{"affected":[{"ecosystem_specific":{"binaries":[{"rhnlib":"2.5.84.4-6.1","spacewalk-backend":"2.5.24.9-22.1","spacewalk-backend-libs":"2.5.24.9-22.1","spacewalk-base-minimal":"2.5.7.15-21.1","spacewalk-base-minimal-config":"2.5.7.15-21.1","spacewalk-certs-tools":"2.5.1.8-17.1","spacewalk-check":"2.5.13.8-17.2","spacewalk-client-setup":"2.5.13.8-17.2","spacewalk-client-tools":"2.5.13.8-17.2","spacewalk-proxy-broker":"2.5.1.7-15.1","spacewalk-proxy-common":"2.5.1.7-15.1","spacewalk-proxy-installer":"2.5.2.5-6.1","spacewalk-proxy-management":"2.5.1.7-15.1","spacewalk-proxy-package-manager":"2.5.1.7-15.1","spacewalk-proxy-redirect":"2.5.1.7-15.1","spacewalk-proxy-salt":"2.5.1.7-15.1","susemanager-sls":"0.1.20-23.1"}]},"package":{"ecosystem":"SUSE:Manager Proxy 3.0","name":"rhnlib","purl":"pkg:rpm/suse/rhnlib&distro=SUSE%20Manager%20Proxy%203.0"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.5.84.4-6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"rhnlib":"2.5.84.4-6.1","spacewalk-backend":"2.5.24.9-22.1","spacewalk-backend-libs":"2.5.24.9-22.1","spacewalk-base-minimal":"2.5.7.15-21.1","spacewalk-base-minimal-config":"2.5.7.15-21.1","spacewalk-certs-tools":"2.5.1.8-17.1","spacewalk-check":"2.5.13.8-17.2","spacewalk-client-setup":"2.5.13.8-17.2","spacewalk-client-tools":"2.5.13.8-17.2","spacewalk-proxy-broker":"2.5.1.7-15.1","spacewalk-proxy-common":"2.5.1.7-15.1","spacewalk-proxy-installer":"2.5.2.5-6.1","spacewalk-proxy-management":"2.5.1.7-15.1","spacewalk-proxy-package-manager":"2.5.1.7-15.1","spacewalk-proxy-redirect":"2.5.1.7-15.1","spacewalk-proxy-salt":"2.5.1.7-15.1","susemanager-sls":"0.1.20-23.1"}]},"package":{"ecosystem":"SUSE:Manager Proxy 3.0","name":"spacewalk-backend","purl":"pkg:rpm/suse/spacewalk-backend&distro=SUSE%20Manager%20Proxy%203.0"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.5.24.9-22.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"rhnlib":"2.5.84.4-6.1","spacewalk-backend":"2.5.24.9-22.1","spacewalk-backend-libs":"2.5.24.9-22.1","spacewalk-base-minimal":"2.5.7.15-21.1","spacewalk-base-minimal-config":"2.5.7.15-21.1","spacewalk-certs-tools":"2.5.1.8-17.1","spacewalk-check":"2.5.13.8-17.2","spacewalk-client-setup":"2.5.13.8-17.2","spacewalk-client-tools":"2.5.13.8-17.2","spacewalk-proxy-broker":"2.5.1.7-15.1","spacewalk-proxy-common":"2.5.1.7-15.1","spacewalk-proxy-installer":"2.5.2.5-6.1","spacewalk-proxy-management":"2.5.1.7-15.1","spacewalk-proxy-package-manager":"2.5.1.7-15.1","spacewalk-proxy-redirect":"2.5.1.7-15.1","spacewalk-proxy-salt":"2.5.1.7-15.1","susemanager-sls":"0.1.20-23.1"}]},"package":{"ecosystem":"SUSE:Manager Proxy 3.0","name":"spacewalk-certs-tools","purl":"pkg:rpm/suse/spacewalk-certs-tools&distro=SUSE%20Manager%20Proxy%203.0"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.5.1.8-17.