SUSE-SU-2019:1790-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2019/suse-su-20191790-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1790-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2019:1790-1
Upstream
CVE (2)
  • CVE-2019-10136
  • CVE-2019-10137
Related
CVE (2)
  • CVE-2019-10136
  • CVE-2019-10137
Published
2019-07-09T13:22:02Z
Modified
2026-02-04T04:10:59Z
Summary
Security update for SUSE Manager Server 3.2
Details

This update fixes the following issues:

release-notes-susemanager:

  • Fix invalid characters in ncurses mode (bsc#1102770)

spacewalk-backend:

  • Fix for CVE-2019-10136. An attacker with a valid, but expired, authenticated set of headers could move some digits around, artificially extending the session validity without modifying the checksum. (bsc#1136480)

spacewalk-web:

  • Change WebUI string version to 3.2.9
References

Affected packages

SUSE:Manager Proxy 3.2
release-notes-susemanager-proxy

Package

Name
release-notes-susemanager-proxy
Purl
pkg:rpm/suse/release-notes-susemanager-proxy&distro=SUSE%20Manager%20Proxy%203.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.2.9-0.16.27.1

Ecosystem specific 

{
    "binaries":  [
        {
            "release-notes-susemanager-proxy":  "3.2.9-0.16.27.1",
            "spacewalk-backend":  "2.8.57.17-3.33.1",
            "spacewalk-backend-libs":  "2.8.57.17-3.33.1",
            "spacewalk-base-minimal":  "2.8.7.17-3.30.1",
            "spacewalk-base-minimal-config":  "2.8.7.17-3.30.1",
            "spacewalk-proxy-broker":  "2.8.5.6-3.11.1",
            "spacewalk-proxy-common":  "2.8.5.6-3.11.1",
            "spacewalk-proxy-management":  "2.8.5.6-3.11.1",
            "spacewalk-proxy-package-manager":  "2.8.5.6-3.11.1",
            "spacewalk-proxy-redirect":  "2.8.5.6-3.11.1",
            "spacewalk-proxy-salt":  "2.8.5.6-3.11.1",
            "susemanager-web-libs":  "2.8.7.17-3.30.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1790-1.json"
spacewalk-backend

Package

Name
spacewalk-backend
Purl
pkg:rpm/suse/spacewalk-backend&distro=SUSE%20Manager%20Proxy%203.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.57.17-3.33.1

Ecosystem specific 

{
    "binaries":  [
        {
            "release-notes-susemanager-proxy":  "3.2.9-0.16.27.1",
            "spacewalk-backend":  "2.8.57.17-3.33.1",
            "spacewalk-backend-libs":  "2.8.57.17-3.33.1",
            "spacewalk-base-minimal":  "2.8.7.17-3.30.1",
            "spacewalk-base-minimal-config":  "2.8.7.17-3.30.1",
            "spacewalk-proxy-broker":  "2.8.5.6-3.11.1",
            "spacewalk-proxy-common":  "2.8.5.6-3.11.1",
            "spacewalk-proxy-management":  "2.8.5.6-3.11.1",
            "spacewalk-proxy-package-manager":  "2.8.5.6-3.11.1",
            "spacewalk-proxy-redirect":  "2.8.5.6-3.11.1",
            "spacewalk-proxy-salt":  "2.8.5.6-3.11.1",
            "susemanager-web-libs":  "2.8.7.17-3.30.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1790-1.json"
spacewalk-proxy

Package

Name
spacewalk-proxy
Purl
pkg:rpm/suse/spacewalk-proxy&distro=SUSE%20Manager%20Proxy%203.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.5.6-3.11.1

