45Z

Modified

2026-02-04T02:42:00Z

Summary

Security update for SUSE Manager Server 4.0

Details

This update fixes the following issues:

spacewalk-backend:

Do not duplicate 'http://' protocol when using proxies with 'deb' repositories (bsc#1138313)
Fix reposync when dealing with RedHat CDN (bsc#1138358)
Fix for CVE-2019-10136. An attacker with a valid, but expired, authenticated set of headers could move some digits around, artificially extending the session validity without modifying the checksum. (bsc#1136480)

spacewalk-web:

Change WebUI version 4.0.1

susemanager-doc-indexes:

Updated wording for prometheus section
Jeos VM update
Port 8050 for graphical console display
Content life-cycle docs are not enough for customer to understand (bsc#1137955)
Salt boot formula fails for SLES11 SP3 terminal (bsc#1136857)
Certificate verify failed when using vmware esxi virtual host gatherer (bsc#1136561)

susemanager-docs_en:

Updated wording for prometheus section
Jeos VM update
Port 8050 for graphical console display
Content life-cycle docs are not enough for customer to understand (bsc#1137955)
Salt boot formula fails for SLES11 SP3 terminal (bsc#1136857)
Certificate verify failed when using vmware esxi virtual host gatherer (bsc#1136561)

susemanager-sync-data:

Add channel family definitions for SLES12 SP3 LTSS (bsc#1139693)
Add OPENSUSE to allowed channel_families to make openSUSE Leap product visible in the product list (bsc#1138364)

References

Affected packages

SUSE:Manager Proxy Module 4.0

spacewalk-backend

Package

Name: spacewalk-backend
Purl: pkg:rpm/suse/spacewalk-backend&distro=SUSE%20Manager%20Proxy%20Module%204.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.0.22-3.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "python3-spacewalk-backend-libs":  "4.0.22-3.3.1",
            "spacewalk-backend":  "4.0.22-3.3.1",
            "spacewalk-base-minimal":  "4.0.14-3.3.1",
            "spacewalk-base-minimal-config":  "4.0.14-3.3.1",
            "spacewalk-proxy-broker":  "4.0.12-3.3.1",
            "spacewalk-proxy-common":  "4.0.12-3.3.1",
            "spacewalk-proxy-management":  "4.0.12-3.3.1",
            "spacewalk-proxy-package-manager":  "4.0.12-3.3.1",
            "spacewalk-proxy-redirect":  "4.0.12-3.3.1",
            "spacewalk-proxy-salt":  "4.0.12-3.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1789-1.json"

spacewalk-proxy

Package

Name: spacewalk-proxy
Purl: pkg:rpm/suse/spacewalk-proxy&distro=SUSE%20Manager%20Proxy%20Module%204.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.0.12-3.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "python3-spacewalk-backend-libs":  "4.0.22-3.3.1",
            "spacewalk-backend":  "4.0.22-3.3.1",
            "spacewalk-base-minimal":  "4.0.14-3.3.1",
            "spacewalk-base-minimal-config":  "4.0.14-3.3.1",
            "spacewalk-proxy-broker":  "4.0.12-3.3.1",
            "spacewalk-proxy-common":  "4.0.12-3.3.1",
            "spacewalk-proxy-management":  "4.0.12-3.3.1",
            "spacewalk-proxy-package-manager":  "4.0.12-3.3.1",
            "spacewalk-proxy-redirect":  "4.0.12-3.3.1",
            "spacewalk-proxy-salt":  "4.0.12-3.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1789-1.json"

spacewalk-web

Package

Name: spacewalk-web
Purl: pkg:rpm/suse/spacewalk-web&distro=SUSE%20Manager%20Proxy%20Module%204.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.0.14-3.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "python3-spacewalk-backend-libs":  "4.0.22-3.3.1",
            "spacewalk-backend":  "4.0.22-3.3.1",
            "spacewalk-base-minimal":  "4.0.14-3.3.1",
            "spacewalk-base-minimal-config":  "4.0.14-3.3.1",
            "spacewalk-proxy-broker":  "4.0.12-3.3.1",
            "spacewalk-proxy-common":  "4.0.12-3.3.1",
            "spacewalk-proxy-management":  "4.0.12-3.3.1",
            "spacewalk-proxy-package-manager":  "4.0.12-3.3.1",
            "spacewalk-proxy-redirect":  "4.0.12-3.3.1",
            "spacewalk-proxy-salt":  "4.0.12-3.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1789-1.json"

