SUSE-SU-2020:3250-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2020/suse-su-20203250-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:3250-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2020:3250-1

Related

Published

2020-11-06T16:03:24Z

Modified

2020-11-06T16:03:24Z

Summary

Security update for SUSE Manager 4.0

Details

This security update for SUSE Manager 4.0 provides the following fixes:

py26-compat-salt:

Properly validate eauth credentials and tokens on SSH calls made by Salt API (bsc#1178319, bsc#1178362, bsc#1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846)

spacewalk-java:

Use correct eauth module and credentials for Salt SSH calls. (bsc#1178319, CVE-2020-25592)

References

Affected packages

SUSE:Manager Server Module 4.0 / py26-compat-salt

Package

Name: py26-compat-salt
Purl: purl:rpm/suse/py26-compat-salt&distro=SUSE%20Manager%20Server%20Module%204.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2016.11.10-10.17.1

Ecosystem specific

{
    "binaries": [
        {
            "spacewalk-taskomatic": "4.0.39-3.45.1",
            "py26-compat-salt": "2016.11.10-10.17.1",
            "spacewalk-java-postgresql": "4.0.39-3.45.1",
            "spacewalk-java-config": "4.0.39-3.45.1",
            "spacewalk-java-lib": "4.0.39-3.45.1",
            "spacewalk-java": "4.0.39-3.45.1"
        }
    ]
}

SUSE:Manager Server Module 4.0 / spacewalk-java

Package

Name: spacewalk-java
Purl: purl:rpm/suse/spacewalk-java&distro=SUSE%20Manager%20Server%20Module%204.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.0.39-3.45.1

Ecosystem specific

{
    "binaries": [
        {
            "spacewalk-taskomatic": "4.0.39-3.45.1",
            "py26-compat-salt": "2016.11.10-10.17.1",
            "spacewalk-java-postgresql": "4.0.39-3.45.1",
            "spacewalk-java-config": "4.0.39-3.45.1",
            "spacewalk-java-lib": "4.0.39-3.45.1",
            "spacewalk-java": "4.0.39-3.45.1"
        }
    ]
}