Security update for SUSE Manager Server 4.0 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:2650-1 Final 1 1 2020-09-16T12:24:27Z current 2020-09-16T12:24:27Z 2020-09-16T12:24:27Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for SUSE Manager Server 4.0 This update fixes the following issues: hibernate5: - Address CVE-2019-14900 (bsc#1172079) image-sync-formula: - Allow image-sync state on regular minion. Image sync state requires branch-network pillars to get the directory where to sync images. Use default `/srv/saltboot` if that pillar is missing so image-sync can be applied on non branch minions as well. openvpn-formula: - Add hint that ssl certs must be on system (bsc#1172279) prometheus-exporters-formula: - Bugfix: Handle exporters proxy for unsupported distros (bsc#1175555) - Add support for exporters proxy (exporter_exporter) - Update the apache exporter config file for Debian salt-netapi-client: - Refresh authentication module list to newer Salt versions saltboot-formula: - Better fix for rounding errors (bsc#1136857) spacecmd: - Python3 fixes for errata in spacecmd (bsc#1169664) - Python3 fix for sorted usage (bsc#1167907) - Fix softwarechannel_listlatestpackages throwing error on empty channels (bsc#1175889) - Fix escaping of package names (bsc#1171281) spacewalk-admin: - Use the Salt API in authenticated and encrypted form (bsc#1175884, CVE-2020-8028) spacewalk-certs-tools: - Add option --nostricthostkeychecking to spacewalk-ssh-push-init - Strip SSL Certificate Common Name after 63 Characters (bsc#1173535) spacewalk-java: - Use the Salt API in authenticated and encrypted form (bsc#1175884, CVE-2020-8028) - Fix EntityExistsException on migration from traditional to salt minion via proxy (bsc#1175556) - Use media.1/products from media when not specified different (bsc#1175558) - Fix: use quiet API method when using spacewalk-common-channels (bsc#1175529) - Fix alignment on icon on entitlement page - Reset the server path on minion registration (bsc#1174254) - Upgrade jQuery and adapt the code - CVE-2020-11022 (bsc#1172831) - Fix error when rolling back a system to a snapshot (bsc#1173997) - Avoid deadlock when syncing channels and registering minions at the same time (bsc#1173566) - Provide comps.xml and modules.yaml when using onlinerepo for kickstart - Set CPU and memory info for virtual instances (bsc#1170244) - Change system list header text to something better (bsc#1173982) spacewalk-setup: - Use the Salt API in authenticated and encrypted form (bsc#1175884, CVE-2020-8028) spacewalk-utils: - Avoid exceptions on the logs when looking for channels that do not exist (bsc#1175529) spacewalk-web: - Fix login page after jQuery upgrade (bsc#1175224) - Upgrade jQuery and adapt the code - CVE-2020-11022 (bsc#1172831) - Warn when a system is in multiple groups that configure the same formula in the system formula's UI (bsc#1173554) susemanager: - Define bootstrap repo data for SUSE Manager Proxies (bsc#1174470) susemanager-frontend-libs: - Upgrade jquery to 3.5.1 - CVE-2020-11022 (bsc#1172831) susemanager-schema: - Prevent a deadlock error involving delete_server and update_needed_cache (bsc#1173073) susemanager-sls: - Fix the dnf plugin to add the token to the HTTP header (bsc#1175724) - Fix reporting of missing products in product.all_installed (bsc#1165829) - Require PyYAML version >= 5.1 - Get redhat-release only when it is not a symlink - Fix: supply a dnf base when dealing w/repos (bsc#1172504) - Fix: autorefresh in repos is zypper-only susemanager-sync-data: - Remove version from centos and oracle linux identifier (bsc#1173584) virtualization-host-formula: - Update to version 0.5 - Ensure kernel-default and libvirt-python3 are installed - Set bridge network as default - Fix conditionals (bsc#1175791) How to apply this update: 1. Log in as root user to the SUSE Manager server. 2. Stop the Spacewalk service: spacewalk-service stop 3. Apply the patch using either zypper patch or YaST Online Update. 4. Upgrade the database schema: spacewalk-schema-upgrade 5. Start the Spacewalk service: spacewalk-service start The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy-2020-2650,Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server-2020-2650,Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy-2020-2650,Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server-2020-2650,Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy-2020-2650,Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server-2020-2650,SUSE-2020-2650,SUSE-SLE-Module-SUSE-Manager-Proxy-4.0-2020-2650,SUSE-SLE-Module-SUSE-Manager-Server-4.0-2020-2650 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20202650-1/ Link for SUSE-SU-2020:2650-1 https://lists.suse.com/pipermail/sle-security-updates/2020-September/007435.html E-Mail link for SUSE-SU-2020:2650-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1136857 SUSE Bug 1136857 https://bugzilla.suse.com/1165829 SUSE Bug 1165829 https://bugzilla.suse.com/1167907 SUSE Bug 1167907 https://bugzilla.suse.com/1169664 SUSE Bug 1169664 https://bugzilla.suse.com/1170244 SUSE Bug 1170244 https://bugzilla.suse.com/1171281 SUSE Bug 1171281 https://bugzilla.suse.com/1172079 SUSE Bug 1172079 https://bugzilla.suse.com/1172279 SUSE Bug 1172279 https://bugzilla.suse.com/1172504 SUSE Bug 1172504 https://bugzilla.suse.com/1172831 SUSE Bug 1172831 https://bugzilla.suse.com/1173073 SUSE Bug 1173073 https://bugzilla.suse.com/1173535 SUSE Bug 1173535 https://bugzilla.suse.com/1173554 SUSE Bug 1173554 https://bugzilla.suse.com/1173566 SUSE Bug 1173566 https://bugzilla.suse.com/1173584 SUSE Bug 1173584 https://bugzilla.suse.com/1173982 SUSE Bug 1173982 https://bugzilla.suse.com/1173997 SUSE Bug 1173997 https://bugzilla.suse.com/1174254 SUSE Bug 1174254 https://bugzilla.suse.com/1174470 SUSE Bug 1174470 https://bugzilla.suse.com/1175224 SUSE Bug 1175224 https://bugzilla.suse.com/1175529 SUSE Bug 1175529 https://bugzilla.suse.com/1175555 SUSE Bug 1175555 https://bugzilla.suse.com/1175556 SUSE Bug 1175556 https://bugzilla.suse.com/1175558 SUSE Bug 1175558 https://bugzilla.suse.com/1175724 SUSE Bug 1175724 https://bugzilla.suse.com/1175791 SUSE Bug 1175791 https://bugzilla.suse.com/1175884 SUSE Bug 1175884 https://bugzilla.suse.com/1175889 