Security update for SUSE Manager Server 3.0

SUSE Security Update: Security update for SUSE Manager Server 3.0
Announcement ID: SUSE-SU-2018:0285-1
Rating: moderate
References: #1015956 #1041993 #1045141 #1052283 #1055296 #1058110 #1060182 #1061273 #1061574 #1062936 #1063419 #1063588 #1063759 #1063891 #1063940 #1064393 #1065259 #1065676 #1065844 #1066404 #1066663 #1066819 #1066923 #1068032 #1068057 #1069615 #1069943 #1070372 #1070597 #1071314 #1071367 #1071553 #1073713 #1073739 #1074508 #1075044 #1076622 #970630 #979633
Affected Products:
  • SUSE Manager Server 3.0
    		•

    An update that solves three vulnerabilities and has 36 fixes is now available.

    Description:


    This update fixes the following issues:

    !!!NOTE: For PostgreSQL, schema migrations could take a long time (hours),
    depending on the number of synced !!! !!!packages and number of rows
    which requires cleanup. Please refer to the release notes for more
    information.!!!

    nutch:

    - Fix log hadoop into proper directory. (bsc#1061574)

    osad:

    - Fixed TypeError for force flag in setup_config that could happen when
    jabberd restart was needed. (bsc#1064393)

    pxe-default-image:

    - Spectre and Meltdown mitigation. (CVE-2017-5753, CVE-2017-5715,
    CVE-2017-5754, bsc#1068032)

    spacecmd:

    - Added custom JSON encoder in order to parse date fields correctly.
    (bsc#1070372)

    spacewalk-backend:

    - Fix restore hostname and ip*addr in templated documents. (bsc#1075044)
    - Fix directory name in spacewalk-data-fsck.
    - RhnServerNetwork refactoring. (bsc#1063419)

    spacewalk-branding:

    - Fix message about package profile synchronization. (bsc#1073739)
    - Fix naming of the Tools channel. (bsc#979633)

    spacewalk-client-tools:

    - Fix package sources.

    spacewalk-java:

    - Fix message about package profile synchronization. (bsc#1073739)
    - Add VM state as info gathered from VMware. (bsc#1063759)
    - Improve performance of token checking, when RPMs or metadata are
    downloaded from minions. (bsc#1061273)
    - Fix action names and date formatting in system event history.
    (bsc#1073713)
    - Fix incorrect 'os-release' report after SP migration. (bsc#1071553)
    - Fix failed package installation when in RES 32 and 64 bit packages are
    installed together. (bsc#1071314)
    - Add user preferences in order to change items-per-page. (bsc#1055296)
    - Display messages about wrong input more end-user friendly. (bsc#1015956)
    - Fix content refresh when product keys change. (bsc#1069943)
    - Allow 'Package List Refresh' when package architecture has changed.
    (bsc#1065259)
    - Support Open Enterprise Server 2018. (bsc#1060182)
    - Do not remove virtual instances for registered systems. (bsc#1063759)
    - Process right configfile on 'scheduleFileComparisons' API calls.
    (bsc#1066663)
    - Fix reported UUIDs for guests instances within a virtual host.
    (bsc#1063759)
    - Generate Order Items for OEM subscriptions. (bsc#1045141)
    - Enable 'Power Management' features on Salt minions.
    - Fail gracefully when GPG files are requested. (bsc#1065676)
    - Improve messaging for "Compare Packages". (bsc#1065844)
    - RhnServerNetwork refactoring. (bsc#1063419)
    - Add Adelaide timezone to selectable timezones. (bsc#1063891)

    spacewalk-reports:

    - More rhnServerNetwork refactoring. (bsc#1063419)

    spacewalk-search:

    - RhnServerNetwork refactoring. (bsc#1063419)

    spacewalk-web:

    - Add user preferences in order to change items-per-page. (bsc#1055296)

    susemanager:

    - Support Open Enterprise Server 2018. (bsc#1060182)
    - Fixed bootstrap repository path for SLES4SAP version 12 and 12.1.
    (bsc#1062936)
    - Fix error message for database upgrade failure.
    - Check for sufficient diskspace in /var/lib/pgsql.
    - Notify admin that database backups need reconfiguration after db upgrade.

    susemanager-docs_en:

    - Update text and image files:
    - List Open Enterprise Server 2015, 2015 SP1, 2018 as supported clients.

    susemanager-schema:

    - Fix hostname schema upgrade. (bsc#1076622)
    - Fix duplicate entries in channel listings.
    - Handle nevra not found case while fixing duplicate evr ids. (bsc#1074508)
    - Enable 'Power Management' features on Salt minions.
    - Fix unique index for evr and capability and remove duplicates during
    migration. (bsc#1058110)
    - RhnServerNetwork refactoring. (bsc#1063419)
    - Add Adelaide timezone to selectable timezones. (bsc#1063891)

    susemanager-sls:

    - Python3 compatibility fixes in modules and states.
    - Fix failing certs state for Tumbleweed. (bsc#970630)
    - Fix deprecated SLS files to avoid deprecation warnings during highstate.
    (bsc#1041993)

    susemanager-sync-data:

