SUSE-SU-2017:1349-1

Vulnerability from csaf_suse - Published: 2017-05-18 22:20 - Updated: 2017-05-18 22:20
Summary
Security update for SUSE Manager Server 3.0

Notes

Title of the patch
Security update for SUSE Manager Server 3.0
Description of the patch
The following security issue in spacewalk-backend has been fixed: - Non admin or disabled user cannot make changes to a system anymore using spacewalk-channel. (bsc#1026633, CVE-2017-7470) Additionally, the following non-security issues have been fixed: rhnlib: - Support all TLS versions in rpclib. (bsc#1025312) salt-netapi-client: - Fix date format for Schedule module. (bsc#1034465) spacecmd: - Improve output on error for listrepo. (bsc#1027426) - Reword spacecmd removal message. (bsc#1024406) spacewalk-backend: - Do not fail with traceback when media.1 does not exist. (bsc#1032256) - Create scap files directory beforehand. (bsc#1029755) - Fix error if SPACEWALK_DEBUG_NO_REPORTS environment variable is not present. - Don't skip 'rhnErrataPackage' cleanup during an errata update. (bsc#1023233) - Add support for running spacewalk-debug without creating reports. (bsc#1024714) - Set scap store directory mod to 775 and group owner to susemanager. - incomplete_package_import: Do import rhnPackageFile as it breaks some package installations. - Added traceback printing to the exception block. - Change postgresql starting commands. spacewalk-certs-tools: - Always restart the minion regardless of its current state. (bsc#1034956) - Correctly honor disabling of SSL in bootstrap script. (bsc#1033383) - Add curl dependency and move mgr-proxy-ssh* to spacewalk-proxy package. - Exit for non-traditional bootstrap scripts. (bsc#1020904) - Rename mgr-ssh-proxy-force-cmd -> mgr-proxy-ssh-force-cmd. - Add mgr-proxy-ssh-force-cmd, mgr-proxy-ssh-push-init to rpm. - Add option to configure only sshd. - Restrictive ssh options for user mgrsshtunnel. spacewalk-client-tools: - Fix reboot message to use correct product name. (bsc#1031667) spacewalk-java: - Fix missing IPs in Overview tab. (bsc#1031453) - Fix scheduling VM deployment in future. (bsc#1034289) - Handle empty set to not produce invalid sql. (bsc#1033497) - Fix SSM group pagination. (bsc#1012784) - Create PooledExecutor with pre-filled queue. (bsc#1030716) - Make sure minion keys can only be seen/managed by appropriate user. (bsc#1025908) - Set action status to 'failed' on uncaught exceptions. (bsc#1013606) - Add missing library to taskomatic classpath. (bsc#1024066) - Set log level to DEBUG for EOFException when the Websocket connection is aborted by the client. (bsc#1031826) - Add a remote command with label as a script to the actionchain. (bsc#1011964) - Fix architecture for default channels lookup. (bsc#1025275) - Change required salt-netapi-client to >= 0.11. - Using stream() during collection processing. - Making salt presence timeouts configurable via rhn.conf. (bsc#1025761) - Avoid blocking synchronous calls if some minions are unreachable. (bsc#1025761) - Excludes unreachable minions from synchronous call to prevent blocking. (bsc#1025761) - Fix LocalDateTimeISOAdapter to parse date string with timezone. (bsc#1024966) - Create scap files directories beforehand. (bsc#1029755) - Make country, state/province and city searchable for system location. (bsc#1020659) - Change incorrect help link. (bsc#1017418) - Don't allow scheduling scap scan if openscap pkg missing from minion. - Make salt aware of rescheduled actions. (bsc#1027852) - Close hibernate session on async salt-ssh call. - Use a small fixed pool so we don't overwhelm the salt-api with salt-ssh executions - Fix remote cmd ui js err and timed out message. - Remote cmd UI changes for salt-ssh minions. - Add support for salt ssh minions to remote cmd UI. - Apply SessionFilter also for error pages. (bsc#1028062) - Use correct logging class. - Fix broken help link for taskstatus. (bsc#1017422) - Test errata not removed from origin. - Fix merge channels patches. (bsc#1025000) - Change XccdfIdent.identifier mapping length to 100. - Add xccdf result xslt. - Fix mainframesysinfo module to use /proc/sysinfo on SLES11. (bsc#1025758) - Use consistent spelling in UI. (bsc#1028306) - Rewording distchannelmap text. (bsc#1017772) - Javascript datepicker needs the timezone create a correct date object. (bsc#1024966) - Don't show audit tab for ssh-push minions. - Set scap store dir mod to 775 and group owner to susemanager. - Better error handling and more tests. - Store uploaded scap files. - Openscap action scheduling and handling. - Grant scap capability to minion on registration. - Enable audit tab for salt minions. - Scap inital xccdfEval and hibernate mappings. - Show proxy path in bootstrap UI. - AuthFilter tests: Update expectations to reflect cookie update at end of request. - AuthFilter: Update cookie expiry date at end of HTTP request. (bsc#1025775) - MinionActionCleanup: Only call list_jobs once per action id. (bsc#1025291) - MinionActionCleanupTest: Expect that list_jobs is only called once. - Feat: Allow salt-enabled bootstrap.sh via UI. - Catch and display all bootstrap errors. - Sync grains and beacons only for regular minions. - Add new channel tokens to minion.accessTokens. - Fix getting server path for a first level proxy. - Fix bootstrap err when proxy not selected. - Check if proxy hostname is FQDN not name in UI. - Utility for runner to generate ssh key and execute cmd via proxies. - Add proxy_pub_key to ssh bootstrap pillar. - Add ssh timeout to temporary roster. - Salt_ssh_connect_timeout configuration parameter. - Authorize parent salt-ssh key on proxy. - Java backend for salt ssh-push through proxy. - Avoid deadlock with spacewalk-repo-sync. (bsc#1022530) - Fix NPE when no SUSE Product was found for an installed product. (bsc#1029840) - Keep organization after migrating a system to salt. (bsc#1026301) - Fix glob only for noarch rpm(s). - Feat: Dynamically detect deployed CA certificate. - Fix restore original default (certificate). - Rename variable (cert provided by RPM). - Fix uniform bootstrap.sh. (bsc#1000762) spacewalk-reports: - Remove legacy audit logging reports. (bsc#1009545) spacewalk-setup: - Create /var/spacewalk/systems in spacewalk-setup and ensure perms on upgrade. - Add xccdf result xslt. - Authorize parent salt-ssh key on proxy. spacewalk-web: - Remote Commands: Allow Web Socket to be opened on non-standard port. - Improve remote cmd ui error handling. - Show message when waiting for ssh minions times out. - Fix remote cmd ui js err and timed out message. - Remote cmd UI changes for salt-ssh minions. - Fix broken help link for taskstatus. (bsc#1017422) - Add js utility function to create Date objects in different timezones. - Show proxy path in bootstrap UI. - Clear proxy selection when clicking clear fields button. - Check if proxy hostname is FQDN not name in UI. - Show warn in bootstrap UI if proxy hostname is not a FQDN. subscription-matcher: - Set -Xmx launch parameter based on customer data. (bsc#1024863) - Small bugfixes and logging improvements. susemanager: - Add bootstrap repo data for SLES for SAP 12 SP2 ppc64le. - Add python-setuptools to bootstrap repo. (bsc#1033731) - Create directory manually if mksubvolume