{"document":{"aggregate_severity":{"namespace":"https://www.suse.com/support/security/rating/","text":"moderate"},"category":"csaf_security_advisory","csaf_version":"2.0","distribution":{"text":"Copyright 2024 SUSE LLC. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"summary","text":"Security update for SUSE Manager Server 3.0","title":"Title of the patch"},{"category":"description","text":"\nThe following security issue in spacewalk-backend has been fixed:\n\n- Non admin or disabled user cannot make changes to a system anymore using spacewalk-channel.\n  (bsc#1026633, CVE-2017-7470)\n\nAdditionally, the following non-security issues have been fixed:\n\nrhnlib:\n\n- Support all TLS versions in rpclib. (bsc#1025312)\n\nsalt-netapi-client:\n\n- Fix date format for Schedule module. (bsc#1034465)\n\nspacecmd:\n\n- Improve output on error for listrepo. (bsc#1027426)\n- Reword spacecmd removal message. (bsc#1024406)\n\nspacewalk-backend:\n\n- Do not fail with traceback when media.1 does not exist. (bsc#1032256)\n- Create scap files directory beforehand. (bsc#1029755)\n- Fix error if SPACEWALK_DEBUG_NO_REPORTS environment variable is not present.\n- Don't skip 'rhnErrataPackage' cleanup during an errata update. (bsc#1023233)\n- Add support for running spacewalk-debug without creating reports. (bsc#1024714)\n- Set scap store directory mod to 775 and group owner to susemanager.\n- incomplete_package_import: Do import rhnPackageFile as it breaks some package installations.\n- Added traceback printing to the exception block.\n- Change postgresql starting commands.\n\nspacewalk-certs-tools:\n\n- Always restart the minion regardless of its current state. (bsc#1034956)\n- Correctly honor disabling of SSL in bootstrap script. (bsc#1033383)\n- Add curl dependency and move mgr-proxy-ssh* to spacewalk-proxy package.\n- Exit for non-traditional bootstrap scripts. (bsc#1020904)\n- Rename mgr-ssh-proxy-force-cmd -> mgr-proxy-ssh-force-cmd.\n- Add mgr-proxy-ssh-force-cmd, mgr-proxy-ssh-push-init to rpm.\n- Add option to configure only sshd.\n- Restrictive ssh options for user mgrsshtunnel.\n\nspacewalk-client-tools:\n\n- Fix reboot message to use correct product name. (bsc#1031667)\n\nspacewalk-java:\n\n- Fix missing IPs in Overview tab. (bsc#1031453)\n- Fix scheduling VM deployment in future. (bsc#1034289)\n- Handle empty set to not produce invalid sql. (bsc#1033497)\n- Fix SSM group pagination. (bsc#1012784)\n- Create PooledExecutor with pre-filled queue. (bsc#1030716)\n- Make sure minion keys can only be seen/managed by appropriate user. (bsc#1025908)\n- Set action status to 'failed' on uncaught exceptions. (bsc#1013606)\n- Add missing library to taskomatic classpath. (bsc#1024066)\n- Set log level to DEBUG for EOFException when the Websocket connection is aborted by the client. (bsc#1031826)\n- Add a remote command with label as a script to the actionchain. (bsc#1011964)\n- Fix architecture for default channels lookup. (bsc#1025275)\n- Change required salt-netapi-client to >= 0.11.\n- Using stream() during collection processing.\n- Making salt presence timeouts configurable via rhn.conf. (bsc#1025761)\n- Avoid blocking synchronous calls if some minions are unreachable. (bsc#1025761)\n- Excludes unreachable minions from synchronous call to prevent blocking. (bsc#1025761)\n- Fix LocalDateTimeISOAdapter to parse date string with timezone. (bsc#1024966)\n- Create scap files directories beforehand. (bsc#1029755)\n- Make country, state/province and city searchable for system location. (bsc#1020659)\n- Change incorrect help link. (bsc#1017418)\n- Don't allow scheduling scap scan if openscap pkg missing from minion.\n- Make salt aware of rescheduled actions. (bsc#1027852)\n- Close hibernate session on async salt-ssh call.\n- Use a small fixed pool so we don't overwhelm the salt-api with salt-ssh executions\n- Fix remote cmd ui js err and timed out message.\n- Remote cmd UI changes for salt-ssh minions.\n- Add support for salt ssh minions to remote cmd UI.\n- Apply SessionFilter also for error pages. (bsc#1028062)\n- Use correct logging class.\n- Fix broken help link for taskstatus. (bsc#1017422)\n- Test errata not removed from origin.\n- Fix merge channels patches. (bsc#1025000)\n- Change XccdfIdent.identifier mapping length to 100.\n- Add xccdf result xslt.\n- Fix mainframesysinfo module to use /proc/sysinfo on SLES11. (bsc#1025758)\n- Use consistent spelling in UI. (bsc#1028306)\n- Rewording distchannelmap text. (bsc#1017772)\n- Javascript datepicker needs the timezone create a correct date object. (bsc#1024966)\n- Don't show audit tab for ssh-push minions.\n- Set scap store dir mod to 775 and group owner to susemanager.\n- Better error handling and more tests.\n- Store uploaded scap files.\n- Openscap action scheduling and handling.\n- Grant scap capability to minion on registration.\n- Enable audit tab for salt minions.\n- Scap inital xccdfEval and hibernate mappings.\n- Show proxy path in bootstrap UI.\n- AuthFilter tests: Update expectations to reflect cookie update at end of request.\n- AuthFilter: Update cookie expiry date at end of HTTP request. (bsc#1025775)\n- MinionActionCleanup: Only call list_jobs once per action id. (bsc#1025291)\n- MinionActionCleanupTest: Expect that list_jobs is only called once.\n- Feat: Allow salt-enabled bootstrap.sh via UI.\n- Catch and display all bootstrap errors.\n- Sync grains and beacons only for regular minions.\n- Add new channel tokens to minion.accessTokens.\n- Fix getting server path for a first level proxy.\n- Fix bootstrap err when proxy not selected.