    - Support Open Enterprise Server 2018. (bsc#1060182)
    - Fix description for HA channel. (bsc#1063588)
    - Add support for CAASP. (bsc#1052283)
    - Add IBM DLPAR channels to SLES for SAP SPx ppc64le. (bsc#1068057)
    - Remove Certification Module 12 from SP2 and SP3. (bsc#1066819)
    - Add SUSE Manager Server 3.0 and 3.1 channels for mirroring.
    - Support SLE-RT 12 SP3. (bsc#1063940)
    - Add SLE12 LTSS as extension to SLES for SAP 12. (bsc#1069615)
    - Remove OES2018 Debuginfo channels. (bsc#1071367)

    virtual-host-gatherer:

    - Add VM state as info gathered from VMware. (bsc#1063759)
    - Explore the entire tree of nodes from VMware. (bsc#1070597)
    - Skip safely VMs which have no config attribute on VMware. (bsc#1066923)

    How to apply this update: 1. Log in as root user to the SUSE Manager
    server. 2. Stop the Spacewalk service: spacewalk-service stop 3. Apply the
    patch using either zypper patch or YaST Online Update. 4. Upgrade the
    database schema: spacewalk-schema-upgrade 5. Start the Spacewalk service:
    spacewalk-service start

    Patch Instructions:

    To install this SUSE Security Update use YaST online_update.
    Alternatively you can run the command listed for your product:

    • SUSE Manager Server 3.0:
      zypper in -t patch SUSE-SUSE-Manager-Server-3.0-2018-204=1

    To bring your system up-to-date, use "zypper patch".

    Package List:

    • SUSE Manager Server 3.0 (s390x x86_64):
      • spacewalk-branding-2.5.2.16-16.9.1
      • susemanager-3.0.25-25.9.1
      • susemanager-tools-3.0.25-25.9.1
    • SUSE Manager Server 3.0 (noarch):
      • nutch-1.0-0.9.8.1
      • osa-common-5.11.64.4-4.3.1
      • osa-dispatcher-5.11.64.4-4.3.1
      • pxe-default-image-3.0-0.14.3.6
      • pxe-default-image-debugsource-3.0-0.14.3.6
      • spacecmd-2.5.5.10-16.12.1
      • spacewalk-backend-2.5.24.15-26.14.1
      • spacewalk-backend-app-2.5.24.15-26.14.1
      • spacewalk-backend-applet-2.5.24.15-26.14.1
      • spacewalk-backend-config-files-2.5.24.15-26.14.1
      • spacewalk-backend-config-files-common-2.5.24.15-26.14.1
      • spacewalk-backend-config-files-tool-2.5.24.15-26.14.1
      • spacewalk-backend-iss-2.5.24.15-26.14.1
      • spacewalk-backend-iss-export-2.5.24.15-26.14.1
      • spacewalk-backend-libs-2.5.24.15-26.14.1
      • spacewalk-backend-package-push-server-2.5.24.15-26.14.1
      • spacewalk-backend-server-2.5.24.15-26.14.1
      • spacewalk-backend-sql-2.5.24.15-26.14.1
      • spacewalk-backend-sql-oracle-2.5.24.15-26.14.1
      • spacewalk-backend-sql-postgresql-2.5.24.15-26.14.1
      • spacewalk-backend-tools-2.5.24.15-26.14.1
      • spacewalk-backend-xml-export-libs-2.5.24.15-26.14.1
      • spacewalk-backend-xmlrpc-2.5.24.15-26.14.1
      • spacewalk-base-2.5.7.20-25.12.1
      • spacewalk-base-minimal-2.5.7.20-25.12.1
      • spacewalk-base-minimal-config-2.5.7.20-25.12.1
      • spacewalk-client-tools-2.5.13.9-18.3.3
      • spacewalk-html-2.5.7.20-25.12.1
      • spacewalk-java-2.5.59.19-27.12.3
      • spacewalk-java-config-2.5.59.19-27.12.3
      • spacewalk-java-lib-2.5.59.19-27.12.3
      • spacewalk-java-oracle-2.5.59.19-27.12.3
      • spacewalk-java-postgresql-2.5.59.19-27.12.3
      • spacewalk-reports-2.5.1.4-4.6.1
      • spacewalk-search-2.5.2.4-4.6.1
      • spacewalk-taskomatic-2.5.59.19-27.12.3
      • susemanager-advanced-topics_en-pdf-3-25.11.3
      • susemanager-best-practices_en-pdf-3-25.11.3
      • susemanager-docs_en-3-25.11.3
      • susemanager-getting-started_en-pdf-3-25.11.3
      • susemanager-jsp_en-3-25.11.3
      • susemanager-reference_en-pdf-3-25.11.3
      • susemanager-schema-3.0.24-25.11.1
      • susemanager-sls-0.1.25-27.12.1
      • susemanager-sync-data-3.0.19-28.6.1
      • virtual-host-gatherer-1.0.16-7.6.1
      • virtual-host-gatherer-VMware-1.0.16-7.6.1

    References: