Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

SUSE Manager Client Tools: 2021:2110-1 Moderate Risk Command Injection

suse
Calendar Grey June 21, 2021
Dist Suse Esm H88
SUSE issues a security enhancement for Manager Client Tools, targeting vulnerabilities and implementing various corrections.
An update that solves one vulnerability and has 8 fixes is now available

Summary

This update fixes the following issues: salt: - Fix issue parsing errors in ansiblegate state module - Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607) - Transactional_update: detect recursion in the executor - Add subpackage salt-transactional-update - Remove duplicate directories from specfile - Improvements on "ansiblegate" module (bsc#1185092): * New methods: ansible.targets / ansible.discover_playbooks - Add support for Alibaba Cloud Linux 2 (Aliyun Linux) - Regression fix of salt-ssh on processing targets - Update target fix for salt-ssh and avoiding race condition on salt-ssh event processing (bsc#1179831, bsc#1182281) - Add notify beacon for Debian/Ubuntu systems - Fix zmq bug that causes salt-call to freeze (bsc#1181368) spacecmd:

Topics%20covered

Topics Covered

security advisory moderate security update command injection software fixes SUSE Manager Debian client tools

References

#1173557 #1179831 #1180583 #1180584 #1180585

#1181368 #1182281 #1185092 #1185281

Cross- CVE-2021-31607

CVSS scores:

CVE-2021-31607 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2021-31607 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products:

SUSE Manager Debian 9.0-CLIENT-TOOLS

https://www.suse.com/security/cve/CVE-2021-31607.html

https://bugzilla.suse.com/1173557

https://bugzilla.suse.com/1179831

https://bugzilla.suse.com/1180583

https://bugzilla.suse.com/1180584

https://bugzilla.suse.com/1180585

https://bugzilla.suse.com/1181368

https://bugzilla.suse.com/1182281

https://bugzilla.suse.com/1185092

https://bugzilla.suse.com/1185281

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:2110-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate security update command injection software fixes SUSE Manager Debian client tools

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here