CVE catalog
CVE-2021-28657
Security update for SUSE Manager Server 4.1
- Severity
- Medium · CVSS 5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 2.74% · Oct 25, 2026
A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | tika | 11 | 1.22-2 | vulnerable |
| Debian | tika | 11 | 1.22-2+deb11u1 | vulnerable |
| Suse | cobbler | manager server module 4.0 | 3.0.0+git20190806.32c4bae0-7.22.3 | fixed |
| Suse | grafana-formula | manager server module 4.0 | 0.2.3-4.16.3 | fixed |
| Suse | patterns-suse-manager | manager server module 4.0 | 4.0-9.19.3 | fixed |
| Suse | prometheus-exporters-formula | manager server module 4.0 | 0.7.6-3.19.3 | fixed |
| Suse | pxe-default-image-sle15 | manager server module 4.0 | 4.0.1-20210621145802 | fixed |
| Suse | py26-compat-salt | manager server module 4.0 | 2016.11.10-10.28.3 | fixed |
| Suse | py27-compat-salt | manager server module 4.0 | 3000.3-4.3.3 | fixed |
| Suse | spacewalk-backend | manager server module 4.0 | 4.0.38-3.47.4 | fixed |
| Suse | spacewalk-java | manager server module 4.0 | 4.0.44-3.57.5 | fixed |
| Suse | spacewalk-utils | manager server module 4.0 | 4.0.21-3.30.3 | fixed |
| Suse | spacewalk-web | manager server module 4.0 | 4.0.28-3.45.1 | fixed |
| Suse | susemanager | manager server module 4.0 | 4.0.34-3.52.3 | fixed |
| Suse | susemanager-doc-indexes | manager server module 4.0 | 4.0-10.36.4 | fixed |
| Suse | susemanager-docs_en | manager server module 4.0 | 4.0-10.36.3 | fixed |
| Suse | susemanager-sls | manager server module 4.0 | 4.0.35-3.48.3 | fixed |
| Suse | tika-core | manager server module 4.0 | 1.26-3.6.3 | fixed |
| Suse | cobbler | manager server module 4.1 | 3.0.0+git20190806.32c4bae0-5.11.1 | fixed |
| Suse | golang-github-prometheus-node_exporter | manager server module 4.1 | 1.1.2-3.6.5 | fixed |
| Suse | grafana-formula | manager server module 4.1 | 0.4.1-3.9.2 | fixed |
| Suse | patterns-suse-manager | manager server module 4.1 | 4.1-6.9.2 | fixed |
| Suse | prometheus-exporters-formula | manager server module 4.1 | 0.9.1-3.22.1 | fixed |
| Suse | py26-compat-salt | manager server module 4.1 | 2016.11.10-6.14.2 | fixed |
| Suse | py27-compat-salt | manager server module 4.1 | 3000.3-6.3.2 | fixed |
| Suse | spacewalk-admin | manager server module 4.1 | 4.1.9-3.12.2 | fixed |
| Suse | spacewalk-backend | manager server module 4.1 | 4.1.25-4.32.6 | fixed |
| Suse | spacewalk-branding | manager server module 4.1 | 4.1.12-3.12.2 | fixed |
| Suse | spacewalk-certs-tools | manager server module 4.1 | 4.1.17-3.17.2 | fixed |
| Suse | spacewalk-java | manager server module 4.1 | 4.1.36-3.44.1 | fixed |
| Suse | spacewalk-utils | manager server module 4.1 | 4.1.16-3.18.2 | fixed |
| Suse | spacewalk-web | manager server module 4.1 | 4.1.26-3.24.8 | fixed |
| Suse | susemanager | manager server module 4.1 | 4.1.26-3.25.1 | fixed |
| Suse | susemanager-build-keys | manager server module 4.1 | 15.2.4-3.17.1 | fixed |