SUSE Bug 1175889 https://www.suse.com/security/cve/CVE-2019-14900/ SUSE CVE CVE-2019-14900 page https://www.suse.com/security/cve/CVE-2020-11022/ SUSE CVE CVE-2020-11022 page https://www.suse.com/security/cve/CVE-2020-8028/ SUSE CVE CVE-2020-8028 page Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server SUSE Manager Proxy Module 4.0 SUSE Manager Server Module 4.0 python3-spacewalk-certs-tools-4.0.17-3.21.3 spacewalk-base-minimal-4.0.23-3.30.3 spacewalk-base-minimal-config-4.0.23-3.30.3 spacewalk-certs-tools-4.0.17-3.21.3 spacewalk-proxy-broker-4.0.14-3.10.3 spacewalk-proxy-common-4.0.14-3.10.3 spacewalk-proxy-management-4.0.14-3.10.3 spacewalk-proxy-package-manager-4.0.14-3.10.3 spacewalk-proxy-redirect-4.0.14-3.10.3 spacewalk-proxy-salt-4.0.14-3.10.3 hibernate5-5.3.7-4.3.2 openvpn-formula-0.1.1-4.6.2 salt-netapi-client-0.17.0-4.6.3 spacecmd-4.0.20-3.19.2 spacewalk-admin-4.0.11-3.12.1 spacewalk-base-4.0.23-3.30.3 spacewalk-html-4.0.23-3.30.3 spacewalk-java-4.0.37-3.39.1 spacewalk-java-config-4.0.37-3.39.1 spacewalk-java-lib-4.0.37-3.39.1 spacewalk-java-postgresql-4.0.37-3.39.1 spacewalk-setup-4.0.14-3.14.1 spacewalk-taskomatic-4.0.37-3.39.1 susemanager-4.0.28-3.36.3 susemanager-frontend-libs-4.0.2-4.3.2 susemanager-schema-4.0.22-3.29.2 susemanager-sls-4.0.29-3.31.3 susemanager-sync-data-4.0.18-3.24.2 susemanager-tools-4.0.28-3.36.3 susemanager-web-libs-4.0.23-3.30.3 hibernate5-kit-06f89f5f40a0b95b08f814879026e8ce444876e5-3.3.1 image-sync-formula-0.1.1595937550.0285244-3.20.2 prometheus-exporters-formula-0.7.1-3.10.2 python2-spacewalk-certs-tools-4.0.17-3.21.3 saltboot-formula-0.1.1595937550.0285244-3.19.2 spacewalk-dobby-4.0.23-3.30.3 spacewalk-java-apidoc-sources-4.0.37-3.39.1 spacewalk-utils-4.0.18-3.21.3 susemanager-frontend-libs-devel-4.0.2-4.3.2 susemanager-schema-sanity-4.0.22-3.29.2 virtualization-host-formula-0.5-4.12.3 python3-spacewalk-certs-tools-4.0.17-3.21.3 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy spacewalk-base-minimal-4.0.23-3.30.3 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy spacewalk-base-minimal-config-4.0.23-3.30.3 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy spacewalk-certs-tools-4.0.17-3.21.3 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy spacewalk-proxy-broker-4.0.14-3.10.3 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy spacewalk-proxy-common-4.0.14-3.10.3 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy spacewalk-proxy-management-4.0.14-3.10.3 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy spacewalk-proxy-package-manager-4.0.14-3.10.3 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy spacewalk-proxy-redirect-4.0.14-3.10.3 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy spacewalk-proxy-salt-4.0.14-3.10.3 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy hibernate5-5.3.7-4.3.2 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server openvpn-formula-0.1.1-4.6.2 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server python3-spacewalk-certs-tools-4.0.17-3.21.3 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server salt-netapi-client-0.17.0-4.6.3 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacecmd-4.0.20-3.19.2 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-admin-4.0.11-3.12.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-base-4.0.23-3.30.3 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-base-minimal-4.0.23-3.30.3 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-base-minimal-config-4.0.23-3.30.3 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-certs-tools-4.0.17-3.21.3 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-html-4.0.23-3.30.3 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-java-4.0.37-3.39.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-java-config-4.0.37-3.39.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-java-lib-4.0.37-3.39.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-java-postgresql-4.0.37-3.39.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-setup-4.0.14-3.14.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server spacewalk-taskomatic-4.0.37-3.39.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server susemanager-4.0.28-3.36.3 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server susemanager-frontend-libs-4.0.2-4.3.2 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server susemanager-schema-4.0.22-3.29.2 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server susemanager-sls-4.0.29-3.31.3 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server susemanager-sync-data-4.0.18-3.24.2 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server susemanager-tools-4.0.28-3.36.3 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server susemanager-web-libs-4.0.23-3.30.3 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server python3-spacewalk-certs-tools-4.0.17-3.21.3 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy spacewalk-base-minimal-4.0.23-3.30.3 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy spacewalk-base-minimal-config-4.0.23-3.30.3 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy spacewalk-certs-tools-4.0.17-3.21.3 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy spacewalk-proxy-broker-4.0.14-3.10.3 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy spacewalk-proxy-common-4.0.14-3.10.3 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy spacewalk-proxy-management-4.0.14-3.10.3 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy spacewalk-proxy-package-manager-4.0.14-3.10.3 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy spacewalk-proxy-redirect-4.0.14-3.10.3 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy spacewalk-proxy-salt-4.0.14-3.10.3 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy hibernate5-5.3.7-4.3.2 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server openvpn-formula-0.1.1-4.6.2 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server python3-spacewalk-certs-tools-4.0.17-3.21.3 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server salt-netapi-client-0.17.0-4.6.3 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacecmd-4.0.20-3.19.2 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-admin-4.0.11-3.12.