SUSE-RU-2019:1703-1

Dashboard / Vulnerabilities / SUSE-RU-2019:1703-1

SUSE-RU-2019:1703-1

Summary: Security update for SUSE Manager Server 3.2

Details: This update fixes the following issues: cobbler: - Removes string replace for textmode fix (bsc#1134195) py26-compat-salt: - Avoid syntax error on yumpkg module running on Python 2.6 (bsc#1136250) - Use ThreadPool from multiprocessing.pool to avoid leakins when calculating FQDNs - Fix usermod options for SLE11 (bsc#1117017) - Do not report patches as installed on RHEL systems when not all the related packages are installed (bsc#1128061) - Do not include 'ordereddict' and 'singledispatch' on the thin for Python 2.6 systems. - Fix paths for py26-compat dependencies on SLE15 and newer - Port optimization_order config parameter (bsc#1131423) - Use special tornado and msgpack-python compat packages on sles15sp1 and greater in py26-compat-salt.conf (bsc#1131423) - Add missing py26 thin dependencies - Calculate the 'FQDNs' grains in parallel to avoid long blocking (bsc#1129079) salt-netapi-client: - Add workaround for Salt issue 52762 - Version 0.16.0 see https://github.com/SUSE/salt-netapi-client/releases/tag/v0.16.0 spacewalk-backend: - Fix spacewalk-repo-sync for Ubuntu repositories in mirror case (bsc#1136029) - Use new names in code for client tool packages which were renamed (bsc#1134876) - Fix HTTP headers handling to avoid duplicated entries (bsc#1125090) - Use suseLib.get_proxy to get the HTTP proxy configuration properly on DEB repos (bsc#1133424) spacewalk-certs-tools: - Fix missing quotation in bootstrap script (bsc#1136423) - Add new packages names to instructions for adding remote configuration support for traditional clients - Print error message instead of stacktrace for client_config_update.py spacewalk-config: - Fix config declaration for rhn.conf (bsc#1132197) spacewalk-java: - Remove the 'Returning' clause from the query as oracle doesn't support it (bsc#1135166) - Use new names in code for client tool packages which were renamed (bsc#1134876) - Handle the different retcodes that are being returned when salt module is not available (bsc#1131704) - Do not implicitly set parent channel when cloning (bsc#1130492) - Prevent Actions that were actually completed to be displayed as 'in progress' forever (bsc#1131780) - Enable batching mode for salt synchronous calls - Show minion id in System Details GUI and API - Do not report Provisioning installed product to subscription matcher (bsc#1128838) - Fix product package conflicts with SLES for SAP systems (bsc#1130551) - Add support for Salt batch execution mode - Fix NPE on remote commands when no targets match (bsc1123375) - Fix apidoc return order on mergePackages - Take into account only synced products when scheduling SP migration from the API (bsc#1131929) spacewalk-web: - Change WebUI string version to 3.2.8 susemanager: - Make swap files readable only by root (bsc#1131954, CVE-2019-3684) - Do not show false errors when configuring swapfile during setup - Create bootstrap repo for new Red Hat channels (bsc#1133587) susemanager-docs_en: - Minion ID is visible in System Info box. - Managing Systems Completely via SSH now fully supported (bsc#1131867). susemanager-schema: - Copy 3.1 schema migrations to 3.2 to be able to migrate from an older schema version to 3.2 - Add support for Salt batch execution mode susemanager-sls: - Add support for Salt batch execution mode susemanager-sync-data: - Add SLES11 SP4 LTSS channels for SLES for SAP (bsc#1133629) - Add SLES11 SP4 LTSS channels for ppc64 (bsc#1132103) zypp-plugin-spacewalk: - Fix python syntax error in distupgrade (bsc#1136102)

References: https://www.suse.com/support/update/announcement/-2019-1703/suse-ru-20191703-1/, https://bugzilla.suse.com/1117017, https://bugzilla.suse.com/1125090, https://bugzilla.suse.com/1128061, https://bugzilla.suse.com/1128838, https://bugzilla.suse.com/1129079, https://bugzilla.suse.com/1130492, https://bugzilla.suse.com/1130551, https://bugzilla.suse.com/1131408, https://bugzilla.suse.com/1131423, https://bugzilla.suse.com/1131704, https://bugzilla.suse.com/1131780, https://bugzilla.suse.com/1131867, https://bugzilla.suse.com/1131929, https://bugzilla.suse.com/1131954, https://bugzilla.suse.com/1132080, https://bugzilla.suse.com/1132103, https://bugzilla.suse.com/1132197, https://bugzilla.suse.com/1133424, https://bugzilla.suse.com/1133587, https://bugzilla.suse.com/1133629, https://bugzilla.suse.com/1134195, https://bugzilla.suse.com/1134876, https://bugzilla.suse.com/1135166, https://bugzilla.suse.com/1136029, https://bugzilla.suse.com/1136102, https://bugzilla.suse.com/1136250, https://bugzilla.suse.com/1136423, https://www.suse.com/security/cve/CVE-2019-3684