fails, so we now support btrfs based systems with missing mksubvoume utility. (bsc#1031885) - Create /var/spacewalk/systems in spacewalk-setup and ensure perms on upgrade - Fix typo in comment noting option with-custom-channels. (bsc#1031092) - Pre require tomcat and salt. - Fix %%pre and %%post scripts in susemanager.spec. - Append salt,tomcat,wwwrung to susemanager group. - Susemanager group and change owner and permissions for /var/susemanager/systems. susemanager-schema: - Don't fail if capability already exists. - Show update message only when updating the schema package. (bsc#1024456) - Fix audit log disabling in Oracle. - Grant minions scap capability. - Clean up stale logging data and triggers. (bsc#1009545) - Fix deduplicate to work with more than two duplicates. susemanager-sls: - Add certificate state for CAASP. - Add certificate state for SLES for SAP. (bsc#1031659) - Pre-create empty top.sls with no-op. (bsc#1017754) - Add xccdf result xslt. - Fix mainframesysinfo module to use /proc/sysinfo on SLES11. (bsc#1025758) - Set scap store dir mod to 775 and group owner to susemanager. - Store uploaded scap files. - Set minion own key owner to bootstrap ssh_push_sudo_user. - Runner to generate ssh key and execute cmd via proxies. - Change ssh bootstrap state to generate and auth keys for salt-ssh push with tunnel. - Authorize parent salt-ssh key on proxy. susemanager-sync-data: - Support Cloud 7 - Magnum Orchestration (bsc#1026266) and SLES for SAP 12 SP2 ppc64le. virtual-host-gatherer: - Adding support for exploring 'vim.Folder'. (bsc#1025421) How to apply this update: 1. Log in as root user to the SUSE Manager server. 2. Stop the Spacewalk service: spacewalk-service stop 3. Apply the patch using either zypper patch or YaST Online Update. 4. Upgrade the database schema: spacewalk-schema-upgrade 5. Start the Spacewalk service: spacewalk-service start
Patchnames
SUSE-SUSE-Manager-Server-3.0-2017-827
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for SUSE Manager Server 3.0",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThe following security issue in spacewalk-backend has been fixed:\n\n- Non admin or disabled user cannot make changes to a system anymore using spacewalk-channel.\n  (bsc#1026633, CVE-2017-7470)\n\nAdditionally, the following non-security issues have been fixed:\n\nrhnlib:\n\n- Support all TLS versions in rpclib. (bsc#1025312)\n\nsalt-netapi-client:\n\n- Fix date format for Schedule module. (bsc#1034465)\n\nspacecmd:\n\n- Improve output on error for listrepo. (bsc#1027426)\n- Reword spacecmd removal message. (bsc#1024406)\n\nspacewalk-backend:\n\n- Do not fail with traceback when media.1 does not exist. (bsc#1032256)\n- Create scap files directory beforehand. (bsc#1029755)\n- Fix error if SPACEWALK_DEBUG_NO_REPORTS environment variable is not present.\n- Don\u0027t skip \u0027rhnErrataPackage\u0027 cleanup during an errata update. (bsc#1023233)\n- Add support for running spacewalk-debug without creating reports. (bsc#1024714)\n- Set scap store directory mod to 775 and group owner to susemanager.\n- incomplete_package_import: Do import rhnPackageFile as it breaks some package installations.\n- Added traceback printing to the exception block.\n- Change postgresql starting commands.\n\nspacewalk-certs-tools:\n\n- Always restart the minion regardless of its current state. (bsc#1034956)\n- Correctly honor disabling of SSL in bootstrap script. (bsc#1033383)\n- Add curl dependency and move mgr-proxy-ssh* to spacewalk-proxy package.\n- Exit for non-traditional bootstrap scripts. (bsc#1020904)\n- Rename mgr-ssh-proxy-force-cmd -\u003e mgr-proxy-ssh-force-cmd.\n- Add mgr-proxy-ssh-force-cmd, mgr-proxy-ssh-push-init to rpm.\n- Add option to configure only sshd.\n- Restrictive ssh options for user mgrsshtunnel.\n\nspacewalk-client-tools:\n\n- Fix reboot message to use correct product name. (bsc#1031667)\n\nspacewalk-java:\n\n- Fix missing IPs in Overview tab. (bsc#1031453)\n- Fix scheduling VM deployment in future. (bsc#1034289)\n- Handle empty set to not produce invalid sql. (bsc#1033497)\n- Fix SSM group pagination. (bsc#1012784)\n- Create PooledExecutor with pre-filled queue. (bsc#1030716)\n- Make sure minion keys can only be seen/managed by appropriate user. (bsc#1025908)\n- Set action status to \u0027failed\u0027 on uncaught exceptions. (bsc#1013606)\n- Add missing library to taskomatic classpath. (bsc#1024066)\n- Set log level to DEBUG for EOFException when the Websocket connection is aborted by the client. (bsc#1031826)\n- Add a remote command with label as a script to the actionchain. (bsc#1011964)\n- Fix architecture for default channels lookup. (bsc#1025275)\n- Change required salt-netapi-client to \u003e= 0.11.\n- Using stream() during collection processing.\n- Making salt presence timeouts configurable via rhn.conf. (bsc#1025761)\n- Avoid blocking synchronous calls if some minions are unreachable. (bsc#1025761)\n- Excludes unreachable minions from synchronous call to prevent blocking. (bsc#1025761)\n- Fix LocalDateTimeISOAdapter to parse date string with timezone. (bsc#1024966)\n- Create scap files directories beforehand. (bsc#1029755)\n- Make country, state/province and city searchable for system location. (bsc#1020659)\n- Change incorrect help link. (bsc#1017418)\n- Don\u0027t allow scheduling scap scan if openscap pkg missing from minion.\n- Make salt aware of rescheduled actions. (bsc#1027852)\n- Close hibernate session on async salt-ssh call.\n- Use a small fixed pool so we don\u0027t overwhelm the salt-api with salt-ssh executions\n- Fix remote cmd ui js err and timed out message.\n- Remote cmd UI changes for salt-ssh minions.\n- Add support for salt ssh minions to remote cmd UI.\n- Apply SessionFilter also for error pages. (bsc#1028062)\n- Use correct logging class.\n- Fix broken help link for taskstatus. (bsc#1017422)\n- Test errata not removed from origin.\n- Fix merge channels patches. (bsc#1025000)\n- Change XccdfIdent.identifier mapping length to 100.\n- Add xccdf result xslt.\n- Fix mainframesysinfo module to use /proc/sysinfo on SLES11. (bsc#1025758)\n- Use consistent spelling in UI. (bsc#1028306)\n- Rewording distchannelmap text. (bsc#1017772)\n- Javascript datepicker needs the timezone create a correct date object. (bsc#1024966)\n- Don\u0027t show audit tab for ssh-push minions.\n- Set scap store dir mod to 775 and group owner to susemanager.\n- Better error handling and more tests.\n- Store uploaded scap files.\n- Openscap action scheduling and handling.\n- Grant scap capability to minion on registration.\n- Enable audit tab for salt minions.\n- Scap inital xccdfEval and hibernate mappings.\n- Show proxy path in bootstrap UI.\n- AuthFilter tests: Update expectations to reflect cookie update at end of request.\n- AuthFilter: Update cookie expiry date at end of HTTP request. (bsc#1025775)\n- MinionActionCleanup: Only call list_jobs once per action id. (bsc#1025291)\n- MinionActionCleanupTest: Expect that list_jobs is only called once.\n- Feat: Allow salt-enabled bootstrap.sh via UI.\n- Catch and display all bootstrap errors.\n- Sync grains and beacons only for regular minions.\n- Add new channel tokens to minion.accessTokens.