SUSE-SU-2020:2647-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2020/suse-su-20202647-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2647-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2020:2647-1
Upstream
  • CVE-2020-8028
Related
  • CVE-2020-8028
Published
2020-09-16T12:22:50Z
Modified
2026-02-04T04:30:37Z
Summary
Security update for for SUSE Manager 4.1
Details

This update for SUSE Manager 4.1 fixes the following issues:

google-gson:

  • Use packages from SUSE:SLE-15-SP2:Update:Products:Manager41:Update to fix building other packages.

httpcomponents-client:

  • Use packages from SUSE:SLE-15-SP2:Update:Products:Manager41:Update to fix building other packages.

httpcomponents-core:

  • Use packages from SUSE:SLE-15-SP2:Update:Products:Manager41:Update to fix building other packages.

salt-netapi-client:

  • Refresh authentication module list to newer Salt versions

spacewalk-admin:

  • Use the Salt API in authenticated and encrypted form (bsc#1175884, CVE-2020-8028)

spacewalk-java:

  • Use the Salt API in authenticated and encrypted form (bsc#1175884, CVE-2020-8028)

spacewalk-setup:

  • Use the Salt API in authenticated and encrypted form (bsc#1175884, CVE-2020-8028)

velocity:

  • Use packages from SUSE:SLE-15-SP2:Update:Products:Manager41:Update to fix building other packages.
References

Affected packages

SUSE:Manager Server Module 4.1
google-gson

Package

Name
google-gson
Purl
pkg:rpm/suse/google-gson&distro=SUSE%20Manager%20Server%20Module%204.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.5-3.4.3

Ecosystem specific 

{
    "binaries": [
        {
            "google-gson": "2.8.5-3.4.3",
            "httpcomponents-client": "4.5.6-3.4.2",
            "httpcomponents-core": "4.4.10-3.4.2",
            "salt-netapi-client": "0.17.0-3.3.2",
            "spacewalk-admin": "4.1.6-3.3.3",
            "spacewalk-java": "4.1.19-3.8.2",
            "spacewalk-java-config": "4.1.19-3.8.2",
            "spacewalk-java-lib": "4.1.19-3.8.2",
            "spacewalk-java-postgresql": "4.1.19-3.8.2",
            "spacewalk-setup": "4.1.6-3.3.2",
            "spacewalk-taskomatic": "4.1.19-3.8.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2647-1.json"
httpcomponents-client

Package

Name
httpcomponents-client
Purl
pkg:rpm/suse/httpcomponents-client&distro=SUSE%20Manager%20Server%20Module%204.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.5.6-3.4.2

Ecosystem specific 

{
    "binaries": [
        {
            "google-gson": "2.8.5-3.4.3",
            "httpcomponents-client": "4.5.6-3.4.2",
            "httpcomponents-core": "4.4.10-3.4.2",
            "salt-netapi-client": "0.17.0-3.3.2",
            "spacewalk-admin": "4.1.6-3.3.3",
            "spacewalk-java": "4.1.19-3.8.2",
            "spacewalk-java-config": "4.1.19-3.8.2",
            "spacewalk-java-lib": "4.1.19-3.8.2",
            "spacewalk-java-postgresql": "4.1.19-3.8.2",
            "spacewalk-setup": "4.1.6-3.3.2",
            "spacewalk-taskomatic": "4.1.19-3.8.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2647-1.json"
httpcomponents-core

Package

Name
httpcomponents-core
Purl
pkg:rpm/suse/httpcomponents-core&distro=SUSE%20Manager%20Server%20Module%204.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.4.10-3.4.2

Ecosystem specific 

{
    "binaries": [
        {
            "google-gson": "2.8.5-3.4.3",
            "httpcomponents-client": "4.5.6-3.4.2",
            "httpcomponents-core": "4.4.10-3.4.2",
            "salt-netapi-client": "0.17.0-3.3.2",
            "spacewalk-admin": "4.1.6-3.3.3",
            "spacewalk-java": "4.1.19-3.8.2",
            "spacewalk-java-config": "4.1.19-3.8.2",
            "spacewalk-java-lib": "4.1.19-3.8.2",
            "spacewalk-java-postgresql": "4.1.19-3.8.2",
            "spacewalk-setup": "4.1.6-3.3.2",
            "spacewalk-taskomatic": "4.1.19-3.8.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2647-1.json"
salt-netapi-client

