<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for SUSE Manager Server 3.1</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2018:1751-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2018-06-19T13:47:15Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2018-06-19T13:47:15Z</InitialReleaseDate>
    <CurrentReleaseDate>2018-06-19T13:47:15Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for SUSE Manager Server 3.1</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">
This update provides the following fixes and improvements for SUSE Manager Server 3.1:

The following new package has been added:

py26-compat-salt:

This package provides compatibility with Python 2.6 for salt.

This update includes the following new features:

  (fate#325476)

Additonally, the following issues have been fixed:

cobbler:

- Detect if there is already another instance of 'cobbler sync'
  running and exit with failure if so. (bsc#1081714)
- CVE-2017-1000469: Escape shell parameters provided by the user 
  for the reposync action. (bsc#1074594)
- Add sles15 distro profile. (bsc#1090205)

google-gson:

- Update to version 2.8.2. (bsc#1091091)

patterns-suse-manager:

- Require py26-compat-salt and python3-salt to be able to connect with
  salt-ssh to a system which has python2.6 or python3 installed. (fate#325476)

salt-netapi-client:

- See https://github.com/SUSE/salt-netapi-client/releases/tag/v0.14.0

spacewalk-backend:

- Do not fail boostrap if no ip6addr interface. (bsc#1090395)
- Allow again to use a higher version of spacewalk-backend-libs
  with spacewalk-backend. (bsc#1092383)
- SLE15 support: recommended/required flag for products and channels.

spacewalk-branding:

- Fix URL for new products page. (bsc#1092492)
- SLE15 support: recommended/required flag for products and channels.
- Show channel label when listing config channels. (bsc#1083278)

spacewalk-certs-tools:

- Fix bootstrap script for python3. (bsc#1091840)
- Support SLE15 product family.

spacewalk-java:

- Do not create new product if product_id exists, update it instead (bsc#1096714)
- Fix deletion of Taskomatic schedules via the GUI (bsc#1095569)
- Fix unknown installed products when using salt-ssh. (bsc#1088861)
- Prevent NPE when no image build history details are available. (bsc#1092161)
- Uniform the notification message when scheduling HW refresh. (bsc#1082796)
- Add SLES12 SP2 LTSS family. (bsc#1092194)
- Fix token cleanup task crashing. (bsc#1090585)
- HW refresh fails on SLE15 Salt client. (bsc#1090221)
- Only show the most relevant (least effort) solutions. (bsc#1087071)
- Add support for autoinstallation of SLE15. (bsc#1090205)
- Update sles_register cobbler snippets to work with SLE15. (bsc#1090205)
- Support SLE15 product family.
- Show channel label when listing config channels. (bsc#1083278)
- Fix equals to display channels with same name but different label. (bsc#1083278)
- Avoid init.sls files with no revision on Config State Channels. (bsc#1091855)
- Fix taskomatic deadlock in failure case. (bsc#1085471)
- Render configuration files with UTF-8. (bsc#1088667)
- Update google-gson to version 2.8.2. (bsc#1091091)
- Fix updating Subscription cache. (bsc#1075466)
- Fix NPE in websocket session configurator. (bsc#1080474)
- Wait until minion is back to set RebootAction as COMPLETED. (bsc#1089401)
- Add support for Prometheus monitoring.
- Fix constraint violation errors when onboarding. (bsc#1089468)
- Fix Advanced search for systems with installed packages. (bsc#1085838)

spacewalk-utils:

- Clone-by-date removes packages only if the list is not empty. (bsc#1089396)

spacewalk-web:

- Fix misleading message when syncing channels. (bsc#1089103)
- Automatically select mandatory channels when selecting a base channel. (bsc#1083513)
- Fix ace.js editor config to use soft tabs. (bsc#1090040)
- Display always config channel name and label. (bsc#1083278)

susemanager:

- Add missing python3 packages to bootstrap JeOS image. (bsc#1085044)
- Support SLE15 product family.
- Fix crash on not properly configured environment. (bsc#1092275)
- Provide full traditional stack in RES bootstrap repo. (bsc#1091667)
- Fix bootstrap script for python3. (bsc#1091840)
- Fix unknown installed products when using salt-ssh. (bsc#1088861)
- Add python2-salt to RES7 and SLES12 bootstrap repository.
- Fix bootstrapping RHEL 7 salt client (missing python-ipaddress). (bsc#1087055)

susemanager-frontend-libs:

