{"schemaVersion":3,"id":"SUSE-SU-2021:2114-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for SUSE Manager Server 4.0\n\n\nThis update fixes the following issues:\n\ncobbler:\n\n- Make 'fence_ipmitool' a wrapper for 'fence_ipmilan' using always lanplus (bsc#1184361)\n- Remove unused template for fence_ipmitool.\n- Prevent some race conditions when writing tftpboot files and\n  the destination directory is not existing (bsc#1186124)\n- Fix trail stripping in case of using UTF symbols (bsc#1184561)\n\ngrafana-formula:\n\n- Fix Grafana dashboards requiring single series (bsc#1184471)\n\npatterns-suse-manager:\n\n- Add require for py27-compat-salt (salt 3002 does not provide\n  python2-salt anymore)\n\nprometheus-exporters-formula:\n\n- Move exporters configurations to dedicated group `prometheus_exporters`\n- Add formula data schema migration script\n- This version changes the formula data schema and is not backwards compatible.\n  Downgrading from this version will require reconfiguring the formula for all your\n  minions.\n- Add Ubuntu support for Prometheus exporters' reverse proxy\n\npxe-default-image-sle15:\n\n- Adapt rpm-properties.xml for containment-rpm-pxe v0.2.1 and newer\n\npy26-compat-salt:\n\n- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)\n\nspacewalk-backend:\n\n- Maintainer field in debian packages are only recommended (bsc#1186508)\n- Switch to www group for satellite logs (bsc#1185097)\n\nspacewalk-java:\n\n- Change Prometheus exporters formula data schema to make it more generic and extendable\n- Adapt logging for testing accessability of URLs (bsc#1182817)\n- Fix problem reading product_tree.json from wrong location in offline setups (bsc#1184283)\n- For a SUSE system get metadata and package from same source (bsc#1184475)\n- Check if the directory exists prior to modular data cleanup (bsc#1184311)\n- Assign right base product for res8 (bsc#1184005)\n- Fix check for for mirrorlist URLs when refreshing products (bsc#1184861)\n\nspacewalk-utils:\n\n- Bugfix for ubuntu-18.04 repo urls: multiverse, restricted and backports\n- Add multiverse, restricted and backports to Ubuntu 16.04, 18.04 and 20.04\n\nspacewalk-web:\n\n- Update the WebUI version to 4.0.14\n\nsusemanager:\n\n- Add python3-pycryptodome to Ubuntu 18 and 20 bootstrap repos (bsc#1186346)\n- Require gio-branding-SLE for SLE15 but not for openSUSE Leap 15\n- Add python3-distro to RES8, SLE15 and Ubuntu20.04 bootstrap\n  repositories to fix bootstrapping issues (bsc#1184332)\n\nsusemanager-doc-indexes:\n\n- Update for Disconnected Setup chapter in Administration Guide\n\nsusemanager-docs_en:\n\n- Update for Disconnected Setup chapter in Administration Guide\n\nsusemanager-sls:\n\n- Do not install python2-salt on Salt 3002.2 Docker build hosts (bsc#1185506)\n- Fix insecure JMX configuration (bsc#1184617)\n- Avoid conflicts with running ioloop on mgr_events engine (bsc#1172711)\n\ntika-core:\n\n- New upstream version 1.26. Fixes:\n  * Infinite loop in the MP3Parser (bsc#1184892, CVE-2021-28657)\n  * Out of memory error while loading a file in PDFBox before 2.0.23.\n  * Infinite loop while loading a file in PDFBox before 2.0.23.\n  * System.exit vulnerability in Tika's OneNote Parser; out of memory errors\n     and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser,\n     OneNoteParser and ImageParser.\n  * Excessive memory usage (DoS) vulnerability in Apache Tika's PSDParser\n  * Infinite Loop (DoS) vulnerability in Apache Tika's PSDParser\n\nHow to apply this update:\n1. Log in as root user to the SUSE Manager server.\n2. Stop the Spacewalk service:\n`spacewalk-service stop`\n3. Apply the patch using either zypper patch or YaST Online Update.\n4. Upgrade the database schema:\n`spacewalk-schema-upgrade`\n5. Start the Spacewalk service:\n`spacewalk-service start`","dates":{"published":"2021-06-21T17:32:37.000Z","modified":"2026-02-04T02:46:39.175Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"cobbler&distro=SUSE Manager Server Module 4.0","name":"cobbler","label":"cobbler&distro=SUSE Manager Server Module 4.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/cobbler&distro=SUSE Manager Server Module 4.0","purlType":"rpm","versions":[{"text":"< 3.0.0+git20190806.32c4bae0-7.22.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.0+git20190806.32c4bae0-7.22.3","eol":null,"hubHref":null},{"vendor":"suse","product":"grafana-formula&distro=SUSE Manager Server Module 4.0","name":"grafana-formula","label":"grafana-formula&distro=SUSE Manager Server Module 4.