\n- Check if proxy hostname is FQDN not name in UI.\n- Utility for runner to generate ssh key and execute cmd via proxies.\n- Add proxy_pub_key to ssh bootstrap pillar.\n- Add ssh timeout to temporary roster.\n- Salt_ssh_connect_timeout configuration parameter.\n- Authorize parent salt-ssh key on proxy.\n- Java backend for salt ssh-push through proxy.\n- Avoid deadlock with spacewalk-repo-sync. (bsc#1022530)\n- Fix NPE when no SUSE Product was found for an installed product. (bsc#1029840)\n- Keep organization after migrating a system to salt. (bsc#1026301)\n- Fix glob only for noarch rpm(s).\n- Feat: Dynamically detect deployed CA certificate.\n- Fix restore original default (certificate).\n- Rename variable (cert provided by RPM).\n- Fix uniform bootstrap.sh. (bsc#1000762)\n\nspacewalk-reports:\n\n- Remove legacy audit logging reports. (bsc#1009545)\n\nspacewalk-setup:\n\n- Create /var/spacewalk/systems in spacewalk-setup and ensure perms on upgrade.\n- Add xccdf result xslt.\n- Authorize parent salt-ssh key on proxy.\n\nspacewalk-web:\n\n- Remote Commands: Allow Web Socket to be opened on non-standard port.\n- Improve remote cmd ui error handling.\n- Show message when waiting for ssh minions times out.\n- Fix remote cmd ui js err and timed out message.\n- Remote cmd UI changes for salt-ssh minions.\n- Fix broken help link for taskstatus. (bsc#1017422)\n- Add js utility function to create Date objects in different timezones.\n- Show proxy path in bootstrap UI.\n- Clear proxy selection when clicking clear fields button.\n- Check if proxy hostname is FQDN not name in UI.\n- Show warn in bootstrap UI if proxy hostname is not a FQDN.\n\nsubscription-matcher:\n\n- Set -Xmx launch parameter based on customer data. (bsc#1024863) \n- Small bugfixes and logging improvements.\n\nsusemanager:\n\n- Add bootstrap repo data for SLES for SAP 12 SP2 ppc64le.\n- Add python-setuptools to bootstrap repo. (bsc#1033731)\n- Create directory manually if mksubvolume fails, so we now support btrfs based systems with missing mksubvoume\n  utility. (bsc#1031885)\n- Create /var/spacewalk/systems in spacewalk-setup and ensure perms on upgrade\n- Fix typo in comment noting option with-custom-channels. (bsc#1031092)\n- Pre require tomcat and salt.\n- Fix %%pre and %%post scripts in susemanager.spec.\n- Append salt,tomcat,wwwrung to susemanager group.\n- Susemanager group and change owner and permissions for /var/susemanager/systems.\n\nsusemanager-schema:\n\n- Don't fail if capability already exists.\n- Show update message only when updating the schema package. (bsc#1024456)\n- Fix audit log disabling in Oracle.\n- Grant minions scap capability.\n- Clean up stale logging data and triggers. (bsc#1009545)\n- Fix deduplicate to work with more than two duplicates.\n\nsusemanager-sls:\n\n- Add certificate state for CAASP.\n- Add certificate state for SLES for SAP. (bsc#1031659)\n- Pre-create empty top.sls with no-op. (bsc#1017754)\n- Add xccdf result xslt.\n- Fix mainframesysinfo module to use /proc/sysinfo on SLES11. (bsc#1025758)\n- Set scap store dir mod to 775 and group owner to susemanager.\n- Store uploaded scap files.\n- Set minion own key owner to bootstrap ssh_push_sudo_user.\n- Runner to generate ssh key and execute cmd via proxies.\n- Change ssh bootstrap state to generate and auth keys for salt-ssh push with tunnel.\n- Authorize parent salt-ssh key on proxy.\n\nsusemanager-sync-data:\n\n- Support Cloud 7 - Magnum Orchestration (bsc#1026266) and SLES for SAP 12 SP2 ppc64le.\n\nvirtual-host-gatherer:\n\n- Adding support for exploring 'vim.Folder'. (bsc#1025421)\n\nHow to apply this update:\n1. Log in as root user to the SUSE Manager server.\n2. Stop the Spacewalk service:\nspacewalk-service stop\n3. Apply the patch using either zypper patch or YaST Online Update.\n4. Upgrade the database schema:\nspacewalk-schema-upgrade\n5. Start the Spacewalk service:\nspacewalk-service start\n","title":"Description of the patch"},{"category":"details","text":"SUSE-SUSE-Manager-Server-3.0-2017-827","title":"Patchnames"},{"category":"legal_disclaimer","text":"CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).","title":"Terms of use"}],"publisher":{"category":"vendor","contact_details":"https://www.suse.com/support/security/contact/","name":"SUSE Product Security Team","namespace":"https://www.suse.com/"},"references":[{"category":"external","summary":"SUSE ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"self","summary":"URL of this CSAF notice","url":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_1349-1.json"},{"category":"self","summary":"URL for SUSE-SU-2017:1349-1","url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171349-1/"},{"category":"self","summary":"E-Mail link for SUSE-SU-2017:1349-1","url":"https://lists.suse.com/pipermail/sle-security-updates/2017-May/002899.html"},{"category":"self","summary":"SUSE Bug 1000762","url":"https://bugzilla.suse.com/1000762"},{"category":"self","summary":"SUSE Bug 1009545","url":"https://bugzilla.suse.com/1009545"},{"category":"self","summary":"SUSE Bug 1011964","url":"https://bugzilla.suse.com/1011964"},{"category":"self","summary":"SUSE Bug 1012784","url":"https://bugzilla.suse.com/1012784"},{"category":"self","summary":"SUSE Bug 1013606","url":"https://bugzilla.suse.com/1013606"},{"category":"self","summary":"SUSE Bug 1017418","url":"https://bugzilla.suse.com/1017418"},{"category":"self","summary":"SUSE Bug 1017422","url":"https://bugzilla.suse.com/1017422"},{"category":"self","summary":"SUSE Bug 