- Enforce susemanager-nodejs-sdk-devel dependency version. (bsc#1095231)

susemanager-docs_en:

- Documentation: mgr-create-bootstrap-repo documented flag is not correct. (bsc#1090400)
- Remove LTSS from SUSE Linux Enterprise 11 SP4 in gs. (bsc#1090401)
- Configuration Macros do not work. (bsc#1084679)
- Updated spacecmd with new functions.
- Update bootstrap warning for sles 15 clients and python 3 - in reference and gs.

susemanager-schema:

- Add SLE15 distribution. (bsc#1090205)
- SLE15 support: recommended/required flag for products and channels.
- Support SLE15 product family.
- Fix a race condition on lookup_evr. (bsc#1090059)

susemanager-sls:

- Install python2/3 salt flavours on buildhosts to generate a compatible
  thin for the dockerimage beeing build. (bsc#1092161)
- Docker.login requires a list as input. (bsc#1092161)
- Fix profileupdate sls to execute retrieval of kernel live patching info. (bsc#1091052)
- Support SLE15 product family.
- Fix hardware refresh when FQDN changes. (bsc#1073267)
- Create bootstrap repo only if it exist in the server. (bsc#1087840)
- Fix master tops merging when running salt&gt;=2018.
- Use dockermod with new salt and user repository/tag option for build.

susemanager-sync-data:

- Set SLE15 channel update tags to final version.
- Add SLES12 SP2 LTSS family. (bsc#1092194)
- Add SLES12-SP2-LTSS product classes. (bsc#1092194)
- Add debuginfo channels for SLE15 products.
- Add PackageHub 15 Products.
- Add product sle-module-live-patching 15.
- Add new HPC 15 Product.
- Add missing channel to sle-module-basesystem 15.
- Support SLE15 product family.

susemanager-tftpsync:

