SUSE-SU-2021:14753-1

    Dashboard / Vulnerabilities / SUSE-SU-2021:14753-1

    SUSE-SU-2021:14753-1

    Published: 21 Jun 2021Last Modified: 4 Feb 2026
    Upstream:
    CVE-2021-31607

    Summary: Security update for SUSE Manager Client Tools

    Details: This update fixes the following issues: golang-github-wrouesnel-postgres_exporter: - Add support for aarch64 mgr-cfg: - SPEC: Updated Python definitions for RHEL8 and quoted text comparisons. mgr-custom-info: - Update package version to 4.2.0 mgr-daemon: - Update translation strings - Update the translations from weblate - Added quotes around %{_vendor} token for the if statements in spec file. - Fix removal of mgr-deamon with selinux enabled (bsc#1177928) - Updating translations from weblate mgr-osad: - Change the log file permissions as expected by logrotate (bsc#1177884) - Change deprecated path /var/run into /run for systemd (bsc#1185178) - Python fixes - Removal of RHEL5 mgr-push: - Defined __python for python2. - Excluded RHEL8 for Python 2 build. mgr-virtualization: - Update package version to 4.2.0 rhnlib: - Update package version to 4.2.0 salt: - Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607) spacecmd: - Rename system migration to system transfer - Rename SP to product migration - Update translation strings - Add group_addconfigchannel and group_removeconfigchannel - Add group_listconfigchannels and configchannel_listgroups - Fix spacecmd compat with Python 3 - Deprecated 'Software Crashes' feature - Document advanced package search on '--help' (bsc#1180583) - Fixed advanced search on 'package_listinstalledsystems' - Fixed duplicate results when using multiple search criteria (bsc#1180585) - Fixed 'non-advanced' package search when using multiple package names (bsc#1180584) - Update translations - Fix: make spacecmd build on Debian - Add Service Pack migration operations (bsc#1173557) spacewalk-client-tools: - Update the translations from weblate - Drop the --noSSLServerURL option - Updated RHEL Python requirements. - Added quotes around %{_vendor}. spacewalk-koan: - Fix for spacewalk-koan test spacewalk-oscap: - Update package version to 4.2.0 spacewalk-remote-utils: - Update package version to 4.2.0 supportutils-plugin-susemanager-client: - Update package version to 4.2.0 suseRegisterInfo: - Add support for Amazon Linux 2 - Add support for Alibaba Cloud Linux 2 - Adapted for RHEL build. uyuni-base: - Added Apache as prerequisite for RHEL and Fedora (due to required users). - Removed RHEL specific folder rights from SPEC file. - Added RHEL8 compatibility. uyuni-common-libs: - Cleaning up unused Python 2 build leftovers. - Disabled debug package build.

    References: https://www.suse.com/support/update/announcement/2021/suse-su-202114753-1/, https://bugzilla.suse.com/1173557, https://bugzilla.suse.com/1177884, https://bugzilla.suse.com/1177928, https://bugzilla.suse.com/1180583, https://bugzilla.suse.com/1180584, https://bugzilla.suse.com/1180585, https://bugzilla.suse.com/1185178, https://bugzilla.suse.com/1185281, https://www.suse.com/security/cve/CVE-2021-31607

    Affected packages

    Package

    Name: golang-github-wrouesnel-postgres_exporter

    Purl: pkg:rpm/suse/golang-github-wrouesnel-postgres_exporter&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-CLIENT-TOOLS

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -0.4.7-5.12.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-SU-2021:14753-1 | CVE-DB