CVE catalog

CVE-2018-1077

Security update for SUSE Manager Server 3.2

[CVE catalog]

Severity
Medium · CVSS 5CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.04% · Oct 25, 2026

This update fixes the following issues: mgr-osad: - Take care that osad is not disabled nor deactivated during update (bsc#1157700, bsc#1158697) patterns-suse-manager: - Add recommends for virtualization-host-formula to suma_server pattern - Add recommends for virtualization-host-formula to retail spacecmd: - Bugfix: attempt to purge SSM when it is empty (bsc#1155372) spacewalk-backend: - Fix mgrcfg-client python3 breakage (bsc#1164309) - Update doc link to point to new documentation server - Prevent timestamp format exception on mgr-inter-sync while processing comps (bsc#1157346) - When downloading repo metadata, don't add '/' to the repo url if it already ends with one (bsc#1158899) - Use HTTP proxy settings when fetching the mirrorlist on spacewalk-repo-sync (bsc#1159076) - Enhance suseProducts via ISS to fix SP migration on slave server (bsc#1159184) - Prevent a traceback when reposyncing openSUSE 15.1 (bsc#1158672) - Close config files after reading them (bsc#1158283) - Associate VMs and systems with the same machine ID at bootstrap (bsc#1144176) spacewalk-certs-tools: - Add 'start_event_grains' minion option to configfile when generated by bootstrap script - Forbid multiple activation keys for salt minions during bootstrap (bsc#1164452) - Add additional minion options to configfile when generated by bootstrap script (bsc#1159492) - Change the order to check the version correctly for RES (bsc#1152795) spacewalk-client-tools: - Spell correctly 'successful' and 'successfully' spacewalk-web: - Don't validate mandatory fields that are not visible (bsc#1158943) - Fix count of changes to build (bsc#1160940) - Report merge_subscriptions message in a readable way (bsc#1140332) - Fix ordering by date (bsc#1158818) supportutils-plugin-susemanager-client: - Rename rhncfg-actions to mgr-cfg-actions supportutils-plugin-susemanager-proxy: - Rename rhncfg-actions to mgr-cfg-actions How to apply this update: 1. Log in as root user to the SUSE Manager proxy. 2. Stop the proxy service: spacewalk-proxy stop 3. Apply the patch using either zypper patch or YaST Online Update. 4. Start the Spacewalk service: spacewalk-proxy start

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Susemgr-osadmanager proxy module 4.04.0.11-3.9.2fixed
Susepatterns-suse-managermanager proxy module 4.04.0-9.10.2fixed
Susespacecmdmanager proxy module 4.04.0.18-3.13.2fixed
Susespacewalk-backendmanager proxy module 4.04.0.30-3.23.3fixed
Susespacewalk-certs-toolsmanager proxy module 4.04.0.15-3.15.2fixed
Susespacewalk-client-toolsmanager proxy module 4.04.0.12-3.13.2fixed
Susespacewalk-webmanager proxy module 4.04.0.19-3.18.3fixed
Susesupportutils-plugin-susemanager-clientmanager proxy module 4.04.0.3-3.3.2fixed
Susesupportutils-plugin-susemanager-proxymanager proxy module 4.04.0.3-3.3.2fixed
Susemgr-osadmanager proxy module 4.04.0.11-3.9.2fixed
Susepatterns-suse-managermanager proxy module 4.04.0-9.10.2fixed
Susespacecmdmanager proxy module 4.04.0.18-3.13.2fixed
Susespacewalk-backendmanager proxy module 4.04.0.30-3.23.3fixed
Susespacewalk-certs-toolsmanager proxy module 4.04.0.15-3.15.2fixed
Susespacewalk-client-toolsmanager proxy module 4.04.0.12-3.13.2fixed
Susespacewalk-webmanager proxy module 4.04.0.19-3.18.3fixed
Susesupportutils-plugin-susemanager-clientmanager proxy module 4.04.0.3-3.3.2fixed
Susesupportutils-plugin-susemanager-proxymanager proxy module 4.04.0.3-3.3.2fixed
Susebranch-network-formulamanager server module 4.00.1.1580471316.1839544-3.10.2fixed
Suseimage-sync-formulamanager server module 4.00.1.1579102150.4716559-3.11.2fixed
Susemgr-osadmanager server module 4.04.0.11-3.9.2fixed
Susepatterns-suse-managermanager server module 4.04.0-9.10.2fixed
Suseprometheus-formulamanager server module 4.00.1-4.7.2fixed
Susepxe-default-image-sle15manager server module 4.04.0.1-20200305173027fixed
Susepxe-formulamanager server module 4.00.1.1580384994.6076a7e-3.11.2fixed
Susepy26-compat-saltmanager server module 4.02016.11.10-10.11.2fixed
Susepython-susemanager-retailmanager server module 4.01.0.1580471316.1839544-3.13.2fixed
Suseredstone-xmlrpcmanager server module 4.01.1_20071120-0.11.3.2fixed
Susesalt-netapi-clientmanager server module 4.00.17.0-4.3.2fixed
Susespacecmdmanager server module 4.04.0.18-3.13.2fixed
Susespacewalk-adminmanager server module 4.04.0.9-3.6.2fixed
Susespacewalk-backendmanager server module 4.04.0.30-3.23.3fixed
Susespacewalk-certs-toolsmanager server module 4.04.0.15-3.15.2fixed
Susespacewalk-client-toolsmanager server module 4.04.0.12-3.13.2fixed
Susespacewalk-javamanager server module 4.04.0.31-3.23.1fixed
Susespacewalk-searchmanager server module 4.04.0.9-3.11.2fixed
Susespacewalk-setupmanager server module 4.04.0.13-3.11.1fixed
Susespacewalk-utilsmanager server module 4.04.0.16-3.15.2fixed
Susespacewalk-webmanager server module 4.04.0.19-3.18.3fixed
Susesubscription-matchermanager server module 4.00.25-3.3.2fixed
Susesusemanagermanager server module 4.04.0.22-3.20.3fixed
Susesusemanager-doc-indexesmanager server module 4.04.0-10.18.2fixed
Susesusemanager-docs_enmanager server module 4.04.0-10.18.2fixed
Susesusemanager-schemamanager server module 4.04.0.18-3.17.2fixed
Susesusemanager-slsmanager server module 4.04.0.24-3.17.2fixed
Susesusemanager-sync-datamanager server module 4.04.0.16-3.15.2fixed
Susesystem-lock-formulamanager server module 4.00.2-4.5.1fixed
Susevirtualization-host-formulamanager server module 4.00.2-4.3.2fixed
Susepy26-compat-saltmanager server 3.22016.11.10-6.35.1fixed
Suseredstone-xmlrpcmanager server 3.21.1_20071120-0.11.3.1fixed
Susespacecmdmanager server 3.22.8.25.14-3.32.1fixed
Susespacewalk-adminmanager server 3.22.8.4.6-3.12.1fixed
Susespacewalk-backendmanager server 3.22.8.57.22-3.48.1fixed
Susespacewalk-certs-toolsmanager server 3.22.8.8.14-3.23.1fixed
Susespacewalk-client-toolsmanager server 3.22.8.22.7-3.12.1fixed
Susespacewalk-javamanager server 3.22.8.78.28-3.47.1fixed
Susespacewalk-setupmanager server 3.22.8.7.10-3.25.1fixed
Susespacewalk-utilsmanager server 3.22.8.18.6-3.12.1fixed
Susespacewalk-webmanager server 3.22.8.7.23-3.45.1fixed
Susesubscription-matchermanager server 3.20.25-4.15.1fixed
Susesusemanagermanager server 3.23.2.23-3.40.2fixed
Susesusemanager-slsmanager server 3.23.2.30-3.44.1fixed
Susesusemanager-sync-datamanager server 3.23.2.19-3.35.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Susemgr-osadrpmmanager proxy module 4.04.0.11-3.9.2Not reportedSUSE-RU-2020:0671-1Not reported