- Detect if there is already another instance of 'cobbler sync'
  running and exit with failure if so. (bsc#1081714)
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">SUSE-SUSE-Manager-Server-3.1-2018-1174</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181751-1/</URL>
      <Description>Link for SUSE-SU-2018:1751-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2018-June/004201.html</URL>
      <Description>E-Mail link for SUSE-SU-2018:1751-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1073267</URL>
      <Description>SUSE Bug 1073267</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1074594</URL>
      <Description>SUSE Bug 1074594</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1075466</URL>
      <Description>SUSE Bug 1075466</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1080474</URL>
      <Description>SUSE Bug 1080474</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1081714</URL>
      <Description>SUSE Bug 1081714</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1082796</URL>
      <Description>SUSE Bug 1082796</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1083278</URL>
      <Description>SUSE Bug 1083278</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1083513</URL>
      <Description>SUSE Bug 1083513</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1084679</URL>
      <Description>SUSE Bug 1084679</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1085044</URL>
      <Description>SUSE Bug 1085044</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1085471</URL>
      <Description>SUSE Bug 1085471</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1085650</URL>
      <Description>SUSE Bug 1085650</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1085838</URL>
      <Description>SUSE Bug 1085838</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1087055</URL>
      <Description>SUSE Bug 1087055</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1087071</URL>
      <Description>SUSE Bug 1087071</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1087840</URL>
      <Description>SUSE Bug 1087840</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1088667</URL>
      <Description>SUSE Bug 1088667</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1088861</URL>
      <Description>SUSE Bug 1088861</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1089103</URL>
      <Description>SUSE Bug 1089103</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1089396</URL>
      <Description>SUSE Bug 1089396</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1089401</URL>
      <Description>SUSE Bug 1089401</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1089468</URL>
      <Description>SUSE Bug 1089468</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1090040</URL>
      <Description>SUSE Bug 1090040</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1090059</URL>
      <Description>SUSE Bug 1090059</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1090205</URL>
      <Description>SUSE Bug 1090205</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1090221</URL>
      <Description>SUSE Bug 1090221</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1090395</URL>
      <Description>SUSE Bug 1090395</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1090400</URL>
      <Description>SUSE Bug 1090400</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1090401</URL>
      <Description>SUSE Bug 1090401</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1090585</URL>
      <Description>SUSE Bug 1090585</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1091052</URL>
      <Description>SUSE Bug 1091052</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1091091</URL>
      <Description>SUSE Bug 1091091</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1091667</URL>
      <Description>SUSE Bug 1091667</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1091840</URL>
      <Description>SUSE Bug 1091840</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1091855</URL>
      <Description>SUSE Bug 1091855</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1092161</URL>
      <Description>SUSE Bug 1092161</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1092194</URL>
      <Description>SUSE Bug 1092194</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1092275</URL>
      <Description>SUSE Bug 1092275</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1092383</URL>
      <Description>SUSE Bug 1092383</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1092492</URL>
      <Description>SUSE Bug 1092492</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1095231</URL>
      <Description>SUSE Bug 1095231</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1095569</URL>
      <Description>SUSE Bug 1095569</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1096714</URL>
      <Description>SUSE Bug 1096714</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2014-5326/</URL>
      <Description>SUSE CVE CVE-2014-5326 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-1000469/</URL>
      <Description>SUSE CVE CVE-2017-1000469 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="SUSE Manager Server 3.1">
      <Branch Type="Product Name" Name="SUSE Manager Server 3.1">
        <FullProductName ProductID="SUSE Manager Server 3.1" CPE="cpe:/o:suse:suse-manager-server:3.1">SUSE Manager Server 3.1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="cobbler-2.6.6-5.10.4">
      <FullProductName ProductID="cobbler-2.6.6-5.10.4">cobbler-2.6.6-5.10.4</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="google-gson-2.8.2-3.3.6">
      <FullProductName ProductID="google-gson-2.8.2-3.3.6">google-gson-2.8.2-3.3.6</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="patterns-suma_server-3.1-3.3.2">
      <FullProductName ProductID="patterns-suma_server-3.1-3.3.2">patterns-suma_server-3.1-3.3.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="prometheus-client-java-0.3.0-1.3.5">
      <FullProductName ProductID="prometheus-client-java-0.3.0-1.3.5">prometheus-client-java-0.3.0-1.3.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="py26-compat-salt-2016.11.4-1.7.2">
      <FullProductName ProductID="py26-compat-salt-2016.11.4-1.7.2">py26-compat-salt-2016.11.4-1.7.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="salt-netapi-client-0.14.0-3.9.5">
      <FullProductName ProductID="salt-netapi-client-0.14.0-3.9.5">salt-netapi-client-0.14.0-3.9.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-backend-2.7.73.13-2.19.5">
      <FullProductName ProductID="spacewalk-backend-2.7.73.13-2.19.5">spacewalk-backend-2.7.73.13-2.19.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-backend-app-2.7.73.13-2.19.5">
      <FullProductName ProductID="spacewalk-backend-app-2.7.73.13-2.19.5">spacewalk-backend-app-2.7.73.13-2.19.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-backend-applet-2.7.73.13-2.19.5">
      <FullProductName ProductID="spacewalk-backend-applet-2.7.73.13-2.19.5">spacewalk-backend-applet-2.7.73.13-2.19.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-backend-config-files-2.7.73.13-2.19.5">
      <FullProductName ProductID="spacewalk-backend-config-files-2.7.73.13-2.19.5">spacewalk-backend-config-files-2.7.73.13-2.19.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-backend-config-files-common-2.7.73.13-2.19.5">
      <FullProductName ProductID="spacewalk-backend-config-files-common-2.7.73.13-2.19.5">spacewalk-backend-config-files-common-2.7.73.13-2.19.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-backend-config-files-tool-2.7.73.13-2.19.5">
      <FullProductName ProductID="spacewalk-backend-config-files-tool-2.7.73.13-2.19.5">spacewalk-backend-config-files-tool-2.7.73.13-2.19.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-backend-iss-2.7.73.13-2.19.5">
      <FullProductName ProductID="spacewalk-backend-iss-2.7.73.13-2.19.5">spacewalk-backend-iss-2.7.73.13-2.19.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-backend-iss-export-2.7.73.13-2.19.5">
      <FullProductName ProductID="spacewalk-backend-iss-export-2.7.73.13-2.19.5">spacewalk-backend-iss-export-2.7.73.13-2.19.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-backend-libs-2.7.73.13-2.19.5">
      <FullProductName ProductID="spacewalk-backend-libs-2.7.73.13-2.19.5">spacewalk-backend-libs-2.7.73.13-2.19.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-backend-package-push-server-2.7.73.13-2.19.5">
      <FullProductName ProductID="spacewalk-backend-package-push-server-2.7.73.13-2.19.5">spacewalk-backend-package-push-server-2.7.73.13-2.19.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-backend-server-2.7.73.13-2.19.5">
      <FullProductName ProductID="spacewalk-backend-server-2.7.73.13-2.19.5">spacewalk-backend-server-2.7.73.13-2.19.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-backend-sql-2.7.73.13-2.19.5">
      <FullProductName ProductID="spacewalk-backend-sql-2.7.73.13-2.19.5">spacewalk-backend-sql-2.7.73.13-2.19.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-backend-sql-oracle-2.7.73.13-2.19.5">
      <FullProductName ProductID="spacewalk-backend-sql-oracle-2.7.73.13-2.19.5">spacewalk-backend-sql-oracle-2.7.73.13-2.19.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-backend-sql-postgresql-2.7.73.13-2.19.5">
      <FullProductName ProductID="spacewalk-backend-sql-postgresql-2.7.73.13-2.19.5">spacewalk-backend-sql-postgresql-2.7.73.13-2.19.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-backend-tools-2.7.73.13-2.19.5">
      <FullProductName ProductID="spacewalk-backend-tools-2.7.73.13-2.19.5">spacewalk-backend-tools-2.7.73.13-2.19.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-backend-xml-export-libs-2.7.73.13-2.19.5">
      <FullProductName ProductID="spacewalk-backend-xml-export-libs-2.7.73.13-2.19.5">spacewalk-backend-xml-export-libs-2.7.73.13-2.19.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-backend-xmlrpc-2.7.73.13-2.19.5">
      <FullProductName ProductID="spacewalk-backend-xmlrpc-2.7.73.13-2.19.5">spacewalk-backend-xmlrpc-2.7.73.13-2.19.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-base-2.7.1.16-2.19.5">
      <FullProductName ProductID="spacewalk-base-2.7.1.16-2.19.5">spacewalk-base-2.7.1.16-2.19.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-base-minimal-2.7.1.16-2.19.5">
      <FullProductName ProductID="spacewalk-base-minimal-2.7.1.16-2.19.5">spacewalk-base-minimal-2.7.1.16-2.19.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-base-minimal-config-2.7.1.16-2.19.5">
      <FullProductName ProductID="spacewalk-base-minimal-config-2.7.1.16-2.19.5">spacewalk-base-minimal-config-2.7.1.16-2.19.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-branding-2.7.2.13-2.19.5">
      <FullProductName ProductID="spacewalk-branding-2.7.2.13-2.19.5">spacewalk-branding-2.7.2.13-2.19.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-certs-tools-2.7.0.10-2.12.4">
      <FullProductName ProductID="spacewalk-certs-tools-2.7.0.10-2.12.4">spacewalk-certs-tools-2.7.0.10-2.12.4</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-html-2.7.1.16-2.19.5">
      <FullProductName ProductID="spacewalk-html-2.7.1.16-2.19.5">spacewalk-html-2.7.1.16-2.19.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-java-2.7.46.14-2.25.1">