| Suse | susemanager-doc-indexes | manager server module 4.1 | 4.1-11.34.8 | fixed |
| Suse | susemanager-docs_en | manager server module 4.1 | 4.1-11.34.2 | fixed |
| Suse | susemanager-schema | manager server module 4.1 | 4.1.21-3.30.6 | fixed |
| Suse | susemanager-sls | manager server module 4.1 | 4.1.28-3.42.1 | fixed |
| Suse | susemanager-sync-data | manager server module 4.1 | 4.1.14-3.23.2 | fixed |
| Suse | tika-core | manager server module 4.1 | 1.26-3.5.2 | fixed |
| Suse | uyuni-common-libs | manager server module 4.1 | 4.1.8-3.9.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Suse | cobbler | rpm | manager server module 4.0 | 3.0.0+git20190806.32c4bae0-7.22.3 | Not reported | SUSE-SU-2021:2114-1 | Not reported |
| Suse | grafana-formula | rpm | manager server module 4.0 | 0.2.3-4.16.3 | Not reported | SUSE-SU-2021:2114-1 | Not reported |
| Suse | patterns-suse-manager | rpm | manager server module 4.0 | 4.0-9.19.3 | Not reported | SUSE-SU-2021:2114-1 | Not reported |
| Suse | prometheus-exporters-formula | rpm | manager server module 4.0 | 0.7.6-3.19.3 | Not reported | SUSE-SU-2021:2114-1 | Not reported |
| Suse | pxe-default-image-sle15 | rpm | manager server module 4.0 | 4.0.1-20210621145802 | Not reported | SUSE-SU-2021:2114-1 | Not reported |
| Suse | py26-compat-salt | rpm | manager server module 4.0 | 2016.11.10-10.28.3 | Not reported | SUSE-SU-2021:2114-1 | Not reported |
| Suse | py27-compat-salt | rpm | manager server module 4.0 | 3000.3-4.3.3 | Not reported | SUSE-SU-2021:2114-1 | Not reported |
| Suse | spacewalk-backend | rpm | manager server module 4.0 | 4.0.38-3.47.4 | Not reported | SUSE-SU-2021:2114-1 | Not reported |
| Suse | spacewalk-java | rpm | manager server module 4.0 | 4.0.44-3.57.5 | Not reported | SUSE-SU-2021:2114-1 | Not reported |
| Suse | spacewalk-utils | rpm | manager server module 4.0 | 4.0.21-3.30.3 | Not reported | SUSE-SU-2021:2114-1 | Not reported |
| Suse | spacewalk-web | rpm | manager server module 4.0 | 4.0.28-3.45.1 | Not reported | SUSE-SU-2021:2114-1 | Not reported |
| Suse | susemanager | rpm | manager server module 4.0 | 4.0.34-3.52.3 | Not reported | SUSE-SU-2021:2114-1 | Not reported |
| Suse | susemanager-doc-indexes | rpm | manager server module 4.0 | 4.0-10.36.4 | Not reported | SUSE-SU-2021:2114-1 | Not reported |
| Suse | susemanager-docs_en | rpm | manager server module 4.0 | 4.0-10.36.3 | Not reported | SUSE-SU-2021:2114-1 | Not reported |
| Suse | susemanager-sls | rpm | manager server module 4.0 | 4.0.35-3.48.3 | Not reported | SUSE-SU-2021:2114-1 | Not reported |
| Suse | tika-core | rpm | manager server module 4.0 | 1.26-3.6.3 | Not reported | SUSE-SU-2021:2114-1 | Not reported |
| Suse | cobbler | rpm | manager server module 4.1 | 3.0.0+git20190806.32c4bae0-5.11.1 | Not reported | SUSE-SU-2021:2098-1 | Not reported |
| Suse | golang-github-prometheus-node_exporter | rpm | manager server module 4.1 | 1.1.2-3.6.5 | Not reported | SUSE-SU-2021:2098-1 | Not reported |