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"rhnlib":"2.5.84.4-6.1","spacewalk-backend":"2.5.24.9-22.1","spacewalk-backend-libs":"2.5.24.9-22.1","spacewalk-base-minimal":"2.5.7.15-21.1","spacewalk-base-minimal-config":"2.5.7.15-21.1","spacewalk-certs-tools":"2.5.1.8-17.1","spacewalk-check":"2.5.13.8-17.2","spacewalk-client-setup":"2.5.13.8-17.2","spacewalk-client-tools":"2.5.13.8-17.2","spacewalk-proxy-broker":"2.5.1.7-15.1","spacewalk-proxy-common":"2.5.1.7-15.1","spacewalk-proxy-installer":"2.5.2.5-6.1","spacewalk-proxy-management":"2.5.1.7-15.1","spacewalk-proxy-package-manager":"2.5.1.7-15.1","spacewalk-proxy-redirect":"2.5.1.7-15.1","spacewalk-proxy-salt":"2.5.1.7-15.1","susemanager-sls":"0.1.20-23.1"}]},"package":{"ecosystem":"SUSE:Manager Proxy 3.0","name":"spacewalk-client-tools","purl":"pkg:rpm/suse/spacewalk-client-tools&distro=SUSE%20Manager%20Proxy%203.0"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.5.13.8-17.2"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"rhnlib":"2.5.84.4-6.1","spacewalk-backend":"2.5.24.9-22.1","spacewalk-backend-libs":"2.5.24.9-22.1","spacewalk-base-minimal":"2.5.7.15-21.1","spacewalk-base-minimal-config":"2.5.7.15-21.1","spacewalk-certs-tools":"2.5.1.8-17.1","spacewalk-check":"2.5.13.8-17.2","spacewalk-client-setup":"2.5.13.8-17.2","spacewalk-client-tools":"2.5.13.8-17.2","spacewalk-proxy-broker":"2.5.1.7-15.1","spacewalk-proxy-common":"2.5.1.7-15.1","spacewalk-proxy-installer":"2.5.2.5-6.1","spacewalk-proxy-management":"2.5.1.7-15.1","spacewalk-proxy-package-manager":"2.5.1.7-15.1","spacewalk-proxy-redirect":"2.5.1.7-15.1","spacewalk-proxy-salt":"2.5.1.7-15.1","susemanager-sls":"0.1.20-23.1"}]},"package":{"ecosystem":"SUSE:Manager Proxy 3.0","name":"spacewalk-proxy","purl":"pkg:rpm/suse/spacewalk-proxy&distro=SUSE%20Manager%20Proxy%203.0"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.5.1.7-15.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"rhnlib":"2.5.84.4-6.1","spacewalk-backend":"2.5.24.9-22.1","spacewalk-backend-libs":"2.5.24.9-22.1","spacewalk-base-minimal":"2.5.7.15-21.1","spacewalk-base-minimal-config":"2.5.7.15-21.1","spacewalk-certs-tools":"2.5.1.8-17.1","spacewalk-check":"2.5.13.8-17.2","spacewalk-client-setup":"2.5.13.8-17.2","spacewalk-client-tools":"2.5.13.8-17.2","spacewalk-proxy-broker":"2.5.1.7-15.1","spacewalk-proxy-common":"2.5.1.7-15.1","spacewalk-proxy-installer":"2.5.2.5-6.1","spacewalk-proxy-management":"2.5.1.7-15.1","spacewalk-proxy-package-manager":"2.5.1.7-15.1","spacewalk-proxy-redirect":"2.5.1.7-15.1","spacewalk-proxy-salt":"2.5.1.7-15.1","susemanager-sls":"0.1.20-23.1"}]},"package":{"ecosystem":"SUSE:Manager Proxy 3.0","name":"spacewalk-proxy-installer","purl":"pkg:rpm/suse/spacewalk-proxy-installer&distro=SUSE%20Manager%20Proxy%203.0"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.5.2.5-6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"rhnlib":"2.5.84.4-6.1","spacewalk-backend":"2.5.24.9-22.1","spacewalk-backend-libs":"2.5.24.9-22.1","spacewalk-base-minimal":"2.5.7.15-21.1","spacewalk-base-minimal-config":"2.5.7.15-21.1","spacewalk-certs-tools":"2.5.1.8-17.1","spacewalk-check":"2.5.13.8-17.2","spacewalk-client-setup":"2.5.13.8-17.2","spacewalk-client-tools":"2.5.13.8-17.2","spacewalk-proxy-broker":"2.5.1.7-15.1","spacewalk-proxy-common":"2.5.1.7-15.1","spacewalk-proxy-installer":"2.5.2.5-6.1","spacewalk-proxy-management":"2.5.1.7-15.1","spacewalk-proxy-package-manager":"2.5.1.7-15.1","spacewalk-proxy-redirect":"2.5.1.7-15.1","spacewalk-proxy-salt":"2.5.1.7-15.1","susemanager-sls":"0.1.20-23.1"}]},"package":{"ecosystem":"SUSE:Manager Proxy 3.0","name":"spacewalk-web","purl":"pkg:rpm/suse/spacewalk-web&distro=SUSE%20Manager%20Proxy%203.0"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.5.7.15-21.