File _patchinfo of Package patchinfo.4661

<patchinfo incident="4661">
  <rating>moderate</rating>
  <packager>lucidd</packager>
  <category>security</category>
  <summary>Security update for SUSE Manager Client Tools</summary>
  <description>
The following security issue in spacewalk-backend has been fixed:

- Non admin or disabled user cannot make changes to a system anymore using spacewalk-channel.
  (bsc#1026633, CVE-2017-7470)

Additionally, the following non-security issues have been fixed:

cobbler:

- Support UEFI boot with cobbler generated tftp tree. (bsc#1020376)
- Refresh patch for fuzzless appliance.

rhnlib:

- Support all TLS versions in rpclib. (bsc#1025312)

spacecmd:

- Improve output on error for listrepo. (bsc#1027426)
- Reword spacecmd removal message. (bsc#1024406)

spacewalk-backend:

- Do not fail with traceback when media.1 does not exist. (bsc#1032256)
- Create scap files directory beforehand. (bsc#1029755)
- Fix error if SPACEWALK_DEBUG_NO_REPORTS env variable is not present.
- Don't skip 'rhnErrataPackage' cleanup during an errata update. (bsc#1023233)
- Add support for running spacewalk-debug without creating reports. (bsc#1024714)
- Set scap store directory mod to 775 and group owner to susemanager.
- incomplete_package_import: Do import rhnPackageFile as it breaks some package installations.
- Added traceback printing to the exception block.
- Change postgresql starting commands.

spacewalk-client-tools:

- Fix reboot message to use correct product name. (bsc#1031667)
</description>
  <issue id="2017-7470" tracker="cve"/>
  <issue id="1026633" tracker="bnc">Non admin or disabled user can make changes to a system using spacewalk-channel</issue>
  <issue id="1032256" tracker="bnc">zypper ref throws HTTP 500 error on the client</issue>
  <issue id="1027426" tracker="bnc">spacecmd softwarechannel_listrepos "list index out of range"</issue>
  <issue id="1020376" tracker="bnc">cobbler/atftpd not working with uefi</issue>
  <issue id="1025312" tracker="bnc">Traditional clients cannot register when only TLSv1.2 is enabled.</issue>
  <issue id="1024406" tracker="bnc">cannot delete minions</issue>
  <issue id="1031667" tracker="bnc">Reference to Spacewalk Instead of SUMA When Rebooting the Client from GUI</issue>
  <issue id="1024714" tracker="bnc">supportconfig plugin: spacewalk-debug takes 6 hours to complete for 8000 clients</issue>
  <issue id="1023233" tracker="bnc">Patch files that exist on slave and are modified on the master do not get updated/resync'd</issue>
  <issue id="1029755" tracker="bnc">scan of salt minion fails with "Could not store SCAP files on server"</issue>
  <releasetarget project="SUSE:SLE-12:Update"/>
  <releasetarget project="SUSE:Updates:SLE-Manager-Tools:12:aarch64"/>
  <releasetarget project="SUSE:Updates:SLE-Manager-Tools:12:ppc64le"/>
  <releasetarget project="SUSE:Updates:SLE-Manager-Tools:12:s390x"/>
  <releasetarget project="SUSE:Updates:SLE-Manager-Tools:12:x86_64"/>
</patchinfo>