\n- Fix getting server path for a first level proxy.\n- Fix bootstrap err when proxy not selected.\n- Check if proxy hostname is FQDN not name in UI.\n- Utility for runner to generate ssh key and execute cmd via proxies.\n- Add proxy_pub_key to ssh bootstrap pillar.\n- Add ssh timeout to temporary roster.\n- Salt_ssh_connect_timeout configuration parameter.\n- Authorize parent salt-ssh key on proxy.\n- Java backend for salt ssh-push through proxy.\n- Avoid deadlock with spacewalk-repo-sync. (bsc#1022530)\n- Fix NPE when no SUSE Product was found for an installed product. (bsc#1029840)\n- Keep organization after migrating a system to salt. (bsc#1026301)\n- Fix glob only for noarch rpm(s).\n- Feat: Dynamically detect deployed CA certificate.\n- Fix restore original default (certificate).\n- Rename variable (cert provided by RPM).\n- Fix uniform bootstrap.sh. (bsc#1000762)\n\nspacewalk-reports:\n\n- Remove legacy audit logging reports. (bsc#1009545)\n\nspacewalk-setup:\n\n- Create /var/spacewalk/systems in spacewalk-setup and ensure perms on upgrade.\n- Add xccdf result xslt.\n- Authorize parent salt-ssh key on proxy.\n\nspacewalk-web:\n\n- Remote Commands: Allow Web Socket to be opened on non-standard port.\n- Improve remote cmd ui error handling.\n- Show message when waiting for ssh minions times out.\n- Fix remote cmd ui js err and timed out message.\n- Remote cmd UI changes for salt-ssh minions.\n- Fix broken help link for taskstatus. (bsc#1017422)\n- Add js utility function to create Date objects in different timezones.\n- Show proxy path in bootstrap UI.\n- Clear proxy selection when clicking clear fields button.\n- Check if proxy hostname is FQDN not name in UI.\n- Show warn in bootstrap UI if proxy hostname is not a FQDN.\n\nsubscription-matcher:\n\n- Set -Xmx launch parameter based on customer data. (bsc#1024863) \n- Small bugfixes and logging improvements.\n\nsusemanager:\n\n- Add bootstrap repo data for SLES for SAP 12 SP2 ppc64le.\n- Add python-setuptools to bootstrap repo. (bsc#1033731)\n- Create directory manually if mksubvolume fails, so we now support btrfs based systems with missing mksubvoume\n  utility. (bsc#1031885)\n- Create /var/spacewalk/systems in spacewalk-setup and ensure perms on upgrade\n- Fix typo in comment noting option with-custom-channels. (bsc#1031092)\n- Pre require tomcat and salt.\n- Fix %%pre and %%post scripts in susemanager.spec.\n- Append salt,tomcat,wwwrung to susemanager group.\n- Susemanager group and change owner and permissions for /var/susemanager/systems.\n\nsusemanager-schema:\n\n- Don\u0027t fail if capability already exists.\n- Show update message only when updating the schema package. (bsc#1024456)\n- Fix audit log disabling in Oracle.\n- Grant minions scap capability.\n- Clean up stale logging data and triggers. (bsc#1009545)\n- Fix deduplicate to work with more than two duplicates.\n\nsusemanager-sls:\n\n- Add certificate state for CAASP.\n- Add certificate state for SLES for SAP. (bsc#1031659)\n- Pre-create empty top.sls with no-op. (bsc#1017754)\n- Add xccdf result xslt.\n- Fix mainframesysinfo module to use /proc/sysinfo on SLES11. (bsc#1025758)\n- Set scap store dir mod to 775 and group owner to susemanager.\n- Store uploaded scap files.\n- Set minion own key owner to bootstrap ssh_push_sudo_user.\n- Runner to generate ssh key and execute cmd via proxies.\n- Change ssh bootstrap state to generate and auth keys for salt-ssh push with tunnel.\n- Authorize parent salt-ssh key on proxy.\n\nsusemanager-sync-data:\n\n- Support Cloud 7 - Magnum Orchestration (bsc#1026266) and SLES for SAP 12 SP2 ppc64le.\n\nvirtual-host-gatherer:\n\n- Adding support for exploring \u0027vim.Folder\u0027. (bsc#1025421)\n\nHow to apply this update:\n1. Log in as root user to the SUSE Manager server.\n2. Stop the Spacewalk service:\nspacewalk-service stop\n3. Apply the patch using either zypper patch or YaST Online Update.\n4. Upgrade the database schema:\nspacewalk-schema-upgrade\n5. Start the Spacewalk service:\nspacewalk-service start\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SUSE-Manager-Server-3.0-2017-827",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_1349-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2017:1349-1",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20171349-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2017:1349-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2017-May/002899.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1000762",
        "url": "https://bugzilla.suse.com/1000762"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1009545",
        "url": "https://bugzilla.suse.com/1009545"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1011964",
        "url": "https://bugzilla.suse.com/1011964"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1012784",
        "url": "https://bugzilla.suse.com/1012784"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1013606",
        "url": "https://bugzilla.suse.com/1013606"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1017418",
        "url": "https://bugzilla.suse.com/1017418"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1017422",
        "url": "https://bugzilla.suse.com/1017422"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1017754",
        "url": "https://bugzilla.suse.com/1017754"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1017772",
        "url": "https://bugzilla.suse.com/1017772"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1020659",
        "url": "https://bugzilla.suse.com/1020659"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1020904",
        "url": "https://bugzilla.suse.com/1020904"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1022530",
        "url": "https://bugzilla.suse.com/1022530"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1023233",
        "url": "https://bugzilla.suse.com/1023233"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1024066",
        "url": "https://bugzilla.suse.com/1024066"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1024406",
        "url": "https://bugzilla.suse.com/1024406"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1024456",
        "url": "https://bugzilla.suse.com/1024456"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1024714",
        "url": "https://bugzilla.suse.com/1024714"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1024863",
        "url": "https://bugzilla.suse.com/1024863"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1024966",
        "url": "https://bugzilla.suse.com/1024966"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1025000",
        "url": "https://bugzilla.suse.com/1025000"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1025275",
        "url": "https://bugzilla.suse.com/1025275"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1025291",
        "url": "https://bugzilla.suse.com/1025291"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1025312",
        "url": "https://bugzilla.suse.com/1025312"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1025421",
        "url": "https://bugzilla.suse.com/1025421"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1025758",
