VDB
SUSE-SU-2019%3A1006-1
SUSE-SU-2019%3A1006-1
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Record from OSV · Published April 24, 2019
Security update for SUSE Manager Server 3.2
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| smdba | SUSE:Manager Server 3.2 | 1.6.4-0.3.9.3 |
| spacewalk-admin | SUSE:Manager Server 3.2 | 2.8.4.4-3.6.3 |
| spacewalk-java | SUSE:Manager Server 3.2 | 2.8.78.21-3.29.1 |
| apache-commons-lang3 | SUSE:Manager Server 3.2 | 3.4-3.3.3 |
| reprepro | SUSE:Manager Server 3.2 | 5.3.0-2.3.3 |
| susemanager-sync-data | SUSE:Manager Server 3.2 | 3.2.14-3.20.3 |
| susemanager-sls | SUSE:Manager Server 3.2 | 3.2.23-3.26.3 |
| optaplanner | SUSE:Manager Server 3.2 | 7.17.0-3.3.3 |
| spacewalk-branding | SUSE:Manager Server 3.2 | 2.8.5.15-3.19.3 |
| kie-api | SUSE:Manager Server 3.2 | 7.17.0-3.3.3 |
| jade4j | SUSE:Manager Server 3.2 | 1.0.7-3.3.3 |
| py26-compat-salt | SUSE:Manager Server 3.2 | 2016.11.10-6.21.3 |
15 more packages have a fixed version. See every fix in Lookup.
Risk scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
| Vendor | Product | Versions |
|---|---|---|
| SUSE:Manager Server 3.2 | smdba | 0 |
| SUSE:Manager Server 3.2 | spacewalk-admin | 0 |
| SUSE:Manager Server 3.2 | spacewalk-java | 0 |
| SUSE:Manager Server 3.2 | apache-commons-lang3 | 0 |
| SUSE:Manager Server 3.2 | reprepro | 0 |
| SUSE:Manager Server 3.2 | susemanager-sync-data | 0 |
| SUSE:Manager Server 3.2 | susemanager-sls | 0 |
| SUSE:Manager Server 3.2 | optaplanner | 0 |
| SUSE:Manager Server 3.2 | spacewalk-branding | 0 |
| SUSE:Manager Server 3.2 | kie-api | 0 |
| SUSE:Manager Server 3.2 | jade4j | 0 |
| SUSE:Manager Server 3.2 | py26-compat-salt | 0 |
| SUSE:Manager Server 3.2 | susemanager-schema | 0 |
| SUSE:Manager Server 3.2 | guava | 0 |
| SUSE:Manager Server 3.2 | susemanager | 0 |
| SUSE:Manager Server 3.2 | spacewalk-web | 0 |
| SUSE:Manager Server 3.2 | xstream | 0 |
| SUSE:Manager Server 3.2 | spacewalk-certs-tools | 0 |
| SUSE:Manager Server 3.2 | spacecmd | 0 |
| SUSE:Manager Proxy 3.2 | spacewalk-web | 0 |
…and 7 more
Timeline
- Apr 24, 2019 CVE Published
- Feb 4, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln SUSE-SU-2019%3A1006-1
vulnetix vdb fixes SUSE-SU-2019%3A1006-1
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/SUSE-SU-2019%253A1006-1/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://www.suse.com/support/update/announcement/2019/suse-su-20191006-1/ advisory
- https://bugzilla.suse.com/1109316 report
- https://bugzilla.suse.com/1122230 report
- https://bugzilla.suse.com/1122381 report
- https://bugzilla.suse.com/1124290 report
- https://bugzilla.suse.com/1125744 report
- https://bugzilla.suse.com/1126075 report
- https://bugzilla.suse.com/1126518 report
- https://bugzilla.suse.com/1128228 report
- https://bugzilla.suse.com/1129851 report
- https://bugzilla.suse.com/1129956 report
- https://bugzilla.suse.com/1130658 report
- https://bugzilla.suse.com/1131677 report
- https://bugzilla.suse.com/1131721 report
- https://bugzilla.suse.com/1132579 report
- https://www.suse.com/security/cve/CVE-2017-7957 url
- https://bugzilla.suse.com/1070731 report
- https://bugzilla.suse.com/1120242 report
- https://bugzilla.suse.com/1121195 report
- https://bugzilla.suse.com/1122837 report
…and 7 more