Susepatterns-suse-managerrpmmanager proxy module 4.04.0-9.10.2Not reportedSUSE-RU-2020:0671-1Not reported
Susespacecmdrpmmanager proxy module 4.04.0.18-3.13.2Not reportedSUSE-RU-2020:0671-1Not reported
Susespacewalk-backendrpmmanager proxy module 4.04.0.30-3.23.3Not reportedSUSE-RU-2020:0671-1Not reported
Susespacewalk-certs-toolsrpmmanager proxy module 4.04.0.15-3.15.2Not reportedSUSE-RU-2020:0671-1Not reported
Susespacewalk-client-toolsrpmmanager proxy module 4.04.0.12-3.13.2Not reportedSUSE-RU-2020:0671-1Not reported
Susespacewalk-webrpmmanager proxy module 4.04.0.19-3.18.3Not reportedSUSE-RU-2020:0671-1Not reported
Susesupportutils-plugin-susemanager-clientrpmmanager proxy module 4.04.0.3-3.3.2Not reportedSUSE-RU-2020:0671-1Not reported
Susesupportutils-plugin-susemanager-proxyrpmmanager proxy module 4.04.0.3-3.3.2Not reportedSUSE-RU-2020:0671-1Not reported
Susemgr-osadrpmmanager proxy module 4.04.0.11-3.9.2Not reportedSUSE-SU-2020:0671-1Not reported
Susepatterns-suse-managerrpmmanager proxy module 4.04.0-9.10.2Not reportedSUSE-SU-2020:0671-1Not reported
Susespacecmdrpmmanager proxy module 4.04.0.18-3.13.2Not reportedSUSE-SU-2020:0671-1Not reported
Susespacewalk-backendrpmmanager proxy module 4.04.0.30-3.23.3Not reportedSUSE-SU-2020:0671-1Not reported
Susespacewalk-certs-toolsrpmmanager proxy module 4.04.0.15-3.15.2Not reportedSUSE-SU-2020:0671-1Not reported
Susespacewalk-client-toolsrpmmanager proxy module 4.04.0.12-3.13.2Not reportedSUSE-SU-2020:0671-1Not reported
Susespacewalk-webrpmmanager proxy module 4.04.0.19-3.18.3Not reportedSUSE-SU-2020:0671-1Not reported
Susesupportutils-plugin-susemanager-clientrpmmanager proxy module 4.04.0.3-3.3.2Not reportedSUSE-SU-2020:0671-1Not reported
Susesupportutils-plugin-susemanager-proxyrpmmanager proxy module 4.04.0.3-3.3.2Not reportedSUSE-SU-2020:0671-1Not reported
Susebranch-network-formularpmmanager server module 4.00.1.1580471316.1839544-3.10.2Not reportedSUSE-SU-2020:0671-1Not reported
Suseimage-sync-formularpmmanager server module 4.00.1.1579102150.4716559-3.11.2Not reportedSUSE-SU-2020:0671-1Not reported
Susemgr-osadrpmmanager server module 4.04.0.11-3.9.2Not reportedSUSE-SU-2020:0671-1Not reported
Susepatterns-suse-managerrpmmanager server module 4.04.0-9.10.2Not reportedSUSE-SU-2020:0671-1Not reported
Suseprometheus-formularpmmanager server module 4.00.1-4.7.2Not reportedSUSE-SU-2020:0671-1Not reported
Susepxe-default-image-sle15rpmmanager server module 4.04.0.1-20200305173027Not reportedSUSE-SU-2020:0671-1Not reported
Susepxe-formularpmmanager server module 4.00.1.1580384994.6076a7e-3.11.2Not reportedSUSE-SU-2020:0671-1Not reported
Susepy26-compat-saltrpmmanager server module 4.02016.11.10-10.11.2Not reportedSUSE-SU-2020:0671-1Not reported
Susepython-susemanager-retailrpmmanager server module 4.01.0.1580471316.1839544-3.13.2Not reportedSUSE-SU-2020:0671-1Not reported
Suseredstone-xmlrpcrpmmanager server module 4.01.1_20071120-0.11.3.2Not reportedSUSE-SU-2020:0671-1Not reported
Susesalt-netapi-clientrpmmanager server module 4.00.17.0-4.3.2Not reportedSUSE-SU-2020:0671-1Not reported
Susespacecmdrpmmanager server module 4.04.0.18-3.13.2Not reportedSUSE-SU-2020:0671-1Not reported
Susespacewalk-adminrpmmanager server module 4.04.0.9-3.6.2Not reportedSUSE-SU-2020:0671-1Not reported
