{"id":"CVE-2018-17197","aliases":["DEBIAN-CVE-2018-17197","EUVD-2018-0793","GHSA-3448-vfvv-xp9g","SUSE-RU-2019:0341-1","SUSE-RU-2019:0863-1","SUSE-SU-2019:0341-1","SUSE-SU-2019:0863-1","UBUNTU-CVE-2018-17197"],"status":"published","title":"Apache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser","description":"A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.06146,"percentile":0.93507,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-835"],"published":"2018-12-24T14:00:00Z","modified":"2026-10-24T10:30:32Z","fixes":[{"ecosystem":"Maven","package":"org.apache.tika:tika-parsers","fixed_in":["1.20"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:11","package":"tika","fixed_in":["1.20-1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 3.2","package":"spacewalk-backend","fixed_in":["2.8.57.8-3.10.14"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 3.2","package":"spacewalk-client-tools","fixed_in":["2.8.22.4-3.3.13"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 3.2","package":"spacewalk-proxy-installer","fixed_in":["2.8.6.4-3.6.13"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 3.2","package":"spacewalk-web","fixed_in":["2.8.7.12-3.16.12"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.2","package":"branch-network-formula","fixed_in":["0.1.1545038754.c983fa6-3.6.13"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.2","package":"netty","fixed_in":["4.1.8.Final-2.7.4"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.2","package":"py26-compat-salt","fixed_in":["2016.11.10-6.18.14"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.2","package":"python-susemanager-retail","fixed_in":["1.0.1544459934.07229ad-2.9.13"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.2","package":"saltboot-formula","fixed_in":["0.1.1546527519.591e925-3.9.13"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.2","package":"smdba","fixed_in":["1.6.3-0.3.6.13"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.2","package":"spacecmd","fixed_in":["2.8.25.8-3.12.13"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-admin","fixed_in":["2.8.4.3-3.3.13"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-backend","fixed_in":["2.8.57.8-3.10.14"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-branding","fixed_in":["2.8.5.13-3.13.14"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-client-tools","fixed_in":["2.8.22.4-3.3.13"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-java","fixed_in":["2.8.78.18-3.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-setup","fixed_in":["2.8.7.6-3.13.13"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-utils","fixed_in":["2.8.18.4-3.6.13"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-web","fixed_in":["2.8.7.12-3.16.12"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.2","package":"subscription-matcher","fixed_in":["0.22-4.9.13"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.2","package":"susemanager","fixed_in":["3.2.15-3.16.13"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.2","package":"susemanager-docs_en","fixed_in":["3.2-11.15.12"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.2","package":"susemanager-schema","fixed_in":["3.2.16-3.16.13"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.2","package":"susemanager-sls","fixed_in":["3.2.20-3.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.2","package":"susemanager-sync-data","fixed_in":["3.2.12-3.14.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 3.2","package":"tika-core","fixed_in":["1.20-3.6.13"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.apache.tika:tika-parsers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8"},{"fixed":"1.20"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"tika","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20-1"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.apache.tika:tika-parsers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8"},{"fixed":"1.20"}]}],"versions":["1.10","1.11","1.12","1.13","1.14","1.15","1.16","1.17","1.18","1.19","1.19.1","1.8","1.9"]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.2","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.57.8-3.10.14"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.2","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.22.4-3.3.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.2","package":"spacewalk-proxy-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.6.4-3.6.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.2","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.7.12-3.16.12"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"branch-network-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.1545038754.c983fa6-3.6.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.8.Final-2.7.4"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"py26-compat-salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.11.10-6.18.14"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"python-susemanager-retail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1544459934.07229ad-2.9.