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-base-4.0.23-3.30.3 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-base-minimal-4.0.23-3.30.3 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-base-minimal-config-4.0.23-3.30.3 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-certs-tools-4.0.17-3.21.3 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-html-4.0.23-3.30.3 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-java-4.0.37-3.39.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-java-config-4.0.37-3.39.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-java-lib-4.0.37-3.39.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-java-postgresql-4.0.37-3.39.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-setup-4.0.14-3.14.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server spacewalk-taskomatic-4.0.37-3.39.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server susemanager-4.0.28-3.36.3 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server susemanager-frontend-libs-4.0.2-4.3.2 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server susemanager-schema-4.0.22-3.29.2 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server susemanager-sls-4.0.29-3.31.3 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server susemanager-sync-data-4.0.18-3.24.2 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server susemanager-tools-4.0.28-3.36.3 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server susemanager-web-libs-4.0.23-3.30.3 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server python3-spacewalk-certs-tools-4.0.17-3.21.3 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy spacewalk-base-minimal-4.0.23-3.30.3 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy spacewalk-base-minimal-config-4.0.23-3.30.3 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy spacewalk-certs-tools-4.0.17-3.21.3 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy spacewalk-proxy-broker-4.0.14-3.10.3 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy spacewalk-proxy-common-4.0.14-3.10.3 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy spacewalk-proxy-management-4.0.14-3.10.3 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy spacewalk-proxy-package-manager-4.0.14-3.10.3 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy spacewalk-proxy-redirect-4.0.14-3.10.3 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy spacewalk-proxy-salt-4.0.14-3.10.3 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy hibernate5-5.3.7-4.3.2 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server openvpn-formula-0.1.1-4.6.2 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server python3-spacewalk-certs-tools-4.0.17-3.21.3 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server salt-netapi-client-0.17.0-4.6.3 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacecmd-4.0.20-3.19.2 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-admin-4.0.11-3.12.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-base-4.0.23-3.30.3 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-base-minimal-4.0.23-3.30.3 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-base-minimal-config-4.0.23-3.30.3 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-certs-tools-4.0.17-3.21.3 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-html-4.0.23-3.30.3 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-java-4.0.37-3.39.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-java-config-4.0.37-3.39.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-java-lib-4.0.37-3.39.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-java-postgresql-4.0.37-3.39.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-setup-4.0.14-3.14.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server spacewalk-taskomatic-4.0.37-3.39.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server susemanager-4.0.28-3.36.3 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server susemanager-frontend-libs-4.0.2-4.3.2 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server susemanager-schema-4.0.22-3.29.2 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server susemanager-sls-4.0.29-3.31.3 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server susemanager-sync-data-4.0.18-3.24.2 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server susemanager-tools-4.0.28-3.36.3 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server susemanager-web-libs-4.0.23-3.30.3 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server python3-spacewalk-certs-tools-4.0.17-3.21.3 as a component of SUSE Manager Proxy Module 4.0 spacecmd-4.0.20-3.19.2 as a component of SUSE Manager Proxy Module 4.0 spacewalk-base-minimal-4.0.23-3.30.3 as a component of SUSE Manager Proxy Module 4.0 spacewalk-base-minimal-config-4.0.23-3.30.3 as a component of SUSE Manager Proxy Module 4.0 spacewalk-certs-tools-4.0.17-3.21.3 as a component of SUSE Manager Proxy Module 4.0 spacewalk-proxy-broker-4.0.14-3.10.3 as a component of SUSE Manager Proxy Module 4.0 spacewalk-proxy-common-4.0.14-3.10.3 as a component of SUSE Manager Proxy Module 4.0 spacewalk-proxy-management-4.0.14-3.10.3 as a component of SUSE Manager Proxy Module 4.0 spacewalk-proxy-package-manager-4.0.14-3.10.3 as a component of SUSE Manager Proxy Module 4.0 spacewalk-proxy-redirect-4.0.14-3.10.3 as a component of SUSE Manager Proxy Module 4.0 spacewalk-proxy-salt-4.0.14-3.10.3 as a component of SUSE Manager Proxy Module 4.0 hibernate5-5.3.7-4.3.2 as a component of SUSE Manager Server Module 4.0 image-sync-formula-0.1.1595937550.0285244-3.20.2 as a component of SUSE Manager Server Module 4.0 openvpn-formula-0.1.1-4.6.2 as a component of SUSE Manager Server Module 4.0 prometheus-exporters-formula-0.7.1-3.10.2 as a component of SUSE Manager Server Module 4.0 python3-spacewalk-certs-tools-4.0.17-3.21.3 as a component of SUSE Manager Server Module 4.0 salt-netapi-client-0.17.0-4.6.3 as a component of SUSE Manager Server Module 4.0 saltboot-formula-0.1.1595937550.0285244-3.19.2 as a component of SUSE Manager Server Module 4.0 spacecmd-4.0.20-3.19.2 as a component of SUSE Manager Server Module 4.0 spacewalk-admin-4.0.11-3.12.1 as a component of SUSE Manager Server Module 4.0 spacewalk-base-4.0.23-3.30.3 