Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

SUSE: 2021:2114-1 Moderate: Security Issues in SUSE Manager Server 4.0

suse
Calendar Grey June 21, 2021
Scroller Suse
SUSE Manager Server 4.0 patch addresses multiple concerns with 17 enhancements, boosting performance and protection.
An update that solves two vulnerabilities and has 17 fixes is now available

Summary

This update fixes the following issues: cobbler: - Make "fence_ipmitool" a wrapper for "fence_ipmilan" using always lanplus (bsc#1184361) - Remove unused template for fence_ipmitool. - Prevent some race conditions when writing tftpboot files and the destination directory is not existing (bsc#1186124) - Fix trail stripping in case of using UTF symbols (bsc#1184561) grafana-formula: - Fix Grafana dashboards requiring single series (bsc#1184471) patterns-suse-manager: - Add require for py27-compat-salt (salt 3002 does not provide python2-salt anymore) prometheus-exporters-formula: - Move exporters configurations to dedicated group `prometheus_exporters` - Add formula data schema migration script - This version changes the formula data schema and is not backwards

Topics%20covered

Topics Covered

security advisory moderate update security issues software fixes SUSE Manager Server

References

#1172711 #1182817 #1184005 #1184283 #1184311

#1184332 #1184361 #1184471 #1184475 #1184561

#1184617 #1184861 #1184892 #1185097 #1185281

#1185506 #1186124 #1186346 #1186508

Cross- CVE-2021-28657 CVE-2021-31607

CVSS scores:

CVE-2021-28657 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVE-2021-28657 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVE-2021-31607 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2021-31607 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products:

SUSE Linux Enterprise Module for SUSE Manager Server 4.0

https://www.suse.com/security/cve/CVE-2021-28657.html

https://www.suse.com/security/cve/CVE-2021-31607.html

https://bugzilla.suse.com/1172711

Announcement ID: SUSE-SU-2021:2114-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate update security issues software fixes SUSE Manager Server

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.