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grafana-formula&distro=SUSE Manager Server Module 4.0","purlType":"rpm","versions":[{"text":"< 0.2.3-4.16.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.2.3-4.16.3","eol":null,"hubHref":null},{"vendor":"suse","product":"patterns-suse-manager&distro=SUSE Manager Server Module 4.0","name":"patterns-suse-manager","label":"patterns-suse-manager&distro=SUSE Manager Server Module 4.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/patterns-suse-manager&distro=SUSE Manager Server Module 4.0","purlType":"rpm","versions":[{"text":"< 4.0-9.19.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0-9.19.3","eol":null,"hubHref":null},{"vendor":"suse","product":"prometheus-exporters-formula&distro=SUSE Manager Server Module 4.0","name":"prometheus-exporters-formula","label":"prometheus-exporters-formula&distro=SUSE Manager Server Module 4.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/prometheus-exporters-formula&distro=SUSE Manager Server Module 4.0","purlType":"rpm","versions":[{"text":"< 0.7.6-3.19.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.7.6-3.19.3","eol":null,"hubHref":null},{"vendor":"suse","product":"pxe-default-image-sle15&distro=SUSE Manager Server Module 4.0","name":"pxe-default-image-sle15","label":"pxe-default-image-sle15&distro=SUSE Manager Server Module 4.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/pxe-default-image-sle15&distro=SUSE Manager Server Module 4.0","purlType":"rpm","versions":[{"text":"< 4.0.1-20210621145802","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-20210621145802","eol":null,"hubHref":null},{"vendor":"suse","product":"py26-compat-salt&distro=SUSE Manager Server Module 4.0","name":"py26-compat-salt","label":"py26-compat-salt&distro=SUSE Manager Server Module 4.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/py26-compat-salt&distro=SUSE Manager Server Module 4.0","purlType":"rpm","versions":[{"text":"< 2016.11.10-10.28.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2016.11.10-10.28.3","eol":null,"hubHref":null},{"vendor":"suse","product":"py27-compat-salt&distro=SUSE Manager Server Module 4.0","name":"py27-compat-salt","label":"py27-compat-salt&distro=SUSE Manager Server Module 4.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/py27-compat-salt&distro=SUSE Manager Server Module 4.0","purlType":"rpm","versions":[{"text":"< 3000.3-4.3.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3000.3-4.3.3","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-backend&distro=SUSE Manager Server Module 4.0","name":"spacewalk-backend","label":"spacewalk-backend&distro=SUSE Manager Server Module 4.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-backend&distro=SUSE Manager Server Module 4.0","purlType":"rpm","versions":[{"text":"< 4.0.38-3.47.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.38-3.47.4","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-java&distro=SUSE Manager Server Module 4.0","name":"spacewalk-java","label":"spacewalk-java&distro=SUSE Manager Server Module 4.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-java&distro=SUSE Manager Server Module 4.0","purlType":"rpm","versions":[{"text":"< 4.0.44-3.57.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.44-3.57.5","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-utils&distro=SUSE Manager Server Module 4.0","name":"spacewalk-utils","label":"spacewalk-utils&distro=SUSE Manager Server Module 4.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-utils&distro=SUSE Manager Server Module 4.0","purlType":"rpm","versions":[{"text":"< 4.0.21-3.30.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.21-3.30.3","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-web&distro=SUSE Manager Server Module 4.0","name":"spacewalk-web","label":"spacewalk-web&distro=SUSE Manager Server Module 4.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-web&distro=SUSE Manager Server Module 4.0","purlType":"rpm","versions":[{"text":"< 4.0.28-3.45.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.28-3.45.1","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-doc-indexes&distro=SUSE Manager Server Module 4.0","name":"susemanager-doc-indexes","label":"susemanager-doc-indexes&distro=SUSE Manager Server Module 4.