Package

Name
salt-netapi-client
Purl
pkg:rpm/suse/salt-netapi-client&distro=SUSE%20Manager%20Server%20Module%204.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.17.0-3.3.2

Ecosystem specific 

{
    "binaries": [
        {
            "google-gson": "2.8.5-3.4.3",
            "httpcomponents-client": "4.5.6-3.4.2",
            "httpcomponents-core": "4.4.10-3.4.2",
            "salt-netapi-client": "0.17.0-3.3.2",
            "spacewalk-admin": "4.1.6-3.3.3",
            "spacewalk-java": "4.1.19-3.8.2",
            "spacewalk-java-config": "4.1.19-3.8.2",
            "spacewalk-java-lib": "4.1.19-3.8.2",
            "spacewalk-java-postgresql": "4.1.19-3.8.2",
            "spacewalk-setup": "4.1.6-3.3.2",
            "spacewalk-taskomatic": "4.1.19-3.8.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2647-1.json"
spacewalk-admin

Package

Name
spacewalk-admin
Purl
pkg:rpm/suse/spacewalk-admin&distro=SUSE%20Manager%20Server%20Module%204.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.1.6-3.3.3

Ecosystem specific 

{
    "binaries": [
        {
            "google-gson": "2.8.5-3.4.3",
            "httpcomponents-client": "4.5.6-3.4.2",
            "httpcomponents-core": "4.4.10-3.4.2",
            "salt-netapi-client": "0.17.0-3.3.2",
            "spacewalk-admin": "4.1.6-3.3.3",
            "spacewalk-java": "4.1.19-3.8.2",
            "spacewalk-java-config": "4.1.19-3.8.2",
            "spacewalk-java-lib": "4.1.19-3.8.2",
            "spacewalk-java-postgresql": "4.1.19-3.8.2",
            "spacewalk-setup": "4.1.6-3.3.2",
            "spacewalk-taskomatic": "4.1.19-3.8.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2647-1.json"
spacewalk-java

Package

Name
spacewalk-java
Purl
pkg:rpm/suse/spacewalk-java&distro=SUSE%20Manager%20Server%20Module%204.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.1.19-3.8.2

Ecosystem specific 

{
    "binaries": [
        {
            "google-gson": "2.8.5-3.4.3",
            "httpcomponents-client": "4.5.6-3.4.2",
            "httpcomponents-core": "4.4.10-3.4.2",
            "salt-netapi-client": "0.17.0-3.3.2",
            "spacewalk-admin": "4.1.6-3.3.3",
            "spacewalk-java": "4.1.19-3.8.2",
            "spacewalk-java-config": "4.1.19-3.8.2",
            "spacewalk-java-lib": "4.1.19-3.8.2",
            "spacewalk-java-postgresql": "4.1.19-3.8.2",
            "spacewalk-setup": "4.1.6-3.3.2",
            "spacewalk-taskomatic": "4.1.19-3.8.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2647-1.json"
spacewalk-setup

Package

Name
spacewalk-setup
Purl
pkg:rpm/suse/spacewalk-setup&distro=SUSE%20Manager%20Server%20Module%204.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.1.6-3.3.2

Ecosystem specific 

{
    "binaries": [
        {
            "google-gson": "2.8.5-3.4.3",
            "httpcomponents-client": "4.5.6-3.4.2",
            "httpcomponents-core": "4.4.10-3.4.2",
            "salt-netapi-client": "0.17.0-3.3.2",
            "spacewalk-admin": "4.1.6-3.3.3",
            "spacewalk-java": "4.1.19-3.8.2",
            "spacewalk-java-config": "4.1.19-3.8.2",
            "spacewalk-java-lib": "4.1.19-3.8.2",
            "spacewalk-java-postgresql": "4.1.19-3.8.2",
            "spacewalk-setup": "4.1.6-3.3.2",
            "spacewalk-taskomatic": "4.1.19-3.8.2"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2647-1.json"