Vulnerability from csaf_suse
Published
2022-06-20 14:12
Modified
2022-06-20 14:12
Summary
Security update for SUSE Manager Server 4.1
Notes
Title of the patch
Security update for SUSE Manager Server 4.1
Description of the patch
This update fixes the following issues:
golang-github-QubitProducts-exporter_exporter:
- Adapted to build on Enterprise Linux.
- Fix build for RedHat 7
- Require Go >= 1.14 also for CentOS
- Add support for CentOS
- Replace %{?systemd_requires} with %{?systemd_ordering}
golang-github-lusitaniae-apache_exporter:
- Require building with Go 1.15
- Add %license macro for LICENSE file
golang-github-prometheus-node_exporter:
- CVE-2022-21698: Update vendor tarball with prometheus/client_golang 1.11.1
(bsc#1196338, jsc#SLE-24238, jsc#SLE-24239)
- Update to 1.3.0
* [CHANGE] Add path label to rapl collector #2146
* [CHANGE] Exclude filesystems under /run/credentials #2157
* [CHANGE] Add TCPTimeouts to netstat default filter #2189
* [FEATURE] Add lnstat collector for metrics from /proc/net/stat/ #1771
* [FEATURE] Add darwin powersupply collector #1777
* [FEATURE] Add support for monitoring GPUs on Linux #1998
* [FEATURE] Add Darwin thermal collector #2032
* [FEATURE] Add os release collector #2094
* [FEATURE] Add netdev.address-info collector #2105
* [FEATURE] Add clocksource metrics to time collector #2197
* [ENHANCEMENT] Support glob textfile collector directories #1985
* [ENHANCEMENT] ethtool: Expose node_ethtool_info metric #2080
* [ENHANCEMENT] Use include/exclude flags for ethtool filtering #2165
* [ENHANCEMENT] Add flag to disable guest CPU metrics #2123
* [ENHANCEMENT] Add DMI collector #2131
* [ENHANCEMENT] Add threads metrics to processes collector #2164
* [ENHANCMMENT] Reduce timer GC delays in the Linux filesystem collector #2169
* [ENHANCMMENT] Add TCPTimeouts to netstat default filter #2189
* [ENHANCMMENT] Use SysctlTimeval for boottime collector on BSD #2208
* [BUGFIX] ethtool: Sanitize metric names #2093
* [BUGFIX] Fix ethtool collector for multiple interfaces #2126
* [BUGFIX] Fix possible panic on macOS #2133
* [BUGFIX] Collect flag_info and bug_info only for one core #2156
* [BUGFIX] Prevent duplicate ethtool metric names #2187
- Update to 1.2.2
* Bug fixes
Fix processes collector long int parsing #2112
- Update to 1.2.1
* Removed
Remove obsolete capture permission denied error patch already included upstream
Fix zoneinfo parsing prometheus/procfs#386
Fix nvme collector log noise #2091
Fix rapl collector log noise #2092
- Update to 1.2.0
* Changes
Rename filesystem collector flags to match other collectors #2012
Make node_exporter print usage to STDOUT #203
* Features
Add conntrack statistics metrics #1155
Add ethtool stats collector #1832
Add flag to ignore network speed if it is unknown #1989
Add tapestats collector for Linux #2044
Add nvme collector #2062
* Enhancements
Add ErrorLog plumbing to promhttp #1887
Add more Infiniband counters #2019
netclass: retrieve interface names and filter before parsing #2033
Add time zone offset metric #2060
Handle errors from disabled PSI subsystem #1983
Fix panic when using backwards compatible flags #2000
Fix wrong value for OpenBSD memory buffer cache #2015
Only initiate collectors once #2048
Handle small backwards jumps in CPU idle #2067
- Capture permission denied error for 'energy_uj' file (bsc#1190535)
patterns-suse-manager:
- Golang-github-wrouesnel-postgres_exporter was renamed to prometheus-postgres_exporter
postgresql-jdbc:
- CVE-2022-26520: Address Arbitrary File Write Vulnerability (bsc#1197356)
- CVE-2022-21724: Address unchecked class instantiation when loading plugins based on class names (bsc#1195561)
prometheus-exporters-formula:
- Version 0.9.5
* Postgres exporter package was renamed for Red Hat