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"rhnlib":"2.5.84.4-6.1","spacewalk-backend":"2.5.24.9-22.1","spacewalk-backend-libs":"2.5.24.9-22.1","spacewalk-base-minimal":"2.5.7.15-21.1","spacewalk-base-minimal-config":"2.5.7.15-21.1","spacewalk-certs-tools":"2.5.1.8-17.1","spacewalk-check":"2.5.13.8-17.2","spacewalk-client-setup":"2.5.13.8-17.2","spacewalk-client-tools":"2.5.13.8-17.2","spacewalk-proxy-broker":"2.5.1.7-15.1","spacewalk-proxy-common":"2.5.1.7-15.1","spacewalk-proxy-installer":"2.5.2.5-6.1","spacewalk-proxy-management":"2.5.1.7-15.1","spacewalk-proxy-package-manager":"2.5.1.7-15.1","spacewalk-proxy-redirect":"2.5.1.7-15.1","spacewalk-proxy-salt":"2.5.1.7-15.1","susemanager-sls":"0.1.20-23.1"}]},"package":{"ecosystem":"SUSE:Manager Proxy 3.0","name":"susemanager-sls","purl":"pkg:rpm/suse/susemanager-sls&distro=SUSE%20Manager%20Proxy%203.0"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.1.20-23.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"\nThe following security issue in spacewalk-backend has been fixed:\n\n- Non admin or disabled user cannot make changes to a system anymore using spacewalk-channel.\n  (bsc#1026633, CVE-2017-7470)\n\nAdditionally, the following non-security issues have been fixed:\n\nrhnlib:\n\n- Support all TLS versions in rpclib. (bsc#1025312)\n\nspacewalk-backend:\n\n- Do not fail with traceback when media.1 does not exist. (bsc#1032256)\n- Create scap files dir beforehand. (bsc#1029755)\n- Fix error if SPACEWALK_DEBUG_NO_REPORTS env variable is not present.\n- Don't skip 'rhnErrataPackage' cleanup during an errata update. (bsc#1023233)\n- Add support for running spacewalk-debug without creating reports. (bsc#1024714)\n- Set scap store dir mod to 775 and group owner to susemanager.\n- Incomplete_package_import: do import rhnPackageFile as it breaks some package installations.\n- Added traceback printing to the exception block.\n- Change postgresql starting commands.\n\nspacewalk-certs-tools:\n\n- Always restart the minion regardless of its current state. (bsc#1034956)\n- Correctly honor disabling of SSL in bootstrap script. (bsc#1033383)\n- Add curl dependency and move mgr-proxy-ssh* to spacewalk-proxy package.\n- Exit for non-traditional bootstrap scripts. (bsc#1020904)\n- Rename mgr-ssh-proxy-force-cmd -> mgr-proxy-ssh-force-cmd.\n- Add mgr-proxy-ssh-force-cmd, mgr-proxy-ssh-push-init to rpm.\n- Add option to configure only sshd.\n- Restrictive ssh options for user mgrsshtunnel.\n\nspacewalk-client-tools:\n\n- Fix reboot message to use correct product name. (bsc#1031667)\n\nspacewalk-proxy:\n\n- Add curl dependency and move mgr-proxy-ssh* to spacewalk-proxy package.\n- Lower the use-file-instead-of-memory treshold. (bsc#1030342)\n\nspacewalk-proxy-installer:\n\n- Do not start firewall on proxy during configuration if not already active. (bsc#1031338)\n- Salt minions get repodata via a different URL; reflect by additional squid rule. (bsc#1027873)\n- Only warn if parent ssh-push pub key could not be retrieved.