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"saltboot-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.1546527519.591e925-3.9.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"smdba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-0.3.6.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.25.8-3.12.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-admin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.4.3-3.3.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.57.8-3.10.14"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-branding","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5.13-3.13.14"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.22.4-3.3.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.78.18-3.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.7.6-3.13.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.18.4-3.6.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.7.12-3.16.12"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"subscription-matcher","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22-4.9.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-3.16.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"susemanager-docs_en","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-11.15.12"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"susemanager-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.16-3.16.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"susemanager-sls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.20-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"susemanager-sync-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.12-3.14.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"tika-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20-3.6.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.1","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1.21-2.35.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-5.25.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"py26-compat-salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.11.10-1.19.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.8.15-2.32.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"spacewalk-branding","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.2.17-2.31.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"spacewalk-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.46.19-2.41.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"spacewalk-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.10.11-2.23.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1.21-2.35.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"subscription-matcher","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22-4.9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.19-2.34.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"susemanager-docs_en","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-10.29.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"susemanager-frontend-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-3.10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"susemanager-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.21-2.36.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"tika-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20-1.6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.2","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.57.8-3.10.14"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.2","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.22.4-3.3.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.2","package":"spacewalk-proxy-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.6.4-3.6.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.2","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.7.12-3.16.12"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"branch-network-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.1545038754.c983fa6-3.6.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.8.Final-2.7.4"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"py26-compat-salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.11.10-6.18.14"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"python-susemanager-retail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1544459934.07229ad-2.9.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"saltboot-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.1546527519.591e925-3.9.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"smdba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-0.3.6.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.25.8-3.12.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-admin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.4.3-3.3.