CVE-2019-3684

SUSE Manager until version 4.0.7 and Uyuni until commit 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade created world-readable swap files on systems that don't have a swap already configured and don't have btrfs as filesystem

SUSE Manager until version 4.0.7 and Uyuni until commit 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade created world-readable swap files on systems that don't have a swap already configured and don't have btrfs as filesystem

SUSE Manager until version 4.0.7 and Uyuni until commit 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade created world-readable swap files on systems that don't have a swap already configured and don't have btrfs as filesystem

SUSE Manager until version 4.0.7 and Uyuni until commit 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade created world-readable swap files on systems that don't have a swap already configured and don't have btrfs as filesystem

This update fixes the following issues:

cobbler:

• Removes string replace for textmode fix (bsc#1134195)

py26-compat-salt:

• Avoid syntax error on yumpkg module running on Python 2.6 (bsc#1136250)
• Use ThreadPool from multiprocessing.pool to avoid leakins when calculating FQDNs
• Fix usermod options for SLE11 (bsc#1117017)
• Do not report patches as installed on RHEL systems when not all the related packages are installed (bsc#1128061)
• Do not include 'ordereddict' and 'singledispatch' on the thin for Python 2.6 systems.
• Fix paths for py26-compat dependencies on SLE15 and newer
• Port optimization_order config parameter (bsc#1131423)
• Use special tornado and msgpack-python compat packages on sles15sp1 and greater in py26-compat-salt.conf (bsc#1131423)
• Add missing py26 thin dependencies
• Calculate the 'FQDNs' grains in parallel to avoid long blocking (bsc#1129079)

salt-netapi-client:

• Add workaround for Salt issue 52762
• Version 0.16.0 see https://github.com/SUSE/salt-netapi-client/releases/tag/v0.16.0

spacewalk-backend:

• Fix spacewalk-repo-sync for Ubuntu repositories in mirror case (bsc#1136029)
• Use new names in code for client tool packages which were renamed (bsc#1134876)
• Fix HTTP headers handling to avoid duplicated entries (bsc#1125090)
• Use suseLib.get_proxy to get the HTTP proxy configuration properly on DEB repos (bsc#1133424)

spacewalk-certs-tools:

• Fix missing quotation in bootstrap script (bsc#1136423)
• Add new packages names to instructions for adding remote configuration support for traditional clients
• Print error message instead of stacktrace for client_config_update.py

spacewalk-config:

• Fix config declaration for rhn.conf (bsc#1132197)

spacewalk-java:

• Remove the 'Returning' clause from the query as oracle doesn't support it (bsc#1135166)
• Use new names in code for client tool packages which were renamed (bsc#1134876)
• Handle the different retcodes that are being returned when salt module is not available (bsc#1131704)
• Do not implicitly set parent channel when cloning (bsc#1130492)
• Prevent Actions that were actually completed to be displayed as 'in progress' forever (bsc#1131780)
• Enable batching mode for salt synchronous calls
• Show minion id in System Details GUI and API
• Do not report Provisioning installed product to subscription matcher (bsc#1128838)
• Fix product package conflicts with SLES for SAP systems (bsc#1130551)
• Add support for Salt batch execution mode
• Fix NPE on remote commands when no targets match (bsc1123375)
• Fix apidoc return order on mergePackages
• Take into account only synced products when scheduling SP migration from the API (bsc#1131929)

spacewalk-web:

• Change WebUI string version to 3.2.8

susemanager:

• Make swap files readable only by root (bsc#1131954, CVE-2019-3684)
• Do not show false errors when configuring swapfile during setup
• Create bootstrap repo for new Red Hat channels (bsc#1133587)

susemanager-docs_en:

• Minion ID is visible in System Info box.
• Managing Systems Completely via SSH now fully supported (bsc#1131867).

susemanager-schema:

• Copy 3.1 schema migrations to 3.2 to be able to migrate from an older schema version to 3.2
• Add support for Salt batch execution mode

susemanager-sls:

