SUSE-SU-2017:2266-1

Dashboard / Vulnerabilities / SUSE-SU-2017:2266-1

SUSE-SU-2017:2266-1

Summary: Security update for SUSE Manager Proxy 3.1

Details: This update for SUSE Manager Proxy 3.1 provides several fixes and improvements: The following security issues have been fixed: jabberd: - Fix offered SASL mechanism check. (bsc#1047282, CVE-2017-10807) Additionally, the following non-security issues have been fixed: jabberd: - Fix memory leak in pgsql storage driver. - Fix two double-frees caused by dangling pointers. - wss:// (WebSocket over SSL) support in c2s. - Allow BareJID S10N packets. - SQLite postconnect SQL support. - Support WebSocket fragmented packets. - Module to verify users using e-mail. - Use OpenSSL functions for base64 en/decoding when available. - Option to dump packet-filter matched packets to file. - bcrypt support for PostgreSQL and MySQL storage. - Option to set authreg module per realm. - WebSocket C2S SX plugin. - Support for RSA/DH/ECDH key agreement. - For a detailed description of all fixes, please refer to the changelog. osad: - Reduce maximal size of osad log before rotating. - Perform osad restart in posttrans. (bsc#1039913) spacewalk-backend: - Make master_label static to keep its value when retrying. (bsc#1038321) - Adapt for the new gpgcheck flag for the channels. spacewalk-certs-tools: - Improve text for bootstrap. (bsc#1032324) spacewalk-proxy: - Use query string in upstream HEAD requests. (bsc#1036260) spacewalk-web: - Fix overlapping of elements. (bsc#1031143) - Fix formulas action buttons position. (bsc#1047513) - Do not show old messages. (bsc#1043831) - Add a dynamic counter of the remaining textarea length. - Confirm if navigating away while bootstrapping. spacewalksd: - Fix permissions of PID files in spacewalksd. (bsc#1049936) zypp-plugin-spacewalk: - Fix setting pkg_gpgcheck. - Make pkg_gpgcheck configurable. How to apply this update: 1. Log in as root user to the SUSE Manager proxy. 2. Stop the proxy service: spacewalk-proxy stop 3. Apply the patch using either zypper patch or YaST Online Update. 4. Start the Spacewalk service: spacewalk-proxy start

References: https://www.suse.com/support/update/announcement/2017/suse-su-20172266-1/, https://bugzilla.suse.com/1031143, https://bugzilla.suse.com/1032324, https://bugzilla.suse.com/1036260, https://bugzilla.suse.com/1038321, https://bugzilla.suse.com/1039913, https://bugzilla.suse.com/1043831, https://bugzilla.suse.com/1047282, https://bugzilla.suse.com/1047513, https://bugzilla.suse.com/1049936, https://bugzilla.suse.com/1052039, https://www.suse.com/security/cve/CVE-2017-10807