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.57.8-3.10.14"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-branding","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5.13-3.13.14"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.22.4-3.3.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.78.18-3.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.7.6-3.13.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.18.4-3.6.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.7.12-3.16.12"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"subscription-matcher","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22-4.9.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-3.16.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"susemanager-docs_en","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-11.15.12"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"susemanager-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.16-3.16.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"susemanager-sls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.20-3.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"susemanager-sync-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.12-3.14.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"tika-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20-3.6.13"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.1","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1.21-2.35.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-5.25.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"py26-compat-salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.11.10-1.19.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.8.15-2.32.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"spacewalk-branding","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.2.17-2.31.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"spacewalk-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.46.19-2.41.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"spacewalk-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.10.11-2.23.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1.21-2.35.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"subscription-matcher","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22-4.9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.19-2.34.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"susemanager-docs_en","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-10.29.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"susemanager-frontend-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-3.10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"susemanager-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.21-2.36.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"tika-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20-1.6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"tika","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5-2","1.5-3","1.5-4","1.5-4ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"tika","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5-5"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"tika","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.22-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"tika","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.22-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"tika","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.22-2"]}],"products":[{"vendor":"apache","product":"tika"},{"vendor":"apache software foundation","product":"apache tika"}],"references":[{"url":"http://www.securityfocus.com/bid/106293","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"https://lists.apache.org/thread.html/7c021a4ea2037e52e74628e17e8e0e2acab1f447160edc8be0eae6d3%40%3Cdev.tika.apache.org%3E","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","tags":["x_refsource_MISC","x_transferred","advisory","web"]},{"url":"https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17197","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-3448-vfvv-xp9g","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/7c021a4ea2037e52e74628e17e8e0e2acab1f447160edc8be0eae6d3@%3Cdev.tika.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E","tags":["web"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-17197","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/-2019-341/suse-ru-20190341-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1089121","tags":["report"]},{"url":"https://bugzilla.suse.com/1098826","tags":["report"]},{"url":"https://bugzilla.suse.com/1099988","tags":["report"]},{"url":"https://bugzilla.suse.com/1104680","tags":["report"]},{"url":"https://bugzilla.suse.com/1105720","tags":["report"]},{"url":"https://bugzilla.suse.com/1105791","tags":["report"]},{"url":"https://bugzilla.suse.com/1110427","tags":["report"]},{"url":"https://bugzilla.suse.com/1110757","tags":["report"]},{"url":"https://bugzilla.suse.com/1110772","tags":["report"]},{"url":"https://bugzilla.suse.com/1111191","