SUSE: 2020:2648-1 important: SUSE Manager 3.2
Summary
This update for SUSE Manager 3.2 fixes the following issues: salt-netapi-client: - Refresh authentication module list to newer Salt versions spacewalk-admin: - Use the Salt API in authenticated and encrypted form (bsc#1175884, CVE-2020-8028) spacewalk-java: - Use the Salt API in authenticated and encrypted form (bsc#1175884, CVE-2020-8028) spacewalk-setup: - Use the Salt API in authenticated and encrypted form (bsc#1175884, CVE-2020-8028) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Manager Server 3.2: zypper in -t patch SUSE-SUSE-Manager-Server-3.2-2020-2648=1 Package List: - SUSE Manager Server 3.2 (noarch): salt-netapi-client-0.16.0-4.14.1 spacewalk-admin-2.8.4.7-3.15.1 spacewalk-java-2.8.78.30-3.53.1 spacewalk-java-config-2.8.78.30-3.53.1 spacewalk-java-lib-2.8.78.30-3.53.1 spacewalk-java-oracle-2.8.78.30-3.53.1 spacewalk-java-postgresql-2.8.78.30-3.53.1 spacewalk-setup-2.8.7.11-3.28.1 spacewalk-taskomatic-2.8.78.30-3.53.1
References
#1175884
Cross- CVE-2020-8028
Affected Products:
SUSE Manager Server 3.2
https://www.suse.com/security/cve/CVE-2020-8028.html
https://bugzilla.suse.com/1175884