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-doc-indexes&distro=SUSE Manager Server Module 4.0","purlType":"rpm","versions":[{"text":"< 4.0-10.36.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0-10.36.4","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-docs_en&distro=SUSE Manager Server Module 4.0","name":"susemanager-docs_en","label":"susemanager-docs_en&distro=SUSE Manager Server Module 4.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-docs_en&distro=SUSE Manager Server Module 4.0","purlType":"rpm","versions":[{"text":"< 4.0-10.36.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0-10.36.3","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager-sls&distro=SUSE Manager Server Module 4.0","name":"susemanager-sls","label":"susemanager-sls&distro=SUSE Manager Server Module 4.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager-sls&distro=SUSE Manager Server Module 4.0","purlType":"rpm","versions":[{"text":"< 4.0.35-3.48.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.35-3.48.3","eol":null,"hubHref":null},{"vendor":"suse","product":"susemanager&distro=SUSE Manager Server Module 4.0","name":"susemanager","label":"susemanager&distro=SUSE Manager Server Module 4.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/susemanager&distro=SUSE Manager Server Module 4.0","purlType":"rpm","versions":[{"text":"< 4.0.34-3.52.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.34-3.52.3","eol":null,"hubHref":null},{"vendor":"suse","product":"tika-core&distro=SUSE Manager Server Module 4.0","name":"tika-core","label":"tika-core&distro=SUSE Manager Server Module 4.0","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/tika-core&distro=SUSE Manager Server Module 4.0","purlType":"rpm","versions":[{"text":"< 1.26-3.6.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.26-3.6.3","eol":null,"hubHref":null}],"affectedCount":16,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212114-1/","label":"www.suse.com/support/update/announcement/2021/suse-su-20212114-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1172711","label":"bugzilla.suse.com/1172711","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1182817","label":"bugzilla.suse.com/1182817","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1184005","label":"bugzilla.suse.com/1184005","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1184283","label":"bugzilla.suse.com/1184283","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1184311","label":"bugzilla.suse.com/1184311","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1184332","label":"bugzilla.suse.com/1184332","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1184361","label":"bugzilla.suse.com/1184361","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1184471","label":"bugzilla.suse.com/1184471","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1184475","label":"bugzilla.suse.com/1184475","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1184561","label":"bugzilla.suse.com/1184561","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1184617","label":"bugzilla.suse.com/1184617","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1184861","label":"bugzilla.suse.com/1184861","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1184892","label":"bugzilla.suse.com/1184892","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1185097","label":"bugzilla.suse.com/1185097","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1185281","label":"bugzilla.suse.com/1185281","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1185506","label":"bugzilla.suse.com/1185506","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1186124","label":"bugzilla.suse.com/1186124","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1186346","label":"bugzilla.suse.com/1186346","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1186508","label":"bugzilla.suse.com/1186508","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28657","label":"www.suse.com/security/cve/CVE-2021-28657","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-31607","label":"www.suse.com/security/cve/CVE-2021-31607","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2021-28657","CVE-2021-31607"],"downstream":[],"duplicates":[],"related":["CVE-2021-28657","CVE-2021-31607"]},"timeline":[{"kind":"published","date":"2021-06-21T17:32:37.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T02:46:39.175Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T15:53:49.566Z","stale":false,"partial":false}}