tags":["report"]},{"url":"https://bugzilla.suse.com/1111686","tags":["report"]},{"url":"https://bugzilla.suse.com/1111910","tags":["report"]},{"url":"https://bugzilla.suse.com/1111963","tags":["report"]},{"url":"https://bugzilla.suse.com/1112121","tags":["report"]},{"url":"https://bugzilla.suse.com/1114029","tags":["report"]},{"url":"https://bugzilla.suse.com/1114059","tags":["report"]},{"url":"https://bugzilla.suse.com/1114115","tags":["report"]},{"url":"https://bugzilla.suse.com/1114268","tags":["report"]},{"url":"https://bugzilla.suse.com/1114877","tags":["report"]},{"url":"https://bugzilla.suse.com/1115029","tags":["report"]},{"url":"https://bugzilla.suse.com/1115978","tags":["report"]},{"url":"https://bugzilla.suse.com/1116365","tags":["report"]},{"url":"https://bugzilla.suse.com/1116566","tags":["report"]},{"url":"https://bugzilla.suse.com/1116610","tags":["report"]},{"url":"https://bugzilla.suse.com/1116826","tags":["report"]},{"url":"https://bugzilla.suse.com/1117759","tags":["report"]},{"url":"https://bugzilla.suse.com/1118112","tags":["report"]},{"url":"https://bugzilla.suse.com/1118478","tags":["report"]},{"url":"https://bugzilla.suse.com/1118917","tags":["report"]},{"url":"https://bugzilla.suse.com/1119233","tags":["report"]},{"url":"https://bugzilla.suse.com/1119271","tags":["report"]},{"url":"https://bugzilla.suse.com/1119320","tags":["report"]},{"url":"https://bugzilla.suse.com/1119727","tags":["report"]},{"url":"https://bugzilla.suse.com/1119807","tags":["report"]},{"url":"https://bugzilla.suse.com/1121038","tags":["report"]},{"url":"https://bugzilla.suse.com/1121424","tags":["report"]},{"url":"https://bugzilla.suse.com/1122565","tags":["report"]},{"url":"https://bugzilla.suse.com/1123902","tags":["report"]},{"url":"https://bugzilla.suse.com/1123983","tags":["report"]},{"url":"https://bugzilla.suse.com/1124794","tags":["report"]},{"url":"https://bugzilla.suse.com/1125097","tags":["report"]},{"url":"https://bugzilla.suse.com/987798","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17197","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/-2019-863/suse-ru-20190863-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1109316","tags":["report"]},{"url":"https://bugzilla.suse.com/1114157","tags":["report"]},{"url":"https://bugzilla.suse.com/1114169","tags":["report"]},{"url":"https://bugzilla.suse.com/1119081","tags":["report"]},{"url":"https://bugzilla.suse.com/1119964","tags":["report"]},{"url":"https://bugzilla.suse.com/1121195","tags":["report"]},{"url":"https://bugzilla.suse.com/1121856","tags":["report"]},{"url":"https://bugzilla.suse.com/1122836","tags":["report"]},{"url":"https://bugzilla.suse.com/1123991","tags":["report"]},{"url":"https://bugzilla.suse.com/1124639","tags":["report"]},{"url":"https://bugzilla.suse.com/1126862","tags":["report"]},{"url":"https://bugzilla.suse.com/1128781","tags":["report"]},{"url":"https://bugzilla.suse.com/1129765","tags":["report"]},{"url":"https://bugzilla.suse.com/1130658","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14626","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190341-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190863-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-17197","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2018/12/22/2","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17197","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-17197","description":"A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika.","status":"published","published":"2018-12-24T14:00:00Z","modified":"2024-08-05T10:39:59.588Z","updated_at":"2026-11-02T14:35:07.354449Z"}],"euvd":[{"id":"EUVD-2018-0793","description":"A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika.","status":"published","published":"2018-12-24T14:00:00Z","modified":"2024-08-05T10:39:59Z","updated_at":"2026-11-03T02:39:39.763591Z"}],"ghsa":[{"id":"GHSA-3448-vfvv-xp9g","title":"Apache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser","description":"A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika.","status":"published","published":"2018-12-26T17:45:07Z","modified":"2023-09-27T11:10:39Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:37:06.913882Z"}],"nvd":[{"id":"CVE-2018-17197","description":"A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika.","status":"published","published":"2018-12-24T14:29:00.757Z","modified":"2026-06-17T01:45:31.41Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:04:50.99633Z"}],"osv":[{"id":"CVE-2018-17197","description":"A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika.","status":"published","published":"2018-12-24T14:29:00.757Z","modified":"2026-10-24T10:30:32.814684645Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:08.533609Z"},{"id":"DEBIAN-CVE-2018-17197","description":"A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika.","status":"published","published":"2018-12-24T14:29:00.757Z","modified":"2026-08-04T06:04:22.304097858Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:30.57382Z"},{"id":"GHSA-3448-vfvv-xp9g","title":"Apache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser","description":"A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika.","status":"published","published":"2018-12-26T17:45:07Z","modified":"2024-02-16T08:17:41.912573Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T15:46:35.050232Z"},{"id":"UBUNTU-CVE-2018-17197","description":"A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika.","status":"published","published":"2018-12-24T14:29:00Z","modified":"2026-10-17T12:55:11.161526164Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:17.496046Z"},{"id":"SUSE-RU-2019:0341-1","title":"Security