SUSE:Manager Server Module 4.0

spacewalk-backend

Package

Name: spacewalk-backend
Purl: pkg:rpm/suse/spacewalk-backend&distro=SUSE%20Manager%20Server%20Module%204.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.0.22-3.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "python3-spacewalk-backend-libs":  "4.0.22-3.3.1",
            "spacewalk-backend":  "4.0.22-3.3.1",
            "spacewalk-backend-app":  "4.0.22-3.3.1",
            "spacewalk-backend-applet":  "4.0.22-3.3.1",
            "spacewalk-backend-config-files":  "4.0.22-3.3.1",
            "spacewalk-backend-config-files-common":  "4.0.22-3.3.1",
            "spacewalk-backend-config-files-tool":  "4.0.22-3.3.1",
            "spacewalk-backend-iss":  "4.0.22-3.3.1",
            "spacewalk-backend-iss-export":  "4.0.22-3.3.1",
            "spacewalk-backend-package-push-server":  "4.0.22-3.3.1",
            "spacewalk-backend-server":  "4.0.22-3.3.1",
            "spacewalk-backend-sql":  "4.0.22-3.3.1",
            "spacewalk-backend-sql-postgresql":  "4.0.22-3.3.1",
            "spacewalk-backend-tools":  "4.0.22-3.3.1",
            "spacewalk-backend-xml-export-libs":  "4.0.22-3.3.1",
            "spacewalk-backend-xmlrpc":  "4.0.22-3.3.1",
            "spacewalk-base":  "4.0.14-3.3.1",
            "spacewalk-base-minimal":  "4.0.14-3.3.1",
            "spacewalk-base-minimal-config":  "4.0.14-3.3.1",
            "spacewalk-html":  "4.0.14-3.3.1",
            "susemanager-doc-indexes":  "4.0-10.3.1",
            "susemanager-docs_en":  "4.0-10.3.1",
            "susemanager-docs_en-pdf":  "4.0-10.3.1",
            "susemanager-sync-data":  "4.0.12-3.3.1",
            "susemanager-web-libs":  "4.0.14-3.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1789-1.json"

spacewalk-web

Package

Name: spacewalk-web
Purl: pkg:rpm/suse/spacewalk-web&distro=SUSE%20Manager%20Server%20Module%204.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.0.14-3.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "python3-spacewalk-backend-libs":  "4.0.22-3.3.1",
            "spacewalk-backend":  "4.0.22-3.3.1",
            "spacewalk-backend-app":  "4.0.22-3.3.1",
            "spacewalk-backend-applet":  "4.0.22-3.3.1",
            "spacewalk-backend-config-files":  "4.0.22-3.3.1",
            "spacewalk-backend-config-files-common":  "4.0.22-3.3.1",
            "spacewalk-backend-config-files-tool":  "4.0.22-3.3.1",
            "spacewalk-backend-iss":  "4.0.22-3.3.1",
            "spacewalk-backend-iss-export":  "4.0.22-3.3.1",
            "spacewalk-backend-package-push-server":  "4.0.22-3.3.1",
            "spacewalk-backend-server":  "4.0.22-3.3.1",
            "spacewalk-backend-sql":  "4.0.22-3.3.1",
            "spacewalk-backend-sql-postgresql":  "4.0.22-3.3.1",
            "spacewalk-backend-tools":  "4.0.22-3.3.1",
            "spacewalk-backend-xml-export-libs":  "4.0.22-3.3.1",
            "spacewalk-backend-xmlrpc":  "4.0.22-3.3.1",
            "spacewalk-base":  "4.0.14-3.3.1",
            "spacewalk-base-minimal":  "4.0.14-3.3.1",
            "spacewalk-base-minimal-config":  "4.0.14-3.3.1",
            "spacewalk-html":  "4.0.14-3.3.1",
            "susemanager-doc-indexes":  "4.0-10.3.1",
            "susemanager-docs_en":  "4.0-10.3.1",
            "susemanager-docs_en-pdf":  "4.0-10.3.1",
            "susemanager-sync-data":  "4.0.12-3.3.1",
            "susemanager-web-libs":  "4.0.14-3.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1789-1.json"

susemanager-doc-indexes

Package

Name: susemanager-doc-indexes
Purl: pkg:rpm/suse/susemanager-doc-indexes&distro=SUSE%20Manager%20Server%20Module%204.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.0-10.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "python3-spacewalk-backend-libs":  "4.0.22-3.3.1",
            "spacewalk-backend":  "4.0.22-3.3.1",
            "spacewalk-backend-app":  "4.0.22-3.3.1",
            "spacewalk-backend-applet":  "4.0.22-3.3.1",
            "spacewalk-backend-config-files":  "4.0.22-3.3.1",
            "spacewalk-backend-config-files-common":  "4.0.22-3.3.1",
            "spacewalk-backend-config-files-tool":  "4.0.22-3.3.1",
            "spacewalk-backend-iss":  "4.0.22-3.3.1",
            "spacewalk-backend-iss-export":  "4.0.22-3.3.1",
            "spacewalk-backend-package-push-server":  "4.0.22-3.3.1",
            "spacewalk-backend-server":  "4.0.22-3.3.1",
            "spacewalk-backend-sql":  "4.0.22-3.3.1",
            "spacewalk-backend-sql-postgresql":  "4.0.22-3.3.1",
            "spacewalk-backend-tools":  "4.0.22-3.3.1",
            "spacewalk-backend-xml-export-libs":  "4.0.22-3.3.1",
            "spacewalk-backend-xmlrpc":  "4.0.22-3.3.1",
            "spacewalk-base":  "4.0.14-3.3.1",
            "spacewalk-base-minimal":  "4.0.14-3.3.1",
            "spacewalk-base-minimal-config":  "4.0.14-3.3.1",
            "spacewalk-html":  "4.0.14-3.3.1",
            "susemanager-doc-indexes":  "4.0-10.3.1",
            "susemanager-docs_en":  "4.0-10.3.1",
            "susemanager-docs_en-pdf":  "4.0-10.3.1",
            "susemanager-sync-data":  "4.0.12-3.3.1",
            "susemanager-web-libs":  "4.0.14-3.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1789-1.json"