as a component of SUSE Manager Server Module 4.0 spacewalk-base-minimal-4.0.23-3.30.3 as a component of SUSE Manager Server Module 4.0 spacewalk-base-minimal-config-4.0.23-3.30.3 as a component of SUSE Manager Server Module 4.0 spacewalk-certs-tools-4.0.17-3.21.3 as a component of SUSE Manager Server Module 4.0 spacewalk-html-4.0.23-3.30.3 as a component of SUSE Manager Server Module 4.0 spacewalk-java-4.0.37-3.39.1 as a component of SUSE Manager Server Module 4.0 spacewalk-java-config-4.0.37-3.39.1 as a component of SUSE Manager Server Module 4.0 spacewalk-java-lib-4.0.37-3.39.1 as a component of SUSE Manager Server Module 4.0 spacewalk-java-postgresql-4.0.37-3.39.1 as a component of SUSE Manager Server Module 4.0 spacewalk-setup-4.0.14-3.14.1 as a component of SUSE Manager Server Module 4.0 spacewalk-taskomatic-4.0.37-3.39.1 as a component of SUSE Manager Server Module 4.0 spacewalk-utils-4.0.18-3.21.3 as a component of SUSE Manager Server Module 4.0 susemanager-4.0.28-3.36.3 as a component of SUSE Manager Server Module 4.0 susemanager-frontend-libs-4.0.2-4.3.2 as a component of SUSE Manager Server Module 4.0 susemanager-schema-4.0.22-3.29.2 as a component of SUSE Manager Server Module 4.0 susemanager-sls-4.0.29-3.31.3 as a component of SUSE Manager Server Module 4.0 susemanager-sync-data-4.0.18-3.24.2 as a component of SUSE Manager Server Module 4.0 susemanager-tools-4.0.28-3.36.3 as a component of SUSE Manager Server Module 4.0 susemanager-web-libs-4.0.23-3.30.3 as a component of SUSE Manager Server Module 4.0 virtualization-host-formula-0.5-4.12.3 as a component of SUSE Manager Server Module 4.0 A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. CVE-2019-14900 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:python3-spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-base-minimal-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-base-minimal-config-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-broker-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-common-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-management-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-package-manager-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-redirect-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-salt-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:hibernate5-5.3.7-4.3.2 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:openvpn-formula-0.1.1-4.6.2 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:python3-spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:salt-netapi-client-0.17.0-4.6.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacecmd-4.0.20-3.19.2 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-admin-4.0.11-3.12.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-base-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-base-minimal-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-base-minimal-config-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-html-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-java-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-java-config-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-java-lib-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-java-postgresql-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-setup-4.0.14-3.14.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-taskomatic-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-4.0.28-3.36.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-frontend-libs-4.0.2-4.3.2 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-schema-4.0.22-3.29.2 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-sls-4.0.29-3.31.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-sync-data-4.0.18-3.24.2 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-tools-4.0.28-3.36.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-web-libs-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:python3-spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-base-minimal-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-base-minimal-config-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-broker-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-common-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-management-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-package-manager-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-redirect-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-salt-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:hibernate5-5.3.7-4.3.2 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:openvpn-formula-0.1.1-4.6.2 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:python3-spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:salt-netapi-client-0.17.0-4.6.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacecmd-4.0.20-3.19.2 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-admin-4.0.11-3.12.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-base-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-base-minimal-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-base-minimal-config-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-html-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-java-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-java-config-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-java-lib-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-java-postgresql-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-setup-4.0.14-3.14.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-taskomatic-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-4.0.28-3.36.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-frontend-libs-4.0.2-4.3.2 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-schema-4.0.22-3.29.2 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-sls-4.0.29-3.31.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-sync-data-4.0.18-3.24.2 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-tools-4.0.28-3.36.