        "url": "https://bugzilla.suse.com/1025758"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1025761",
        "url": "https://bugzilla.suse.com/1025761"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1025775",
        "url": "https://bugzilla.suse.com/1025775"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1025908",
        "url": "https://bugzilla.suse.com/1025908"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1026266",
        "url": "https://bugzilla.suse.com/1026266"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1026301",
        "url": "https://bugzilla.suse.com/1026301"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1026633",
        "url": "https://bugzilla.suse.com/1026633"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1027426",
        "url": "https://bugzilla.suse.com/1027426"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1027852",
        "url": "https://bugzilla.suse.com/1027852"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1028062",
        "url": "https://bugzilla.suse.com/1028062"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1028306",
        "url": "https://bugzilla.suse.com/1028306"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1029755",
        "url": "https://bugzilla.suse.com/1029755"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1029840",
        "url": "https://bugzilla.suse.com/1029840"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1030716",
        "url": "https://bugzilla.suse.com/1030716"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1031092",
        "url": "https://bugzilla.suse.com/1031092"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1031453",
        "url": "https://bugzilla.suse.com/1031453"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1031659",
        "url": "https://bugzilla.suse.com/1031659"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1031667",
        "url": "https://bugzilla.suse.com/1031667"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1031826",
        "url": "https://bugzilla.suse.com/1031826"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1031885",
        "url": "https://bugzilla.suse.com/1031885"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1032256",
        "url": "https://bugzilla.suse.com/1032256"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1033383",
        "url": "https://bugzilla.suse.com/1033383"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1033497",
        "url": "https://bugzilla.suse.com/1033497"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1033731",
        "url": "https://bugzilla.suse.com/1033731"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1034289",
        "url": "https://bugzilla.suse.com/1034289"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1034465",
        "url": "https://bugzilla.suse.com/1034465"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1034956",
        "url": "https://bugzilla.suse.com/1034956"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7470 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7470/"
      }
    ],
    "title": "Security update for SUSE Manager Server 3.0",
    "tracking": {
      "current_release_date": "2017-05-18T22:20:39Z",
      "generator": {
        "date": "2017-05-18T22:20:39Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2017:1349-1",
      "initial_release_date": "2017-05-18T22:20:39Z",
      "revision_history": [
        {
          "date": "2017-05-18T22:20:39Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhnlib-2.5.84.4-6.1.noarch",
                "product": {
                  "name": "rhnlib-2.5.84.4-6.1.noarch",
                  "product_id": "rhnlib-2.5.84.4-6.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "salt-netapi-client-0.11.1-12.1.noarch",
                "product": {
                  "name": "salt-netapi-client-0.11.1-12.1.noarch",
                  "product_id": "salt-netapi-client-0.11.1-12.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacecmd-2.5.5.5-12.1.noarch",
                "product": {
                  "name": "spacecmd-2.5.5.5-12.1.noarch",
                  "product_id": "spacecmd-2.5.5.5-12.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-2.5.24.9-22.1.noarch",
                "product": {
                  "name": "spacewalk-backend-2.5.24.9-22.1.noarch",
                  "product_id": "spacewalk-backend-2.5.24.9-22.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-app-2.5.24.9-22.1.noarch",
                "product": {
                  "name": "spacewalk-backend-app-2.5.24.9-22.1.noarch",
                  "product_id": "spacewalk-backend-app-2.5.24.9-22.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-applet-2.5.24.9-22.1.noarch",
                "product": {
                  "name": "spacewalk-backend-applet-2.5.24.9-22.1.noarch",
                  "product_id": "spacewalk-backend-applet-2.5.24.9-22.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-config-files-2.5.24.9-22.1.noarch",
                "product": {
                  "name": "spacewalk-backend-config-files-2.5.24.9-22.1.noarch",
                  "product_id": "spacewalk-backend-config-files-2.5.24.9-22.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-config-files-common-2.5.24.9-22.1.noarch",
                "product": {
                  "name": "spacewalk-backend-config-files-common-2.5.24.9-22.1.noarch",
                  "product_id": "spacewalk-backend-config-files-common-2.5.24.9-22.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-config-files-tool-2.5.24.9-22.1.noarch",
                "product": {
                  "name": "spacewalk-backend-config-files-tool-2.5.24.9-22.1.noarch",
                  "product_id": "spacewalk-backend-config-files-tool-2.5.24.9-22.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-iss-2.5.24.9-22.1.noarch",
                "product": {
                  "name": "spacewalk-backend-iss-2.5.24.9-22.1.noarch",
                  "product_id": "spacewalk-backend-iss-2.5.24.9-22.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-iss-export-2.5.24.9-22.1.noarch",
                "product": {
                  "name": "spacewalk-backend-iss-export-2.5.24.9-22.1.noarch",
                  "product_id": "spacewalk-backend-iss-export-2.5.24.9-22.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-libs-2.5.24.9-22.1.noarch",
                "product": {
                  "name": "spacewalk-backend-libs-2.5.24.9-22.1.noarch",
                  "product_id": "spacewalk-backend-libs-2.5.24.9-22.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-package-push-server-2.5.24.9-22.1.noarch",
                "product": {
                  "name": "spacewalk-backend-package-push-server-2.5.24.9-22.1.noarch",
                  "product_id": "spacewalk-backend-package-push-server-2.5.24.9-22.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-server-2.5.24.9-22.1.noarch",
                "product": {
                  "name": "spacewalk-backend-server-2.5.24.9-22.1.noarch",
                  "product_id": "spacewalk-backend-server-2.5.24.9-22.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-sql-2.5.24.9-22.1.noarch",
                "product": {
