RE: [EXTERN] Re: [EXTERN] Re: [EXTERN] [uyuni-users] Special update for CVE-2020-8028 (bsc#1175884)

-----Original Message----- From: Julio González Gil [mailto:jgonzalez@suse.com] Sent: Tuesday, September 22, 2020 2:54 PM To: uyuni-users@opensuse.org; Haupt, Torsten Cc: Silvio Moioli Subject: [EXTERN] Re: [EXTERN] Re: [EXTERN] [uyuni-users] Special update for CVE-2020-8028 (bsc#1175884)

On martes, 22 de septiembre de 2020 13:20:40 (CEST) Haupt, Torsten wrote:

...

Yes, Uyuni starts again. But I needed a "--force" in the rpm command. Thanks

Only a "--force", or did you need both "--force" and "--replacepkgs" at the same time?

I have used both options. I have not tried it without "--replacepkgs".

...

Torsten

...

-----Original Message----- From: Julio González Gil [mailto:jgonzalez@suse.com] Sent: Tuesday, September 22, 2020 12:47 PM To: uyuni-users@opensuse.org Cc: Silvio Moioli Subject: [EXTERN] Re: [EXTERN] [uyuni-users] Special update for CVE-2020-8028 (bsc#1175884)

Now that I see Silvio's message, I think I know where the problem is.

https://build.opensuse.org/package/binaries/systemsmanagement:Uyuni: Stable / salt-netapi-client/openSUSE_Leap_15.2 (stable version) and https://build.opensuse.org/package/binaries/ systemsmanagement:Uyuni:Stable:Patches/salt-netapi- client/openSUSE_Leap_15.2 (patches)

Have exactly the same version and release, as they were built only once at both projects. Next time we *really* need to bump the version of all packages part of a patch.

For now, can you try the following as root?

...

spacewalk-service status stop wget https://download.opensuse.org/repositories/systemsmanagement:/Uyun i:/

Stable:/Patches/openSUSE_Leap_15.2/noarch/salt-netapi- client-0.17.0-1.1.uyuni.noarch.rpm

...

rpm -i --replacepkgs salt-netapi-client-0.17.0-1.1.uyuni.noarch.rpm spacewalk-service status start

If it works, I will publish this as the fix until Uyuni 2020.09 is out (today/ tomorrow).

This should

On martes, 22 de septiembre de 2020 12:27:19 (CEST) Silvio Moioli wrote:

...

On 22/09/2020 12.21, Haupt, Torsten wrote:

...

22-Sep-2020 11:57:06.953 SEVERE [main] org.apache.catalina.core.StandardContext.listenerStart Error configuring application listener of class

[com.redhat.rhn.webapp.RhnServletListener]>

...

...

java.lang.NoSuchFieldError: FILE

at com.suse.manager.webui.services.impl.SaltService.<init >(S altService.java:151)

Can you please double check and report here the versions of the following packages: spacewalk-java-lib and salt-netapi-client please?

Regards, -- Silvio Moioli SUSE Manager Development Team

-- Julio González Gil Release Engineer, SUSE Manager and Uyuni jgonzalez@suse.com

-- Julio González Gil Release Engineer, SUSE Manager and Uyuni jgonzalez@suse.com -- To unsubscribe, e-mail: uyuni-users+unsubscribe@opensuse.org To contact the owner, e-mail: uyuni-users+owner@opensuse.org