1017754","url":"https://bugzilla.suse.com/1017754"},{"category":"self","summary":"SUSE Bug 1017772","url":"https://bugzilla.suse.com/1017772"},{"category":"self","summary":"SUSE Bug 1020659","url":"https://bugzilla.suse.com/1020659"},{"category":"self","summary":"SUSE Bug 1020904","url":"https://bugzilla.suse.com/1020904"},{"category":"self","summary":"SUSE Bug 1022530","url":"https://bugzilla.suse.com/1022530"},{"category":"self","summary":"SUSE Bug 1023233","url":"https://bugzilla.suse.com/1023233"},{"category":"self","summary":"SUSE Bug 1024066","url":"https://bugzilla.suse.com/1024066"},{"category":"self","summary":"SUSE Bug 1024406","url":"https://bugzilla.suse.com/1024406"},{"category":"self","summary":"SUSE Bug 1024456","url":"https://bugzilla.suse.com/1024456"},{"category":"self","summary":"SUSE Bug 1024714","url":"https://bugzilla.suse.com/1024714"},{"category":"self","summary":"SUSE Bug 1024863","url":"https://bugzilla.suse.com/1024863"},{"category":"self","summary":"SUSE Bug 1024966","url":"https://bugzilla.suse.com/1024966"},{"category":"self","summary":"SUSE Bug 1025000","url":"https://bugzilla.suse.com/1025000"},{"category":"self","summary":"SUSE Bug 1025275","url":"https://bugzilla.suse.com/1025275"},{"category":"self","summary":"SUSE Bug 1025291","url":"https://bugzilla.suse.com/1025291"},{"category":"self","summary":"SUSE Bug 1025312","url":"https://bugzilla.suse.com/1025312"},{"category":"self","summary":"SUSE Bug 1025421","url":"https://bugzilla.suse.com/1025421"},{"category":"self","summary":"SUSE Bug 1025758","url":"https://bugzilla.suse.com/1025758"},{"category":"self","summary":"SUSE Bug 1025761","url":"https://bugzilla.suse.com/1025761"},{"category":"self","summary":"SUSE Bug 1025775","url":"https://bugzilla.suse.com/1025775"},{"category":"self","summary":"SUSE Bug 1025908","url":"https://bugzilla.suse.com/1025908"},{"category":"self","summary":"SUSE Bug 1026266","url":"https://bugzilla.suse.com/1026266"},{"category":"self","summary":"SUSE Bug 1026301","url":"https://bugzilla.suse.com/1026301"},{"category":"self","summary":"SUSE Bug 1026633","url":"https://bugzilla.suse.com/1026633"},{"category":"self","summary":"SUSE Bug 1027426","url":"https://bugzilla.suse.com/1027426"},{"category":"self","summary":"SUSE Bug 1027852","url":"https://bugzilla.suse.com/1027852"},{"category":"self","summary":"SUSE Bug 1028062","url":"https://bugzilla.suse.com/1028062"},{"category":"self","summary":"SUSE Bug 1028306","url":"https://bugzilla.suse.com/1028306"},{"category":"self","summary":"SUSE Bug 1029755","url":"https://bugzilla.suse.com/1029755"},{"category":"self","summary":"SUSE Bug 1029840","url":"https://bugzilla.suse.com/1029840"},{"category":"self","summary":"SUSE Bug 1030716","url":"https://bugzilla.suse.com/1030716"},{"category":"self","summary":"SUSE Bug 1031092","url":"https://bugzilla.suse.com/1031092"},{"category":"self","summary":"SUSE Bug 1031453","url":"https://bugzilla.suse.com/1031453"},{"category":"self","summary":"SUSE Bug 1031659","url":"https://bugzilla.suse.com/1031659"},{"category":"self","summary":"SUSE Bug 1031667","url":"https://bugzilla.suse.com/1031667"},{"category":"self","summary":"SUSE Bug 1031826","url":"https://bugzilla.suse.com/1031826"},{"category":"self","summary":"SUSE Bug 1031885","url":"https://bugzilla.suse.com/1031885"},{"category":"self","summary":"SUSE Bug 1032256","url":"https://bugzilla.suse.com/1032256"},{"category":"self","summary":"SUSE Bug 1033383","url":"https://bugzilla.suse.com/1033383"},{"category":"self","summary":"SUSE Bug 1033497","url":"https://bugzilla.suse.com/1033497"},{"category":"self","summary":"SUSE Bug 1033731","url":"https://bugzilla.suse.com/1033731"},{"category":"self","summary":"SUSE Bug 1034289","url":"https://bugzilla.suse.com/1034289"},{"category":"self","summary":"SUSE Bug 1034465","url":"https://bugzilla.suse.com/1034465"},{"category":"self","summary":"SUSE Bug 1034956","url":"https://bugzilla.suse.com/1034956"},{"category":"self","summary":"SUSE CVE CVE-2017-7470 page","url":"https://www.suse.com/security/cve/CVE-2017-7470/"}],"title":"Security update for SUSE Manager Server 3.0","tracking":{"current_release_date":"2017-05-18T22:20:39Z","generator":{"date":"2017-05-18T22:20:39Z","engine":{"name":"cve-database.git:bin/generate-csaf.pl","version":"1"}},"id":"SUSE-SU-2017:1349-1","initial_release_date":"2017-05-18T22:20:39Z","revision_history":[{"date":"2017-05-18T22:20:39Z","number":"1","summary":"Current version"}],"status":"final","version":"1"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_version","name":"rhnlib-2.5.84.4-6.1.noarch","product":{"name":"rhnlib-2.5.84.4-6.1.noarch","product_id":"rhnlib-2.5.84.4-6.1.noarch"}},{"category":"product_version","name":"salt-netapi-client-0.11.1-12.1.noarch","product":{"name":"salt-netapi-client-0.11.1-12.1.noarch","product_id":"salt-netapi-client-0.11.1-12.1.noarch"}},{"category":"product_version","name":"spacecmd-2.5.5.5-12.1.noarch","product":{"name":"spacecmd-2.5.5.5-12.1.noarch","product_id":"spacecmd-2.5.5.5-12.1.noarch"}},{"category":"product_version","name":"spacewalk-backend-2.5.24.9-22.1.noarch","product":{"name":"spacewalk-backend-2.5.24.9-22.1.noarch","product_id":"spacewalk-backend-2.5.24.9-22.1.noarch"}},{"category":"product_version","name":"spacewalk-backend-app-2.5.24.9-22.1.noarch","product":{"name":"spacewalk-backend-app-2.5.24.9-22.1.noarch","product_id":"spacewalk-backend-app-2.5.24.9-22.1.noarch"}},{"category":"product_version","name":"spacewalk-backend-applet-2.5.24.9-22.1.noarch","product":{"name":"spacewalk-backend-applet-2.5.24.9-22