Skip to content
OpenAdvisories
High SUSE-RU-2021:3551-1 2 CVEs

Recommended update for SUSE Manager 4.2.3 Release Notes

Published Oct 27, 2021 · Updated Feb 4, 2026

Ecosystem: SUSE

Summary

This update for SUSE Manager 4.2.3 Release Notes provides the following additions:

Release notes for SUSE Manager:

- Update to 4.2.3
- aarch64 support for CentOS 7/8, Oracle Linux 7/8, Rocky Linux 8, AlmaLinux 8, Amazon Linux 2 and openSUSE Leap 15.3
- Package Locking features is now available for Salt Minions
- New XMLRPC API methods for SaltKey
- Bugs mentioned:
bsc#1171520, bsc#1181223, bsc#1187572, bsc#1187998,
bsc#1188315, bsc#1188977, bsc#1189260, bsc#1189422,
bsc#1189609, bsc#1189799, bsc#1189818, bsc#1189933,
bsc#1190040, bsc#1190123, bsc#1190151, bsc#1190164,
bsc#1190166, bsc#1190265, bsc#1190275, bsc#1190276,
bsc#1190300, bsc#1190396, bsc#1190405, bsc#1190455,
bsc#1190512, bsc#1190602, bsc#1190751, bsc#1190820,
bsc#1191123, bsc#1191139, bsc#1191348, bsc#1191551,
CVE-2021-40348, CVE-2021-21996

Release notes for SUSE Manager proxy:

- Update to 4.2.3
- Bugs mentioned:
bsc#1171520, bsc#1181223, bsc#1187998, bsc#1188315,
bsc#1188977, bsc#1190405, bsc#1190512, bsc#1190602,
bsc#1190751, bsc#1190820, bsc#1191348

Fixed packages 3

ReleasePackageFixed in
SUSE · Manager Proxy 4.2 release-notes-susemanager-proxy 4.2.3-3.15.1
SUSE · Manager Retail Branch Server 4.2 release-notes-susemanager-proxy 4.2.3-3.15.1
SUSE · Manager Server 4.2 release-notes-susemanager 4.2.3-3.19.1

Vulnerabilities 2

  • High 7.5
    CVE-2021-21996

    Exposure of Resource to Wrong Sphere in salt

    An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.

    salt salt salt Ubuntu Alpine PyPI
  • Unscored —
    CVE-2021-40348

    Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config-satellite.pl doesn't sanitize …

References

  • report
    https://bugzilla.suse.com/1171520
  • report
    https://bugzilla.suse.com/1181223
  • report
    https://bugzilla.suse.com/1187572
  • report
    https://bugzilla.suse.com/1187998
  • report
    https://bugzilla.suse.com/1188315
  • report
    https://bugzilla.suse.com/1188977
  • report
    https://bugzilla.suse.com/1189260
  • report
    https://bugzilla.suse.com/1189422
  • report
    https://bugzilla.suse.com/1189609
  • report
    https://bugzilla.suse.com/1189799
  • report
    https://bugzilla.suse.com/1189818
  • report
    https://bugzilla.suse.com/1189933
  • report
    https://bugzilla.suse.com/1190040
  • report
    https://bugzilla.suse.com/1190123
  • report
    https://bugzilla.suse.com/1190151
  • report
    https://bugzilla.suse.com/1190164
  • report
    https://bugzilla.suse.com/1190166
  • report
    https://bugzilla.suse.com/1190265
  • report
    https://bugzilla.suse.com/1190275
  • report
    https://bugzilla.suse.com/1190276
  • report
    https://bugzilla.suse.com/1190300
  • report
    https://bugzilla.suse.com/1190396
  • report
    https://bugzilla.suse.com/1190405
  • report
    https://bugzilla.suse.com/1190455
  • report
    https://bugzilla.suse.com/1190512
  • report
    https://bugzilla.suse.com/1190602
  • report
    https://bugzilla.suse.com/1190751
  • report
    https://bugzilla.suse.com/1190820
  • report
    https://bugzilla.suse.com/1191123
  • report
    https://bugzilla.suse.com/1191139
  • report
    https://bugzilla.suse.com/1191348
  • report
    https://bugzilla.suse.com/1191551
  • web
    https://www.suse.com/security/cve/CVE-2021-21996
  • web
    https://www.suse.com/security/cve/CVE-2021-40348