update for SUSE Manager Server 3.2","description":"\nThis update fixes the following issues:\n\nbranch-network-formula:\n\n- Netconfig update requires bind directory to exists for bind\n  forward, ensure it (bsc#1116365)\n- Rework network update in branch-network formula (bsc#1116365)\n\npy26-compat-salt:\n\n- Remove arch from name when pkg.list_pkgs is called with 'attr' (bsc#1114029)\n\npython-susemanager-retail:\n\n- Force one python version for SLE12 (python2) and SLE15 (python3)\n- Add disklabel: none to migrated RAID\n\nsaltboot-formula:\n\n- Use FTP active mode for image download\n- Always deploy image when image is specified in partitioning\n  pillar (bsc#1119807)\n- Call blockdev.formatted with force=True\n- Allow RAID images to be defined by saltboot formula\n  - image information can be provided directly for disk\n  - allow 'none'  disk label in formula and in that case\n    hide partitioning information\n\nsmdba:\n\n- Tuning: add cpu_tuple_cost (bsc#1105791)\n\nspacecmd:\n\n- Fix importing state channels using configchannel_import\n- Fix getting file info for latest revision (via configchannel_filedetails)\n- Add functions to merge errata (softwarechannel_errata_merge) and\n  packages (softwarechannel_mergepackages) through spacecmd (bsc#987798)\n\nspacewalk-admin:\n\n- Use a Salt engine to process return results (bsc#1099988)\n\nspacewalk-backend:\n\n- Move channel update close to commit to avoid long lock (bsc#1121424)\n- Adapt Inter Server Sync code to new SCC sync backend\n- Fix issue raising exceptions 'with_traceback' on Python 2\n- Hide Python traceback and show only error message (bsc#1110427)\n- Honor renamed postgresql10 log directory for supportconfig\n\nspacewalk-branding:\n\n- Better label visualization when the input is disabled. (bsc#1110772)\n\nspacewalk-client-tools:\n\n- Fix XML-RPC type serialization (bsc#1116610)\n\nspacewalk-java:\n\n- Improve salt events processing performance (bsc#1125097)\n- Prevent an error when onboarding a RES 6 minion (bsc#1124794)\n- Support products with multiple base channels\n- Fix ordering of base channels to prevent synchronization errors (bsc#1123902)\n- Support products with multiple base channels\n- Avoid a NullPointerException error in Taskomatic (bsc#1119271)\n- Reset channel assignments when base channel changes on registration (bsc#1118917)\n- Allow bootstrapping minions with a pending minion key being present (bsc#1119727)\n- Hide 'unknown virtual host manager' when virtual host manager of all hosts is known (bsc#1119320)\n- Disable notification types with 'java.notifications_type_disabled' in rhn.conf (bsc#1111910)\n- Change SCC sync backend to adapt quicker to SCC changes and improve\n  speed of syncing metadata and checking for channel dependencies (bsc#1089121)\n- Read OEM Orderitems from DB instead of create always new items (bsc#1098826)\n- Fix mgr-sync refresh when subscription was removed (bsc#1105720)\n- XMLRPC API: Include init.sls in channel file list (bsc#1111191)\n- Fix the config channels assignment via SSM (bsc#1117759)\n- Install product packages during bootstrapping minions (bsc#1104680)\n- Fix cloning channels when managing the same errata for both vendor and private orgs (bsc#1111686)\n- Introduce Loggerhead-module.js to store logs from the frontend\n- Removed 'Manage Channels' shortcut for vendor channels (bsc#1115978)\n- Hide already applied errata and channel entries from the output list in\n  audit.listSystemsByPatchStatus (bsc#1111963)\n- Prevent failing KickstartCommand when customPosition is null (bsc#1112121)\n- Automatically schedule an Action to refresh minion repos after deletion of an assigned channel (bsc#1115029)\n- Performance improvements in channel management functionalities (bsc#1114877)\n- Handle with an error message if state file fails to render (bsc#1110757)\n- When changing basechannel the compatible old childchannels are now selected by default. (bsc#1110772)\n- Add check for yast autoinstall profiles when setting kickstartTree (bsc#1114115)\n- Use a Salt engine to process return results (bsc#1099988)\n- Fix handling of CVEs including multiple patches in CVE audit (bsc#1111963)\n- Fix synchronizing Expanded Support Channel with missing architecture (bsc#1122565)\n\nspacewalk-setup:\n\n- Use a Salt engine to process return