spacewalk-admin security update

2.10.1-1.0.1 - Fix for CVE-2021-40348 Orabug: 33531467 2.10.1-1 - copy cert file instead of linking 2.8.4-1 - remove install/clean section initial cleanup - removed Group from specfile - removed BuildRoot from specfiles 2.8.3-1 - 1524221 - ship systemd target on RHEL 7 too 2.8.2-1 - don't use...

Oracle Linux 7 : spacewalk-admin (ELSA-2023-12331)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-12331 advisory. - Fix for CVE-2021-40348 Orabug: 33531467 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

CVE-2021-40348

creationtimestamp| type| source ---|---|--- 2021-11-01 11:21:12+00:00| seen| https://t.me/cibsecurity/31530...

CVE-2021-40348

Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config-satellite.pl doesn't sanitize the configuration filename used to append Spacewalk-specific key-value pair. The script is intended to be run by the tomcat user account with Sudo, according to the installation...

CVE-2021-40348

Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config-satellite.pl doesn't sanitize the configuration filename used to append Spacewalk-specific key-value pair. The script is intended to be run by the tomcat user account with Sudo, according to the installation...

SUSE-SU-2021:3562-1 Security update for SUSE Manager Server 4.1

This update fixes the following issues: spacewalk-admin: - Version 4.1.10-1 Fix setup with rhn-config-satellite bsc1190300 Allow admins to modify only spacewalk config files with rhn-config-satellite.pl bsc1190040 CVE-2021-40348 How to apply this update: 1. Log in as root user to the SUSE Manager...