| Suse | grafana-formula | rpm | manager server module 4.1 | 0.4.1-3.9.2 | Not reported | SUSE-SU-2021:2098-1 | Not reported |
| Suse | patterns-suse-manager | rpm | manager server module 4.1 | 4.1-6.9.2 | Not reported | SUSE-SU-2021:2098-1 | Not reported |
| Suse | prometheus-exporters-formula | rpm | manager server module 4.1 | 0.9.1-3.22.1 | Not reported | SUSE-SU-2021:2098-1 | Not reported |
| Suse | py26-compat-salt | rpm | manager server module 4.1 | 2016.11.10-6.14.2 | Not reported | SUSE-SU-2021:2098-1 | Not reported |
| Suse | py27-compat-salt | rpm | manager server module 4.1 | 3000.3-6.3.2 | Not reported | SUSE-SU-2021:2098-1 | Not reported |
| Suse | spacewalk-admin | rpm | manager server module 4.1 | 4.1.9-3.12.2 | Not reported | SUSE-SU-2021:2098-1 | Not reported |
| Suse | spacewalk-backend | rpm | manager server module 4.1 | 4.1.25-4.32.6 | Not reported | SUSE-SU-2021:2098-1 | Not reported |
| Suse | spacewalk-branding | rpm | manager server module 4.1 | 4.1.12-3.12.2 | Not reported | SUSE-SU-2021:2098-1 | Not reported |
| Suse | spacewalk-certs-tools | rpm | manager server module 4.1 | 4.1.17-3.17.2 | Not reported | SUSE-SU-2021:2098-1 | Not reported |
| Suse | spacewalk-java | rpm | manager server module 4.1 | 4.1.36-3.44.1 | Not reported | SUSE-SU-2021:2098-1 | Not reported |
| Suse | spacewalk-utils | rpm | manager server module 4.1 | 4.1.16-3.18.2 | Not reported | SUSE-SU-2021:2098-1 | Not reported |
| Suse | spacewalk-web | rpm | manager server module 4.1 | 4.1.26-3.24.8 | Not reported | SUSE-SU-2021:2098-1 | Not reported |
| Suse | susemanager | rpm | manager server module 4.1 | 4.1.26-3.25.1 | Not reported | SUSE-SU-2021:2098-1 | Not reported |
| Suse | susemanager-build-keys | rpm | manager server module 4.1 | 15.2.4-3.17.1 | Not reported | SUSE-SU-2021:2098-1 | Not reported |
| Suse | susemanager-doc-indexes | rpm | manager server module 4.1 | 4.1-11.34.8 | Not reported | SUSE-SU-2021:2098-1 | Not reported |
| Suse | susemanager-docs_en | rpm | manager server module 4.1 | 4.1-11.34.2 | Not reported | SUSE-SU-2021:2098-1 | Not reported |
| Suse | susemanager-schema | rpm | manager server module 4.1 | 4.1.21-3.30.6 | Not reported | SUSE-SU-2021:2098-1 | Not reported |
| Suse | susemanager-sls | rpm | manager server module 4.1 | 4.1.28-3.42.1 | Not reported | SUSE-SU-2021:2098-1 | Not reported |
| Suse | susemanager-sync-data | rpm | manager server module 4.1 | 4.1.14-3.23.2 | Not reported | SUSE-SU-2021:2098-1 | Not reported |
| Suse | tika-core | rpm | manager server module 4.1 | 1.26-3.5.2 | Not reported | SUSE-SU-2021:2098-1 | Not reported |
| Suse | uyuni-common-libs | rpm | manager server module 4.1 | 4.1.8-3.9.1 | Not reported | SUSE-SU-2021:2098-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2021_2098-1.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2021-28657]
- [https://osv.dev/vulnerability/SUSE-SU-2021:2098-1]
- [https://osv.dev/vulnerability/SUSE-SU-2021:2114-1]
[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]