SUSE-SU-2021:3562-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2021/suse-su-20213562-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3562-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2021:3562-1
Related
Published
2021-10-27T13:34:39Z
Modified
2021-10-27T13:34:39Z
Summary
Security update for SUSE Manager Server 4.1
Details

This update fixes the following issues:

spacewalk-admin:

  • Version 4.1.10-1
    • Fix setup with rhn-config-satellite (bsc#1190300)
    • Allow admins to modify only spacewalk config files with rhn-config-satellite.pl (bsc#1190040) (CVE-2021-40348)

How to apply this update: 1. Log in as root user to the SUSE Manager server. 2. Stop the Spacewalk service: spacewalk-service stop 3. Apply the patch using either zypper patch or YaST Online Update. 4. Start the Spacewalk service: spacewalk-service start

References

Affected packages

SUSE:Manager Server Module 4.1 / spacewalk-admin

Package

Name
spacewalk-admin
Purl
pkg:rpm/suse/spacewalk-admin&distro=SUSE%20Manager%20Server%20Module%204.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.1.10-3.15.1

Ecosystem specific 

{
    "binaries": [
        {
            "spacewalk-admin": "4.1.10-3.15.1"
        }
    ]
}