      <FullProductName ProductID="spacewalk-java-2.7.46.14-2.25.1">spacewalk-java-2.7.46.14-2.25.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-java-config-2.7.46.14-2.25.1">
      <FullProductName ProductID="spacewalk-java-config-2.7.46.14-2.25.1">spacewalk-java-config-2.7.46.14-2.25.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-java-lib-2.7.46.14-2.25.1">
      <FullProductName ProductID="spacewalk-java-lib-2.7.46.14-2.25.1">spacewalk-java-lib-2.7.46.14-2.25.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-java-oracle-2.7.46.14-2.25.1">
      <FullProductName ProductID="spacewalk-java-oracle-2.7.46.14-2.25.1">spacewalk-java-oracle-2.7.46.14-2.25.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-java-postgresql-2.7.46.14-2.25.1">
      <FullProductName ProductID="spacewalk-java-postgresql-2.7.46.14-2.25.1">spacewalk-java-postgresql-2.7.46.14-2.25.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-taskomatic-2.7.46.14-2.25.1">
      <FullProductName ProductID="spacewalk-taskomatic-2.7.46.14-2.25.1">spacewalk-taskomatic-2.7.46.14-2.25.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-utils-2.7.10.7-2.10.4">
      <FullProductName ProductID="spacewalk-utils-2.7.10.7-2.10.4">spacewalk-utils-2.7.10.7-2.10.4</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="susemanager-3.1.14-2.19.5">
      <FullProductName ProductID="susemanager-3.1.14-2.19.5">susemanager-3.1.14-2.19.5</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="susemanager-advanced-topics_en-pdf-3.1-10.20.7">
      <FullProductName ProductID="susemanager-advanced-topics_en-pdf-3.1-10.20.7">susemanager-advanced-topics_en-pdf-3.1-10.20.7</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="susemanager-best-practices_en-pdf-3.1-10.20.7">
      <FullProductName ProductID="susemanager-best-practices_en-pdf-3.1-10.20.7">susemanager-best-practices_en-pdf-3.1-10.20.7</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="susemanager-docs_en-3.1-10.20.7">
      <FullProductName ProductID="susemanager-docs_en-3.1-10.20.7">susemanager-docs_en-3.1-10.20.7</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="susemanager-frontend-libs-3.1.1-3.3.2">
      <FullProductName ProductID="susemanager-frontend-libs-3.1.1-3.3.2">susemanager-frontend-libs-3.1.1-3.3.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="susemanager-getting-started_en-pdf-3.1-10.20.7">
      <FullProductName ProductID="susemanager-getting-started_en-pdf-3.1-10.20.7">susemanager-getting-started_en-pdf-3.1-10.20.7</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="susemanager-jsp_en-3.1-10.20.7">
      <FullProductName ProductID="susemanager-jsp_en-3.1-10.20.7">susemanager-jsp_en-3.1-10.20.7</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="susemanager-reference_en-pdf-3.1-10.20.7">
      <FullProductName ProductID="susemanager-reference_en-pdf-3.1-10.20.7">susemanager-reference_en-pdf-3.1-10.20.7</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="susemanager-schema-3.1.17-2.23.3">
      <FullProductName ProductID="susemanager-schema-3.1.17-2.23.3">susemanager-schema-3.1.17-2.23.3</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="susemanager-sls-3.1.17-2.23.2">
      <FullProductName ProductID="susemanager-sls-3.1.17-2.23.2">susemanager-sls-3.1.17-2.23.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="susemanager-sync-data-3.1.14-2.23.2">
      <FullProductName ProductID="susemanager-sync-data-3.1.14-2.23.2">susemanager-sync-data-3.1.14-2.23.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="susemanager-tftpsync-3.1.3-3.6.2">
      <FullProductName ProductID="susemanager-tftpsync-3.1.3-3.6.2">susemanager-tftpsync-3.1.3-3.6.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="susemanager-tools-3.1.14-2.19.5">
      <FullProductName ProductID="susemanager-tools-3.1.14-2.19.5">susemanager-tools-3.1.14-2.19.5</FullProductName>
    </Branch>
    <Relationship ProductReference="cobbler-2.6.6-5.10.4" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:cobbler-2.6.6-5.10.4">cobbler-2.6.6-5.10.4 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="google-gson-2.8.2-3.3.6" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:google-gson-2.8.2-3.3.6">google-gson-2.8.2-3.3.6 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="patterns-suma_server-3.1-3.3.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:patterns-suma_server-3.1-3.3.2">patterns-suma_server-3.1-3.3.2 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="prometheus-client-java-0.3.0-1.3.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:prometheus-client-java-0.3.0-1.3.5">prometheus-client-java-0.3.0-1.3.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="py26-compat-salt-2016.11.4-1.7.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:py26-compat-salt-2016.11.4-1.7.2">py26-compat-salt-2016.11.4-1.7.2 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="salt-netapi-client-0.14.0-3.9.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:salt-netapi-client-0.14.0-3.9.5">salt-netapi-client-0.14.0-3.9.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-backend-2.7.73.13-2.19.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-backend-2.7.73.13-2.19.5">spacewalk-backend-2.7.73.13-2.19.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-backend-app-2.7.73.13-2.19.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-backend-app-2.7.73.13-2.19.5">spacewalk-backend-app-2.7.73.13-2.19.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-backend-applet-2.7.73.13-2.19.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-backend-applet-2.7.73.13-2.19.5">spacewalk-backend-applet-2.7.73.13-2.19.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-backend-config-files-2.7.73.13-2.19.