{"id":"SUSE-SU-2020:2647-1","summary":"Security update for for SUSE Manager 4.1","details":"This update for SUSE Manager 4.1 fixes the following issues:\n\ngoogle-gson:\n\n- Use packages from SUSE:SLE-15-SP2:Update:Products:Manager41:Update to fix building other packages.\n\nhttpcomponents-client:\n\n- Use packages from SUSE:SLE-15-SP2:Update:Products:Manager41:Update to fix building other packages.\n\nhttpcomponents-core:\n\n- Use packages from SUSE:SLE-15-SP2:Update:Products:Manager41:Update to fix building other packages.\n\nsalt-netapi-client:\n\n- Refresh authentication module list to newer Salt versions\n\nspacewalk-admin:\n\n- Use the Salt API in authenticated and encrypted form (bsc#1175884, CVE-2020-8028)\n\nspacewalk-java:\n\n- Use the Salt API in authenticated and encrypted form (bsc#1175884, CVE-2020-8028)\n\nspacewalk-setup:\n\n- Use the Salt API in authenticated and encrypted form (bsc#1175884, CVE-2020-8028)\n\nvelocity:\n\n- Use packages from SUSE:SLE-15-SP2:Update:Products:Manager41:Update to fix building other packages.\n","modified":"2026-02-04T04:30:37.883478Z","published":"2020-09-16T12:22:50Z","related":["CVE-2020-8028"],"upstream":["CVE-2020-8028"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202647-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1175884"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-8028"}],"affected":[{"package":{"name":"google-gson","ecosystem":"SUSE:Manager Server Module 4.1","purl":"pkg:rpm/suse/google-gson&distro=SUSE%20Manager%20Server%20Module%204.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5-3.4.3"}]}],"ecosystem_specific":{"binaries":[{"spacewalk-java-lib":"4.1.19-3.8.2","spacewalk-setup":"4.1.6-3.3.2","google-gson":"2.8.5-3.4.3","httpcomponents-client":"4.5.6-3.4.2","httpcomponents-core":"4.4.10-3.4.2","spacewalk-java-config":"4.1.19-3.8.2","spacewalk-java-postgresql":"4.1.19-3.8.2","spacewalk-java":"4.1.19-3.8.2","spacewalk-taskomatic":"4.1.19-3.8.2","salt-netapi-client":"0.17.0-3.3.2","spacewalk-admin":"4.1.6-3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2647-1.json"}},{"package":{"name":"httpcomponents-client","ecosystem":"SUSE:Manager Server Module 4.1","purl":"pkg:rpm/suse/httpcomponents-client&distro=SUSE%20Manager%20Server%20Module%204.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.6-3.4.2"}]}],"ecosystem_specific":{"binaries":[{"salt-netapi-client":"0.17.0-3.3.2","spacewalk-java-lib":"4.1.19-3.8.2","spacewalk-java-postgresql":"4.1.19-3.8.2","spacewalk-java":"4.1.19-3.8.2","spacewalk-setup":"4.1.6-3.3.2","google-gson":"2.8.5-3.4.3","httpcomponents-client":"4.5.6-3.4.2","httpcomponents-core":"4.4.10-3.4.2","spacewalk-admin":"4.1.6-3.3.3","spacewalk-java-config":"4.1.19-3.8.2","spacewalk-taskomatic":"4.1.19-3.8.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2647-1.json"}},{"package":{"name":"httpcomponents-core","ecosystem":"SUSE:Manager Server Module 4.1","purl":"pkg:rpm/suse/httpcomponents-core&distro=SUSE%20Manager%20Server%20Module%204.