Security update for SUSE Manager Server 4.0 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:1789-1 Final 1 1 2019-07-09T13:21:45Z current 2019-07-09T13:21:45Z 2019-07-09T13:21:45Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for SUSE Manager Server 4.0 This update fixes the following issues: spacewalk-backend: - Do not duplicate 'http://' protocol when using proxies with 'deb' repositories (bsc#1138313) - Fix reposync when dealing with RedHat CDN (bsc#1138358) - Fix for CVE-2019-10136. An attacker with a valid, but expired, authenticated set of headers could move some digits around, artificially extending the session validity without modifying the checksum. (bsc#1136480) spacewalk-web: - Change WebUI version 4.0.1 susemanager-doc-indexes: - Updated wording for prometheus section - Jeos VM update - Port 8050 for graphical console display - Content life-cycle docs are not enough for customer to understand (bsc#1137955) - Salt boot formula fails for SLES11 SP3 terminal (bsc#1136857) - Certificate verify failed when using vmware esxi virtual host gatherer (bsc#1136561) susemanager-docs_en: - Updated wording for prometheus section - Jeos VM update - Port 8050 for graphical console display - Content life-cycle docs are not enough for customer to understand (bsc#1137955) - Salt boot formula fails for SLES11 SP3 terminal (bsc#1136857) - Certificate verify failed when using vmware esxi virtual host gatherer (bsc#1136561) susemanager-sync-data: - Add channel family definitions for SLES12 SP3 LTSS (bsc#1139693) - Add OPENSUSE to allowed channel_families to make openSUSE Leap product visible in the product list (bsc#1138364) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy-2019-1789,Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server-2019-1789,Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy-2019-1789,Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server-2019-1789,Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy-2019-1789,Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server-2019-1789,SUSE-2019-1789,SUSE-SLE-Module-SUSE-Manager-Proxy-4.0-2019-1789,SUSE-SLE-Module-SUSE-Manager-Server-4.0-2019-1789 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20191789-1/ Link for SUSE-SU-2019:1789-1 https://lists.suse.com/pipermail/sle-security-updates/2019-July/005679.html E-Mail link for SUSE-SU-2019:1789-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1136476 SUSE Bug 1136476 https://bugzilla.suse.com/1136480 SUSE Bug 1136480 https://bugzilla.suse.com/1136561 SUSE Bug 1136561 https://bugzilla.suse.com/1136857 SUSE Bug 1136857 https://bugzilla.suse.com/1137955 SUSE Bug 1137955 https://bugzilla.suse.com/1138313 SUSE Bug 1138313 https://bugzilla.suse.com/1138358 SUSE Bug 1138358 https://bugzilla.suse.com/1138364 SUSE Bug 1138364 https://bugzilla.suse.com/1139693 SUSE Bug 1139693 https://www.suse.com/security/cve/CVE-2019-10136/ SUSE CVE CVE-2019-10136 page https://www.suse.com/security/cve/CVE-2019-10137/ SUSE CVE CVE-2019-10137 page Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server SUSE Manager Proxy Module 4.0 SUSE Manager Server Module 4.0 python3-spacewalk-backend-libs-4.0.22-3.3.1 spacewalk-backend-4.0.22-3.3.1 spacewalk-base-minimal-4.0.14-3.3.1 spacewalk-base-minimal-config-4.0.14-3.3.1 spacewalk-proxy-broker-4.0.12-3.3.1 spacewalk-proxy-common-4.0.12-3.3.1 spacewalk-proxy-management-4.0.12-3.3.1 spacewalk-proxy-package-manager-4.0.12-3.3.1 spacewalk-proxy-redirect-4.0.12-3.3.1 spacewalk-proxy-salt-4.0.12-3.3.1 spacewalk-backend-app-4.0.22-3.3.1 spacewalk-backend-applet-4.0.22-3.3.1 spacewalk-backend-config-files-4.0.22-3.3.1 spacewalk-backend-config-files-common-4.0.22-3.3.1 spacewalk-backend-config-files-tool-4.0.22-3.3.1 spacewalk-backend-iss-4.0.22-3.3.1 spacewalk-backend-iss-export-4.0.22-3.3.1 spacewalk-backend-package-push-server-4.0.22-3.3.1 spacewalk-backend-server-4.0.22-3.3.1 spacewalk-backend-sql-4.0.22-3.3.1 spacewalk-backend-sql-postgresql-4.0.22-3.3.1 spacewalk-backend-tools-4.0.22-3.3.1 spacewalk-backend-xml-export-libs-4.0.22-3.3.1 spacewalk-backend-xmlrpc-4.0.22-3.3.1 spacewalk-base-4.0.14-3.3.1 spacewalk-html-4.0.14-3.3.1 susemanager-doc-indexes-4.0-10.3.1 susemanager-docs_en-4.0-10.3.1 susemanager-docs_en-pdf-4.0-10.3.1 susemanager-sync-data-4.0.12-3.3.1 susemanager-web-libs-4.0.14-3.3.1 spacewalk-backend-cdn-4.0.22-3.3.1 spacewalk-backend-libs-4.0.22-3.3.1 spacewalk-backend-sql-oracle-4.0.22-3.3.1 spacewalk-dobby-4.0.14-3.3.1 python3-spacewalk-backend-libs-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy spacewalk-backend-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy spacewalk-base-minimal-4.0.14-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy spacewalk-base-minimal-config-4.0.14-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy spacewalk-proxy-broker-4.0.12-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy spacewalk-proxy-common-4.0.12-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy spacewalk-proxy-management-4.0.12-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy spacewalk-proxy-package-manager-4.0.12-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy spacewalk-proxy-redirect-4.0.12-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy spacewalk-proxy-salt-4.0.12-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy python3-spacewalk-backend-libs-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-backend-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-backend-app-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-backend-applet-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-backend-config-files-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-backend-config-files-common-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-backend-config-files-tool-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-backend-iss-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-backend-iss-export-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-backend-package-push-server-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-backend-server-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-backend-sql-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-backend-sql-postgresql-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-backend-tools-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-backend-xml-export-libs-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-backend-xmlrpc-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-base-4.0.14-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-base-minimal-4.0.14-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-base-minimal-config-4.0.14-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-html-4.0.14-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server susemanager-doc-indexes-4.0-10.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server susemanager-docs_en-4.0-10.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server susemanager-docs_en-pdf-4.0-10.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server susemanager-sync-data-4.0.12-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server susemanager-web-libs-4.0.14-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server python3-spacewalk-backend-libs-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy spacewalk-backend-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy spacewalk-base-minimal-4.0.14-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy spacewalk-base-minimal-config-4.0.14-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy spacewalk-proxy-broker-4.0.12-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy spacewalk-proxy-common-4.0.12-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy spacewalk-proxy-management-4.0.12-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy spacewalk-proxy-package-manager-4.0.12-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy spacewalk-proxy-redirect-4.0.12-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy spacewalk-proxy-salt-4.0.12-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy python3-spacewalk-backend-libs-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-backend-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-backend-app-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-backend-applet-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-backend-config-files-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-backend-config-files-common-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-backend-config-files-tool-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-backend-iss-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-backend-iss-export-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-backend-package-push-server-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-backend-server-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-backend-sql-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-backend-sql-postgresql-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-backend-tools-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-backend-xml-export-libs-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-backend-xmlrpc-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-base-4.0.14-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-base-minimal-4.0.14-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-base-minimal-config-4.0.14-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-html-4.0.14-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server susemanager-doc-indexes-4.0-10.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server susemanager-docs_en-4.0-10.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server susemanager-docs_en-pdf-4.0-10.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server susemanager-sync-data-4.0.12-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server susemanager-web-libs-4.0.14-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server python3-spacewalk-backend-libs-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy spacewalk-backend-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy spacewalk-base-minimal-4.0.14-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy spacewalk-base-minimal-config-4.0.14-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy spacewalk-proxy-broker-4.0.12-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy spacewalk-proxy-common-4.0.12-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy spacewalk-proxy-management-4.0.12-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy spacewalk-proxy-package-manager-4.0.12-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy spacewalk-proxy-redirect-4.0.12-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy spacewalk-proxy-salt-4.0.12-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy python3-spacewalk-backend-libs-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-backend-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-backend-app-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-backend-applet-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-backend-config-files-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-backend-config-files-common-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-backend-config-files-tool-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-backend-iss-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-backend-iss-export-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-backend-package-push-server-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-backend-server-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-backend-sql-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-backend-sql-postgresql-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-backend-tools-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-backend-xml-export-libs-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-backend-xmlrpc-4.0.22-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-base-4.0.14-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-base-minimal-4.0.14-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-base-minimal-config-4.0.14-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-html-4.0.14-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server susemanager-doc-indexes-4.0-10.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server susemanager-docs_en-4.0-10.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server susemanager-docs_en-pdf-4.0-10.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server susemanager-sync-data-4.0.12-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server susemanager-web-libs-4.0.14-3.3.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server python3-spacewalk-backend-libs-4.0.22-3.3.1 as a component of SUSE Manager Proxy Module 4.0 spacewalk-backend-4.0.22-3.3.1 as a component of SUSE Manager Proxy Module 4.0 spacewalk-base-minimal-4.0.14-3.3.1 as a component of SUSE Manager Proxy Module 4.0 spacewalk-base-minimal-config-4.0.14-3.3.1 as a component of SUSE Manager Proxy Module 4.0 spacewalk-proxy-broker-4.0.12-3.3.1 as a component of SUSE Manager Proxy Module 4.0 spacewalk-proxy-common-4.0.12-3.3.1 as a component of SUSE Manager Proxy Module 4.0 spacewalk-proxy-management-4.0.12-3.3.1 as a component of SUSE Manager Proxy Module 4.0 spacewalk-proxy-package-manager-4.0.12-3.3.1 as a component of SUSE Manager Proxy Module 4.0 spacewalk-proxy-redirect-4.0.12-3.3.1 as a component of SUSE Manager Proxy Module 4.0 spacewalk-proxy-salt-4.0.12-3.3.1 as a component of SUSE Manager Proxy Module 4.0 python3-spacewalk-backend-libs-4.0.22-3.3.1 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-4.0.22-3.3.1 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-app-4.0.22-3.3.1 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-applet-4.0.22-3.3.1 