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-web-libs-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:python3-spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-base-minimal-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-base-minimal-config-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-broker-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-common-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-management-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-package-manager-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-redirect-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-salt-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:hibernate5-5.3.7-4.3.2 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:openvpn-formula-0.1.1-4.6.2 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:python3-spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:salt-netapi-client-0.17.0-4.6.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacecmd-4.0.20-3.19.2 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-admin-4.0.11-3.12.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-base-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-base-minimal-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-base-minimal-config-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-html-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-java-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-java-config-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-java-lib-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-java-postgresql-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-setup-4.0.14-3.14.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-taskomatic-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-4.0.28-3.36.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-frontend-libs-4.0.2-4.3.2 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-schema-4.0.22-3.29.2 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-sls-4.0.29-3.31.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-sync-data-4.0.18-3.24.2 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-tools-4.0.28-3.36.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-web-libs-4.0.23-3.30.3 SUSE Manager Proxy Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3 SUSE Manager Proxy Module 4.0:spacecmd-4.0.20-3.19.2 SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3 SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3 SUSE Manager Proxy Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3 SUSE Manager Proxy Module 4.0:spacewalk-proxy-broker-4.0.14-3.10.3 SUSE Manager Proxy Module 4.0:spacewalk-proxy-common-4.0.14-3.10.3 SUSE Manager Proxy Module 4.0:spacewalk-proxy-management-4.0.14-3.10.3 SUSE Manager Proxy Module 4.0:spacewalk-proxy-package-manager-4.0.14-3.10.3 SUSE Manager Proxy Module 4.0:spacewalk-proxy-redirect-4.0.14-3.10.3 SUSE Manager Proxy Module 4.0:spacewalk-proxy-salt-4.0.14-3.10.3 SUSE Manager Server Module 4.0:hibernate5-5.3.7-4.3.2 SUSE Manager Server Module 4.0:image-sync-formula-0.1.1595937550.0285244-3.20.2 SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2 SUSE Manager Server Module 4.0:prometheus-exporters-formula-0.7.1-3.10.2 SUSE Manager Server Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3 SUSE Manager Server Module 4.0:salt-netapi-client-0.17.0-4.6.3 SUSE Manager Server Module 4.0:saltboot-formula-0.1.1595937550.0285244-3.19.2 SUSE Manager Server Module 4.0:spacecmd-4.0.20-3.19.2 SUSE Manager Server Module 4.0:spacewalk-admin-4.0.11-3.12.1 SUSE Manager Server Module 4.0:spacewalk-base-4.0.23-3.30.3 SUSE Manager Server Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3 SUSE Manager Server Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3 SUSE Manager Server Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3 SUSE Manager Server Module 4.0:spacewalk-html-4.0.23-3.30.3 SUSE Manager Server Module 4.0:spacewalk-java-4.0.37-3.39.1 SUSE Manager Server Module 4.0:spacewalk-java-config-4.0.37-3.39.1 SUSE Manager Server Module 4.0:spacewalk-java-lib-4.0.37-3.39.1 SUSE Manager Server Module 4.0:spacewalk-java-postgresql-4.0.37-3.39.1 SUSE Manager Server Module 4.0:spacewalk-setup-4.0.14-3.14.1 SUSE Manager Server Module 4.0:spacewalk-taskomatic-4.0.37-3.39.1 SUSE Manager Server Module 4.0:spacewalk-utils-4.0.18-3.21.3 SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3 SUSE Manager Server Module 4.0:susemanager-frontend-libs-4.0.2-4.3.2 SUSE Manager Server Module 4.0:susemanager-schema-4.0.22-3.29.2 SUSE Manager Server Module 4.0:susemanager-sls-4.0.29-3.31.3 SUSE Manager Server Module 4.0:susemanager-sync-data-4.0.18-3.24.2 SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3 SUSE Manager Server Module 4.0:susemanager-web-libs-4.0.23-3.30.3 SUSE Manager Server Module 4.0:virtualization-host-formula-0.5-4.12.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202650-1/ https://www.suse.com/security/cve/CVE-2019-14900.html CVE-2019-14900 https://bugzilla.suse.com/1172079 SUSE Bug 1172079 In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0. CVE-2020-11022 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:python3-spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-base-minimal-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-base-minimal-config-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-broker-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-common-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-management-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-package-manager-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-redirect-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-salt-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:hibernate5-5.3.7-4.3.2 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:openvpn-formula-0.1.1-4.6.2 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:python3-spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:salt-netapi-client-0.17.0-4.6.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacecmd-4.0.20-3.19.2 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-admin-4.0.11-3.12.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-base-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-base-minimal-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-base-minimal-config-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-html-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-java-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-java-config-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-java-lib-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-java-postgresql-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-setup-4.0.14-3.14.