SUSE-SU-2021:3562-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2021/suse-su-20213562-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3562-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2021:3562-1
Upstream
Related
Published
2021-10-27T13:34:39Z
Modified
2026-03-11T07:19:03Z
Summary
Security update for SUSE Manager Server 4.1
Details

This update fixes the following issues:

spacewalk-admin:

  • Version 4.1.10-1
    • Fix setup with rhn-config-satellite (bsc#1190300)
    • Allow admins to modify only spacewalk config files with rhn-config-satellite.pl (bsc#1190040) (CVE-2021-40348)

How to apply this update:

  1. Log in as root user to the SUSE Manager server.
  2. Stop the Spacewalk service: spacewalk-service stop
  3. Apply the patch using either zypper patch or YaST Online Update.
  4. Start the Spacewalk service: spacewalk-service start
References

Affected packages

SUSE:Manager Server Module 4.1 / spacewalk-admin

Package

Name
spacewalk-admin
Purl
pkg:rpm/suse/spacewalk-admin&distro=SUSE%20Manager%20Server%20Module%204.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.1.10-3.15.1

Ecosystem specific 

{
    "binaries": [
        {
            "spacewalk-admin": "4.1.10-3.15.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:3562-1.json"