                  "name": "spacewalk-backend-sql-2.5.24.9-22.1.noarch",
                  "product_id": "spacewalk-backend-sql-2.5.24.9-22.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-sql-oracle-2.5.24.9-22.1.noarch",
                "product": {
                  "name": "spacewalk-backend-sql-oracle-2.5.24.9-22.1.noarch",
                  "product_id": "spacewalk-backend-sql-oracle-2.5.24.9-22.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-sql-postgresql-2.5.24.9-22.1.noarch",
                "product": {
                  "name": "spacewalk-backend-sql-postgresql-2.5.24.9-22.1.noarch",
                  "product_id": "spacewalk-backend-sql-postgresql-2.5.24.9-22.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-tools-2.5.24.9-22.1.noarch",
                "product": {
                  "name": "spacewalk-backend-tools-2.5.24.9-22.1.noarch",
                  "product_id": "spacewalk-backend-tools-2.5.24.9-22.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-xml-export-libs-2.5.24.9-22.1.noarch",
                "product": {
                  "name": "spacewalk-backend-xml-export-libs-2.5.24.9-22.1.noarch",
                  "product_id": "spacewalk-backend-xml-export-libs-2.5.24.9-22.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-backend-xmlrpc-2.5.24.9-22.1.noarch",
                "product": {
                  "name": "spacewalk-backend-xmlrpc-2.5.24.9-22.1.noarch",
                  "product_id": "spacewalk-backend-xmlrpc-2.5.24.9-22.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-base-2.5.7.15-21.1.noarch",
                "product": {
                  "name": "spacewalk-base-2.5.7.15-21.1.noarch",
                  "product_id": "spacewalk-base-2.5.7.15-21.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-base-minimal-2.5.7.15-21.1.noarch",
                "product": {
                  "name": "spacewalk-base-minimal-2.5.7.15-21.1.noarch",
                  "product_id": "spacewalk-base-minimal-2.5.7.15-21.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-base-minimal-config-2.5.7.15-21.1.noarch",
                "product": {
                  "name": "spacewalk-base-minimal-config-2.5.7.15-21.1.noarch",
                  "product_id": "spacewalk-base-minimal-config-2.5.7.15-21.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-certs-tools-2.5.1.8-17.1.noarch",
                "product": {
                  "name": "spacewalk-certs-tools-2.5.1.8-17.1.noarch",
                  "product_id": "spacewalk-certs-tools-2.5.1.8-17.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-client-tools-2.5.13.8-17.2.noarch",
                "product": {
                  "name": "spacewalk-client-tools-2.5.13.8-17.2.noarch",
                  "product_id": "spacewalk-client-tools-2.5.13.8-17.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-html-2.5.7.15-21.1.noarch",
                "product": {
                  "name": "spacewalk-html-2.5.7.15-21.1.noarch",
                  "product_id": "spacewalk-html-2.5.7.15-21.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-2.5.59.14-23.2.noarch",
                "product": {
                  "name": "spacewalk-java-2.5.59.14-23.2.noarch",
                  "product_id": "spacewalk-java-2.5.59.14-23.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-config-2.5.59.14-23.2.noarch",
                "product": {
                  "name": "spacewalk-java-config-2.5.59.14-23.2.noarch",
                  "product_id": "spacewalk-java-config-2.5.59.14-23.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-lib-2.5.59.14-23.2.noarch",
                "product": {
                  "name": "spacewalk-java-lib-2.5.59.14-23.2.noarch",
                  "product_id": "spacewalk-java-lib-2.5.59.14-23.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-oracle-2.5.59.14-23.2.noarch",
                "product": {
                  "name": "spacewalk-java-oracle-2.5.59.14-23.2.noarch",
                  "product_id": "spacewalk-java-oracle-2.5.59.14-23.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-java-postgresql-2.5.59.14-23.2.noarch",
                "product": {
                  "name": "spacewalk-java-postgresql-2.5.59.14-23.2.noarch",
                  "product_id": "spacewalk-java-postgresql-2.5.59.14-23.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-reports-2.5.1.2-3.1.noarch",
                "product": {
                  "name": "spacewalk-reports-2.5.1.2-3.1.noarch",
                  "product_id": "spacewalk-reports-2.5.1.2-3.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-setup-2.5.3.12-15.1.noarch",
                "product": {
                  "name": "spacewalk-setup-2.5.3.12-15.1.noarch",
                  "product_id": "spacewalk-setup-2.5.3.12-15.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-taskomatic-2.5.59.14-23.2.noarch",
                "product": {
                  "name": "spacewalk-taskomatic-2.5.59.14-23.2.noarch",
                  "product_id": "spacewalk-taskomatic-2.5.59.14-23.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "subscription-matcher-0.18-5.1.noarch",
                "product": {
                  "name": "subscription-matcher-0.18-5.1.noarch",
                  "product_id": "subscription-matcher-0.18-5.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-schema-3.0.19-21.2.noarch",
                "product": {
                  "name": "susemanager-schema-3.0.19-21.2.noarch",
                  "product_id": "susemanager-schema-3.0.19-21.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-sls-0.1.20-23.1.noarch",
                "product": {
                  "name": "susemanager-sls-0.1.20-23.1.noarch",
                  "product_id": "susemanager-sls-0.1.20-23.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-sync-data-3.0.16-24.1.noarch",
                "product": {
                  "name": "susemanager-sync-data-3.0.16-24.1.noarch",
                  "product_id": "susemanager-sync-data-3.0.16-24.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "virtual-host-gatherer-1.0.13-6.1.noarch",
                "product": {
                  "name": "virtual-host-gatherer-1.0.13-6.1.noarch",
                  "product_id": "virtual-host-gatherer-1.0.13-6.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "virtual-host-gatherer-VMware-1.0.13-6.1.noarch",
                "product": {
                  "name": "virtual-host-gatherer-VMware-1.0.13-6.1.noarch",
                  "product_id": "virtual-host-gatherer-VMware-1.0.13-6.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "susemanager-3.0.21-21.1.s390x",
                "product": {
                  "name": "susemanager-3.0.21-21.1.s390x",
                  "product_id": "susemanager-3.0.21-21.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-tools-3.0.21-21.1.s390x",
                "product": {
                  "name": "susemanager-tools-3.0.21-21.1.s390x",
                  "product_id": "susemanager-tools-3.0.21-21.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "susemanager-3.0.21-21.1.x86_64",
                "product": {
                  "name": "susemanager-3.0.21-21.1.x86_64",