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-backend-config-files-2.7.73.13-2.19.5">spacewalk-backend-config-files-2.7.73.13-2.19.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-backend-config-files-common-2.7.73.13-2.19.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-backend-config-files-common-2.7.73.13-2.19.5">spacewalk-backend-config-files-common-2.7.73.13-2.19.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-backend-config-files-tool-2.7.73.13-2.19.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-backend-config-files-tool-2.7.73.13-2.19.5">spacewalk-backend-config-files-tool-2.7.73.13-2.19.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-backend-iss-2.7.73.13-2.19.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-backend-iss-2.7.73.13-2.19.5">spacewalk-backend-iss-2.7.73.13-2.19.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-backend-iss-export-2.7.73.13-2.19.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-backend-iss-export-2.7.73.13-2.19.5">spacewalk-backend-iss-export-2.7.73.13-2.19.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-backend-libs-2.7.73.13-2.19.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-backend-libs-2.7.73.13-2.19.5">spacewalk-backend-libs-2.7.73.13-2.19.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-backend-package-push-server-2.7.73.13-2.19.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-backend-package-push-server-2.7.73.13-2.19.5">spacewalk-backend-package-push-server-2.7.73.13-2.19.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-backend-server-2.7.73.13-2.19.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-backend-server-2.7.73.13-2.19.5">spacewalk-backend-server-2.7.73.13-2.19.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-backend-sql-2.7.73.13-2.19.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-backend-sql-2.7.73.13-2.19.5">spacewalk-backend-sql-2.7.73.13-2.19.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-backend-sql-oracle-2.7.73.13-2.19.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-backend-sql-oracle-2.7.73.13-2.19.5">spacewalk-backend-sql-oracle-2.7.73.13-2.19.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-backend-sql-postgresql-2.7.73.13-2.19.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-backend-sql-postgresql-2.7.73.13-2.19.5">spacewalk-backend-sql-postgresql-2.7.73.13-2.19.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-backend-tools-2.7.73.13-2.19.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-backend-tools-2.7.73.13-2.19.5">spacewalk-backend-tools-2.7.73.13-2.19.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-backend-xml-export-libs-2.7.73.13-2.19.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-backend-xml-export-libs-2.7.73.13-2.19.5">spacewalk-backend-xml-export-libs-2.7.73.13-2.19.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-backend-xmlrpc-2.7.73.13-2.19.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-backend-xmlrpc-2.7.73.13-2.19.5">spacewalk-backend-xmlrpc-2.7.73.13-2.19.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-base-2.7.1.16-2.19.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-base-2.7.1.16-2.19.5">spacewalk-base-2.7.1.16-2.19.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-base-minimal-2.7.1.16-2.19.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-base-minimal-2.7.1.16-2.19.5">spacewalk-base-minimal-2.7.1.16-2.19.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-base-minimal-config-2.7.1.16-2.19.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-base-minimal-config-2.7.1.16-2.19.5">spacewalk-base-minimal-config-2.7.1.16-2.19.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-branding-2.7.2.13-2.19.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-branding-2.7.2.13-2.19.5">spacewalk-branding-2.7.2.13-2.19.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-certs-tools-2.7.0.10-2.12.4" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-certs-tools-2.7.0.10-2.12.4">spacewalk-certs-tools-2.7.0.10-2.12.4 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-html-2.7.1.16-2.19.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-html-2.7.1.16-2.19.5">spacewalk-html-2.7.1.16-2.19.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-java-2.7.46.14-2.25.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-java-2.7.46.14-2.25.1">spacewalk-java-2.7.46.14-2.25.1 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-java-config-2.7.46.14-2.25.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-java-config-2.7.46.14-2.25.1">spacewalk-java-config-2.7.46.14-2.25.1 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-java-lib-2.7.46.14-2.25.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-java-lib-2.7.46.14-2.25.1">spacewalk-java-lib-2.7.46.14-2.25.1 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-java-oracle-2.7.46.14-2.25.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-java-oracle-2.7.46.14-2.25.1">spacewalk-java-oracle-2.7.46.14-2.25.1 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-java-postgresql-2.7.46.14-2.25.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-java-postgresql-2.7.46.14-2.25.1">spacewalk-java-postgresql-2.7.46.14-2.25.1 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-taskomatic-2.7.46.14-2.25.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-taskomatic-2.7.46.14-2.25.1">spacewalk-taskomatic-2.7.46.14-2.25.1 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-utils-2.7.10.7-2.10.4" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:spacewalk-utils-2.7.10.7-2.10.4">spacewalk-utils-2.7.10.7-2.10.4 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="susemanager-3.1.14-2.19.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:susemanager-3.1.14-2.19.5">susemanager-3.1.14-2.19.