SUSE-RU-2020:0671-1

    Dashboard / Vulnerabilities / SUSE-RU-2020:0671-1

    SUSE-RU-2020:0671-1

    Published: 13 Mar 2020Last Modified: 4 Feb 2026

    Summary: Recommended update for SUSE Manager Proxy 4.0

    Details: This update fixes the following issues: mgr-osad: - Take care that osad is not disabled nor deactivated during update (bsc#1157700, bsc#1158697) patterns-suse-manager: - Add recommends for virtualization-host-formula to suma_server pattern - Add recommends for virtualization-host-formula to retail spacecmd: - Bugfix: attempt to purge SSM when it is empty (bsc#1155372) spacewalk-backend: - Fix mgrcfg-client python3 breakage (bsc#1164309) - Update doc link to point to new documentation server - Prevent timestamp format exception on mgr-inter-sync while processing comps (bsc#1157346) - When downloading repo metadata, don't add '/' to the repo url if it already ends with one (bsc#1158899) - Use HTTP proxy settings when fetching the mirrorlist on spacewalk-repo-sync (bsc#1159076) - Enhance suseProducts via ISS to fix SP migration on slave server (bsc#1159184) - Prevent a traceback when reposyncing openSUSE 15.1 (bsc#1158672) - Close config files after reading them (bsc#1158283) - Associate VMs and systems with the same machine ID at bootstrap (bsc#1144176) spacewalk-certs-tools: - Add 'start_event_grains' minion option to configfile when generated by bootstrap script - Forbid multiple activation keys for salt minions during bootstrap (bsc#1164452) - Add additional minion options to configfile when generated by bootstrap script (bsc#1159492) - Change the order to check the version correctly for RES (bsc#1152795) spacewalk-client-tools: - Spell correctly 'successful' and 'successfully' spacewalk-web: - Don't validate mandatory fields that are not visible (bsc#1158943) - Fix count of changes to build (bsc#1160940) - Report merge_subscriptions message in a readable way (bsc#1140332) - Fix ordering by date (bsc#1158818) supportutils-plugin-susemanager-client: - Rename rhncfg-actions to mgr-cfg-actions supportutils-plugin-susemanager-proxy: - Rename rhncfg-actions to mgr-cfg-actions How to apply this update: 1. Log in as root user to the SUSE Manager proxy. 2. Stop the proxy service: spacewalk-proxy stop 3. Apply the patch using either zypper patch or YaST Online Update. 4. Start the Spacewalk service: spacewalk-proxy start

    References: https://www.suse.com/support/update/announcement/-2020-671/suse-ru-20200671-1/, https://bugzilla.suse.com/1083326, https://bugzilla.suse.com/1085414, https://bugzilla.suse.com/1121640, https://bugzilla.suse.com/1123274, https://bugzilla.suse.com/1137248, https://bugzilla.suse.com/1140332, https://bugzilla.suse.com/1144176, https://bugzilla.suse.com/1152673, https://bugzilla.suse.com/1152795, https://bugzilla.suse.com/1153269, https://bugzilla.suse.com/1154246, https://bugzilla.suse.com/1154590, https://bugzilla.suse.com/1154599, https://bugzilla.suse.com/1155281, https://bugzilla.suse.com/1155372, https://bugzilla.suse.com/1156751, https://bugzilla.suse.com/1157317, https://bugzilla.suse.com/1157346, https://bugzilla.suse.com/1157447, https://bugzilla.suse.com/1157700, https://bugzilla.suse.com/1157975, https://bugzilla.suse.com/1158178, https://bugzilla.suse.com/1158181, https://bugzilla.suse.com/1158283, https://bugzilla.suse.com/1158480, https://bugzilla.suse.com/1158564, https://bugzilla.suse.com/1158672, https://bugzilla.suse.com/1158697, https://bugzilla.suse.com/1158754, https://bugzilla.suse.com/1158818, https://bugzilla.suse.com/1158899, https://bugzilla.suse.com/1158943, https://bugzilla.suse.com/1159012, https://bugzilla.suse.com/1159023, https://bugzilla.suse.com/1159076, https://bugzilla.suse.com/1159184, https://bugzilla.suse.com/1159492, https://bugzilla.suse.com/1159553, https://bugzilla.suse.com/1160184, https://bugzilla.suse.com/1160940, https://bugzilla.suse.com/1161755, https://bugzilla.suse.com/1161862, https://bugzilla.suse.com/1162609, https://bugzilla.suse.com/1162683, https://bugzilla.suse.com/1164120, https://bugzilla.suse.com/1164309, https://bugzilla.suse.com/1164452, https://bugzilla.suse.com/1164649, https://bugzilla.suse.com/1164875, https://bugzilla.suse.com/1165425, https://bugzilla.suse.com/1165541, https://bugzilla.suse.com/1165927, https://bugzilla.suse.com/1166061, https://bugzilla.suse.com/1166388, https://www.suse.com/security/cve/CVE-2018-1077, https://www.suse.com/security/cve/CVE-2019-16769, https://www.suse.com/security/cve/CVE-2020-1693

    Affected packages

    Package

    Name: mgr-osad

    Purl: pkg:rpm/suse/mgr-osad&distro=SUSE%20Manager%20Proxy%20Module%204.0

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -4.0.11-3.9.2

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-RU-2020:0671-1 | CVE-DB