results (bsc#1099988)\n\nspacewalk-utils:\n\n- Exit with an error if spacewalk-common-channels does not match\n  any channel\n\nspacewalk-web:\n\n- Show feedback messages after using the retry option on the notification messages page\n- Change SCC sync backend to adapt quicker to SCC changes and improve\n  speed of syncing metadata and checking for channel dependencies\n- Fix wording for taskotop (cosmetical only)(bsc#1118112)\n- When changing basechannel the compatible old childchannels are now selected by default. (bsc#1110772)\n\nsubscription-matcher:\n\n- Old style hard bundle merging fix (bsc#1114059)\n\nsusemanager:\n\n- Add bootstrap repo definition for OES 2018 SP1 (bsc#1116826)\n- Rhnlib was renamed to python2-rhnlib. Change bootstrap data accordingly.\n- Change SCC sync backend to adapt quicker to SCC changes and improve\n  speed of syncing metadata and checking for channel dependencies\n- Adapt mgr-create-bootstrap-repo for Uyuni and let it create\n  bootstrap repos for openSUSE and CentOS\n- Fetch packages from correct channel when creating a bootstrap\n  repository\n- Fix not found package on mgr-create-bootstrap-repo for SLE-15-s390x\n  (bsc#1116566)\n- Add python3-six to bootstrap repo for SLES15 (bsc#1118478)\n\nsusemanager-docs_en:\n\n- Update text and image files.\n- Enhance forms documentation (more attributes).\n- Proxy: for example,  migration from traditional to Salt not supported.\n- RAM requirements for host running kiwi OS images.\n- Notification properties.\n- Update scalability documentation.\n\nsusemanager-schema:\n\n- Change SCC sync backend to adapt quicker to SCC changes and improve\n  speed of syncing metadata and checking for channel dependencies\n- Performance improvements in channel management functionalities (bsc#1114877)\n- Use a Salt engine to process return results (bsc#1099988)\n\nsusemanager-sls:\n\n- Improve salt events processing performance (bsc#1125097)\n- Allow bootstrapping minions with a pending minion key being present (bsc#1119727)\n- Use a Salt engine to process return results (bsc#1099988)\n\nsusemanager-sync-data:\n\n- Make SUSE Manager Tools channel mandatory (bsc#1123983)\n- Add sle-module-web-scripting for OES2018 (bsc#1119233)\n- Add new set of data for the new SCC sync backend\n- Enable SLE15 SP1 family (bsc#1114268)\n- Enable OES2018 SP1 (bsc#1116826)\n\ntika-core:\n\n- CVE-2018-17197: Fixed an infinite loop in the SQLite3Parser of Apache Tika (bsc#1121038)\n","status":"published","published":"2019-02-13T10:03:48Z","modified":"2026-02-04T02:37:43.02351Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-RU-2019:0863-1","title":"Security update for SUSE Manager Server 3.1","description":"\nThis update fixes the following issues:\n\ncobbler:\n\n- Fixes case where distribution detection returns None (bsc#1130658)\n- SUSE texmode fix (bsc#1109316)\n- Fix for SUSE distribution detection in ISO building\n  (bsc#1123991)\n\npy26-compat-salt:\n\n- Remove arch from name when pkg.list_pkgs is called with 'attr' (bsc#1114029)\n\nspacecmd:\n\n- Fix importing state channels using configchannel_import\n- Fix getting file info for latest revision (via configchannel_filedetails)\n\nspacewalk-branding:\n\n- Update jquery.timepicker dependency to 1.11.14 to allow parsing\n  the time format without depending on the language. (bsc#1119081)\n\nspacewalk-java:\n\n- Fix a problem when cloning public child channels with a private base channel (bsc#1124639)\n- Keep assigned channels on traditional to minion migration (bsc#1122836)\n- Fix 'Add Selected to SSM' on System Groups -\u003e systems page (bsc#1121856)\n- Disable notification types with 'java.notifications_type_disabled' in rhn.conf (bsc#1111910)\n- XMLRPC API: Include init.sls in channel file list (bsc#1111191)\n- Fix the config channels assignment via SSM (bsc#1117759)\n\nspacewalk-utils:\n\n- Create /etc/rhn with correct ownership to prevent file conflicts\n\nspacewalk-web:\n\n- Fix action scheduler time picker prefill when the server is on  'UTC/GMT' timezone (bsc#1121195)\n- Fix initializing of the datetime picker (bsc#1126862)\n- Show feedback messages after using the retry option on the notification messages page\n\nsubscription-matcher:\n\n- Old style hard bundle merging fix (bsc#1114059)\n\nsusemanager:\n\n- Fix creation of bootstrap repositories for SLE12 (no SP) by requiring python-setuptools\n  only for SLE12 \u003e= SP1 (bsc#1129765)\n- Add `python-setuptools` package dependency to SLES12 bootstrap repo (bsc#1119964)\n- Rhnlib was renamed to python2-rhnlib. Change bootstrap data accordingly.\n\nsusemanager-schema:\n\n- Fix performance regression in inter-server-sync (bsc#1128781)\n\nsusemanager-docs_en:\n\n- Update text and image files\n- 2.1 comparison: clarify profile syncing support\n- Adjust documentation about notification settings\n- Fix internal link (SMT documentation).\n- Remove documentation about the 'mgr-sync enable-scc' subcommand.  This\n  subcommand is no longer available.