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="susemanager-advanced-topics_en-pdf-3.1-10.20.7" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:susemanager-advanced-topics_en-pdf-3.1-10.20.7">susemanager-advanced-topics_en-pdf-3.1-10.20.7 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="susemanager-best-practices_en-pdf-3.1-10.20.7" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:susemanager-best-practices_en-pdf-3.1-10.20.7">susemanager-best-practices_en-pdf-3.1-10.20.7 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="susemanager-docs_en-3.1-10.20.7" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:susemanager-docs_en-3.1-10.20.7">susemanager-docs_en-3.1-10.20.7 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="susemanager-frontend-libs-3.1.1-3.3.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:susemanager-frontend-libs-3.1.1-3.3.2">susemanager-frontend-libs-3.1.1-3.3.2 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="susemanager-getting-started_en-pdf-3.1-10.20.7" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:susemanager-getting-started_en-pdf-3.1-10.20.7">susemanager-getting-started_en-pdf-3.1-10.20.7 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="susemanager-jsp_en-3.1-10.20.7" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:susemanager-jsp_en-3.1-10.20.7">susemanager-jsp_en-3.1-10.20.7 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="susemanager-reference_en-pdf-3.1-10.20.7" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:susemanager-reference_en-pdf-3.1-10.20.7">susemanager-reference_en-pdf-3.1-10.20.7 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="susemanager-schema-3.1.17-2.23.3" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:susemanager-schema-3.1.17-2.23.3">susemanager-schema-3.1.17-2.23.3 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="susemanager-sls-3.1.17-2.23.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:susemanager-sls-3.1.17-2.23.2">susemanager-sls-3.1.17-2.23.2 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="susemanager-sync-data-3.1.14-2.23.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:susemanager-sync-data-3.1.14-2.23.2">susemanager-sync-data-3.1.14-2.23.2 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="susemanager-tftpsync-3.1.3-3.6.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:susemanager-tftpsync-3.1.3-3.6.2">susemanager-tftpsync-3.1.3-3.6.2 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="susemanager-tools-3.1.14-2.19.5" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Server 3.1">
      <FullProductName ProductID="SUSE Manager Server 3.1:susemanager-tools-3.1.14-2.19.5">susemanager-tools-3.1.14-2.19.5 as a component of SUSE Manager Server 3.1</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Cross-site scripting (XSS) vulnerability in Direct Web Remoting (DWR) through 2.0.10 and 3.x through 3.0.RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.</Note>
    </Notes>
    <CVE>CVE-2014-5326</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Manager Server 3.1:cobbler-2.6.6-5.10.4</ProductID>
        <ProductID>SUSE Manager Server 3.1:google-gson-2.8.2-3.3.6</ProductID>
        <ProductID>SUSE Manager Server 3.1:patterns-suma_server-3.1-3.3.2</ProductID>
        <ProductID>SUSE Manager Server 3.1:prometheus-client-java-0.3.0-1.3.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:py26-compat-salt-2016.11.4-1.7.2</ProductID>
        <ProductID>SUSE Manager Server 3.1:salt-netapi-client-0.14.0-3.9.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-app-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-applet-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-config-files-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-config-files-common-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-config-files-tool-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-iss-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-iss-export-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-libs-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-package-push-server-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-server-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-sql-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-sql-oracle-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-sql-postgresql-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-tools-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-xml-export-libs-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-xmlrpc-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-base-2.7.1.16-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-base-minimal-2.7.1.16-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-base-minimal-config-2.7.1.16-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-branding-2.7.2.