susemanager-docs_en

Package

Name: susemanager-docs_en
Purl: pkg:rpm/suse/susemanager-docs_en&distro=SUSE%20Manager%20Server%20Module%204.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.0-10.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "python3-spacewalk-backend-libs":  "4.0.22-3.3.1",
            "spacewalk-backend":  "4.0.22-3.3.1",
            "spacewalk-backend-app":  "4.0.22-3.3.1",
            "spacewalk-backend-applet":  "4.0.22-3.3.1",
            "spacewalk-backend-config-files":  "4.0.22-3.3.1",
            "spacewalk-backend-config-files-common":  "4.0.22-3.3.1",
            "spacewalk-backend-config-files-tool":  "4.0.22-3.3.1",
            "spacewalk-backend-iss":  "4.0.22-3.3.1",
            "spacewalk-backend-iss-export":  "4.0.22-3.3.1",
            "spacewalk-backend-package-push-server":  "4.0.22-3.3.1",
            "spacewalk-backend-server":  "4.0.22-3.3.1",
            "spacewalk-backend-sql":  "4.0.22-3.3.1",
            "spacewalk-backend-sql-postgresql":  "4.0.22-3.3.1",
            "spacewalk-backend-tools":  "4.0.22-3.3.1",
            "spacewalk-backend-xml-export-libs":  "4.0.22-3.3.1",
            "spacewalk-backend-xmlrpc":  "4.0.22-3.3.1",
            "spacewalk-base":  "4.0.14-3.3.1",
            "spacewalk-base-minimal":  "4.0.14-3.3.1",
            "spacewalk-base-minimal-config":  "4.0.14-3.3.1",
            "spacewalk-html":  "4.0.14-3.3.1",
            "susemanager-doc-indexes":  "4.0-10.3.1",
            "susemanager-docs_en":  "4.0-10.3.1",
            "susemanager-docs_en-pdf":  "4.0-10.3.1",
            "susemanager-sync-data":  "4.0.12-3.3.1",
            "susemanager-web-libs":  "4.0.14-3.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1789-1.json"

susemanager-sync-data

Package

Name: susemanager-sync-data
Purl: pkg:rpm/suse/susemanager-sync-data&distro=SUSE%20Manager%20Server%20Module%204.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.0.12-3.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "python3-spacewalk-backend-libs":  "4.0.22-3.3.1",
            "spacewalk-backend":  "4.0.22-3.3.1",
            "spacewalk-backend-app":  "4.0.22-3.3.1",
            "spacewalk-backend-applet":  "4.0.22-3.3.1",
            "spacewalk-backend-config-files":  "4.0.22-3.3.1",
            "spacewalk-backend-config-files-common":  "4.0.22-3.3.1",
            "spacewalk-backend-config-files-tool":  "4.0.22-3.3.1",
            "spacewalk-backend-iss":  "4.0.22-3.3.1",
            "spacewalk-backend-iss-export":  "4.0.22-3.3.1",
            "spacewalk-backend-package-push-server":  "4.0.22-3.3.1",
            "spacewalk-backend-server":  "4.0.22-3.3.1",
            "spacewalk-backend-sql":  "4.0.22-3.3.1",
            "spacewalk-backend-sql-postgresql":  "4.0.22-3.3.1",
            "spacewalk-backend-tools":  "4.0.22-3.3.1",
            "spacewalk-backend-xml-export-libs":  "4.0.22-3.3.1",
            "spacewalk-backend-xmlrpc":  "4.0.22-3.3.1",
            "spacewalk-base":  "4.0.14-3.3.1",
            "spacewalk-base-minimal":  "4.0.14-3.3.1",
            "spacewalk-base-minimal-config":  "4.0.14-3.3.1",
            "spacewalk-html":  "4.0.14-3.3.1",
            "susemanager-doc-indexes":  "4.0-10.3.1",
            "susemanager-docs_en":  "4.0-10.3.1",
            "susemanager-docs_en-pdf":  "4.0-10.3.1",
            "susemanager-sync-data":  "4.0.12-3.3.1",
            "susemanager-web-libs":  "4.0.14-3.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1789-1.json"