SUSE alert SUSE-SU-2013:0841-1 (SUSE Manager)

From:
    	     
 
opensuse-security@opensuse.org 
To:
    	     
 
opensuse-security-announce@opensuse.org 
Subject:
    	     
 
[security-announce] SUSE-SU-2013:0841-1: important: Security update for SUSE Manager 
Date:
    	     
 
Tue, 28 May 2013 20:04:32 +0200 (CEST)
Message-ID:
    	     
 
<20130528180432.BF1AA32167@maintenance.suse.de>
Archive-link:
    	     
 
Article, Thread
              
   SUSE Security Update: Security update for SUSE Manager
______________________________________________________________________________

Announcement ID:    SUSE-SU-2013:0841-1
Rating:             important
References:         #819365 
Cross-References:   CVE-2013-2056
Affected Products:
                    SUSE Manager 1.7 for SLE 11 SP2
                    SUSE Manager 1.2 for SLE 11 SP1
______________________________________________________________________________

   An update that fixes one vulnerability is now available. It
   includes one version update.

Description:


   spacewalk-backend has been updated to fix an authentication
   checking  problem. (bnc#819365, CVE-2013-2056)

   Security Issue reference:

   * CVE-2013-2056
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2056
   >


Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Manager 1.7 for SLE 11 SP2:

      zypper in -t patch sleman17sp2-spacewalk-backend-7746

   - SUSE Manager 1.2 for SLE 11 SP1:

      zypper in -t patch sleman12sp1-spacewalk-backend-7748

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Manager 1.7 for SLE 11 SP2 (x86_64) [New Version: 1.7.38.24]:

      spacewalk-backend-1.7.38.24-0.7.1
      spacewalk-backend-app-1.7.38.24-0.7.1
      spacewalk-backend-applet-1.7.38.24-0.7.1
      spacewalk-backend-config-files-1.7.38.24-0.7.1
      spacewalk-backend-config-files-common-1.7.38.24-0.7.1
      spacewalk-backend-config-files-tool-1.7.38.24-0.7.1
      spacewalk-backend-iss-1.7.38.24-0.7.1
      spacewalk-backend-iss-export-1.7.38.24-0.7.1
      spacewalk-backend-libs-1.7.38.24-0.7.1
      spacewalk-backend-package-push-server-1.7.38.24-0.7.1
      spacewalk-backend-server-1.7.38.24-0.7.1
      spacewalk-backend-sql-1.7.38.24-0.7.1
      spacewalk-backend-sql-oracle-1.7.38.24-0.7.1
      spacewalk-backend-sql-postgresql-1.7.38.24-0.7.1
      spacewalk-backend-tools-1.7.38.24-0.7.1
      spacewalk-backend-xml-export-libs-1.7.38.24-0.7.1
      spacewalk-backend-xmlrpc-1.7.38.24-0.7.1
      spacewalk-backend-xp-1.7.38.24-0.7.1

   - SUSE Manager 1.2 for SLE 11 SP1 (x86_64):

      spacewalk-backend-1.2.74-0.60.1
      spacewalk-backend-app-1.2.74-0.60.1
      spacewalk-backend-applet-1.2.74-0.60.1
      spacewalk-backend-config-files-1.2.74-0.60.1
      spacewalk-backend-config-files-common-1.2.74-0.60.1
      spacewalk-backend-config-files-tool-1.2.74-0.60.1
      spacewalk-backend-iss-1.2.74-0.60.1
      spacewalk-backend-iss-export-1.2.74-0.60.1
      spacewalk-backend-libs-1.2.74-0.60.1
      spacewalk-backend-package-push-server-1.2.74-0.60.1
      spacewalk-backend-server-1.2.74-0.60.1
      spacewalk-backend-sql-1.2.74-0.60.1
      spacewalk-backend-sql-oracle-1.2.74-0.60.1
      spacewalk-backend-tools-1.2.74-0.60.1
      spacewalk-backend-xml-export-libs-1.2.74-0.60.1
      spacewalk-backend-xmlrpc-1.2.74-0.60.1
      spacewalk-backend-xp-1.2.74-0.60.1


References:

   http://support.novell.com/security/cve/CVE-2013-2056.html
   https://bugzilla.novell.com/819365
   http://download.novell.com/patch/finder/?keywords=26e847a...
   http://download.novell.com/patch/finder/?keywords=8e4d137...

-- 
To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org