                  "product_id": "susemanager-3.0.21-21.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "susemanager-tools-3.0.21-21.1.x86_64",
                "product": {
                  "name": "susemanager-tools-3.0.21-21.1.x86_64",
                  "product_id": "susemanager-tools-3.0.21-21.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Manager Server 3.0",
                "product": {
                  "name": "SUSE Manager Server 3.0",
                  "product_id": "SUSE Manager Server 3.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-manager-server:3.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhnlib-2.5.84.4-6.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:rhnlib-2.5.84.4-6.1.noarch"
        },
        "product_reference": "rhnlib-2.5.84.4-6.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "salt-netapi-client-0.11.1-12.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:salt-netapi-client-0.11.1-12.1.noarch"
        },
        "product_reference": "salt-netapi-client-0.11.1-12.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacecmd-2.5.5.5-12.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacecmd-2.5.5.5-12.1.noarch"
        },
        "product_reference": "spacecmd-2.5.5.5-12.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-backend-2.5.24.9-22.1.noarch"
        },
        "product_reference": "spacewalk-backend-2.5.24.9-22.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-app-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-backend-app-2.5.24.9-22.1.noarch"
        },
        "product_reference": "spacewalk-backend-app-2.5.24.9-22.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-applet-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-backend-applet-2.5.24.9-22.1.noarch"
        },
        "product_reference": "spacewalk-backend-applet-2.5.24.9-22.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-config-files-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-backend-config-files-2.5.24.9-22.1.noarch"
        },
        "product_reference": "spacewalk-backend-config-files-2.5.24.9-22.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-config-files-common-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-backend-config-files-common-2.5.24.9-22.1.noarch"
        },
        "product_reference": "spacewalk-backend-config-files-common-2.5.24.9-22.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-config-files-tool-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-backend-config-files-tool-2.5.24.9-22.1.noarch"
        },
        "product_reference": "spacewalk-backend-config-files-tool-2.5.24.9-22.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-iss-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-backend-iss-2.5.24.9-22.1.noarch"
        },
        "product_reference": "spacewalk-backend-iss-2.5.24.9-22.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-iss-export-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-backend-iss-export-2.5.24.9-22.1.noarch"
        },
        "product_reference": "spacewalk-backend-iss-export-2.5.24.9-22.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-libs-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-backend-libs-2.5.24.9-22.1.noarch"
        },
        "product_reference": "spacewalk-backend-libs-2.5.24.9-22.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-package-push-server-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-backend-package-push-server-2.5.24.9-22.1.noarch"
        },
        "product_reference": "spacewalk-backend-package-push-server-2.5.24.9-22.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-server-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-backend-server-2.5.24.9-22.1.noarch"
        },
        "product_reference": "spacewalk-backend-server-2.5.24.9-22.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-sql-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-backend-sql-2.5.24.9-22.1.noarch"
        },
        "product_reference": "spacewalk-backend-sql-2.5.24.9-22.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-sql-oracle-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-backend-sql-oracle-2.5.24.9-22.1.noarch"
        },
        "product_reference": "spacewalk-backend-sql-oracle-2.5.24.9-22.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-sql-postgresql-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-backend-sql-postgresql-2.5.24.9-22.1.noarch"
        },
        "product_reference": "spacewalk-backend-sql-postgresql-2.5.24.9-22.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-tools-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-backend-tools-2.5.24.9-22.1.noarch"
        },
        "product_reference": "spacewalk-backend-tools-2.5.24.9-22.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-xml-export-libs-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-backend-xml-export-libs-2.5.24.9-22.1.noarch"
        },
        "product_reference": "spacewalk-backend-xml-export-libs-2.5.24.9-22.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-backend-xmlrpc-2.5.24.9-22.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-backend-xmlrpc-2.5.24.9-22.1.noarch"
        },
        "product_reference": "spacewalk-backend-xmlrpc-2.5.24.9-22.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-base-2.5.7.15-21.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-base-2.5.7.15-21.1.noarch"
        },
        "product_reference": "spacewalk-base-2.5.7.15-21.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-base-minimal-2.5.7.15-21.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-base-minimal-2.5.7.15-21.1.noarch"
        },
        "product_reference": "spacewalk-base-minimal-2.5.7.15-21.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-base-minimal-config-2.5.7.15-21.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-base-minimal-config-2.5.7.15-21.1.noarch"
        },
        "product_reference": "spacewalk-base-minimal-config-2.5.7.15-21.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-certs-tools-2.5.1.8-17.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-certs-tools-2.5.1.8-17.1.noarch"
        },
        "product_reference": "spacewalk-certs-tools-2.5.1.8-17.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-client-tools-2.5.13.8-17.2.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-client-tools-2.5.13.8-17.2.noarch"
        },
        "product_reference": "spacewalk-client-tools-2.5.13.8-17.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-html-2.5.7.15-21.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-html-2.5.7.15-21.1.noarch"
        },
        "product_reference": "spacewalk-html-2.5.7.15-21.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-java-2.5.59.14-23.2.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-java-2.5.59.14-23.2.noarch"
        },
        "product_reference": "spacewalk-java-2.5.59.14-23.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-java-config-2.5.59.14-23.2.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-java-config-2.5.59.14-23.2.noarch"
        },
        "product_reference": "spacewalk-java-config-2.5.59.14-23.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-java-lib-2.5.59.14-23.2.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-java-lib-2.5.59.14-23.2.noarch"
