Security update for spacewalk-java (important)

The Spacewalk frontend displayed a logfile without escaping content,
allowing remote attackers to inject cross site scripting (XSS) into the
admin’s session. (CVE-2014-3595)

Additionally, the following bug was fixed:

   * Fixed package upgrade via SSM when using the Oracle DB as backend.
     (bnc#889721)

Security Issues:

   * CVE-2014-3595
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3595">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3595</a>&gt;