• Add support for Salt batch execution mode

susemanager-sync-data:

• Add SLES11 SP4 LTSS channels for SLES for SAP (bsc#1133629)
• Add SLES11 SP4 LTSS channels for ppc64 (bsc#1132103)

zypp-plugin-spacewalk:

• Fix python syntax error in distupgrade (bsc#1136102)

This update fixes the following issues:

cobbler:

• Removes string replace for textmode fix (bsc#1134195)

py26-compat-salt:

• Avoid syntax error on yumpkg module running on Python 2.6 (bsc#1136250)
• Use ThreadPool from multiprocessing.pool to avoid leakins when calculating FQDNs
• Fix usermod options for SLE11 (bsc#1117017)
• Do not report patches as installed on RHEL systems when not all the related packages are installed (bsc#1128061)
• Do not include 'ordereddict' and 'singledispatch' on the thin for Python 2.6 systems.
• Fix paths for py26-compat dependencies on SLE15 and newer
• Port optimization_order config parameter (bsc#1131423)
• Use special tornado and msgpack-python compat packages on sles15sp1 and greater in py26-compat-salt.conf (bsc#1131423)
• Add missing py26 thin dependencies
• Calculate the 'FQDNs' grains in parallel to avoid long blocking (bsc#1129079)

salt-netapi-client:

• Add workaround for Salt issue 52762
• Version 0.16.0 see https://github.com/SUSE/salt-netapi-client/releases/tag/v0.16.0

spacewalk-backend:

• Fix spacewalk-repo-sync for Ubuntu repositories in mirror case (bsc#1136029)
• Use new names in code for client tool packages which were renamed (bsc#1134876)
• Fix HTTP headers handling to avoid duplicated entries (bsc#1125090)
• Use suseLib.get_proxy to get the HTTP proxy configuration properly on DEB repos (bsc#1133424)

spacewalk-certs-tools:

• Fix missing quotation in bootstrap script (bsc#1136423)
• Add new packages names to instructions for adding remote configuration support for traditional clients
• Print error message instead of stacktrace for client_config_update.py

spacewalk-config:

• Fix config declaration for rhn.conf (bsc#1132197)

spacewalk-java:

• Remove the 'Returning' clause from the query as oracle doesn't support it (bsc#1135166)
• Use new names in code for client tool packages which were renamed (bsc#1134876)
• Handle the different retcodes that are being returned when salt module is not available (bsc#1131704)
• Do not implicitly set parent channel when cloning (bsc#1130492)
• Prevent Actions that were actually completed to be displayed as 'in progress' forever (bsc#1131780)
• Enable batching mode for salt synchronous calls
• Show minion id in System Details GUI and API
• Do not report Provisioning installed product to subscription matcher (bsc#1128838)
• Fix product package conflicts with SLES for SAP systems (bsc#1130551)
• Add support for Salt batch execution mode
• Fix NPE on remote commands when no targets match (bsc1123375)
• Fix apidoc return order on mergePackages
• Take into account only synced products when scheduling SP migration from the API (bsc#1131929)

spacewalk-web:

• Change WebUI string version to 3.2.8

susemanager:

• Make swap files readable only by root (bsc#1131954, CVE-2019-3684)
• Do not show false errors when configuring swapfile during setup
• Create bootstrap repo for new Red Hat channels (bsc#1133587)

susemanager-docs_en:

• Minion ID is visible in System Info box.
• Managing Systems Completely via SSH now fully supported (bsc#1131867).

susemanager-schema:

• Copy 3.1 schema migrations to 3.2 to be able to migrate from an older schema version to 3.2
• Add support for Salt batch execution mode

susemanager-sls:

• Add support for Salt batch execution mode

susemanager-sync-data:

• Add SLES11 SP4 LTSS channels for SLES for SAP (bsc#1133629)
• Add SLES11 SP4 LTSS channels for ppc64 (bsc#1132103)

zypp-plugin-spacewalk:

• Fix python syntax error in distupgrade (bsc#1136102)