CVE catalog
CVE-2020-1693
Recommended update for SUSE Manager Proxy 4.0
- Severity
- High · CVSS 8.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 4.27% · Oct 25, 2026
This update fixes the following issues: mgr-osad: - Take care that osad is not disabled nor deactivated during update (bsc#1157700, bsc#1158697) patterns-suse-manager: - Add recommends for virtualization-host-formula to suma_server pattern - Add recommends for virtualization-host-formula to retail spacecmd: - Bugfix: attempt to purge SSM when it is empty (bsc#1155372) spacewalk-backend: - Fix mgrcfg-client python3 breakage (bsc#1164309) - Update doc link to point to new documentation server - Prevent timestamp format exception on mgr-inter-sync while processing comps (bsc#1157346) - When downloading repo metadata, don't add '/' to the repo url if it already ends with one (bsc#1158899) - Use HTTP proxy settings when fetching the mirrorlist on spacewalk-repo-sync (bsc#1159076) - Enhance suseProducts via ISS to fix SP migration on slave server (bsc#1159184) - Prevent a traceback when reposyncing openSUSE 15.1 (bsc#1158672) - Close config files after reading them (bsc#1158283) - Associate VMs and systems with the same machine ID at bootstrap (bsc#1144176) spacewalk-certs-tools: - Add 'start_event_grains' minion option to configfile when generated by bootstrap script - Forbid multiple activation keys for salt minions during bootstrap (bsc#1164452) - Add additional minion options to configfile when generated by bootstrap script (bsc#1159492) - Change the order to check the version correctly for RES (bsc#1152795) spacewalk-client-tools: - Spell correctly 'successful' and 'successfully' spacewalk-web: - Don't validate mandatory fields that are not visible (bsc#1158943) - Fix count of changes to build (bsc#1160940) - Report merge_subscriptions message in a readable way (bsc#1140332) - Fix ordering by date (bsc#1158818) supportutils-plugin-susemanager-client: - Rename rhncfg-actions to mgr-cfg-actions supportutils-plugin-susemanager-proxy: - Rename rhncfg-actions to mgr-cfg-actions How to apply this update: 1. Log in as root user to the SUSE Manager proxy. 2. Stop the proxy service: spacewalk-proxy stop 3. Apply the patch using either zypper patch or YaST Online Update. 4. Start the Spacewalk service: spacewalk-proxy start
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Suse | mgr-osad | manager proxy module 4.0 | 4.0.11-3.9.2 | fixed |
| Suse | patterns-suse-manager | manager proxy module 4.0 | 4.0-9.10.2 | fixed |
| Suse | spacecmd | manager proxy module 4.0 | 4.0.18-3.13.2 | fixed |
| Suse | spacewalk-backend | manager proxy module 4.0 | 4.0.30-3.23.3 | fixed |
| Suse | spacewalk-certs-tools | manager proxy module 4.0 | 4.0.15-3.15.2 | fixed |
| Suse | spacewalk-client-tools | manager proxy module 4.0 | 4.0.12-3.13.2 | fixed |
| Suse | spacewalk-web | manager proxy module 4.0 | 4.0.19-3.18.3 | fixed |
| Suse | supportutils-plugin-susemanager-client | manager proxy module 4.0 | 4.0.3-3.3.2 | fixed |
| Suse | supportutils-plugin-susemanager-proxy | manager proxy module 4.0 | 4.0.3-3.3.2 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Suse | mgr-osad | rpm | manager proxy module 4.0 | 4.0.11-3.9.2 | Not reported | SUSE-RU-2020:0671-1 | Not reported |
| Suse | patterns-suse-manager | rpm | manager proxy module 4.0 | 4.0-9.10.2 | Not reported | SUSE-RU-2020:0671-1 | Not reported |
| Suse | spacecmd | rpm | manager proxy module 4.0 | 4.0.18-3.13.2 | Not reported | SUSE-RU-2020:0671-1 | Not reported |
| Suse | spacewalk-backend | rpm | manager proxy module 4.0 | 4.0.30-3.23.3 | Not reported | SUSE-RU-2020:0671-1 | Not reported |
| Suse | spacewalk-certs-tools | rpm | manager proxy module 4.0 | 4.0.15-3.15.2 | Not reported | SUSE-RU-2020:0671-1 | Not reported |
| Suse | spacewalk-client-tools | rpm | manager proxy module 4.0 | 4.0.12-3.13.2 | Not reported | SUSE-RU-2020:0671-1 | Not reported |
| Suse | spacewalk-web | rpm | manager proxy module 4.0 | 4.0.19-3.18.3 | Not reported | SUSE-RU-2020:0671-1 | Not reported |
| Suse | supportutils-plugin-susemanager-client | rpm | manager proxy module 4.0 | 4.0.3-3.3.2 | Not reported | SUSE-RU-2020:0671-1 | Not reported |
| Suse | supportutils-plugin-susemanager-proxy | rpm | manager proxy module 4.0 | 4.0.3-3.3.2 | Not reported | SUSE-RU-2020:0671-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: