{"id":"SUSE-SU-2020:2648-1","summary":"Security update for SUSE Manager 3.2","details":"This update for SUSE Manager 3.2 fixes the following issues:\n\nsalt-netapi-client:\n\n- Refresh authentication module list to newer Salt versions\n\nspacewalk-admin:\n\n- Use the Salt API in authenticated and encrypted form (bsc#1175884, CVE-2020-8028)\n\nspacewalk-java:\n\n- Use the Salt API in authenticated and encrypted form (bsc#1175884, CVE-2020-8028)\n\nspacewalk-setup:\n\n- Use the Salt API in authenticated and encrypted form (bsc#1175884, CVE-2020-8028)\n","modified":"2025-05-02T04:10:23.001858Z","published":"2020-09-16T12:23:03Z","related":["CVE-2020-8028"],"upstream":["CVE-2020-8028"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202648-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1175884"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-8028"}],"affected":[{"package":{"name":"salt-netapi-client","ecosystem":"SUSE:Manager Server 3.2","purl":"pkg:rpm/suse/salt-netapi-client&distro=SUSE%20Manager%20Server%203.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.0-4.14.1"}]}],"ecosystem_specific":{"binaries":[{"spacewalk-admin":"2.8.4.7-3.15.1","spacewalk-java-config":"2.8.78.30-3.53.1","spacewalk-java-lib":"2.8.78.30-3.53.1","spacewalk-java-postgresql":"2.8.78.30-3.53.1","spacewalk-setup":"2.8.7.11-3.28.1","spacewalk-taskomatic":"2.8.78.30-3.53.1","salt-netapi-client":"0.16.0-4.14.1","spacewalk-java-oracle":"2.8.78.30-3.53.1","spacewalk-java":"2.8.78.30-3.53.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2648-1.json"}},{"package":{"name":"spacewalk-admin","ecosystem":"SUSE:Manager Server 3.2","purl":"pkg:rpm/suse/spacewalk-admin&distro=SUSE%20Manager%20Server%203.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.4.7-3.15.1"}]}],"ecosystem_specific":{"binaries":[{"spacewalk-taskomatic":"2.8.78.30-3.53.1","salt-netapi-client":"0.16.0-4.14.1","spacewalk-admin":"2.8.4.7-3.15.1","spacewalk-java-config":"2.8.78.30-3.53.1","spacewalk-java-lib":"2.8.78.30-3.53.1","spacewalk-java-oracle":"2.8.78.30-3.53.1","spacewalk-java-postgresql":"2.8.78.30-3.53.1","spacewalk-java":"2.8.78.30-3.53.1","spacewalk-setup":"2.8.7.11-3.28.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2648-1.json"}},{"package":{"name":"spacewalk-java","ecosystem":"SUSE:Manager Server 3.2","purl":"pkg:rpm/suse/spacewalk-java&distro=SUSE%20Manager%20Server%203.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.78.30-3.53.1"}]}],"ecosystem_specific":{"binaries":[{"spacewalk-java-lib":"2.8.78.30-3.53.1","spacewalk-java-postgresql":"2.8.78.30-3.53.1","spacewalk-java-config":"2.8.78.30-3.53.1","spacewalk-java-oracle":"2.8.78.30-3.53.1","spacewalk-java":"2.8.78.30-3.53.1","spacewalk-setup":"2.8.7.11-3.28.1","spacewalk-taskomatic":"2.8.78.30-3.53.1","salt-netapi-client":"0.16.0-4.14.1","spacewalk-admin":"2.8.4.7-3.15.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2648-1.json"}},{"package":{"name":"spacewalk-setup","ecosystem":"SUSE:Manager Server 3.2","purl":"pkg:rpm/suse/spacewalk-setup&distro=SUSE%20Manager%20Server%203.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.7.11-3.28.1"}]}],"ecosystem_specific":{"binaries":[{"salt-netapi-client":"0.16.0-4.14.1","spacewalk-admin":"2.8.4.7-3.15.1","spacewalk-java-config":"2.8.78.30-3.53.1","spacewalk-java-oracle":"2.8.78.30-3.53.1","spacewalk-setup":"2.8.7.11-3.28.1","spacewalk-taskomatic":"2.8.78.30-3.53.1","spacewalk-java-lib":"2.8.78.30-3.53.1","spacewalk-java-postgresql":"2.8.78.30-3.53.1","spacewalk-java":"2.8.78.30-3.53.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2648-1.json"}}],"schema_version":"1.7.3"}