.1.noarch","product_id":"spacewalk-backend-applet-2.5.24.9-22.1.noarch"}},{"category":"product_version","name":"spacewalk-backend-config-files-2.5.24.9-22.1.noarch","product":{"name":"spacewalk-backend-config-files-2.5.24.9-22.1.noarch","product_id":"spacewalk-backend-config-files-2.5.24.9-22.1.noarch"}},{"category":"product_version","name":"spacewalk-backend-config-files-common-2.5.24.9-22.1.noarch","product":{"name":"spacewalk-backend-config-files-common-2.5.24.9-22.1.noarch","product_id":"spacewalk-backend-config-files-common-2.5.24.9-22.1.noarch"}},{"category":"product_version","name":"spacewalk-backend-config-files-tool-2.5.24.9-22.1.noarch","product":{"name":"spacewalk-backend-config-files-tool-2.5.24.9-22.1.noarch","product_id":"spacewalk-backend-config-files-tool-2.5.24.9-22.1.noarch"}},{"category":"product_version","name":"spacewalk-backend-iss-2.5.24.9-22.1.noarch","product":{"name":"spacewalk-backend-iss-2.5.24.9-22.1.noarch","product_id":"spacewalk-backend-iss-2.5.24.9-22.1.noarch"}},{"category":"product_version","name":"spacewalk-backend-iss-export-2.5.24.9-22.1.noarch","product":{"name":"spacewalk-backend-iss-export-2.5.24.9-22.1.noarch","product_id":"spacewalk-backend-iss-export-2.5.24.9-22.1.noarch"}},{"category":"product_version","name":"spacewalk-backend-libs-2.5.24.9-22.1.noarch","product":{"name":"spacewalk-backend-libs-2.5.24.9-22.1.noarch","product_id":"spacewalk-backend-libs-2.5.24.9-22.1.noarch"}},{"category":"product_version","name":"spacewalk-backend-package-push-server-2.5.24.9-22.1.noarch","product":{"name":"spacewalk-backend-package-push-server-2.5.24.9-22.1.noarch","product_id":"spacewalk-backend-package-push-server-2.5.24.9-22.1.noarch"}},{"category":"product_version","name":"spacewalk-backend-server-2.5.24.9-22.1.noarch","product":{"name":"spacewalk-backend-server-2.5.24.9-22.1.noarch","product_id":"spacewalk-backend-server-2.5.24.9-22.1.noarch"}},{"category":"product_version","name":"spacewalk-backend-sql-2.5.24.9-22.1.noarch","product":{"name":"spacewalk-backend-sql-2.5.24.9-22.1.noarch","product_id":"spacewalk-backend-sql-2.5.24.9-22.1.noarch"}},{"category":"product_version","name":"spacewalk-backend-sql-oracle-2.5.24.9-22.1.noarch","product":{"name":"spacewalk-backend-sql-oracle-2.5.24.9-22.1.noarch","product_id":"spacewalk-backend-sql-oracle-2.5.24.9-22.1.noarch"}},{"category":"product_version","name":"spacewalk-backend-sql-postgresql-2.5.24.9-22.1.noarch","product":{"name":"spacewalk-backend-sql-postgresql-2.5.24.9-22.1.noarch","product_id":"spacewalk-backend-sql-postgresql-2.5.24.9-22.1.noarch"}},{"category":"product_version","name":"spacewalk-backend-tools-2.5.24.9-22.1.noarch","product":{"name":"spacewalk-backend-tools-2.5.24.9-22.1.noarch","product_id":"spacewalk-backend-tools-2.5.24.9-22.1.noarch"}},{"category":"product_version","name":"spacewalk-backend-xml-export-libs-2.5.24.9-22.1.noarch","product":{"name":"spacewalk-backend-xml-export-libs-2.5.24.9-22.1.noarch","product_id":"spacewalk-backend-xml-export-libs-2.5.24.9-22.1.noarch"}},{"category":"product_version","name":"spacewalk-backend-xmlrpc-2.5.24.9-22.1.noarch","product":{"name":"spacewalk-backend-xmlrpc-2.5.24.9-22.1.noarch","product_id":"spacewalk-backend-xmlrpc-2.5.24.9-22.1.noarch"}},{"category":"product_version","name":"spacewalk-base-2.5.7.15-21.1.noarch","product":{"name":"spacewalk-base-2.5.7.15-21.1.noarch","product_id":"spacewalk-base-2.5.7.15-21.1.noarch"}},{"category":"product_version","name":"spacewalk-base-minimal-2.5.7.15-21.1.noarch","product":{"name":"spacewalk-base-minimal-2.5.7.15-21.1.noarch","product_id":"spacewalk-base-minimal-2.5.7.15-21.1.noarch"}},{"category":"product_version","name":"spacewalk-base-minimal-config-2.5.7.15-21.1.noarch","product":{"name":"spacewalk-base-minimal-config-2.5.7.15-21.1.noarch","product_id":"spacewalk-base-minimal-config-2.5.7.15-21.1.noarch"}},{"category":"product_version","name":"spacewalk-certs-tools-2.5.1.8-17.1.noarch","product":{"name":"spacewalk-certs-tools-2.5.1.8-17.1.noarch","product_id":"spacewalk-certs-tools-2.5.1.8-17.1.noarch"}},{"category":"product_version","name":"spacewalk-client-tools-2.5.13.8-17.2.noarch","product":{"name":"spacewalk-client-tools-2.5.13.8-17.2.noarch","product_id":"spacewalk-client-tools-2.5.13.8-17.2.noarch"}},{"category":"product_version","name":"spacewalk-html-2.5.7.15-21.1.noarch","product":{"name":"spacewalk-html-2.5.7.15-21.1.noarch","product_id":"spacewalk-html-2.5.7.15-21.1.noarch"}},{"category":"product_version","name":"spacewalk-java-2.5.59.14-23.2.noarch","product":{"name":"spacewalk-java-2.5.59.14-23.2.noarch","product_id":"spacewalk-java-2.5.59.14-23.2.noarch"}},{"category":"product_version","name":"spacewalk-java-config-2.5.59.14-23.2.noarch","product":{"name":"spacewalk-java-config-2.5.59.14-23.2.noarch","product_id":"spacewalk-java-config-2.5.59.14-23.2.noarch"}},{"category":"product_version","name":"spacewalk-java-lib-2.5.59.14-23.2.noarch","product":{"name":"spacewalk-java-lib-2.5.59.14-23.2.noarch","product_id":"spacewalk-java-lib-2.5.59.14-23.2.noarch"}},{"category":"product_version","name":"spacewalk-java-oracle-2.5.59.14-23.2.noarch","product":{"name":"spacewalk-java-oracle-2.5.59.14-23.2.noarch","product_id":"spacewalk-java-oracle-2.5.59.14-23.2.noarch"}},{"category":"product_version","name":"spacewalk-java-postgresql-2.5.59.14-23.2.noarch","product":{"name":"spacewalk-java-postgresql-2.5.59.14-23.2.noarch","product_id":"spacewalk-java-postgresql-2.5.59.14-23.2.noarch"}},{"category":"product_version","name":"spacewalk-reports-2.5.1.2-3.1.noarch","product":{"name":"spacewalk-reports-2.5.1.2-3.1.noarch","product_id":"spacewalk-reports-2.5.1.2-3.1.noarch"}},{"category":"product_version","name":"spacewalk-setup-2.5.3.12-15.1.noarch","product":{"name":"spacewalk-setup-2.5.3.12-15.1.noarch","product_id":"spacewalk-setup-2.5.3.12-15.1.noarch"}},{"category":"product_version","name":"spacewalk-taskomatic-2.5.59.14-23.2.noarch","product":{"name":"spacewalk-taskomatic-2.5.59.14-23.2.noarch","product_id":"spacewalk-taskomatic-2.5.59.14-23.2.noarch"}},{"category":"product_version","name":"subscription-matcher-0.18-5.1.noarch","product":{"name":"subscription-matcher-0.18-5.1.noarch","product_id":"subscription-matcher-0.18-5.1.noarch"}},{"category":"product_version","name":"susemanager-schema-3.0.19-21.2.noarch","product":{"name":"susemanager-schema-3.0.19-21.2.noarch","product_id":"susemanager-schema-3.0.19-21.2.noarch"}},{"category":"product_version","name":"susemanager-sls-0.1.20-23.1.noarch","product":{"name":"susemanager-sls-0.1.20-23.1.noarch","product_id":"susemanager-sls-0.1.20-23.1.noarch"}},{"category":"product_version","name":"susemanager-sync-data-3.0.16-24.1.noarch","product":{"name":"susemanager-sync-data-3.0.16-24.1.noarch","product_id":"susemanager-sync-data-3.0.16-24.1.noarch"}},{"category":"product_version","name":"virtual-host-gatherer-1.0.13-6.1.noarch","product":{"name":"virtual-host-gatherer-1.0.13-6.1.noarch","product_id":"virtual-host-gatherer-1.0.13-6.1.noarch"}},{"category":"product_version","name":"virtual-host-gatherer-VMware-1.0.13-6.1.noarch","product":{"name":"virtual-host-gatherer-VMware-1.0.13-6.1.noarch","product_id":"virtual-host-gatherer-VMware-1.0.13-6.1.noarch"}}],"category":"architecture","name":"noarch"},{"branches":[{"category":"product_version","name":"susemanager-3.0.21-21.1.s390x","product":{"name":"susemanager-3.0.21-21.1.s390x","product_id":"susemanager-3.0.21-21.1.s390x"}},{"category":"product_version","name":"susemanager-tools-3.0.21-21.1.s390x","product":{"name":"susemanager-tools-3.0.21-21.1.s390x","product_id":"susemanager-tools-3.0.21-21.1.s390x"}}],"category":"architecture","name":"s390x"},{"branches":[{"category":"product_version","name":"susemanager-3.0.21-21.1.x86_64","product":{"name":"susemanager-3.0.21-21.1.x86_64","product_id":"susemanager-3.0.21-21.1.x86_64"}},{"category":"product_version","name":"susemanager-tools-3.0.21-21.1.x86_64","product":{"name":"susemanager-tools-3.0.21-21.1.x86_64","product_id":"susemanager-tools-3.0.21-21.1.x86_64"}}],"category":"architecture","name":"x86_64"},{"branches":[{"category":"product_name","name":"SUSE Manager Server 3.0","product":{"name":"SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0","product_identification_helper":{"cpe":"cpe:/o:suse:suse-manager-server:3.0"}}}],"category":"product_family","name":"SUSE Linux Enterprise"}],"category":"vendor","name":"SUSE"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"rhnlib-2.5.84.4-6.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:rhnlib-2.5.84.4-6.1.noarch"},"product_reference":"rhnlib-2.5.84.4-6.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"salt-netapi-client-0.11.1-12.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:salt-netapi-client-0.11.1-12.1.noarch"},"product_reference":"salt-netapi-client-0.11.1-12.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacecmd-2.5.5.5-12.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacecmd-2.5.5.5-12.1.noarch"},"product_reference":"spacecmd-2.5.5.5-12.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-backend-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-backend-2.5.24.9-22.1.noarch"},"product_reference":"spacewalk-backend-2.5.24.9-22.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-backend-app-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-backend-app-2.5.24.9-22.1.noarch"},"product_reference":"spacewalk-backend-app-2.5.24.9-22.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-backend-applet-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-backend-applet-2.5.24.9-22.1.noarch"},"product_reference":"spacewalk-backend-applet-2.5.24.9-22.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-backend-config-files-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-backend-config-files-2.5.24.9-22.1.noarch"},"product_reference":"spacewalk-backend-config-files-2.5.24.9-22.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-backend-config-files-common-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-backend-config-files-common-2.5.24.9-22.1.noarch"},"product_reference":"spacewalk-backend-config-files-common-2.5.24.9-22.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-backend-config-files-tool-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-backend-config-files-tool-2.5.24.9-22.1.noarch"},"product_reference":"spacewalk-backend-config-files-tool-2.5.24.9-22.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-backend-iss-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-backend-iss-2.5.24.9-22.1.noarch"},"product_reference":"spacewalk-backend-iss-2.5.24.9-22.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-backend-iss-export-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-backend-iss-export-2.5.24.9-22.1.noarch"},"product_reference":"spacewalk-backend-iss-export-2.5.24.9-22.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-backend-libs-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-backend-libs-2.5.24.9-22.1.noarch"},"product_reference":"spacewalk-backend-libs-2.5.24.9-22.