\n\nsusemanager-frontend-libs:\n\n- Update jquery.timepicker to 1.11.14 (bsc#1119081) \n\ntika-core:\n\n- New upstream version (1.20). Fixes infinite loop in SQLite3Parser (CVE-2018-17197) (bsc#1121038) \n\n","status":"published","published":"2019-04-03T15:33:20Z","modified":"2026-02-04T03:42:08.018945Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2019:0341-1","title":"Security update for SUSE Manager Server 3.2","description":"\nThis update fixes the following issues:\n\nbranch-network-formula:\n\n- Netconfig update requires bind directory to exists for bind\n  forward, ensure it (bsc#1116365)\n- Rework network update in branch-network formula (bsc#1116365)\n\npy26-compat-salt:\n\n- Remove arch from name when pkg.list_pkgs is called with 'attr' (bsc#1114029)\n\npython-susemanager-retail:\n\n- Force one python version for SLE12 (python2) and SLE15 (python3)\n- Add disklabel: none to migrated RAID\n\nsaltboot-formula:\n\n- Use FTP active mode for image download\n- Always deploy image when image is specified in partitioning\n  pillar (bsc#1119807)\n- Call blockdev.formatted with force=True\n- Allow RAID images to be defined by saltboot formula\n  - image information can be provided directly for disk\n  - allow 'none'  disk label in formula and in that case\n    hide partitioning information\n\nsmdba:\n\n- Tuning: add cpu_tuple_cost (bsc#1105791)\n\nspacecmd:\n\n- Fix importing state channels using configchannel_import\n- Fix getting file info for latest revision (via configchannel_filedetails)\n- Add functions to merge errata (softwarechannel_errata_merge) and\n  packages (softwarechannel_mergepackages) through spacecmd (bsc#987798)\n\nspacewalk-admin:\n\n- Use a Salt engine to process return results (bsc#1099988)\n\nspacewalk-backend:\n\n- Move channel update close to commit to avoid long lock (bsc#1121424)\n- Adapt Inter Server Sync code to new SCC sync backend\n- Fix issue raising exceptions 'with_traceback' on Python 2\n- Hide Python traceback and show only error message (bsc#1110427)\n- Honor renamed postgresql10 log directory for supportconfig\n\nspacewalk-branding:\n\n- Better label visualization when the input is disabled. (bsc#1110772)\n\nspacewalk-client-tools:\n\n- Fix XML-RPC type serialization (bsc#1116610)\n\nspacewalk-java:\n\n- Improve salt events processing performance (bsc#1125097)\n- Prevent an error when onboarding a RES 6 minion (bsc#1124794)\n- Support products with multiple base channels\n- Fix ordering of base channels to prevent synchronization errors (bsc#1123902)\n- Support products with multiple base channels\n- Avoid a NullPointerException error in Taskomatic (bsc#1119271)\n- Reset channel assignments when base channel changes on registration (bsc#1118917)\n- Allow bootstrapping minions with a pending minion key being present (bsc#1119727)\n- Hide 'unknown virtual host manager' when virtual host manager of all hosts is known (bsc#1119320)\n- Disable notification types with 'java.notifications_type_disabled' in rhn.conf (bsc#1111910)\n- Change SCC sync backend to adapt quicker to SCC changes and improve\n  speed of syncing metadata and checking for channel dependencies (bsc#1089121)\n- Read OEM Orderitems from DB instead of create always new items (bsc#1098826)\n- Fix mgr-sync refresh when subscription was removed (bsc#1105720)\n- XMLRPC API: Include init.sls in channel file list (bsc#1111191)\n- Fix the config channels assignment via SSM (bsc#1117759)\n- Install product packages during bootstrapping minions (bsc#1104680)\n- Fix cloning channels when managing the same errata for both vendor and private orgs (bsc#1111686)\n- Introduce Loggerhead-module.js to store logs from the frontend\n- Removed 'Manage Channels' shortcut for vendor channels (bsc#1115978)\n- Hide already applied errata and channel entries from the output list in\n  audit.listSystemsByPatchStatus (bsc#1111963)\n- Prevent failing KickstartCommand when customPosition is null (bsc#1112121)\n- Automatically schedule an Action to refresh minion repos after deletion of an assigned channel (bsc#1115029)\n- Performance improvements in channel management functionalities (bsc#1114877)\n- Handle with an error message if state file fails to render (bsc#1110757)\n- When changing basechannel the compatible old childchannels are now selected by default. (bsc#1110772)\n- Add check for yast autoinstall profiles when setting kickstartTree (bsc#1114115)\n- Use a Salt engine to process return results (bsc#1099988)\n- Fix handling of CVEs including multiple patches in CVE audit (bsc#1111963)\n- Fix synchronizing Expanded Support Channel with missing architecture (bsc#1122565)\n\nspacewalk-setup:\n\n- Use a Salt engine to process return results (bsc#1099988)\n\nspacewalk-utils:\n\n- Exit with an error if spacewalk-common-channels does not match\n  any channel\n\nspacewalk-web:\n\n- Show feedback messages after using the retry option on the notification messages page\n- Change SCC sync backend to adapt quicker to SCC changes and improve\n  speed of syncing metadata and checking for channel dependencies\n- Fix wording for taskotop (cosmetical only)(bsc#1118112)\n- When changing basechannel the compatible old childchannels are now selected by default. (bsc#1110772)\n\nsubscription-matcher:\n\n- Old style hard bundle merging fix (bsc#1114059)\n\nsusemanager:\n\n- Add bootstrap repo definition for OES 2018 SP1 (bsc#1116826)\n- Rhnlib was renamed to python2-rhnlib. Change bootstrap data accordingly.