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-config-files-4.0.22-3.3.1 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-config-files-common-4.0.22-3.3.1 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-config-files-tool-4.0.22-3.3.1 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-iss-4.0.22-3.3.1 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-iss-export-4.0.22-3.3.1 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-package-push-server-4.0.22-3.3.1 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-server-4.0.22-3.3.1 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-sql-4.0.22-3.3.1 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-sql-postgresql-4.0.22-3.3.1 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-tools-4.0.22-3.3.1 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-xml-export-libs-4.0.22-3.3.1 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-xmlrpc-4.0.22-3.3.1 as a component of SUSE Manager Server Module 4.0 spacewalk-base-4.0.14-3.3.1 as a component of SUSE Manager Server Module 4.0 spacewalk-base-minimal-4.0.14-3.3.1 as a component of SUSE Manager Server Module 4.0 spacewalk-base-minimal-config-4.0.14-3.3.1 as a component of SUSE Manager Server Module 4.0 spacewalk-html-4.0.14-3.3.1 as a component of SUSE Manager Server Module 4.0 susemanager-doc-indexes-4.0-10.3.1 as a component of SUSE Manager Server Module 4.0 susemanager-docs_en-4.0-10.3.1 as a component of SUSE Manager Server Module 4.0 susemanager-docs_en-pdf-4.0-10.3.1 as a component of SUSE Manager Server Module 4.0 susemanager-sync-data-4.0.12-3.3.1 as a component of SUSE Manager Server Module 4.0 susemanager-web-libs-4.0.14-3.3.1 as a component of SUSE Manager Server Module 4.0 It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums. An attacker with a valid, but expired, authenticated set of headers could move some digits around, artificially extending the session validity without modifying the checksum. CVE-2019-10136 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:python3-spacewalk-backend-libs-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-backend-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-base-minimal-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-base-minimal-config-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-broker-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-common-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-management-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-package-manager-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-redirect-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-salt-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:python3-spacewalk-backend-libs-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-app-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-applet-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-config-files-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-config-files-common-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-config-files-tool-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-iss-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-iss-export-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-package-push-server-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-server-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-sql-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-sql-postgresql-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-tools-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-xml-export-libs-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-xmlrpc-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-base-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-base-minimal-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-base-minimal-config-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-html-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-doc-indexes-4.0-10.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-docs_en-4.0-10.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-docs_en-pdf-4.0-10.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-sync-data-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-web-libs-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:python3-spacewalk-backend-libs-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-backend-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-base-minimal-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-base-minimal-config-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-broker-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-common-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-management-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-package-manager-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-redirect-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-salt-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:python3-spacewalk-backend-libs-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-app-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-applet-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-config-files-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-config-files-common-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-config-files-tool-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-iss-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-iss-export-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-package-push-server-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-server-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-sql-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-sql-postgresql-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-tools-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-xml-export-libs-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-xmlrpc-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-base-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-base-minimal-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-base-minimal-config-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-html-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-doc-indexes-4.0-10.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-docs_en-4.0-10.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-docs_en-pdf-4.0-10.