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-taskomatic-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-4.0.28-3.36.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-frontend-libs-4.0.2-4.3.2 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-schema-4.0.22-3.29.2 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-sls-4.0.29-3.31.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-sync-data-4.0.18-3.24.2 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-tools-4.0.28-3.36.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-web-libs-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:python3-spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-base-minimal-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-base-minimal-config-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-broker-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-common-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-management-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-package-manager-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-redirect-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-salt-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:hibernate5-5.3.7-4.3.2 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:openvpn-formula-0.1.1-4.6.2 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:python3-spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:salt-netapi-client-0.17.0-4.6.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacecmd-4.0.20-3.19.2 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-admin-4.0.11-3.12.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-base-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-base-minimal-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-base-minimal-config-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-html-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-java-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-java-config-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-java-lib-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-java-postgresql-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-setup-4.0.14-3.14.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-taskomatic-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-4.0.28-3.36.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-frontend-libs-4.0.2-4.3.2 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-schema-4.0.22-3.29.2 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-sls-4.0.29-3.31.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-sync-data-4.0.18-3.24.2 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-tools-4.0.28-3.36.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-web-libs-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:python3-spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-base-minimal-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-base-minimal-config-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-broker-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-common-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-management-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-package-manager-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-redirect-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-salt-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:hibernate5-5.3.7-4.3.2 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:openvpn-formula-0.1.1-4.6.2 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:python3-spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:salt-netapi-client-0.17.0-4.6.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacecmd-4.0.20-3.19.2 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-admin-4.0.11-3.12.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-base-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-base-minimal-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-base-minimal-config-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-html-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-java-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-java-config-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-java-lib-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-java-postgresql-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-setup-4.0.14-3.14.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-taskomatic-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-4.0.28-3.36.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-frontend-libs-4.0.2-4.3.2 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-schema-4.0.22-3.29.2 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-sls-4.0.29-3.31.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-sync-data-4.0.18-3.24.2 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-tools-4.0.28-3.36.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-web-libs-4.0.23-3.30.3 SUSE Manager Proxy Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3 SUSE Manager Proxy Module 4.0:spacecmd-4.0.20-3.19.2 SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3 SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3 SUSE Manager Proxy Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3 SUSE Manager Proxy Module 4.0:spacewalk-proxy-broker-4.0.14-3.10.3 SUSE Manager Proxy Module 4.0:spacewalk-proxy-common-4.0.14-3.10.3 SUSE Manager Proxy Module 4.0:spacewalk-proxy-management-4.0.14-3.10.3 SUSE Manager Proxy Module 4.0:spacewalk-proxy-package-manager-4.0.14-3.10.3 SUSE Manager Proxy Module 4.0:spacewalk-proxy-redirect-4.0.14-3.10.3 SUSE Manager Proxy Module 4.0:spacewalk-proxy-salt-4.0.14-3.10.3 SUSE Manager Server Module 4.0:hibernate5-5.3.7-4.3.2 SUSE Manager Server Module 4.0:image-sync-formula-0.1.1595937550.0285244-3.20.2 SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2 SUSE Manager Server Module 4.0:prometheus-exporters-formula-0.7.1-3.10.2 SUSE Manager