        },
        "product_reference": "spacewalk-java-lib-2.5.59.14-23.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-java-oracle-2.5.59.14-23.2.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-java-oracle-2.5.59.14-23.2.noarch"
        },
        "product_reference": "spacewalk-java-oracle-2.5.59.14-23.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-java-postgresql-2.5.59.14-23.2.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-java-postgresql-2.5.59.14-23.2.noarch"
        },
        "product_reference": "spacewalk-java-postgresql-2.5.59.14-23.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-reports-2.5.1.2-3.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-reports-2.5.1.2-3.1.noarch"
        },
        "product_reference": "spacewalk-reports-2.5.1.2-3.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-setup-2.5.3.12-15.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-setup-2.5.3.12-15.1.noarch"
        },
        "product_reference": "spacewalk-setup-2.5.3.12-15.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-taskomatic-2.5.59.14-23.2.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:spacewalk-taskomatic-2.5.59.14-23.2.noarch"
        },
        "product_reference": "spacewalk-taskomatic-2.5.59.14-23.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "subscription-matcher-0.18-5.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:subscription-matcher-0.18-5.1.noarch"
        },
        "product_reference": "subscription-matcher-0.18-5.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-3.0.21-21.1.s390x as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:susemanager-3.0.21-21.1.s390x"
        },
        "product_reference": "susemanager-3.0.21-21.1.s390x",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-3.0.21-21.1.x86_64 as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:susemanager-3.0.21-21.1.x86_64"
        },
        "product_reference": "susemanager-3.0.21-21.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-schema-3.0.19-21.2.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:susemanager-schema-3.0.19-21.2.noarch"
        },
        "product_reference": "susemanager-schema-3.0.19-21.2.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-sls-0.1.20-23.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:susemanager-sls-0.1.20-23.1.noarch"
        },
        "product_reference": "susemanager-sls-0.1.20-23.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-sync-data-3.0.16-24.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:susemanager-sync-data-3.0.16-24.1.noarch"
        },
        "product_reference": "susemanager-sync-data-3.0.16-24.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-tools-3.0.21-21.1.s390x as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:susemanager-tools-3.0.21-21.1.s390x"
        },
        "product_reference": "susemanager-tools-3.0.21-21.1.s390x",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "susemanager-tools-3.0.21-21.1.x86_64 as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:susemanager-tools-3.0.21-21.1.x86_64"
        },
        "product_reference": "susemanager-tools-3.0.21-21.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "virtual-host-gatherer-1.0.13-6.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:virtual-host-gatherer-1.0.13-6.1.noarch"
        },
        "product_reference": "virtual-host-gatherer-1.0.13-6.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "virtual-host-gatherer-VMware-1.0.13-6.1.noarch as component of SUSE Manager Server 3.0",
          "product_id": "SUSE Manager Server 3.0:virtual-host-gatherer-VMware-1.0.13-6.1.noarch"
        },
        "product_reference": "virtual-host-gatherer-VMware-1.0.13-6.1.noarch",
        "relates_to_product_reference": "SUSE Manager Server 3.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-7470",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7470"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in backend/server/rhnChannel.py.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Manager Server 3.0:rhnlib-2.5.84.4-6.1.noarch",
          "SUSE Manager Server 3.0:salt-netapi-client-0.11.1-12.1.noarch",
          "SUSE Manager Server 3.0:spacecmd-2.5.5.5-12.1.noarch",
          "SUSE Manager Server 3.0:spacewalk-backend-2.5.24.9-22.1.noarch",
          "SUSE Manager Server 3.0:spacewalk-backend-app-2.5.24.9-22.1.noarch",
          "SUSE Manager Server 3.0:spacewalk-backend-applet-2.5.24.9-22.1.noarch",
          "SUSE Manager Server 3.0:spacewalk-backend-config-files-2.5.24.9-22.1.noarch",
          "SUSE Manager Server 3.0:spacewalk-backend-config-files-common-2.5.24.9-22.1.noarch",
          "SUSE Manager Server 3.0:spacewalk-backend-config-files-tool-2.5.24.9-22.1.noarch",
          "SUSE Manager Server 3.0:spacewalk-backend-iss-2.5.24.9-22.1.noarch",
          "SUSE Manager Server 3.0:spacewalk-backend-iss-export-2.5.24.9-22.1.noarch",
          "SUSE Manager Server 3.0:spacewalk-backend-libs-2.5.24.9-22.1.noarch",
          "SUSE Manager Server 3.0:spacewalk-backend-package-push-server-2.5.24.9-22.1.noarch",
          "SUSE Manager Server 3.0:spacewalk-backend-server-2.5.24.9-22.1.noarch",
          "SUSE Manager Server 3.0:spacewalk-backend-sql-2.5.24.9-22.1.noarch",
          "SUSE Manager Server 3.0:spacewalk-backend-sql-oracle-2.5.24.9-22.1.noarch",
          "SUSE Manager Server 3.0:spacewalk-backend-sql-postgresql-2.5.24.9-22.1.noarch",
          "SUSE Manager Server 3.0:spacewalk-backend-tools-2.5.24.9-22.1.noarch",
          "SUSE Manager Server 3.0:spacewalk-backend-xml-export-libs-2.5.24.9-22.1.noarch",
          "SUSE Manager Server 3.0:spacewalk-backend-xmlrpc-2.5.24.9-22.1.noarch",
          "SUSE Manager Server 3.0:spacewalk-base-2.5.7.15-21.1.noarch",
          "SUSE Manager Server 3.0:spacewalk-base-minimal-2.5.7.15-21.1.noarch",
          "SUSE Manager Server 3.0:spacewalk-base-minimal-config-2.5.7.15-21.1.noarch",
          "SUSE Manager Server 3.0:spacewalk-certs-tools-2.5.1.8-17.1.noarch",
          "SUSE Manager Server 3.0:spacewalk-client-tools-2.5.13.8-17.2.noarch",
          "SUSE Manager Server 3.0:spacewalk-html-2.5.7.15-21.1.noarch",
          "SUSE Manager Server 3.0:spacewalk-java-2.5.59.14-23.2.noarch",
          "SUSE Manager Server 3.0:spacewalk-java-config-2.5.59.14-23.2.noarch",
          "SUSE Manager Server 3.0:spacewalk-java-lib-2.5.59.14-23.2.noarch",
          "SUSE Manager Server 3.0:spacewalk-java-oracle-2.5.59.14-23.2.noarch",
          "SUSE Manager Server 3.0:spacewalk-java-postgresql-2.5.59.14-23.2.noarch",
          "SUSE Manager Server 3.0:spacewalk-reports-2.5.1.2-3.1.noarch",
          "SUSE Manager Server 3.0:spacewalk-setup-2.5.3.12-15.1.noarch",
          "SUSE Manager Server 3.0:spacewalk-taskomatic-2.5.59.14-23.2.noarch",
          "SUSE Manager Server 3.0:subscription-matcher-0.18-5.1.noarch",
          "SUSE Manager Server 3.0:susemanager-3.0.21-21.1.s390x",
          "SUSE Manager Server 3.0:susemanager-3.0.21-21.1.x86_64",
          "SUSE Manager Server 3.0:susemanager-schema-3.0.19-21.2.noarch",
          "SUSE Manager Server 3.0:susemanager-sls-0.1.20-23.1.noarch",