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-backend-package-push-server-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-backend-package-push-server-2.5.24.9-22.1.noarch"},"product_reference":"spacewalk-backend-package-push-server-2.5.24.9-22.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-backend-server-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-backend-server-2.5.24.9-22.1.noarch"},"product_reference":"spacewalk-backend-server-2.5.24.9-22.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-backend-sql-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-backend-sql-2.5.24.9-22.1.noarch"},"product_reference":"spacewalk-backend-sql-2.5.24.9-22.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-backend-sql-oracle-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-backend-sql-oracle-2.5.24.9-22.1.noarch"},"product_reference":"spacewalk-backend-sql-oracle-2.5.24.9-22.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-backend-sql-postgresql-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-backend-sql-postgresql-2.5.24.9-22.1.noarch"},"product_reference":"spacewalk-backend-sql-postgresql-2.5.24.9-22.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-backend-tools-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-backend-tools-2.5.24.9-22.1.noarch"},"product_reference":"spacewalk-backend-tools-2.5.24.9-22.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-backend-xml-export-libs-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-backend-xml-export-libs-2.5.24.9-22.1.noarch"},"product_reference":"spacewalk-backend-xml-export-libs-2.5.24.9-22.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-backend-xmlrpc-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-backend-xmlrpc-2.5.24.9-22.1.noarch"},"product_reference":"spacewalk-backend-xmlrpc-2.5.24.9-22.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-base-2.5.7.15-21.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-base-2.5.7.15-21.1.noarch"},"product_reference":"spacewalk-base-2.5.7.15-21.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-base-minimal-2.5.7.15-21.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-base-minimal-2.5.7.15-21.1.noarch"},"product_reference":"spacewalk-base-minimal-2.5.7.15-21.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-base-minimal-config-2.5.7.15-21.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-base-minimal-config-2.5.7.15-21.1.noarch"},"product_reference":"spacewalk-base-minimal-config-2.5.7.15-21.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-certs-tools-2.5.1.8-17.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-certs-tools-2.5.1.8-17.1.noarch"},"product_reference":"spacewalk-certs-tools-2.5.1.8-17.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-client-tools-2.5.13.8-17.2.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-client-tools-2.5.13.8-17.2.noarch"},"product_reference":"spacewalk-client-tools-2.5.13.8-17.2.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-html-2.5.7.15-21.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-html-2.5.7.15-21.1.noarch"},"product_reference":"spacewalk-html-2.5.7.15-21.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-java-2.5.59.14-23.2.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-java-2.5.59.14-23.2.noarch"},"product_reference":"spacewalk-java-2.5.59.14-23.2.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-java-config-2.5.59.14-23.2.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-java-config-2.5.59.14-23.2.noarch"},"product_reference":"spacewalk-java-config-2.5.59.14-23.2.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-java-lib-2.5.59.14-23.2.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-java-lib-2.5.59.14-23.2.noarch"},"product_reference":"spacewalk-java-lib-2.5.59.14-23.2.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-java-oracle-2.5.59.14-23.2.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-java-oracle-2.5.59.14-23.2.noarch"},"product_reference":"spacewalk-java-oracle-2.5.59.14-23.2.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-java-postgresql-2.5.59.14-23.2.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-java-postgresql-2.5.59.14-23.2.noarch"},"product_reference":"spacewalk-java-postgresql-2.5.59.14-23.2.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-reports-2.5.1.2-3.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-reports-2.5.1.2-3.1.noarch"},"product_reference":"spacewalk-reports-2.5.1.2-3.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-setup-2.5.3.12-15.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-setup-2.5.3.12-15.1.noarch"},"product_reference":"spacewalk-setup-2.5.3.12-15.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"spacewalk-taskomatic-2.5.59.14-23.2.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:spacewalk-taskomatic-2.5.59.14-23.2.noarch"},"product_reference":"spacewalk-taskomatic-2.5.59.14-23.2.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"subscription-matcher-0.18-5.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:subscription-matcher-0.18-5.1.noarch"},"product_reference":"subscription-matcher-0.18-5.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"susemanager-3.0.21-21.1.s390x as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:susemanager-3.0.21-21.1.s390x"},"product_reference":"susemanager-3.0.21-21.1.s390x","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"susemanager-3.0.21-21.1.x86_64 as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:susemanager-3.0.21-21.1.x86_64"},"product_reference":"susemanager-3.0.21-21.1.x86_64","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"susemanager-schema-3.0.19-21.2.