Ecosystem specific 

{
    "binaries":  [
        {
            "release-notes-susemanager-proxy":  "3.2.9-0.16.27.1",
            "spacewalk-backend":  "2.8.57.17-3.33.1",
            "spacewalk-backend-libs":  "2.8.57.17-3.33.1",
            "spacewalk-base-minimal":  "2.8.7.17-3.30.1",
            "spacewalk-base-minimal-config":  "2.8.7.17-3.30.1",
            "spacewalk-proxy-broker":  "2.8.5.6-3.11.1",
            "spacewalk-proxy-common":  "2.8.5.6-3.11.1",
            "spacewalk-proxy-management":  "2.8.5.6-3.11.1",
            "spacewalk-proxy-package-manager":  "2.8.5.6-3.11.1",
            "spacewalk-proxy-redirect":  "2.8.5.6-3.11.1",
            "spacewalk-proxy-salt":  "2.8.5.6-3.11.1",
            "susemanager-web-libs":  "2.8.7.17-3.30.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1790-1.json"
spacewalk-web

Package

Name
spacewalk-web
Purl
pkg:rpm/suse/spacewalk-web&distro=SUSE%20Manager%20Proxy%203.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.7.17-3.30.1

Ecosystem specific 

{
    "binaries":  [
        {
            "release-notes-susemanager-proxy":  "3.2.9-0.16.27.1",
            "spacewalk-backend":  "2.8.57.17-3.33.1",
            "spacewalk-backend-libs":  "2.8.57.17-3.33.1",
            "spacewalk-base-minimal":  "2.8.7.17-3.30.1",
            "spacewalk-base-minimal-config":  "2.8.7.17-3.30.1",
            "spacewalk-proxy-broker":  "2.8.5.6-3.11.1",
            "spacewalk-proxy-common":  "2.8.5.6-3.11.1",
            "spacewalk-proxy-management":  "2.8.5.6-3.11.1",
            "spacewalk-proxy-package-manager":  "2.8.5.6-3.11.1",
            "spacewalk-proxy-redirect":  "2.8.5.6-3.11.1",
            "spacewalk-proxy-salt":  "2.8.5.6-3.11.1",
            "susemanager-web-libs":  "2.8.7.17-3.30.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1790-1.json"
SUSE:Manager Server 3.2
release-notes-susemanager

Package

Name
release-notes-susemanager
Purl
pkg:rpm/suse/release-notes-susemanager&distro=SUSE%20Manager%20Server%203.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.2.9-6.35.1

Ecosystem specific 

{
    "binaries":  [
        {
            "release-notes-susemanager":  "3.2.9-6.35.1",
            "spacewalk-backend":  "2.8.57.17-3.33.1",
            "spacewalk-backend-app":  "2.8.57.17-3.33.1",
            "spacewalk-backend-applet":  "2.8.57.17-3.33.1",
            "spacewalk-backend-config-files":  "2.8.57.17-3.33.1",
            "spacewalk-backend-config-files-common":  "2.8.57.17-3.33.1",
            "spacewalk-backend-config-files-tool":  "2.8.57.17-3.33.1",
            "spacewalk-backend-iss":  "2.8.57.17-3.33.1",
            "spacewalk-backend-iss-export":  "2.8.57.17-3.33.1",
            "spacewalk-backend-libs":  "2.8.57.17-3.33.1",
            "spacewalk-backend-package-push-server":  "2.8.57.17-3.33.1",
            "spacewalk-backend-server":  "2.8.57.17-3.33.1",
            "spacewalk-backend-sql":  "2.8.57.17-3.33.1",
            "spacewalk-backend-sql-oracle":  "2.8.57.17-3.33.1",
            "spacewalk-backend-sql-postgresql":  "2.8.57.17-3.33.1",
            "spacewalk-backend-tools":  "2.8.57.17-3.33.1",
            "spacewalk-backend-xml-export-libs":  "2.8.57.17-3.33.1",
            "spacewalk-backend-xmlrpc":  "2.8.57.17-3.33.1",
            "spacewalk-base":  "2.8.7.17-3.30.1",
            "spacewalk-base-minimal":  "2.8.7.17-3.30.1",
            "spacewalk-base-minimal-config":  "2.8.7.17-3.30.1",
            "spacewalk-html":  "2.8.7.17-3.30.1",
            "susemanager-web-libs":  "2.8.7.17-3.30.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1790-1.json"
spacewalk-backend

Package

Name
spacewalk-backend
Purl
pkg:rpm/suse/spacewalk-backend&distro=SUSE%20Manager%20Server%203.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.57.17-3.33.1

