OPENSUSE-SU-2021:2675-1

Advisory lineage Upstream: 5 Downstream: 0
Published: 12 Aug 2021, 10:05
Last modified:04 Feb 2026, 04:05

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

12 Aug 2021, 10:05
Published
Vulnerability first disclosed
04 Feb 2026, 04:05
Last Modified
Vulnerability information updated

Description

Security update for SUSE Manager Client Tools This update fixes the following issues: ansible: - The support level for ansible is l2, not l3 dracut-saltboot: - Force installation of libexpat.so.1 (bsc#1188846) - Use kernel parameters from PXE formula also for local boot golang-github-prometheus-prometheus: - Provide and reload firewalld configuration only for: + openSUSE Leap 15.0, 15.1, 15.2 + SUSE Linux Enterprise 15, 15 SP1, 15 SP2 - Upgrade to upstream version 2.27.1 (jsc#SLE-18254) + Bugfix: * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242) * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659 * TSDB: Do not panic when writing very large records to the WAL. #8790 * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723 * Scaleway Discovery: Fix nil pointer dereference. #8737 * Consul Discovery: Restart no longer required after config update with no targets. #8766 + Features: * Promtool: Retroactive rule evaluation functionality. * Configuration: Environment variable expansion for external labels. Behind '--enable-feature=expand-external-labels' flag. * Add a flag '--storage.tsdb.max-block-chunk-segment-size' to control the max chunks file size of the blocks for small Prometheus instances. * UI: Add a dark theme. * AWS Lightsail Discovery: Add AWS Lightsail Discovery. * Docker Discovery: Add Docker Service Discovery. * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. * Remote Write: Send exemplars via remote write. Experimental and disabled by default. + Enhancements: * Digital Ocean Discovery: Add '__meta_digitalocean_vpc' label. * Scaleway Discovery: Read Scaleway secret from a file. * Scrape: Add configurable limits for label size and count. * UI: Add 16w and 26w time range steps. * Templating: Enable parsing strings in humanize functions. - Update package with changes from `server:monitoring` (bsc#1175478) Left out removal of 'firewalld' related configuration files as SUSE Linux Enterprise 15-SP1's `firewalld` package does not contain 'prometheus' configuration yet. mgr-cfg: - No visible impact for the user mgr-custom-info: - No visible impact for the user mgr-osad: - No visible impact for the user mgr-push: - No visible impact for the user mgr-virtualization: - No visible impact for the user rhnlib: - No visible impact for the user spacecmd: - Make spacecmd aware of retracted patches/packages - Enhance help for installation types when creating distributions (bsc#1186581) - Parse empty argument when nothing in between the separator spacewalk-client-tools: - Update translation strings spacewalk-koan: - Fix for spacewalk-koan tests after switching to the new Docker images spacewalk-oscap: - No visible impact for the user suseRegisterInfo: - No visible impact for the user uyuni-common-libs: - Handle broken RPM packages to prevent exceptions causing fails on repository synchronization (bsc#1186650) - Maintainer field in debian packages are only recommended (bsc#1186508)

Affected Systems

  • opensuseansible&distro=openSUSE Leap 15.3

    < 2.9.21-1.5.1

  • opensusedracut-saltboot&distro=openSUSE Leap 15.3

    < 0.1.1627546504.96a0b3e-1.27.1

  • opensusemgr-cfg&distro=openSUSE Leap 15.3

    < 4.2.3-1.18.1

  • opensusemgr-custom-info&distro=openSUSE Leap 15.3

    < 4.2.2-1.12.1

  • opensusemgr-osad&distro=openSUSE Leap 15.3

    < 4.2.6-1.30.1

  • opensusemgr-push&distro=openSUSE Leap 15.3

    < 4.2.3-1.12.1

  • opensusemgr-virtualization&distro=openSUSE Leap 15.3

    < 4.2.2-1.20.1

  • opensuserhnlib&distro=openSUSE Leap 15.3

    < 4.2.4-3.28.1

  • opensusespacecmd&distro=openSUSE Leap 15.3

    < 4.2.11-3.62.1

  • opensusespacewalk-client-tools&distro=openSUSE Leap 15.3

    < 4.2.12-3.44.1

  • opensusespacewalk-koan&distro=openSUSE Leap 15.3

    < 4.2.4-3.21.1

  • opensusespacewalk-oscap&distro=openSUSE Leap 15.3

    < 4.2.2-3.12.1

  • opensusesuseRegisterInfo&distro=openSUSE Leap 15.3

    < 4.2.4-3.15.1

  • opensuseuyuni-common-libs&distro=openSUSE Leap 15.3

    < 4.2.5-1.15.1

References (12)