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:susemanager-schema-3.0.19-21.2.noarch"},"product_reference":"susemanager-schema-3.0.19-21.2.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"susemanager-sls-0.1.20-23.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:susemanager-sls-0.1.20-23.1.noarch"},"product_reference":"susemanager-sls-0.1.20-23.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"susemanager-sync-data-3.0.16-24.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:susemanager-sync-data-3.0.16-24.1.noarch"},"product_reference":"susemanager-sync-data-3.0.16-24.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"susemanager-tools-3.0.21-21.1.s390x as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:susemanager-tools-3.0.21-21.1.s390x"},"product_reference":"susemanager-tools-3.0.21-21.1.s390x","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"susemanager-tools-3.0.21-21.1.x86_64 as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:susemanager-tools-3.0.21-21.1.x86_64"},"product_reference":"susemanager-tools-3.0.21-21.1.x86_64","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"virtual-host-gatherer-1.0.13-6.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:virtual-host-gatherer-1.0.13-6.1.noarch"},"product_reference":"virtual-host-gatherer-1.0.13-6.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"},{"category":"default_component_of","full_product_name":{"name":"virtual-host-gatherer-VMware-1.0.13-6.1.noarch as component of SUSE Manager Server 3.0","product_id":"SUSE Manager Server 3.0:virtual-host-gatherer-VMware-1.0.13-6.1.noarch"},"product_reference":"virtual-host-gatherer-VMware-1.0.13-6.1.noarch","relates_to_product_reference":"SUSE Manager Server 3.0"}]},"vulnerabilities":[{"cve":"CVE-2017-7470","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2017-7470"}],"notes":[{"category":"general","text":"It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in backend/server/rhnChannel.py.","title":"CVE description"}],"product_status":{"recommended":["SUSE Manager Server 3.0:rhnlib-2.5.84.4-6.1.noarch","SUSE Manager Server 3.0:salt-netapi-client-0.11.1-12.1.noarch","SUSE Manager Server 3.0:spacecmd-2.5.5.5-12.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-app-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-applet-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-config-files-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-config-files-common-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-config-files-tool-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-iss-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-iss-export-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-libs-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-package-push-server-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-server-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-sql-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-sql-oracle-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-sql-postgresql-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-tools-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-xml-export-libs-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-xmlrpc-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-base-2.5.7.15-21.1.noarch","SUSE Manager Server 3.0:spacewalk-base-minimal-2.5.7.15-21.1.noarch","SUSE Manager Server 3.0:spacewalk-base-minimal-config-2.5.7.15-21.1.noarch","SUSE Manager Server 3.0:spacewalk-certs-tools-2.5.1.8-17.1.noarch","SUSE Manager Server 3.0:spacewalk-client-tools-2.5.13.8-17.2.noarch","SUSE Manager Server 3.0:spacewalk-html-2.5.7.15-21.1.noarch","SUSE Manager Server 3.0:spacewalk-java-2.5.59.14-23.2.noarch","SUSE Manager Server 3.0:spacewalk-java-config-2.5.59.14-23.2.noarch","SUSE Manager Server 3.0:spacewalk-java-lib-2.5.59.14-23.2.noarch","SUSE Manager Server 3.0:spacewalk-java-oracle-2.5.59.14-23.2.noarch","SUSE Manager Server 3.0:spacewalk-java-postgresql-2.5.59.14-23.2.noarch","SUSE Manager Server 3.0:spacewalk-reports-2.5.1.2-3.1.noarch","SUSE Manager Server 3.0:spacewalk-setup-2.5.3.12-15.1.noarch","SUSE Manager Server 3.0:spacewalk-taskomatic-2.5.59.14-23.2.noarch","SUSE Manager Server 3.0:subscription-matcher-0.18-5.1.noarch","SUSE Manager Server 3.0:susemanager-3.0.21-21.1.s390x","SUSE Manager Server 3.0:susemanager-3.0.21-21.1.x86_64","SUSE Manager Server 3.0:susemanager-schema-3.0.19-21.2.noarch","SUSE Manager Server 3.0:susemanager-sls-0.1.20-23.1.noarch","SUSE Manager Server 3.0:susemanager-sync-data-3.0.16-24.1.noarch","SUSE Manager Server 3.0:susemanager-tools-3.0.21-21.1.s390x","SUSE Manager Server 3.0:susemanager-tools-3.0.21-21.1.x86_64","SUSE Manager Server 3.0:virtual-host-gatherer-1.0.13-6.1.noarch","SUSE Manager Server 3.0:virtual-host-gatherer-VMware-1.0.13-6.1.noarch"]},"references":[{"category":"external","summary":"CVE-2017-7470","url":"https://www.suse.com/security/cve/CVE-2017-7470"},{"category":"external","summary":"SUSE Bug 1026633 for CVE-2017-7470","url":"https://bugzilla.suse.com/1026633"},{"category":"external","summary":"SUSE Bug 1057882 for CVE-2017-7470","url":"https://bugzilla.suse.com/1057882"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Manager Server 3.0:rhnlib-2.5.84.4-6.1.noarch","SUSE Manager Server 3.0:salt-netapi-client-0.11.1-12.1.noarch","SUSE Manager Server 3.0:spacecmd-2.5.5.5-12.