- Version 0.9.4
* Postgres exporter package was renamed for SUSE Linux Enterprise Server and openSUSE
prometheus-formula:
- Version 0.3.7
* Allow prometheus-formula only for SUSE systems (bsc#1199149)
py27-compat-salt:
- Remove redundant overrides causing confusing DEBUG logging (bsc#1189501)
spacecmd:
- Version 4.1.18-1
* implement system.bootstrap (bsc#1194909)
spacewalk-backend:
- Version 4.1.31-1
* Fix traceback on calling spacewalk-repo-sync --show-packages (bsc#1193238)
* Fix virt_notify SQL syntax error (bsc#1199528)
* Do not raise error on file:// based DEB repo when looking
for alternative Release files (bsc#1199142)
* Improve parsing deb packages dependencies (bsc#1194594)
* Fix reposync update notice formatting and date parsing (bsc#1194447)
* implement more decompression algorithms for reposync (bsc#1196704)
spacewalk-java:
- Version 4.1.46-1
* Fix changelog to include the reference to CVE-2022-31248
- Version 4.1.45-1
* CVE-2022-31248: User enumeration via weak error message (bsc#1199629)
* CVE-2022-21952: Unauthenticated remote Denial of Service via resource exhaustion. (bsc#1199512)
* During re-activation, recalculate grains if contact method has been changed (bsc#1199677)
* autoinstallation: missing whitespace after install URL (bsc#1199888)
* Change system details lock tab name to lock/unlock (bsc#1193032)
* Set profile tag has no-mandatory in XCCDF result (bsc#1194262)
* Added a notification to inform the administrators about the product end-of-life
* provisioning thought proxy should use proxy for self_update (bsc#1199036)
* Allow removing duplicated packages names in the same Salt action (bsc#1198686)
* Fix ACL rules for config diff download for SLS files (bsc#1198914)
* fix invalid link to action schedule
* Redesign the auto errata task to schedule combined actions (bsc#1197429)
* detect free products in Alpha and Beta stage and prevent checks on openSUSE products (bsc#1197488)
* Optimize adding new products function (bsc#1193707)
* change directory owner and permissions only when needed
* Fixed broken help link for system overview
* Finding empty profiles by mac address must be case insensitive (bsc#1196407)
* generate the system ssh key when bootstrapping a salt-ssh client (bsc#1194909)
spacewalk-setup:
- Version 4.1.11-1
* spacewalk-setup-cobbler assumes /etc/apache2/conf.d now as a
default instead of /etc/httpd/conf.d (bsc#1198356)
spacewalk-utils:
- Version 4.1.20-1
* spacewalk-hostname-rename now correctly replaces the hostname for
the mgr-sync configuration file (bsc#1198356)
* spacewalk-hostname-rename now utilizes the '--apache2-conf-dir'
flag for spacewalk-setup-cobbler (bsc#1198356)
spacewalk-web:
- Version 4.1.34-1
* Update Web UI version to 4.1.15
- Version 4.1.33-1
* Added support for end of life notifications
subscription-matcher:
- Version 0.28
* Support both antlr3-java and antlr3-runtime as dependencies
* Make it obvious that log4j12 is used
susemanager:
- version 4.1.36-1
* Add python3-contextvars and python3-immutables to missing bootstrap repos (bsc#1200606)
- version 4.1.35-1
* Add python3-gnupg to bootstrap repo definition for Ubuntu 20.04 (bsc#1200212)
- Version 4.1.34-1
* mgr-sync: Raise a proper exception when duplicated lines exist in a config file (bsc#1182742)
* fix SLE15 bootstrap repo definition (bsc#1197438)
* Add SLES15SP4 and SUMA Proxy 4.3 to bootstrap
repo definitions (bsc#1196702)
* Add missing dependencies for Salt 3004 into bootstrap repository
for SLE15 family (bsc#1198221)
susemanager-doc-indexes:
- The Large deployments Guide now includes a mention of the proxy (bsc#1199577)
- In the Administration Guide, documented that monitoring tools are
now available on SUSE Linux Enterprise 12, 15 and openSUSE Leap 15,
