Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE Manager Proxy: 2022:3313-1 Critical Security Update

suse
Calendar Grey September 19, 2022
Dist Suse Esm H88
An important security patch for SUSE Manager and its Proxy has been released, tackling multiple concerns and vulnerabilities.
An update that solves four vulnerabilities and has 36 fixes is now available

Summary

This update for release-notes-susemanager, release-notes-susemanager-proxy fixes the following issues: Release notes for SUSE Manager: - Update to SUSE:Manager 4.2.9 * Notification about SUSE Manager end-of-life has been added * CVEs fixed: CVE-2021-43138, CVE-2021-42740, CVE-2022-31129, CVE-2021-41411 * Bugs mentioned: bsc#1172705, bsc#1187028, bsc#1195455, bsc#1195895, bsc#1196729 bsc#1198168, bsc#1198489, bsc#1198738, bsc#1198903, bsc#1199372 bsc#1199659, bsc#1199913, bsc#1199950, bsc#1200276, bsc#1200296 bsc#1200480, bsc#1200532, bsc#1200573, bsc#1200591, bsc#1200629 bsc#1201142, bsc#1201189, bsc#1201210, bsc#1201220, bsc#1201224 bsc#1201527, bsc#1201606, bsc#1201607, bsc#1201626, bsc#1201753 bsc#1201913, bsc#1201918, bsc#1202142, bsc#1202272,

References

#1172705 #1187028 #1195455 #1195895 #1196729

#1198168 #1198489 #1198738 #1198903 #1199372

#1199659 #1199913 #1199950 #1200276 #1200296

#1200480 #1200532 #1200573 #1200591 #1200629

#1201142 #1201189 #1201210 #1201220 #1201224

#1201527 #1201606 #1201607 #1201626 #1201753

#1201913 #1201918 #1202142 #1202272 #1202464

#1202724 #1202728 #1203287 #1203288 #1203449

Cross- CVE-2021-41411 CVE-2021-42740 CVE-2021-43138

CVE-2022-31129

CVSS scores:

CVE-2021-41411 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2021-41411 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVE-2021-42740 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2021-42740 (SUSE): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2022:3313-1
Rating: critical

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here