{"schema_version":"1.7.3","id":"SUSE-SU-2020:14538-1","published":"2020-11-06T15:59:37Z","modified":"2026-02-04T03:55:51.620738Z","related":["CVE-2020-16846","CVE-2020-17490","CVE-2020-25592"],"upstream":["CVE-2020-16846","CVE-2020-17490","CVE-2020-25592"],"summary":"Security update for SUSE Manager Client Tools","details":"\nThis update fixes the following issues:\n\ncobbler:\n\n- Fix parsing cobbler dictionary options with values containing '=', e.g. kernel params containing '=' (bsc#1176978)\n\nmgr-daemon:\n\n- Update translation strings\n\nsalt:\n\n- Properly validate eauth credentials and tokens on SSH calls made by Salt API \n  (bsc#1178319, bsc#1178362, bsc#1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846)\n\nspacecmd:\n\n- Python3 fixes for errata in spacecmd (bsc#1169664)\n- Added support for i18n of user-facing strings\n- Python3 fix for sorted usage (bsc#1167907)\n\nspacewalk-client-tools:\n\n- Remove RH references in Python/Ruby localization and use the product name instead\n\n","affected":[{"package":{"name":"cobbler","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","purl":"pkg:rpm/suse/cobbler&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-CLIENT-TOOLS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2-0.68.12.1"}]}],"ecosystem_specific":{"binaries":[{"koan":"2.2.2-0.68.12.1","mgr-daemon":"4.1.3-5.20.1","python2-spacewalk-check":"4.1.7-27.38.1","python2-spacewalk-client-setup":"4.1.7-27.38.1","python2-spacewalk-client-tools":"4.1.7-27.38.1","salt":"2016.11.10-43.63.1","salt-doc":"2016.11.10-43.63.1","salt-minion":"2016.11.10-43.63.1","spacecmd":"4.1.8-18.72.1","spacewalk-check":"4.1.7-27.38.1","spacewalk-client-setup":"4.1.7-27.38.1","spacewalk-client-tools":"4.1.7-27.38.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:14538-1.json"}},{"package":{"name":"mgr-daemon","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","purl":"pkg:rpm/suse/mgr-daemon&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-CLIENT-TOOLS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-5.20.1"}]}],"ecosystem_specific":{"binaries":[{"koan":"2.2.2-0.68.12.1","mgr-daemon":"4.1.3-5.20.1","python2-spacewalk-check":"4.1.7-27.38.1","python2-spacewalk-client-setup":"4.1.7-27.38.1","python2-spacewalk-client-tools":"4.1.7-27.38.1","salt":"2016.11.10-43.63.1","salt-doc":"2016.11.10-43.63.1","salt-minion":"2016.11.10-43.63.1","spacecmd":"4.1.8-18.72.1","spacewalk-check":"4.1.7-27.38.1","spacewalk-client-setup":"4.1.7-27.38.1","spacewalk-client-tools":"4.1.7-27.38.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:14538-1.json"}},{"package":{"name":"salt","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","purl":"pkg:rpm/suse/salt&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-CLIENT-TOOLS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.11.10-43.63.1"}]}],"ecosystem_specific":{"binaries":[{"koan":"2.2.2-0.68.12.1","mgr-daemon":"4.1.3-5.20.1","python2-spacewalk-check":"4.1.7-27.38.1","python2-spacewalk-client-setup":"4.1.7-27.38.1","python2-spacewalk-client-tools":"4.1.7-27.38.1","salt":"2016.11.10-43.63.1","salt-doc":"2016.11.10-43.63.1","salt-minion":"2016.11.10-43.63.1","spacecmd":"4.1.8-18.72.1","spacewalk-check":"4.1.7-27.38.1","spacewalk-client-setup":"4.1.7-27.38.1","spacewalk-client-tools":"4.1.7-27.38.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:14538-1.json"}},{"package":{"name":"spacecmd","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","purl":"pkg:rpm/suse/spacecmd&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-CLIENT-TOOLS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.8-18.72.1"}]}],"ecosystem_specific":{"binaries":[{"koan":"2.2.2-0.68.12.1","mgr-daemon":"4.1.3-5.20.1","python2-spacewalk-check":"4.1.7-27.38.1","python2-spacewalk-client-setup":"4.1.7-27.38.1","python2-spacewalk-client-tools":"4.1.7-27.38.1","salt":"2016.11.10-43.63.1","salt-doc":"2016.11.10-43.63.1","salt-minion":"2016.11.10-43.63.1","spacecmd":"4.1.8-18.72.1","spacewalk-check":"4.1.7-27.38.1","spacewalk-client-setup":"4.1.7-27.38.1","spacewalk-client-tools":"4.1.7-27.38.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:14538-1.json"}},{"package":{"name":"spacewalk-client-tools","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","purl":"pkg:rpm/suse/spacewalk-client-tools&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-CLIENT-TOOLS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.7-27.38.1"}]}],"ecosystem_specific":{"binaries":[{"koan":"2.2.2-0.68.12.1","mgr-daemon":"4.1.3-5.20.1","python2-spacewalk-check":"4.1.7-27.38.1","python2-spacewalk-client-setup":"4.1.7-27.38.1","python2-spacewalk-client-tools":"4.1.7-27.38.1","salt":"2016.11.10-43.63.1","salt-doc":"2016.11.10-43.63.1","salt-minion":"2016.11.10-43.63.1","spacecmd":"4.1.8-18.72.1","spacewalk-check":"4.1.7-27.38.1","spacewalk-client-setup":"4.1.7-27.38.1","spacewalk-client-tools":"4.1.7-27.38.