SUSE-RU-2021:3162-1
Vulnerability Summary
Timeline
Description
Recommended update for SUSE Manager 4.2.2 Release Notes This update for SUSE Manager 4.2.2 Release Notes provides the following additions: Release notes for SUSE Manager: - Update to 4.2.2 * SUSE Manager is now able to manage Rocky Linux 8 clients * Tech Preview: Inter-Server Sync V2 * Bugs mentioned bsc#1171483, bsc#1173143, bsc#1181223, bsc#1186281, bsc#1186339, bsc#1187335, bsc#1187549, bsc#1188032, bsc#1188042, bsc#1188136, bsc#1188163, bsc#1188193, bsc#1188260, bsc#1188393, bsc#1188400, bsc#1188503, bsc#1188505, bsc#1188551, bsc#1188641, bsc#1188647, bsc#1188656, bsc#1188853, bsc#1188855, bsc#1189011, bsc#1189040, bsc#1189167, bsc#1189419, bsc#1189458, - CVE-2021-40323: Fixed an arbitrary file disclosure/Template Injection (bsc#1189458) - CVE-2021-40324: Fixed an arbitrary file write (bsc#1189458) - CVE-2021-40325: Fixed a problem with the token validation (bsc#1189458) - Please note that with these changes, a valid log data from Anamon (Red Hat Autoinstallation Process) uploaded to cobbler may be rejected. Release notes for SUSE Manager proxy: - Update to 4.2.2 * Bugs mentioned bsc#1181223, bsc#1186026, bsc#1188042, bsc#1189011, bsc#1189263
Affected Systems
- suse•release-notes-susemanager-proxy&distro=SUSE Manager Proxy 4.2
< 4.2.2-3.12.1
- suse•release-notes-susemanager-proxy&distro=SUSE Manager Retail Branch Server 4.2
< 4.2.2-3.12.1
- suse•release-notes-susemanager&distro=SUSE Manager Server 4.2
< 4.2.2-3.12.1
References (34)
- https://www.suse.com/support/update/announcement/-2021-3162/suse-ru-20213162-1/
- https://bugzilla.suse.com/1171483
- https://bugzilla.suse.com/1173143
- https://bugzilla.suse.com/1181223
- https://bugzilla.suse.com/1186026
- https://bugzilla.suse.com/1186281
- https://bugzilla.suse.com/1186339
- https://bugzilla.suse.com/1187335
- https://bugzilla.suse.com/1187549
- https://bugzilla.suse.com/1188032
- https://bugzilla.suse.com/1188042
- https://bugzilla.suse.com/1188136
- https://bugzilla.suse.com/1188163
- https://bugzilla.suse.com/1188193
- https://bugzilla.suse.com/1188260
- https://bugzilla.suse.com/1188393
- https://bugzilla.suse.com/1188400
- https://bugzilla.suse.com/1188503
- https://bugzilla.suse.com/1188505
- https://bugzilla.suse.com/1188551
- https://bugzilla.suse.com/1188641
- https://bugzilla.suse.com/1188647
- https://bugzilla.suse.com/1188656
- https://bugzilla.suse.com/1188853
- https://bugzilla.suse.com/1188855
- https://bugzilla.suse.com/1189011
- https://bugzilla.suse.com/1189040
- https://bugzilla.suse.com/1189167
- https://bugzilla.suse.com/1189263
- https://bugzilla.suse.com/1189419
- https://bugzilla.suse.com/1189458
- https://www.suse.com/security/cve/CVE-2021-40323
- https://www.suse.com/security/cve/CVE-2021-40324
- https://www.suse.com/security/cve/CVE-2021-40325