Security update for spacewalk-java
SUSE Security Update: Security update for spacewalk-java
This update fixes an admin user dialog problem in
spacewalk. The "add new admin user" functionality didn't
get disabled after it was used. So after install/adding
the first admin user anyone could have added additional
admin users.
Security Issue reference:
* CVE-2013-4480
>
| Announcement ID: | SUSE-SU-2013:1661-1 |
| Rating: | critical |
| References: | #848639 |
| Affected Products: |
An update that fixes one vulnerability is now available. It includes one version update.
Description:
This update fixes an admin user dialog problem in
spacewalk. The "add new admin user" functionality didn't
get disabled after it was used. So after install/adding
the first admin user anyone could have added additional
admin users.
Security Issue reference:
* CVE-2013-4480
Patch Instructions:
To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- SUSE Manager 1.7 for SLE 11 SP2:
zypper in -t patch sleman17sp2-spacewalk-java-8506
To bring your system up-to-date, use "zypper patch".
Package List:
- SUSE Manager 1.7 for SLE 11 SP2 (noarch) [New Version: 1.7.54.28]:
- spacewalk-java-1.7.54.28-0.9.1
- spacewalk-java-config-1.7.54.28-0.9.1
- spacewalk-java-lib-1.7.54.28-0.9.1
- spacewalk-java-oracle-1.7.54.28-0.9.1
- spacewalk-java-postgresql-1.7.54.28-0.9.1
- spacewalk-taskomatic-1.7.54.28-0.9.1
References:
- http://support.novell.com/security/cve/CVE-2013-4480.html
- https://bugzilla.novell.com/848639
- http://download.suse.com/patch/finder/?keywords=aa559fbaae468d78dbd943db5b17eeea