SUSE-SU-2023:1830-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2023/suse-su-20231830-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:1830-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2023:1830-1
Published
2023-04-13T09:03:53Z
Modified
2023-04-13T09:03:53Z
Summary
Security update for SUSE Manager Server 4.3
Details

This update fixes the following issues:

spacewalk-java:

  • Version 4.3.52-1
    • Add more restricted arguments to prevent HTTP API logging sensitive data (bsc#1209386, bsc#1209395)

spacewalk-web:

  • Version 4.3.29-1
  • Fix datepicker appearing behind modal edge (bsc#1209703)
  • Fix datepicker layout shift on Highstate pages

How to apply this update:

  1. Log in as root user to the SUSE Manager Server.
  2. Stop the Spacewalk service: spacewalk-service stop
  3. Apply the patch using either zypper patch or YaST Online Update.
  4. Start the Spacewalk service: spacewalk-service start
References

Affected packages

SUSE:Manager Proxy Module 4.3 / spacewalk-web

Package

Name
spacewalk-web
Purl
pkg:rpm/suse/spacewalk-web&distro=SUSE%20Manager%20Proxy%20Module%204.3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.3.29-150400.3.18.1

Ecosystem specific 

{
    "binaries":  [
        {
            "spacewalk-base-minimal":  "4.3.29-150400.3.18.1",
            "spacewalk-base-minimal-config":  "4.3.29-150400.3.18.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:1830-1.json"

SUSE:Manager Server Module 4.3 / spacewalk-java

Package

Name
spacewalk-java
Purl
pkg:rpm/suse/spacewalk-java&distro=SUSE%20Manager%20Server%20Module%204.3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.3.52-150400.3.41.3

Ecosystem specific 

{
    "binaries":  [
        {
            "spacewalk-base":  "4.3.29-150400.3.18.1",
            "spacewalk-base-minimal":  "4.3.29-150400.3.18.1",
            "spacewalk-base-minimal-config":  "4.3.29-150400.3.18.1",
            "spacewalk-html":  "4.3.29-150400.3.18.1",
            "spacewalk-java":  "4.3.52-150400.3.41.3",
            "spacewalk-java-config":  "4.3.52-150400.3.41.3",
            "spacewalk-java-lib":  "4.3.52-150400.3.41.3",
            "spacewalk-java-postgresql":  "4.3.52-150400.3.41.3",
            "spacewalk-taskomatic":  "4.3.52-150400.3.41.3"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:1830-1.json"

SUSE:Manager Server Module 4.3 / spacewalk-web

Package

Name
spacewalk-web
Purl
pkg:rpm/suse/spacewalk-web&distro=SUSE%20Manager%20Server%20Module%204.3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.3.29-150400.3.18.1

Ecosystem specific 

{
    "binaries":  [
        {
            "spacewalk-base":  "4.3.29-150400.3.18.1",
            "spacewalk-base-minimal":  "4.3.29-150400.3.18.1",
            "spacewalk-base-minimal-config":  "4.3.29-150400.3.18.1",
            "spacewalk-html":  "4.3.29-150400.3.18.1",
            "spacewalk-java":  "4.3.52-150400.3.41.3",
            "spacewalk-java-config":  "4.3.52-150400.3.41.3",
            "spacewalk-java-lib":  "4.3.52-150400.3.41.3",
            "spacewalk-java-postgresql":  "4.3.52-150400.3.41.3",
            "spacewalk-taskomatic":  "4.3.52-150400.3.41.3"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:1830-1.json"