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-sync-data-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-web-libs-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:python3-spacewalk-backend-libs-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-backend-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-base-minimal-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-base-minimal-config-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-broker-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-common-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-management-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-package-manager-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-redirect-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-salt-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:python3-spacewalk-backend-libs-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-app-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-applet-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-config-files-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-config-files-common-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-config-files-tool-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-iss-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-iss-export-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-package-push-server-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-server-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-sql-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-sql-postgresql-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-tools-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-xml-export-libs-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-xmlrpc-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-base-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-base-minimal-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-base-minimal-config-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-html-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-doc-indexes-4.0-10.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-docs_en-4.0-10.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-docs_en-pdf-4.0-10.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-sync-data-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-web-libs-4.0.14-3.3.1 SUSE Manager Proxy Module 4.0:python3-spacewalk-backend-libs-4.0.22-3.3.1 SUSE Manager Proxy Module 4.0:spacewalk-backend-4.0.22-3.3.1 SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-4.0.14-3.3.1 SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-config-4.0.14-3.3.1 SUSE Manager Proxy Module 4.0:spacewalk-proxy-broker-4.0.12-3.3.1 SUSE Manager Proxy Module 4.0:spacewalk-proxy-common-4.0.12-3.3.1 SUSE Manager Proxy Module 4.0:spacewalk-proxy-management-4.0.12-3.3.1 SUSE Manager Proxy Module 4.0:spacewalk-proxy-package-manager-4.0.12-3.3.1 SUSE Manager Proxy Module 4.0:spacewalk-proxy-redirect-4.0.12-3.3.1 SUSE Manager Proxy Module 4.0:spacewalk-proxy-salt-4.0.12-3.3.1 SUSE Manager Server Module 4.0:python3-spacewalk-backend-libs-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-app-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-applet-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-config-files-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-config-files-common-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-config-files-tool-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-iss-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-iss-export-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-package-push-server-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-server-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-sql-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-sql-postgresql-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-tools-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-xml-export-libs-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-xmlrpc-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-base-4.0.14-3.3.1 SUSE Manager Server Module 4.0:spacewalk-base-minimal-4.0.14-3.3.1 SUSE Manager Server Module 4.0:spacewalk-base-minimal-config-4.0.14-3.3.1 SUSE Manager Server Module 4.0:spacewalk-html-4.0.14-3.3.1 SUSE Manager Server Module 4.0:susemanager-doc-indexes-4.0-10.3.1 SUSE Manager Server Module 4.0:susemanager-docs_en-4.0-10.3.1 SUSE Manager Server Module 4.0:susemanager-docs_en-pdf-4.0-10.3.1 SUSE Manager Server Module 4.0:susemanager-sync-data-4.0.12-3.3.1 SUSE Manager Server Module 4.0:susemanager-web-libs-4.0.14-3.3.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191789-1/ https://www.suse.com/security/cve/CVE-2019-10136.html CVE-2019-10136 https://bugzilla.suse.com/1136480 SUSE Bug 1136480 A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached client tokens. A remote, unauthenticated attacker could use this flaw to test the existence of arbitrary files, if they have access to the proxy's filesystem, or can execute arbitrary code in the context of the httpd process. CVE-2019-10137 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:python3-spacewalk-backend-libs-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-backend-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-base-minimal-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-base-minimal-config-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-broker-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-common-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-management-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-package-manager-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-redirect-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-salt-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:python3-spacewalk-backend-libs-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-app-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-applet-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-config-files-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-config-files-common-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-config-files-tool-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-iss-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-iss-export-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-package-push-server-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-server-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-sql-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-sql-postgresql-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-tools-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-xml-export-libs-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-backend-xmlrpc-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-base-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-base-minimal-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-base-minimal-config-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-html-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-doc-indexes-4.0-10.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-docs_en-4.0-10.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-docs_en-pdf-4.0-10.