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-certs-tools-2.7.0.10-2.12.4</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-html-2.7.1.16-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-java-2.7.46.14-2.25.1</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-java-config-2.7.46.14-2.25.1</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-java-lib-2.7.46.14-2.25.1</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-java-oracle-2.7.46.14-2.25.1</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-java-postgresql-2.7.46.14-2.25.1</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-taskomatic-2.7.46.14-2.25.1</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-utils-2.7.10.7-2.10.4</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-3.1.14-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-advanced-topics_en-pdf-3.1-10.20.7</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-best-practices_en-pdf-3.1-10.20.7</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-docs_en-3.1-10.20.7</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-frontend-libs-3.1.1-3.3.2</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-getting-started_en-pdf-3.1-10.20.7</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-jsp_en-3.1-10.20.7</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-reference_en-pdf-3.1-10.20.7</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-schema-3.1.17-2.23.3</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-sls-3.1.17-2.23.2</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-sync-data-3.1.14-2.23.2</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-tftpsync-3.1.3-3.6.2</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-tools-3.1.14-2.19.5</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.3</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:N/C:N/I:P/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>4.7</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181751-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2014-5326.html</URL>
        <Description>CVE-2014-5326</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1085650</URL>
        <Description>SUSE Bug 1085650</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the "add repo" component resulting in arbitrary code execution as root user.</Note>
    </Notes>
    <CVE>CVE-2017-1000469</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Manager Server 3.1:cobbler-2.6.6-5.10.4</ProductID>
        <ProductID>SUSE Manager Server 3.1:google-gson-2.8.2-3.3.6</ProductID>
        <ProductID>SUSE Manager Server 3.1:patterns-suma_server-3.1-3.3.2</ProductID>
        <ProductID>SUSE Manager Server 3.1:prometheus-client-java-0.3.0-1.3.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:py26-compat-salt-2016.11.4-1.7.2</ProductID>
        <ProductID>SUSE Manager Server 3.1:salt-netapi-client-0.14.0-3.9.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-app-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-applet-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-config-files-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-config-files-common-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-config-files-tool-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-iss-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-iss-export-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-libs-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-package-push-server-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-server-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-sql-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-sql-oracle-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-sql-postgresql-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-tools-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-xml-export-libs-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-backend-xmlrpc-2.7.73.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-base-2.7.1.16-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-base-minimal-2.7.1.16-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-base-minimal-config-2.7.1.16-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-branding-2.7.2.13-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-certs-tools-2.7.0.10-2.12.4</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-html-2.7.1.16-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-java-2.7.46.14-2.25.1</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-java-config-2.7.46.14-2.25.1</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-java-lib-2.7.46.14-2.25.1</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-java-oracle-2.7.46.14-2.25.1</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-java-postgresql-2.7.46.14-2.25.1</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-taskomatic-2.7.46.14-2.25.1</ProductID>
        <ProductID>SUSE Manager Server 3.1:spacewalk-utils-2.7.10.7-2.10.4</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-3.1.14-2.19.5</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-advanced-topics_en-pdf-3.1-10.20.7</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-best-practices_en-pdf-3.1-10.20.7</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-docs_en-3.1-10.20.7</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-frontend-libs-3.1.1-3.3.2</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-getting-started_en-pdf-3.1-10.20.7</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-jsp_en-3.1-10.20.7</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-reference_en-pdf-3.1-10.20.7</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-schema-3.1.17-2.23.3</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-sls-3.1.17-2.23.2</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-sync-data-3.1.14-2.23.2</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-tftpsync-3.1.3-3.6.2</ProductID>
        <ProductID>SUSE Manager Server 3.1:susemanager-tools-3.1.14-2.19.5</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>10</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:N/C:C/I:C/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>6.3</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181751-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-1000469.html</URL>
        <Description>CVE-2017-1000469</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1074594</URL>
        <Description>SUSE Bug 1074594</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