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:14538-1.json"}},{"package":{"name":"cobbler","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","purl":"pkg:rpm/suse/cobbler&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-CLIENT-TOOLS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2-0.68.12.1"}]}],"ecosystem_specific":{"binaries":[{"koan":"2.2.2-0.68.12.1","mgr-daemon":"4.1.3-5.20.1","python2-spacewalk-check":"4.1.7-27.38.1","python2-spacewalk-client-setup":"4.1.7-27.38.1","python2-spacewalk-client-tools":"4.1.7-27.38.1","salt":"2016.11.10-43.63.1","salt-doc":"2016.11.10-43.63.1","salt-minion":"2016.11.10-43.63.1","spacecmd":"4.1.8-18.72.1","spacewalk-check":"4.1.7-27.38.1","spacewalk-client-setup":"4.1.7-27.38.1","spacewalk-client-tools":"4.1.7-27.38.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:14538-1.json"}},{"package":{"name":"mgr-daemon","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","purl":"pkg:rpm/suse/mgr-daemon&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-CLIENT-TOOLS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-5.20.1"}]}],"ecosystem_specific":{"binaries":[{"koan":"2.2.2-0.68.12.1","mgr-daemon":"4.1.3-5.20.1","python2-spacewalk-check":"4.1.7-27.38.1","python2-spacewalk-client-setup":"4.1.7-27.38.1","python2-spacewalk-client-tools":"4.1.7-27.38.1","salt":"2016.11.10-43.63.1","salt-doc":"2016.11.10-43.63.1","salt-minion":"2016.11.10-43.63.1","spacecmd":"4.1.8-18.72.1","spacewalk-check":"4.1.7-27.38.1","spacewalk-client-setup":"4.1.7-27.38.1","spacewalk-client-tools":"4.1.7-27.38.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:14538-1.json"}},{"package":{"name":"salt","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","purl":"pkg:rpm/suse/salt&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-CLIENT-TOOLS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.11.10-43.63.1"}]}],"ecosystem_specific":{"binaries":[{"koan":"2.2.2-0.68.12.1","mgr-daemon":"4.1.3-5.20.1","python2-spacewalk-check":"4.1.7-27.38.1","python2-spacewalk-client-setup":"4.1.7-27.38.1","python2-spacewalk-client-tools":"4.1.7-27.38.1","salt":"2016.11.10-43.63.1","salt-doc":"2016.11.10-43.63.1","salt-minion":"2016.11.10-43.63.1","spacecmd":"4.1.8-18.72.1","spacewalk-check":"4.1.7-27.38.1","spacewalk-client-setup":"4.1.7-27.38.1","spacewalk-client-tools":"4.1.7-27.38.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:14538-1.json"}},{"package":{"name":"spacecmd","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","purl":"pkg:rpm/suse/spacecmd&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-CLIENT-TOOLS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.8-18.72.1"}]}],"ecosystem_specific":{"binaries":[{"koan":"2.2.2-0.68.12.1","mgr-daemon":"4.1.3-5.20.1","python2-spacewalk-check":"4.1.7-27.38.1","python2-spacewalk-client-setup":"4.1.7-27.38.1","python2-spacewalk-client-tools":"4.1.7-27.38.1","salt":"2016.11.10-43.63.1","salt-doc":"2016.11.10-43.63.1","salt-minion":"2016.11.10-43.63.1","spacecmd":"4.1.8-18.72.1","spacewalk-check":"4.1.7-27.38.1","spacewalk-client-setup":"4.1.7-27.38.1","spacewalk-client-tools":"4.1.7-27.38.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:14538-1.json"}},{"package":{"name":"spacewalk-client-tools","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","purl":"pkg:rpm/suse/spacewalk-client-tools&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-CLIENT-TOOLS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.7-27.38.1"}]}],"ecosystem_specific":{"binaries":[{"koan":"2.2.2-0.68.12.1","mgr-daemon":"4.1.3-5.20.1","python2-spacewalk-check":"4.1.7-27.38.1","python2-spacewalk-client-setup":"4.1.7-27.38.1","python2-spacewalk-client-tools":"4.1.7-27.38.1","salt":"2016.11.10-43.63.1","salt-doc":"2016.11.10-43.63.1","salt-minion":"2016.11.10-43.63.1","spacecmd":"4.1.8-18.72.1","spacewalk-check":"4.1.7-27.38.1","spacewalk-client-setup":"4.1.7-27.38.1","spacewalk-client-tools":"4.1.7-27.38.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:14538-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2020/suse-su-202014538-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1167907"},{"type":"REPORT","url":"https://bugzilla.suse.com/1169664"},{"type":"REPORT","url":"https://bugzilla.suse.com/1176978"},{"type":"REPORT","url":"https://bugzilla.suse.com/1178319"},{"type":"REPORT","url":"https://bugzilla.suse.com/1178361"},{"type":"REPORT","url":"https://bugzilla.suse.com/1178362"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-16846"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-17490"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-25592"}]}