however, Grafana is not available on Proxy (bsc#1191143)
- In the Administration Guide, renamed the
golang-github-wrouesnel-postgres_exporter to prometheus-postgres_exporter
- In the Client Configuration and Retail Guides clarified that mandatory
channels are automatically checked (bsc#1173527)
- In the Client Configuration Guide, marked Yomi as unsupported on
SUSE Linux Enterprise Server 11 and 12
- Clarified channel label name in Registering Clients with RHUI
section of the Client Configuration Guide (bsc#1196067)
susemanager-docs_en:
- The Large deployments Guide now includes a mention of the proxy
(bsc#1199577)
- In the Administration Guide, documented that monitoring tools are
now available on SUSE Linux Enterprise 12, 15 and openSUSE Leap 15,
however, Grafana is not available on Proxy (bsc#1191143)
- In the Administration Guide, renamed the
golang-github-wrouesnel-postgres_exporter to prometheus-postgres_exporter
- In the Client Configuration and Retail Guides clarified that mandatory
channels are automatically checked (bsc#1173527)
- In the Client Configuration Guide, marked Yomi as unsupported on
SUSE Linux Enterprise Server 11 and 12
- Clarified channel label name in Registering Clients with RHUI
section of the Client Configuration Guide (bsc#1196067)
susemanager-schema:
- Version 4.1.26-1
* add schema update directory from 4.1.25 to 4.1.26
susemanager-sls:
- version 4.1.36-1
* Prevent possible tracebacks on calling module.run from mgrcompat by setting proper globals with using LazyLoader
- Version 4.1.35-1
* Add support to packages.pkgremove to deal with duplicated pkg names (bsc#1198686)
* Fix bootstrap repository path resolution for Oracle Linux
* Fix deprecated warning when getting pillar data (bsc#1192850)
* fixing how the return code is returned in mgrutil runner (bsc#1194909)
How to apply this update:
1. Log in as root user to the SUSE Manager server.
2. Stop the Spacewalk service:
`spacewalk-service stop`
3. Apply the patch using either zypper patch or YaST Online Update.
4. Start the Spacewalk service:
`spacewalk-service start`
Patchnames
SUSE-2022-2145,SUSE-SLE-Module-SUSE-Manager-Server-4.1-2022-2145
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for SUSE Manager Server 4.1", title: "Title of the patch", }, { category: "description", text: "This update fixes the following issues:\n\ngolang-github-QubitProducts-exporter_exporter:\n\n- Adapted to build on Enterprise Linux.\n- Fix build for RedHat 7\n- Require Go >= 1.14 also for CentOS\n- Add support for CentOS\n- Replace %{?systemd_requires} with %{?systemd_ordering}\n\ngolang-github-lusitaniae-apache_exporter:\n\n- Require building with Go 1.15\n- Add %license macro for LICENSE file \n\ngolang-github-prometheus-node_exporter:\n\n- CVE-2022-21698: Update vendor tarball with prometheus/client_golang 1.11.1\n (bsc#1196338, jsc#SLE-24238, jsc#SLE-24239)\n- Update to 1.3.0\n * [CHANGE] Add path label to rapl collector #2146\n * [CHANGE] Exclude filesystems under /run/credentials #2157\n * [CHANGE] Add TCPTimeouts to netstat default filter #2189\n * [FEATURE] Add lnstat collector for metrics from /proc/net/stat/ #1771\n * [FEATURE] Add darwin powersupply collector #1777\n * [FEATURE] Add support for monitoring GPUs on Linux #1998\n * [FEATURE] Add Darwin thermal collector #2032\n * [FEATURE] Add os release collector #2094\n * [FEATURE] Add netdev.address-info collector #2105\n * [FEATURE] Add clocksource metrics to time collector #2197\n * [ENHANCEMENT] Support glob textfile collector directories #1985\n * [ENHANCEMENT] ethtool: Expose node_ethtool_info metric #2080\n * [ENHANCEMENT] Use include/exclude flags for ethtool filtering #2165\n * [ENHANCEMENT] Add flag to disable guest CPU metrics #2123\n * [ENHANCEMENT] Add DMI collector #2131\n * [ENHANCEMENT] Add threads metrics to processes collector #2164\n * [ENHANCMMENT] Reduce timer GC delays in the Linux filesystem collector #2169\n * [ENHANCMMENT] Add TCPTimeouts to netstat default filter #2189\n * [ENHANCMMENT] Use SysctlTimeval for boottime collector on BSD #2208\n * [BUGFIX] ethtool: Sanitize metric names #2093\n * [BUGFIX] Fix ethtool collector for multiple interfaces #2126\n * [BUGFIX] Fix possible panic on macOS #2133\n * [BUGFIX] Collect flag_info and bug_info only for one core #2156\n * [BUGFIX] Prevent duplicate ethtool metric names #2187\n- Update to 1.2.2\n * Bug fixes\n Fix processes collector long int parsing #2112\n- Update to 1.2.1\n * Removed\n Remove obsolete capture permission denied error patch already included upstream\n Fix zoneinfo parsing prometheus/procfs#386\n Fix nvme collector log noise #2091\n Fix rapl collector log noise #2092\n- Update to 1.2.0\n * Changes\n Rename filesystem collector flags to match other collectors #2012\n Make node_exporter print usage to STDOUT #203\n * Features\n Add conntrack statistics metrics #1155\n Add ethtool stats collector #1832\n Add flag to ignore network speed if it is unknown #1989\n Add tapestats collector for Linux #2044\n Add nvme collector #2062\n * Enhancements\n Add ErrorLog plumbing to promhttp #1887\n Add more Infiniband counters #2019\n netclass: retrieve interface names and filter before parsing #2033\n Add time zone offset metric #2060\n Handle errors from disabled PSI subsystem #1983\n Fix panic when using backwards compatible flags #2000\n Fix wrong value for OpenBSD memory buffer cache #2015\n Only initiate collectors once #2048\n Handle small backwards jumps in CPU idle #2067\n- Capture permission denied error for 'energy_uj' file (bsc#1190535)\n\npatterns-suse-manager:\n\n- Golang-github-wrouesnel-postgres_exporter was renamed to prometheus-postgres_exporter\n\npostgresql-jdbc:\n\n- CVE-2022-26520: Address Arbitrary File Write Vulnerability (bsc#1197356)\n- CVE-2022-21724: Address unchecked class instantiation when loading plugins based on class names (bsc#1195561)\n\nprometheus-exporters-formula:\n\n- Version 0.9.5\n * Postgres exporter package was renamed for Red Hat\n- Version 0.9.4\n * Postgres exporter package was renamed for SUSE Linux Enterprise Server and openSUSE\n\nprometheus-formula:\n\n- Version 0.3.7\n * Allow prometheus-formula only for SUSE systems (bsc#1199149)\n\npy27-compat-salt:\n\n- Remove redundant overrides causing confusing DEBUG logging (bsc#1189501)\n\nspacecmd:\n\n- Version 4.1.18-1\n * implement system.bootstrap (bsc#1194909)\n\nspacewalk-backend:\n\n- Version 4.1.31-1\n * Fix traceback on calling spacewalk-repo-sync --show-packages (bsc#1193238)\n * Fix virt_notify SQL syntax error (bsc#1199528)\n * Do not raise error on file:// based DEB repo when looking\n for alternative Release files (bsc#1199142)\n * Improve parsing deb packages dependencies (bsc#1194594)\n * Fix reposync update notice formatting and date parsing (bsc#1194447)\n * implement more decompression algorithms for reposync (bsc#1196704)\n\nspacewalk-java:\n\n- Version 4.1.46-1\n * Fix changelog to include the reference to CVE-2022-31248\n- Version 4.1.45-1\n * CVE-2022-31248: User enumeration via weak error message (bsc#1199629)\n * CVE-2022-21952: Unauthenticated remote Denial of Service via resource exhaustion. (bsc#1199512)\n * During re-activation, recalculate grains if contact method has been changed (bsc#1199677)\n * autoinstallation: missing whitespace after install URL (bsc#1199888)\n * Change system details lock tab name to lock/unlock (bsc#1193032)\n * Set profile tag has no-mandatory in XCCDF result (bsc#1194262)\n * Added a notification to inform the administrators about the product end-of-life\n * provisioning thought proxy should use proxy for self_update (bsc#1199036)\n * Allow removing duplicated packages names in the same Salt action (bsc#1198686)\n * Fix ACL rules for config diff download for SLS files (bsc#1198914)\n * fix invalid link to action schedule\n * Redesign the auto errata task to schedule combined actions (bsc#1197429)\n * detect free products in Alpha and Beta stage and prevent checks on openSUSE products (bsc#1197488)\n * Optimize adding new products function (bsc#1193707)\n * change directory owner and permissions only when needed\n * Fixed broken help link for system overview\n * Finding empty profiles by mac address must be case insensitive (bsc#1196407)\n * generate the system ssh key when bootstrapping a salt-ssh client (bsc#1194909)\n\nspacewalk-setup:\n\n- Version 4.1.11-1\n * spacewalk-setup-cobbler assumes /etc/apache2/conf.d now as a\n default instead of /etc/httpd/conf.d (bsc#1198356)\n\nspacewalk-utils:\n\n- Version 4.1.20-1\n * spacewalk-hostname-rename now correctly replaces the hostname for\n the mgr-sync configuration file (bsc#1198356)\n * spacewalk-hostname-rename now utilizes the '--apache2-conf-dir'\n flag for spacewalk-setup-cobbler (bsc#1198356)\n\nspacewalk-web:\n\n- Version 4.1.34-1\n * Update Web UI version to 4.1.15\n- Version 4.1.33-1\n * Added support for end of life notifications\n\nsubscription-matcher:\n\n- Version 0.28\n * Support both antlr3-java and antlr3-runtime as dependencies\n * Make it obvious that log4j12 is used\n\nsusemanager:\n\n- version 4.1.36-1\n * Add python3-contextvars and python3-immutables to missing bootstrap repos (bsc#1200606)\n- version 4.1.35-1\n * Add python3-gnupg to bootstrap repo definition for Ubuntu 20.04 (bsc#1200212)\n- Version 4.1.34-1\n * mgr-sync: Raise a proper exception when duplicated lines exist in a config file (bsc#1182742)\n * fix SLE15 bootstrap repo definition (bsc#1197438)\n * Add SLES15SP4 and SUMA Proxy 4.3 to bootstrap\n repo definitions (bsc#1196702)\n * Add missing dependencies for Salt 3004 into bootstrap repository\n for SLE15 family (bsc#1198221)\n\nsusemanager-doc-indexes:\n\n- The Large deployments Guide now includes a mention of the proxy (bsc#1199577)\n- In the Administration Guide, documented that monitoring tools are \n now available on SUSE Linux Enterprise 12, 15 and openSUSE Leap 15, \n however, Grafana is not available on Proxy (bsc#1191143)\n- In the Administration Guide, renamed the \n golang-github-wrouesnel-postgres_exporter to prometheus-postgres_exporter\n- In the Client Configuration and Retail Guides clarified that mandatory \n channels are automatically checked (bsc#1173527)\n- In the Client Configuration Guide, marked Yomi as unsupported on \n SUSE Linux Enterprise Server 11 and 12\n- Clarified channel label name in Registering Clients with RHUI \n section of the Client Configuration Guide (bsc#1196067)\n\nsusemanager-docs_en:\n\n- The Large deployments Guide now includes a mention of the proxy \n (bsc#1199577)\n- In the Administration Guide, documented that monitoring tools are \n now available on SUSE Linux Enterprise 12, 15 and openSUSE Leap 15,\n however, Grafana is not available on Proxy (bsc#1191143)\n- In the Administration Guide, renamed the \n golang-github-wrouesnel-postgres_exporter to prometheus-postgres_exporter\n- In the Client Configuration and Retail Guides clarified that mandatory \n channels are automatically checked (bsc#1173527)\n- In the Client Configuration Guide, marked Yomi as unsupported on \n SUSE Linux Enterprise Server 11 and 12\n- Clarified channel label name in Registering Clients with RHUI \n section of the Client Configuration Guide (bsc#1196067)\n\nsusemanager-schema:\n\n- Version 4.1.26-1\n * add schema update directory from 