SUSE Security Update: SUSE Manager Proxy
______________________________________________________________________________

Announcement ID:    SUSE-SU-2011:0648-1
Rating:             important
References:         #685550 #691579 #693574 #695392 
Affected Products:
                    SUSE Manager Proxy 1.2 for SLE 11 SP1
______________________________________________________________________________

   An update that contains security fixes can now be installed.

Description:


   This security update of SUSE Manger Proxy improves the SSL
   cipher suite  setting to only allow secure SSLCipher and
   SSLProtocols.

   In addition, the following non-security issues have been
   fixed:

   * Reposync runs in endless loop if a file was not found
   on the server.
   * Improve error message when the gpg key is wrong or
   missing.
   * Wrong GPG should be reported as normal error, not as
   an exception.

Indications:

   Everyoune should install this update.

Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Manager Proxy 1.2 for SLE 11 SP1:

      zypper in -t patch slemap12sp1-suse-manager-proxy-201106-4699

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Manager Proxy 1.2 for SLE 11 SP1 (x86_64):

      spacewalk-backend-1.2.74-0.30.2
      spacewalk-backend-libs-1.2.74-0.30.2

   - SUSE Manager Proxy 1.2 for SLE 11 SP1 (noarch):

      spacewalk-proxy-installer-1.2.3-0.16.1


References:

   https://bugzilla.novell.com/685550
   https://bugzilla.novell.com/691579
   https://bugzilla.novell.com/693574
   https://bugzilla.novell.com/695392
   https://login.microfocus.com/nidp/app/login