Susespacewalk-backendrpmmanager server module 4.04.0.30-3.23.3Not reportedSUSE-SU-2020:0671-1Not reported
Susespacewalk-certs-toolsrpmmanager server module 4.04.0.15-3.15.2Not reportedSUSE-SU-2020:0671-1Not reported
Susespacewalk-client-toolsrpmmanager server module 4.04.0.12-3.13.2Not reportedSUSE-SU-2020:0671-1Not reported
Susespacewalk-javarpmmanager server module 4.04.0.31-3.23.1Not reportedSUSE-SU-2020:0671-1Not reported
Susespacewalk-searchrpmmanager server module 4.04.0.9-3.11.2Not reportedSUSE-SU-2020:0671-1Not reported
Susespacewalk-setuprpmmanager server module 4.04.0.13-3.11.1Not reportedSUSE-SU-2020:0671-1Not reported
Susespacewalk-utilsrpmmanager server module 4.04.0.16-3.15.2Not reportedSUSE-SU-2020:0671-1Not reported
Susespacewalk-webrpmmanager server module 4.04.0.19-3.18.3Not reportedSUSE-SU-2020:0671-1Not reported
Susesubscription-matcherrpmmanager server module 4.00.25-3.3.2Not reportedSUSE-SU-2020:0671-1Not reported
Susesusemanagerrpmmanager server module 4.04.0.22-3.20.3Not reportedSUSE-SU-2020:0671-1Not reported
Susesusemanager-doc-indexesrpmmanager server module 4.04.0-10.18.2Not reportedSUSE-SU-2020:0671-1Not reported
Susesusemanager-docs_enrpmmanager server module 4.04.0-10.18.2Not reportedSUSE-SU-2020:0671-1Not reported
Susesusemanager-schemarpmmanager server module 4.04.0.18-3.17.2Not reportedSUSE-SU-2020:0671-1Not reported
Susesusemanager-slsrpmmanager server module 4.04.0.24-3.17.2Not reportedSUSE-SU-2020:0671-1Not reported
Susesusemanager-sync-datarpmmanager server module 4.04.0.16-3.15.2Not reportedSUSE-SU-2020:0671-1Not reported
Susesystem-lock-formularpmmanager server module 4.00.2-4.5.1Not reportedSUSE-SU-2020:0671-1Not reported
Susevirtualization-host-formularpmmanager server module 4.00.2-4.3.2Not reportedSUSE-SU-2020:0671-1Not reported
Susepy26-compat-saltrpmmanager server 3.22016.11.10-6.35.1Not reportedSUSE-SU-2020:0856-1Not reported
Suseredstone-xmlrpcrpmmanager server 3.21.1_20071120-0.11.3.1Not reportedSUSE-SU-2020:0856-1Not reported
Susespacecmdrpmmanager server 3.22.8.25.14-3.32.1Not reportedSUSE-SU-2020:0856-1Not reported
Susespacewalk-adminrpmmanager server 3.22.8.4.6-3.12.1Not reportedSUSE-SU-2020:0856-1Not reported
Susespacewalk-backendrpmmanager server 3.22.8.57.22-3.48.1Not reportedSUSE-SU-2020:0856-1Not reported
Susespacewalk-certs-toolsrpmmanager server 3.22.8.8.14-3.23.1Not reportedSUSE-SU-2020:0856-1Not reported
Susespacewalk-client-toolsrpmmanager server 3.22.8.22.7-3.12.1Not reportedSUSE-SU-2020:0856-1Not reported
Susespacewalk-javarpmmanager server 3.22.8.78.28-3.47.1Not reportedSUSE-SU-2020:0856-1Not reported
Susespacewalk-setuprpmmanager server 3.22.8.7.10-3.25.1Not reportedSUSE-SU-2020:0856-1Not reported
Susespacewalk-utilsrpmmanager server 3.22.8.18.6-3.12.1Not reportedSUSE-SU-2020:0856-1Not reported
Susespacewalk-webrpmmanager server 3.22.8.7.23-3.45.1Not reportedSUSE-SU-2020:0856-1Not reported
Susesubscription-matcherrpmmanager server 3.20.25-4.15.1Not reportedSUSE-SU-2020:0856-1Not reported
Susesusemanagerrpmmanager server 3.23.2.23-3.40.2Not reportedSUSE-SU-2020:0856-1Not reported
Susesusemanager-slsrpmmanager server 3.23.2.30-3.44.1Not reportedSUSE-SU-2020:0856-1Not reported
Susesusemanager-sync-datarpmmanager server 3.23.2.19-3.35.1Not reportedSUSE-SU-2020:0856-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]