\n- Change SCC sync backend to adapt quicker to SCC changes and improve\n  speed of syncing metadata and checking for channel dependencies\n- Adapt mgr-create-bootstrap-repo for Uyuni and let it create\n  bootstrap repos for openSUSE and CentOS\n- Fetch packages from correct channel when creating a bootstrap\n  repository\n- Fix not found package on mgr-create-bootstrap-repo for SLE-15-s390x\n  (bsc#1116566)\n- Add python3-six to bootstrap repo for SLES15 (bsc#1118478)\n\nsusemanager-docs_en:\n\n- Update text and image files.\n- Enhance forms documentation (more attributes).\n- Proxy: for example,  migration from traditional to Salt not supported.\n- RAM requirements for host running kiwi OS images.\n- Notification properties.\n- Update scalability documentation.\n\nsusemanager-schema:\n\n- Change SCC sync backend to adapt quicker to SCC changes and improve\n  speed of syncing metadata and checking for channel dependencies\n- Performance improvements in channel management functionalities (bsc#1114877)\n- Use a Salt engine to process return results (bsc#1099988)\n\nsusemanager-sls:\n\n- Improve salt events processing performance (bsc#1125097)\n- Allow bootstrapping minions with a pending minion key being present (bsc#1119727)\n- Use a Salt engine to process return results (bsc#1099988)\n\nsusemanager-sync-data:\n\n- Make SUSE Manager Tools channel mandatory (bsc#1123983)\n- Add sle-module-web-scripting for OES2018 (bsc#1119233)\n- Add new set of data for the new SCC sync backend\n- Enable SLE15 SP1 family (bsc#1114268)\n- Enable OES2018 SP1 (bsc#1116826)\n\ntika-core:\n\n- CVE-2018-17197: Fixed an infinite loop in the SQLite3Parser of Apache Tika (bsc#1121038)\n","status":"published","published":"2019-02-13T10:03:48Z","modified":"2025-05-02T04:08:00.113714Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0863-1","title":"Security update for SUSE Manager Server 3.1","description":"\nThis update fixes the following issues:\n\ncobbler:\n\n- Fixes case where distribution detection returns None (bsc#1130658)\n- SUSE texmode fix (bsc#1109316)\n- Fix for SUSE distribution detection in ISO building\n  (bsc#1123991)\n\npy26-compat-salt:\n\n- Remove arch from name when pkg.list_pkgs is called with 'attr' (bsc#1114029)\n\nspacecmd:\n\n- Fix importing state channels using configchannel_import\n- Fix getting file info for latest revision (via configchannel_filedetails)\n\nspacewalk-branding:\n\n- Update jquery.timepicker dependency to 1.11.14 to allow parsing\n  the time format without depending on the language. (bsc#1119081)\n\nspacewalk-java:\n\n- Fix a problem when cloning public child channels with a private base channel (bsc#1124639)\n- Keep assigned channels on traditional to minion migration (bsc#1122836)\n- Fix 'Add Selected to SSM' on System Groups -\u003e systems page (bsc#1121856)\n- Disable notification types with 'java.notifications_type_disabled' in rhn.conf (bsc#1111910)\n- XMLRPC API: Include init.sls in channel file list (bsc#1111191)\n- Fix the config channels assignment via SSM (bsc#1117759)\n\nspacewalk-utils:\n\n- Create /etc/rhn with correct ownership to prevent file conflicts\n\nspacewalk-web:\n\n- Fix action scheduler time picker prefill when the server is on  'UTC/GMT' timezone (bsc#1121195)\n- Fix initializing of the datetime picker (bsc#1126862)\n- Show feedback messages after using the retry option on the notification messages page\n\nsubscription-matcher:\n\n- Old style hard bundle merging fix (bsc#1114059)\n\nsusemanager:\n\n- Fix creation of bootstrap repositories for SLE12 (no SP) by requiring python-setuptools\n  only for SLE12 \u003e= SP1 (bsc#1129765)\n- Add `python-setuptools` package dependency to SLES12 bootstrap repo (bsc#1119964)\n- Rhnlib was renamed to python2-rhnlib. Change bootstrap data accordingly.\n\nsusemanager-schema:\n\n- Fix performance regression in inter-server-sync (bsc#1128781)\n\nsusemanager-docs_en:\n\n- Update text and image files\n- 2.1 comparison: clarify profile syncing support\n- Adjust documentation about notification settings\n- Fix internal link (SMT documentation).\n- Remove documentation about the 'mgr-sync enable-scc' subcommand.  This\n  subcommand is no longer available.\n\nsusemanager-frontend-libs:\n\n- Update jquery.timepicker to 1.11.14 (bsc#1119081) \n\ntika-core:\n\n- New upstream version (1.20). Fixes infinite loop in SQLite3Parser (CVE-2018-17197) (bsc#1121038) \n\n","status":"published","published":"2019-04-03T15:33:20Z","modified":"2026-02-04T04:11:26.950628Z","updated_at":"2026-11-02T15:53:45.926331Z"}]}}