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-app-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-applet-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-config-files-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-config-files-common-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-config-files-tool-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-iss-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-iss-export-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-libs-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-package-push-server-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-server-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-sql-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-sql-oracle-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-sql-postgresql-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-tools-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-xml-export-libs-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-xmlrpc-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-base-2.5.7.15-21.1.noarch","SUSE Manager Server 3.0:spacewalk-base-minimal-2.5.7.15-21.1.noarch","SUSE Manager Server 3.0:spacewalk-base-minimal-config-2.5.7.15-21.1.noarch","SUSE Manager Server 3.0:spacewalk-certs-tools-2.5.1.8-17.1.noarch","SUSE Manager Server 3.0:spacewalk-client-tools-2.5.13.8-17.2.noarch","SUSE Manager Server 3.0:spacewalk-html-2.5.7.15-21.1.noarch","SUSE Manager Server 3.0:spacewalk-java-2.5.59.14-23.2.noarch","SUSE Manager Server 3.0:spacewalk-java-config-2.5.59.14-23.2.noarch","SUSE Manager Server 3.0:spacewalk-java-lib-2.5.59.14-23.2.noarch","SUSE Manager Server 3.0:spacewalk-java-oracle-2.5.59.14-23.2.noarch","SUSE Manager Server 3.0:spacewalk-java-postgresql-2.5.59.14-23.2.noarch","SUSE Manager Server 3.0:spacewalk-reports-2.5.1.2-3.1.noarch","SUSE Manager Server 3.0:spacewalk-setup-2.5.3.12-15.1.noarch","SUSE Manager Server 3.0:spacewalk-taskomatic-2.5.59.14-23.2.noarch","SUSE Manager Server 3.0:subscription-matcher-0.18-5.1.noarch","SUSE Manager Server 3.0:susemanager-3.0.21-21.1.s390x","SUSE Manager Server 3.0:susemanager-3.0.21-21.1.x86_64","SUSE Manager Server 3.0:susemanager-schema-3.0.19-21.2.noarch","SUSE Manager Server 3.0:susemanager-sls-0.1.20-23.1.noarch","SUSE Manager Server 3.0:susemanager-sync-data-3.0.16-24.1.noarch","SUSE Manager Server 3.0:susemanager-tools-3.0.21-21.1.s390x","SUSE Manager Server 3.0:susemanager-tools-3.0.21-21.1.x86_64","SUSE Manager Server 3.0:virtual-host-gatherer-1.0.13-6.1.noarch","SUSE Manager Server 3.0:virtual-host-gatherer-VMware-1.0.13-6.1.noarch"]}],"scores":[{"cvss_v3":{"baseScore":6.5,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","version":"3.0"},"products":["SUSE Manager Server 3.0:rhnlib-2.5.84.4-6.1.noarch","SUSE Manager Server 3.0:salt-netapi-client-0.11.1-12.1.noarch","SUSE Manager Server 3.0:spacecmd-2.5.5.5-12.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-app-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-applet-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-config-files-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-config-files-common-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-config-files-tool-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-iss-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-iss-export-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-libs-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-package-push-server-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-server-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-sql-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-sql-oracle-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-sql-postgresql-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-tools-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-xml-export-libs-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-backend-xmlrpc-2.5.24.9-22.1.noarch","SUSE Manager Server 3.0:spacewalk-base-2.5.7.15-21.1.noarch","SUSE Manager Server 3.0:spacewalk-base-minimal-2.5.7.15-21.1.noarch","SUSE Manager Server 3.0:spacewalk-base-minimal-config-2.5.7.15-21.1.noarch","SUSE Manager Server 3.0:spacewalk-certs-tools-2.5.1.8-17.1.noarch","SUSE Manager Server 3.0:spacewalk-client-tools-2.5.13.8-17.2.noarch","SUSE Manager Server 3.0:spacewalk-html-2.5.7.15-21.1.noarch","SUSE Manager Server 3.0:spacewalk-java-2.5.59.14-23.2.noarch","SUSE Manager Server 3.0:spacewalk-java-config-2.5.59.14-23.2.noarch","SUSE Manager Server 3.0:spacewalk-java-lib-2.5.59.14-23.2.noarch","SUSE Manager Server 3.0:spacewalk-java-oracle-2.5.59.14-23.2.noarch","SUSE Manager Server 3.0:spacewalk-java-postgresql-2.5.59.14-23.2.noarch","SUSE Manager Server 3.0:spacewalk-reports-2.5.1.2-3.1.noarch","SUSE Manager Server 3.0:spacewalk-setup-2.5.3.12-15.1.noarch","SUSE Manager Server 3.0:spacewalk-taskomatic-2.5.59.14-23.2.noarch","SUSE Manager Server 3.0:subscription-matcher-0.18-5.1.noarch","SUSE Manager Server 3.0:susemanager-3.0.21-21.1.s390x","SUSE Manager Server 3.0:susemanager-3.0.21-21.1.x86_64","SUSE Manager Server 3.0:susemanager-schema-3.0.19-21.2.noarch","SUSE Manager Server 3.0:susemanager-sls-0.1.20-23.1.noarch","SUSE Manager Server 3.0:susemanager-sync-data-3.0.16-24.1.noarch","SUSE Manager Server 3.0:susemanager-tools-3.0.21-21.1.s390x","SUSE Manager Server 3.0:susemanager-tools-3.0.21-21.1.x86_64","SUSE Manager Server 3.0:virtual-host-gatherer-1.0.13-6.1.noarch","SUSE Manager Server 3.0:virtual-host-gatherer-VMware-1.0.13-6.1.noarch"]}],"threats":[{"category":"impact","date":"2017-05-18T22:20:39Z","details":"important"}],"title":"CVE-2017-7470"}]}