\n- Generate and auth ssh push keys for user mgrsshtunnel.\n- Authorize parent salt-ssh key on proxy.\n- Generate proxy ssh-push key and authorize the previous proxy in the chain.\n- Generate own ssh-push key for proxy and authorize parent.\n\nspacewalk-web:\n\n- Remote Commands: Allow Web Socket to be opened on non-standard port.\n- Improve remote cmd ui err handling.\n- Show message when waiting for ssh minions times out.\n- Fix remote cmd ui js err and timed out message.\n- Remote cmd UI changes for salt-ssh minions.\n- Fix broken help link for taskstatus. (bsc#1017422)\n- Add js utility function to create Date objects in different timezones.\n- Show proxy path in bootstrap UI.\n- Clear proxy selection when clicking clear fields button.\n- Check if proxy hostname is FQDN not name in UI.\n- Show warn in bootstrap UI if proxy hostname is not a FQDN.\n\nsusemanager-sls:\n\n- Add certificate state for CAASP.\n- Add certificate state for SLES for SAP. (bsc#1031659)\n- Pre-create empty top.sls with no-op. (bsc#1017754)\n- Add xccdf result xslt.\n- Fix mainframesysinfo module to use /proc/sysinfo on SLES11. (bsc#1025758)\n- Set scap store dir mod to 775 and group owner to susemanager.\n- Store uploaded scap files.\n- Set minion own key owner to bootstrap ssh_push_sudo_user.\n- Runner to generate ssh key and execute cmd via proxies.\n- Change ssh bootstrap state to generate and auth keys for salt-ssh push with tunnel.\n- Authorize parent salt-ssh key on proxy.\n\nHow to apply this update:\n1. Log in as root user to the SUSE Manager proxy.\n2. Stop the proxy service:\nspacewalk-proxy stop\n3. Apply the patch using either zypper patch or YaST Online Update.\n4. Start the Spacewalk service:\nspacewalk-proxy start\n","id":"SUSE-SU-2017:1346-1","modified":"2017-05-18T22:20:37Z","published":"2017-05-18T22:20:37Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171346-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1017422"},{"type":"REPORT","url":"https://bugzilla.suse.com/1017754"},{"type":"REPORT","url":"https://bugzilla.suse.com/1020904"},{"type":"REPORT","url":"https://bugzilla.suse.com/1023233"},{"type":"REPORT","url":"https://bugzilla.suse.com/1024714"},{"type":"REPORT","url":"https://bugzilla.suse.com/1025312"},{"type":"REPORT","url":"https://bugzilla.suse.com/1025758"},{"type":"REPORT","url":"https://bugzilla.suse.com/1026633"},{"type":"REPORT","url":"https://bugzilla.suse.com/1027873"},{"type":"REPORT","url":"https://bugzilla.suse.com/1029755"},{"type":"REPORT","url":"https://bugzilla.suse.com/1030342"},{"type":"REPORT","url":"https://bugzilla.suse.com/1031338"},{"type":"REPORT","url":"https://bugzilla.suse.com/1031659"},{"type":"REPORT","url":"https://bugzilla.suse.com/1031667"},{"type":"REPORT","url":"https://bugzilla.suse.com/1032256"},{"type":"REPORT","url":"https://bugzilla.suse.com/1033383"},{"type":"REPORT","url":"https://bugzilla.suse.com/1034956"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-7470"}],"related":["CVE-2017-7470"],"summary":"Security update for SUSE Manager Proxy 3.0","upstream":["CVE-2017-7470"]}