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.10-3.4.2"}]}],"ecosystem_specific":{"binaries":[{"spacewalk-admin":"4.1.6-3.3.3","spacewalk-java-config":"4.1.19-3.8.2","spacewalk-java-lib":"4.1.19-3.8.2","spacewalk-java":"4.1.19-3.8.2","spacewalk-setup":"4.1.6-3.3.2","spacewalk-taskomatic":"4.1.19-3.8.2","google-gson":"2.8.5-3.4.3","httpcomponents-client":"4.5.6-3.4.2","httpcomponents-core":"4.4.10-3.4.2","salt-netapi-client":"0.17.0-3.3.2","spacewalk-java-postgresql":"4.1.19-3.8.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2647-1.json"}},{"package":{"name":"salt-netapi-client","ecosystem":"SUSE:Manager Server Module 4.1","purl":"pkg:rpm/suse/salt-netapi-client&distro=SUSE%20Manager%20Server%20Module%204.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.0-3.3.2"}]}],"ecosystem_specific":{"binaries":[{"google-gson":"2.8.5-3.4.3","httpcomponents-client":"4.5.6-3.4.2","httpcomponents-core":"4.4.10-3.4.2","spacewalk-java-config":"4.1.19-3.8.2","spacewalk-java":"4.1.19-3.8.2","spacewalk-taskomatic":"4.1.19-3.8.2","salt-netapi-client":"0.17.0-3.3.2","spacewalk-admin":"4.1.6-3.3.3","spacewalk-java-lib":"4.1.19-3.8.2","spacewalk-java-postgresql":"4.1.19-3.8.2","spacewalk-setup":"4.1.6-3.3.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2647-1.json"}},{"package":{"name":"spacewalk-admin","ecosystem":"SUSE:Manager Server Module 4.1","purl":"pkg:rpm/suse/spacewalk-admin&distro=SUSE%20Manager%20Server%20Module%204.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.6-3.3.3"}]}],"ecosystem_specific":{"binaries":[{"spacewalk-java-postgresql":"4.1.19-3.8.2","spacewalk-java":"4.1.19-3.8.2","spacewalk-setup":"4.1.6-3.3.2","spacewalk-taskomatic":"4.1.19-3.8.2","google-gson":"2.8.5-3.4.3","salt-netapi-client":"0.17.0-3.3.2","spacewalk-java-config":"4.1.19-3.8.2","spacewalk-java-lib":"4.1.19-3.8.2","httpcomponents-client":"4.5.6-3.4.2","httpcomponents-core":"4.4.10-3.4.2","spacewalk-admin":"4.1.6-3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2647-1.json"}},{"package":{"name":"spacewalk-java","ecosystem":"SUSE:Manager Server Module 4.1","purl":"pkg:rpm/suse/spacewalk-java&distro=SUSE%20Manager%20Server%20Module%204.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.19-3.8.2"}]}],"ecosystem_specific":{"binaries":[{"spacewalk-java-lib":"4.1.19-3.8.2","spacewalk-java":"4.1.19-3.8.2","google-gson":"2.8.5-3.4.3","httpcomponents-core":"4.4.10-3.4.2","spacewalk-java-config":"4.1.19-3.8.2","spacewalk-java-postgresql":"4.1.19-3.8.2","spacewalk-setup":"4.1.6-3.3.2","spacewalk-taskomatic":"4.1.19-3.8.2","httpcomponents-client":"4.5.6-3.4.2","salt-netapi-client":"0.17.0-3.3.2","spacewalk-admin":"4.1.6-3.3.3"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2647-1.json"}},{"package":{"name":"spacewalk-setup","ecosystem":"SUSE:Manager Server Module 4.1","purl":"pkg:rpm/suse/spacewalk-setup&distro=SUSE%20Manager%20Server%20Module%204.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.6-3.3.2"}]}],"ecosystem_specific":{"binaries":[{"google-gson":"2.8.5-3.4.3","salt-netapi-client":"0.17.0-3.3.2","spacewalk-admin":"4.1.6-3.3.3","spacewalk-java":"4.1.19-3.8.2","spacewalk-setup":"4.1.6-3.3.2","httpcomponents-client":"4.5.6-3.4.2","httpcomponents-core":"4.4.10-3.4.2","spacewalk-java-config":"4.1.19-3.8.2","spacewalk-java-lib":"4.1.19-3.8.2","spacewalk-java-postgresql":"4.1.19-3.8.2","spacewalk-taskomatic":"4.1.19-3.8.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2647-1.json"}}],"schema_version":"1.7.3"}