Server Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3 SUSE Manager Server Module 4.0:salt-netapi-client-0.17.0-4.6.3 SUSE Manager Server Module 4.0:saltboot-formula-0.1.1595937550.0285244-3.19.2 SUSE Manager Server Module 4.0:spacecmd-4.0.20-3.19.2 SUSE Manager Server Module 4.0:spacewalk-admin-4.0.11-3.12.1 SUSE Manager Server Module 4.0:spacewalk-base-4.0.23-3.30.3 SUSE Manager Server Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3 SUSE Manager Server Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3 SUSE Manager Server Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3 SUSE Manager Server Module 4.0:spacewalk-html-4.0.23-3.30.3 SUSE Manager Server Module 4.0:spacewalk-java-4.0.37-3.39.1 SUSE Manager Server Module 4.0:spacewalk-java-config-4.0.37-3.39.1 SUSE Manager Server Module 4.0:spacewalk-java-lib-4.0.37-3.39.1 SUSE Manager Server Module 4.0:spacewalk-java-postgresql-4.0.37-3.39.1 SUSE Manager Server Module 4.0:spacewalk-setup-4.0.14-3.14.1 SUSE Manager Server Module 4.0:spacewalk-taskomatic-4.0.37-3.39.1 SUSE Manager Server Module 4.0:spacewalk-utils-4.0.18-3.21.3 SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3 SUSE Manager Server Module 4.0:susemanager-frontend-libs-4.0.2-4.3.2 SUSE Manager Server Module 4.0:susemanager-schema-4.0.22-3.29.2 SUSE Manager Server Module 4.0:susemanager-sls-4.0.29-3.31.3 SUSE Manager Server Module 4.0:susemanager-sync-data-4.0.18-3.24.2 SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3 SUSE Manager Server Module 4.0:susemanager-web-libs-4.0.23-3.30.3 SUSE Manager Server Module 4.0:virtualization-host-formula-0.5-4.12.3 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202650-1/ https://www.suse.com/security/cve/CVE-2020-11022.html CVE-2020-11022 https://bugzilla.suse.com/1173090 SUSE Bug 1173090 https://bugzilla.suse.com/1178434 SUSE Bug 1178434 https://bugzilla.suse.com/1190663 SUSE Bug 1190663 A Improper Access Control vulnerability in the configuration of salt of SUSE Linux Enterprise Module for SUSE Manager Server 4.1, SUSE Manager Proxy 4.0, SUSE Manager Retail Branch Server 4.0, SUSE Manager Server 3.2, SUSE Manager Server 4.0 allows local users to escalate to root on every system managed by SUSE manager. On the managing node itself code can be executed as user salt, potentially allowing for escalation to root there. This issue affects: SUSE Linux Enterprise Module for SUSE Manager Server 4.1 google-gson versions prior to 2.8.5-3.4.3, httpcomponents-client-4.5.6-3.4.2, httpcomponents-. SUSE Manager Proxy 4.0 release-notes-susemanager-proxy versions prior to 4.0.9-0.16.38.1. SUSE Manager Retail Branch Server 4.0 release-notes-susemanager-proxy versions prior to 4.0.9-0.16.38.1. SUSE Manager Server 3.2 salt-netapi-client versions prior to 0.16.0-4.14.1, spacewalk-. SUSE Manager Server 4.0 release-notes-susemanager versions prior to 4.0.9-3.54.1. CVE-2020-8028 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:python3-spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-base-minimal-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-base-minimal-config-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-broker-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-common-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-management-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-package-manager-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-redirect-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:spacewalk-proxy-salt-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:hibernate5-5.3.7-4.3.2 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:openvpn-formula-0.1.1-4.6.2 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:python3-spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:salt-netapi-client-0.17.0-4.6.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacecmd-4.0.20-3.19.2 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-admin-4.0.11-3.12.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-base-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-base-minimal-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-base-minimal-config-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-html-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-java-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-java-config-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-java-lib-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-java-postgresql-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-setup-4.0.14-3.14.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:spacewalk-taskomatic-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-4.0.28-3.36.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-frontend-libs-4.0.2-4.3.2 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-schema-4.0.22-3.29.2 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-sls-4.0.29-3.31.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-sync-data-4.0.18-3.24.2 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-tools-4.0.28-3.36.3 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:susemanager-web-libs-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:python3-spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-base-minimal-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-base-minimal-config-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-broker-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-common-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-management-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-package-manager-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-redirect-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:spacewalk-proxy-salt-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:hibernate5-5.3.7-4.3.2 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:openvpn-formula-0.1.1-4.6.2 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:python3-spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:salt-netapi-client-0.17.0-4.6.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacecmd-4.0.20-3.19.2 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-admin-4.0.11-3.12.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-base-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-base-minimal-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-base-minimal-config-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-html-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-java-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-java-config-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-java-lib-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-java-postgresql-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-setup-4.0.14-3.14.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:spacewalk-taskomatic-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-4.0.28-3.36.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-frontend-libs-4.0.2-4.3.2 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-schema-4.0.22-3.29.2 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-sls-4.0.29-3.31.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-sync-data-4.0.18-3.24.2 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-tools-4.0.28-3.36.3 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:susemanager-web-libs-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:python3-spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-base-minimal-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-base-minimal-config-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-broker-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-common-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-management-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-package-manager-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-redirect-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:spacewalk-proxy-salt-4.0.14-3.10.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:hibernate5-5.3.7-4.3.2 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:openvpn-formula-0.1.1-4.6.2 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:python3-spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:salt-netapi-client-0.17.0-4.6.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacecmd-4.0.20-3.19.2 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-admin-4.0.11-3.12.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-base-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-base-minimal-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-base-minimal-config-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-certs-tools-4.0.17-3.21.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-html-4.0.23-3.30.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-java-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-java-config-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-java-lib-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-java-postgresql-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-setup-4.0.14-3.14.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:spacewalk-taskomatic-4.0.37-3.39.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-4.0.28-3.36.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-frontend-libs-4.0.2-4.3.2 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-schema-4.0.22-3.29.2 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-sls-4.0.29-3.31.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-sync-data-4.0.18-3.24.2 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-tools-4.0.28-3.36.3 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:susemanager-web-libs-4.0.23-3.30.3 SUSE Manager Proxy Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3 SUSE Manager Proxy Module 4.0:spacecmd-4.0.20-3.19.2 SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3 SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3 SUSE Manager Proxy Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3 SUSE Manager Proxy Module 4.0:spacewalk-proxy-broker-4.0.14-3.10.3 SUSE Manager Proxy Module 4.0:spacewalk-proxy-common-4.0.14-3.10.3 SUSE Manager Proxy Module 4.0:spacewalk-proxy-management-4.0.14-3.10.3 SUSE Manager Proxy Module 4.0:spacewalk-proxy-package-manager-4.0.14-3.10.3 SUSE Manager Proxy Module 4.0:spacewalk-proxy-redirect-4.0.14-3.10.3 SUSE Manager Proxy Module 4.0:spacewalk-proxy-salt-4.0.14-3.10.3 SUSE Manager Server Module 4.0:hibernate5-5.3.7-4.3.2 SUSE Manager Server Module 4.0:image-sync-formula-0.1.1595937550.0285244-3.20.2 SUSE Manager Server Module 4.0:openvpn-formula-0.1.1-4.6.2 SUSE Manager Server Module 4.0:prometheus-exporters-formula-0.7.1-3.10.2 SUSE Manager Server Module 4.0:python3-spacewalk-certs-tools-4.0.17-3.21.3 SUSE Manager Server Module 4.0:salt-netapi-client-0.17.0-4.6.3 SUSE Manager Server Module 4.0:saltboot-formula-0.1.1595937550.0285244-3.19.2 SUSE Manager Server Module 4.0:spacecmd-4.0.20-3.19.2 SUSE Manager Server Module 4.0:spacewalk-admin-4.0.11-3.12.1 SUSE Manager Server Module 4.0:spacewalk-base-4.0.23-3.30.3 SUSE Manager Server Module 4.0:spacewalk-base-minimal-4.0.23-3.30.3 SUSE Manager Server Module 4.0:spacewalk-base-minimal-config-4.0.23-3.30.3 SUSE Manager Server Module 4.0:spacewalk-certs-tools-4.0.17-3.21.3 SUSE Manager Server Module 4.0:spacewalk-html-4.0.23-3.30.3 SUSE Manager Server Module 4.0:spacewalk-java-4.0.37-3.39.1 SUSE Manager Server Module 4.0:spacewalk-java-config-4.0.37-3.39.1 SUSE Manager Server Module 4.0:spacewalk-java-lib-4.0.37-3.39.1 SUSE Manager Server Module 4.0:spacewalk-java-postgresql-4.0.37-3.39.1 SUSE Manager Server Module 4.0:spacewalk-setup-4.0.14-3.14.1 SUSE Manager Server Module 4.0:spacewalk-taskomatic-4.0.37-3.39.1 SUSE Manager Server Module 4.0:spacewalk-utils-4.0.18-3.21.3 SUSE Manager Server Module 4.0:susemanager-4.0.28-3.36.3 SUSE Manager Server Module 4.0:susemanager-frontend-libs-4.0.2-4.3.2 SUSE Manager Server Module 4.0:susemanager-schema-4.0.22-3.29.2 SUSE Manager Server Module 4.0:susemanager-sls-4.0.29-3.31.3 SUSE Manager Server Module 4.0:susemanager-sync-data-4.0.18-3.24.2 SUSE Manager Server Module 4.0:susemanager-tools-4.0.28-3.36.3 SUSE Manager Server Module 4.0:susemanager-web-libs-4.0.23-3.30.3 SUSE Manager Server Module 4.0:virtualization-host-formula-0.5-4.12.3 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202650-1/ https://www.suse.com/security/cve/CVE-2020-8028.html CVE-2020-8028 https://bugzilla.suse.com/1175884 SUSE Bug 1175884