Ecosystem specific 

{
    "binaries":  [
        {
            "release-notes-susemanager":  "3.2.9-6.35.1",
            "spacewalk-backend":  "2.8.57.17-3.33.1",
            "spacewalk-backend-app":  "2.8.57.17-3.33.1",
            "spacewalk-backend-applet":  "2.8.57.17-3.33.1",
            "spacewalk-backend-config-files":  "2.8.57.17-3.33.1",
            "spacewalk-backend-config-files-common":  "2.8.57.17-3.33.1",
            "spacewalk-backend-config-files-tool":  "2.8.57.17-3.33.1",
            "spacewalk-backend-iss":  "2.8.57.17-3.33.1",
            "spacewalk-backend-iss-export":  "2.8.57.17-3.33.1",
            "spacewalk-backend-libs":  "2.8.57.17-3.33.1",
            "spacewalk-backend-package-push-server":  "2.8.57.17-3.33.1",
            "spacewalk-backend-server":  "2.8.57.17-3.33.1",
            "spacewalk-backend-sql":  "2.8.57.17-3.33.1",
            "spacewalk-backend-sql-oracle":  "2.8.57.17-3.33.1",
            "spacewalk-backend-sql-postgresql":  "2.8.57.17-3.33.1",
            "spacewalk-backend-tools":  "2.8.57.17-3.33.1",
            "spacewalk-backend-xml-export-libs":  "2.8.57.17-3.33.1",
            "spacewalk-backend-xmlrpc":  "2.8.57.17-3.33.1",
            "spacewalk-base":  "2.8.7.17-3.30.1",
            "spacewalk-base-minimal":  "2.8.7.17-3.30.1",
            "spacewalk-base-minimal-config":  "2.8.7.17-3.30.1",
            "spacewalk-html":  "2.8.7.17-3.30.1",
            "susemanager-web-libs":  "2.8.7.17-3.30.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1790-1.json"
spacewalk-web

Package

Name
spacewalk-web
Purl
pkg:rpm/suse/spacewalk-web&distro=SUSE%20Manager%20Server%203.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.7.17-3.30.1

Ecosystem specific 

{
    "binaries":  [
        {
            "release-notes-susemanager":  "3.2.9-6.35.1",
            "spacewalk-backend":  "2.8.57.17-3.33.1",
            "spacewalk-backend-app":  "2.8.57.17-3.33.1",
            "spacewalk-backend-applet":  "2.8.57.17-3.33.1",
            "spacewalk-backend-config-files":  "2.8.57.17-3.33.1",
            "spacewalk-backend-config-files-common":  "2.8.57.17-3.33.1",
            "spacewalk-backend-config-files-tool":  "2.8.57.17-3.33.1",
            "spacewalk-backend-iss":  "2.8.57.17-3.33.1",
            "spacewalk-backend-iss-export":  "2.8.57.17-3.33.1",
            "spacewalk-backend-libs":  "2.8.57.17-3.33.1",
            "spacewalk-backend-package-push-server":  "2.8.57.17-3.33.1",
            "spacewalk-backend-server":  "2.8.57.17-3.33.1",
            "spacewalk-backend-sql":  "2.8.57.17-3.33.1",
            "spacewalk-backend-sql-oracle":  "2.8.57.17-3.33.1",
            "spacewalk-backend-sql-postgresql":  "2.8.57.17-3.33.1",
            "spacewalk-backend-tools":  "2.8.57.17-3.33.1",
            "spacewalk-backend-xml-export-libs":  "2.8.57.17-3.33.1",
            "spacewalk-backend-xmlrpc":  "2.8.57.17-3.33.1",
            "spacewalk-base":  "2.8.7.17-3.30.1",
            "spacewalk-base-minimal":  "2.8.7.17-3.30.1",
            "spacewalk-base-minimal-config":  "2.8.7.17-3.30.1",
            "spacewalk-html":  "2.8.7.17-3.30.1",
            "susemanager-web-libs":  "2.8.7.17-3.30.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1790-1.json"