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-sync-data-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-web-libs-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:python3-spacewalk-backend-libs-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-backend-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-base-minimal-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-base-minimal-config-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-broker-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-common-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-management-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-package-manager-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-redirect-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-salt-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:python3-spacewalk-backend-libs-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-app-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-applet-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-config-files-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-config-files-common-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-config-files-tool-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-iss-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-iss-export-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-package-push-server-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-server-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-sql-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-sql-postgresql-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-tools-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-xml-export-libs-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-backend-xmlrpc-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-base-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-base-minimal-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-base-minimal-config-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-html-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-doc-indexes-4.0-10.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-docs_en-4.0-10.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-docs_en-pdf-4.0-10.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-sync-data-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-web-libs-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:python3-spacewalk-backend-libs-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-backend-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-base-minimal-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-base-minimal-config-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-broker-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-common-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-management-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-package-manager-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-redirect-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-salt-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:python3-spacewalk-backend-libs-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-app-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-applet-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-config-files-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-config-files-common-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-config-files-tool-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-iss-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-iss-export-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-package-push-server-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-server-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-sql-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-sql-postgresql-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-tools-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-xml-export-libs-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-backend-xmlrpc-4.0.22-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-base-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-base-minimal-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-base-minimal-config-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-html-4.0.14-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-doc-indexes-4.0-10.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-docs_en-4.0-10.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-docs_en-pdf-4.0-10.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-sync-data-4.0.12-3.3.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-web-libs-4.0.14-3.3.1 SUSE Manager Proxy Module 4.0:python3-spacewalk-backend-libs-4.0.22-3.3.1 SUSE Manager Proxy Module 4.0:spacewalk-backend-4.0.22-3.3.1 SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-4.0.14-3.3.1 SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-config-4.0.14-3.3.1 SUSE Manager Proxy Module 4.0:spacewalk-proxy-broker-4.0.12-3.3.1 SUSE Manager Proxy Module 4.0:spacewalk-proxy-common-4.0.12-3.3.1 SUSE Manager Proxy Module 4.0:spacewalk-proxy-management-4.0.12-3.3.1 SUSE Manager Proxy Module 4.0:spacewalk-proxy-package-manager-4.0.12-3.3.1 SUSE Manager Proxy Module 4.0:spacewalk-proxy-redirect-4.0.12-3.3.1 SUSE Manager Proxy Module 4.0:spacewalk-proxy-salt-4.0.12-3.3.1 SUSE Manager Server Module 4.0:python3-spacewalk-backend-libs-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-app-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-applet-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-config-files-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-config-files-common-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-config-files-tool-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-iss-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-iss-export-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-package-push-server-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-server-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-sql-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-sql-postgresql-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-tools-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-xml-export-libs-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-backend-xmlrpc-4.0.22-3.3.1 SUSE Manager Server Module 4.0:spacewalk-base-4.0.14-3.3.1 SUSE Manager Server Module 4.0:spacewalk-base-minimal-4.0.14-3.3.1 SUSE Manager Server Module 4.0:spacewalk-base-minimal-config-4.0.14-3.3.1 SUSE Manager Server Module 4.0:spacewalk-html-4.0.14-3.3.1 SUSE Manager Server Module 4.0:susemanager-doc-indexes-4.0-10.3.1 SUSE Manager Server Module 4.0:susemanager-docs_en-4.0-10.3.1 SUSE Manager Server Module 4.0:susemanager-docs_en-pdf-4.0-10.3.1 SUSE Manager Server Module 4.0:susemanager-sync-data-4.0.12-3.3.1 SUSE Manager Server Module 4.0:susemanager-web-libs-4.0.14-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191789-1/ https://www.suse.com/security/cve/CVE-2019-10137.html CVE-2019-10137 https://bugzilla.suse.com/1136476 SUSE Bug 1136476