          "SUSE Manager Server 3.0:susemanager-sync-data-3.0.16-24.1.noarch",
          "SUSE Manager Server 3.0:susemanager-tools-3.0.21-21.1.s390x",
          "SUSE Manager Server 3.0:susemanager-tools-3.0.21-21.1.x86_64",
          "SUSE Manager Server 3.0:virtual-host-gatherer-1.0.13-6.1.noarch",
          "SUSE Manager Server 3.0:virtual-host-gatherer-VMware-1.0.13-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7470",
          "url": "https://www.suse.com/security/cve/CVE-2017-7470"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1026633 for CVE-2017-7470",
          "url": "https://bugzilla.suse.com/1026633"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1057882 for CVE-2017-7470",
          "url": "https://bugzilla.suse.com/1057882"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Manager Server 3.0:rhnlib-2.5.84.4-6.1.noarch",
            "SUSE Manager Server 3.0:salt-netapi-client-0.11.1-12.1.noarch",
            "SUSE Manager Server 3.0:spacecmd-2.5.5.5-12.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-app-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-applet-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-config-files-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-config-files-common-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-config-files-tool-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-iss-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-iss-export-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-libs-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-package-push-server-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-server-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-sql-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-sql-oracle-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-sql-postgresql-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-tools-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-xml-export-libs-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-xmlrpc-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-base-2.5.7.15-21.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-base-minimal-2.5.7.15-21.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-base-minimal-config-2.5.7.15-21.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-certs-tools-2.5.1.8-17.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-client-tools-2.5.13.8-17.2.noarch",
            "SUSE Manager Server 3.0:spacewalk-html-2.5.7.15-21.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-java-2.5.59.14-23.2.noarch",
            "SUSE Manager Server 3.0:spacewalk-java-config-2.5.59.14-23.2.noarch",
            "SUSE Manager Server 3.0:spacewalk-java-lib-2.5.59.14-23.2.noarch",
            "SUSE Manager Server 3.0:spacewalk-java-oracle-2.5.59.14-23.2.noarch",
            "SUSE Manager Server 3.0:spacewalk-java-postgresql-2.5.59.14-23.2.noarch",
            "SUSE Manager Server 3.0:spacewalk-reports-2.5.1.2-3.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-setup-2.5.3.12-15.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-taskomatic-2.5.59.14-23.2.noarch",
            "SUSE Manager Server 3.0:subscription-matcher-0.18-5.1.noarch",
            "SUSE Manager Server 3.0:susemanager-3.0.21-21.1.s390x",
            "SUSE Manager Server 3.0:susemanager-3.0.21-21.1.x86_64",
            "SUSE Manager Server 3.0:susemanager-schema-3.0.19-21.2.noarch",
            "SUSE Manager Server 3.0:susemanager-sls-0.1.20-23.1.noarch",
            "SUSE Manager Server 3.0:susemanager-sync-data-3.0.16-24.1.noarch",
            "SUSE Manager Server 3.0:susemanager-tools-3.0.21-21.1.s390x",
            "SUSE Manager Server 3.0:susemanager-tools-3.0.21-21.1.x86_64",
            "SUSE Manager Server 3.0:virtual-host-gatherer-1.0.13-6.1.noarch",
            "SUSE Manager Server 3.0:virtual-host-gatherer-VMware-1.0.13-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Manager Server 3.0:rhnlib-2.5.84.4-6.1.noarch",
            "SUSE Manager Server 3.0:salt-netapi-client-0.11.1-12.1.noarch",
            "SUSE Manager Server 3.0:spacecmd-2.5.5.5-12.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-app-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-applet-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-config-files-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-config-files-common-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-config-files-tool-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-iss-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-iss-export-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-libs-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-package-push-server-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-server-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-sql-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-sql-oracle-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-sql-postgresql-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-tools-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-xml-export-libs-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-backend-xmlrpc-2.5.24.9-22.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-base-2.5.7.15-21.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-base-minimal-2.5.7.15-21.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-base-minimal-config-2.5.7.15-21.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-certs-tools-2.5.1.8-17.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-client-tools-2.5.13.8-17.2.noarch",
            "SUSE Manager Server 3.0:spacewalk-html-2.5.7.15-21.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-java-2.5.59.14-23.2.noarch",
            "SUSE Manager Server 3.0:spacewalk-java-config-2.5.59.14-23.2.noarch",
            "SUSE Manager Server 3.0:spacewalk-java-lib-2.5.59.14-23.2.noarch",
            "SUSE Manager Server 3.0:spacewalk-java-oracle-2.5.59.14-23.2.noarch",
            "SUSE Manager Server 3.0:spacewalk-java-postgresql-2.5.59.14-23.2.noarch",
            "SUSE Manager Server 3.0:spacewalk-reports-2.5.1.2-3.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-setup-2.5.3.12-15.1.noarch",
            "SUSE Manager Server 3.0:spacewalk-taskomatic-2.5.59.14-23.2.noarch",
            "SUSE Manager Server 3.0:subscription-matcher-0.18-5.1.noarch",
            "SUSE Manager Server 3.0:susemanager-3.0.21-21.1.s390x",
            "SUSE Manager Server 3.0:susemanager-3.0.21-21.1.x86_64",
            "SUSE Manager Server 3.0:susemanager-schema-3.0.19-21.2.noarch",
            "SUSE Manager Server 3.0:susemanager-sls-0.1.20-23.1.noarch",
            "SUSE Manager Server 3.0:susemanager-sync-data-3.0.16-24.1.noarch",
            "SUSE Manager Server 3.0:susemanager-tools-3.0.21-21.1.s390x",
            "SUSE Manager Server 3.0:susemanager-tools-3.0.21-21.1.x86_64",
            "SUSE Manager Server 3.0:virtual-host-gatherer-1.0.13-6.1.noarch",
            "SUSE Manager Server 3.0:virtual-host-gatherer-VMware-1.0.13-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-05-18T22:20:39Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7470"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.