4.1.25 to 4.1.26\n\nsusemanager-sls:\n\n- version 4.1.36-1\n * Prevent possible tracebacks on calling module.run from mgrcompat by setting proper globals with using LazyLoader\n\n- Version 4.1.35-1\n * Add support to packages.pkgremove to deal with duplicated pkg names (bsc#1198686)\n * Fix bootstrap repository path resolution for Oracle Linux\n * Fix deprecated warning when getting pillar data (bsc#1192850)\n * fixing how the return code is returned in mgrutil runner (bsc#1194909)\n\nHow to apply this update:\n\n1. Log in as root user to the SUSE Manager server.\n2. Stop the Spacewalk service:\n`spacewalk-service stop`\n3. Apply the patch using either zypper patch or YaST Online Update.\n4. Start the Spacewalk service:\n`spacewalk-service start`\n", title: "Description of the patch", }, { category: "details", text: "SUSE-2022-2145,SUSE-SLE-Module-SUSE-Manager-Server-4.1-2022-2145", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_2145-1.json", }, { category: "self", summary: "URL for SUSE-SU-2022:2145-1", url: "https://www.suse.com/support/update/announcement/2022/suse-su-20222145-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2022:2145-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2022-June/011317.html", }, { category: "self", summary: "SUSE Bug 1173527", url: "https://bugzilla.suse.com/1173527", }, { category: "self", summary: "SUSE Bug 1182742", url: "https://bugzilla.suse.com/1182742", }, { category: "self", summary: "SUSE Bug 1189501", url: "https://bugzilla.suse.com/1189501", }, { category: "self", summary: "SUSE Bug 1190535", url: "https://bugzilla.suse.com/1190535", }, { category: "self", summary: "SUSE Bug 1191143", url: "https://bugzilla.suse.com/1191143", }, { category: "self", summary: "SUSE Bug 1192850", url: "https://bugzilla.suse.com/1192850", }, { category: "self", summary: "SUSE Bug 1193032", url: "https://bugzilla.suse.com/1193032", }, { category: "self", summary: "SUSE Bug 1193238", url: "https://bugzilla.suse.com/1193238", }, { category: "self", summary: "SUSE Bug 1193707", url: "https://bugzilla.suse.com/1193707", }, { category: "self", summary: "SUSE Bug 1194262", url: "https://bugzilla.suse.com/1194262", }, { category: "self", summary: "SUSE Bug 1194447", url: "https://bugzilla.suse.com/1194447", }, { category: "self", summary: "SUSE Bug 1194594", url: "https://bugzilla.suse.com/1194594", }, { category: "self", summary: "SUSE Bug 1194909", url: "https://bugzilla.suse.com/1194909", }, { category: "self", summary: "SUSE Bug 1195561", url: "https://bugzilla.suse.com/1195561", }, { category: "self", summary: "SUSE Bug 1196067", url: "https://bugzilla.suse.com/1196067", }, { category: "self", summary: "SUSE Bug 1196338", url: "https://bugzilla.suse.com/1196338", }, { category: "self", summary: "SUSE Bug 1196407", url: "https://bugzilla.suse.com/1196407", }, { category: "self", summary: "SUSE Bug 1196702", url: "https://bugzilla.suse.com/1196702", }, { category: "self", summary: "SUSE Bug 1196704", url: "https://bugzilla.suse.com/1196704", }, { category: "self", summary: "SUSE Bug 1197356", url: "https://bugzilla.suse.com/1197356", }, { category: "self", summary: "SUSE Bug 1197429", url: "https://bugzilla.suse.com/1197429", }, { category: "self", summary: "SUSE Bug 1197438", url: "https://bugzilla.suse.com/1197438", }, { category: "self", summary: "SUSE Bug 1197488", url: "https://bugzilla.suse.com/1197488", }, { category: "self", summary: "SUSE Bug 1198221", url: "https://bugzilla.suse.com/1198221", }, { category: "self", summary: "SUSE Bug 1198356", url: "https://bugzilla.suse.com/1198356", }, { category: "self", summary: "SUSE Bug 1198686", url: "https://bugzilla.suse.com/1198686", }, { category: "self", summary: "SUSE Bug 1198914", url: "https://bugzilla.suse.com/1198914", }, { category: "self", summary: "SUSE Bug 1199036", url: "https://bugzilla.suse.com/1199036", }, { category: "self", summary: "SUSE Bug 1199142", url: "https://bugzilla.suse.com/1199142", }, { category: "self", summary: "SUSE Bug 1199149", url: "https://bugzilla.suse.com/1199149", }, { category: "self", summary: "SUSE Bug 1199512", url: "https://bugzilla.suse.com/1199512", }, { category: "self", summary: "SUSE Bug 1199528", url: "https://bugzilla.suse.com/1199528", }, { category: "self", summary: "SUSE Bug 1199577", url: "https://bugzilla.suse.com/1199577", }, { category: "self", summary: "SUSE Bug 1199629", url: "https://bugzilla.suse.com/1199629", }, { category: "self", summary: "SUSE Bug 1199677", url: "https://bugzilla.suse.com/1199677", }, { category: "self", summary: "SUSE Bug 1199888", url: "https://bugzilla.suse.com/1199888", }, { category: "self", summary: "SUSE Bug 1200212", url: "https://bugzilla.suse.com/1200212", }, { category: "self", summary: "SUSE Bug 1200606", url: "https://bugzilla.suse.com/1200606", }, { category: "self", summary: "SUSE CVE CVE-2022-21698 page", url: "https://www.suse.com/security/cve/CVE-2022-21698/", }, { category: "self", summary: "SUSE CVE CVE-2022-21724 page", url: "https://www.suse.com/security/cve/CVE-2022-21724/", }, { category: "self", summary: "SUSE CVE CVE-2022-21952 page", url: "https://www.suse.com/security/cve/CVE-2022-21952/", }, { category: "self", summary: "SUSE CVE CVE-2022-26520 page", url: "https://www.suse.com/security/cve/CVE-2022-26520/", }, { category: "self", summary: "SUSE CVE CVE-2022-31248 page", url: "https://www.suse.com/security/cve/CVE-2022-31248/", }, ], title: "Security update for SUSE Manager Server 4.1", tracking: { current_release_date: "2022-06-20T14:12:59Z", generator: { date: "2022-06-20T14:12:59Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2022:2145-1", initial_release_date: "2022-06-20T14:12:59Z", revision_history: [ { date: "2022-06-20T14:12:59Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.aarch64", product: { name: "golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.aarch64", product_id: "golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.aarch64", }, }, { category: "product_version", name: "golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.aarch64", product: { name: "golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.aarch64", product_id: "golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.aarch64", }, }, { category: "product_version", name: "golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.aarch64", product: { name: "golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.aarch64", product_id: "golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.aarch64", }, }, { category: "product_version", name: "patterns-suma_proxy-4.1-150200.6.12.2.aarch64", product: { name: "patterns-suma_proxy-4.1-150200.6.12.2.aarch64", product_id: "patterns-suma_proxy-4.1-150200.6.12.2.aarch64", }, }, { category: "product_version", name: "patterns-suma_retail-4.1-150200.6.12.2.aarch64", product: { name: "patterns-suma_retail-4.1-150200.6.12.2.aarch64", product_id: "patterns-suma_retail-4.1-150200.6.12.2.aarch64", }, }, { category: "product_version", name: "patterns-suma_server-4.1-150200.6.12.2.aarch64", product: { name: "patterns-suma_server-4.1-150200.6.12.2.aarch64", product_id: "patterns-suma_server-4.1-150200.6.12.2.aarch64", }, }, { category: "product_version", name: "susemanager-4.1.36-150200.3.52.1.aarch64", product: { name: "susemanager-4.1.36-150200.3.52.1.aarch64", product_id: "susemanager-4.1.36-150200.3.52.1.aarch64", }, }, { category: "product_version", name: "susemanager-nodejs-sdk-devel-4.1.13-150200.3.24.3.aarch64", product: { name: "susemanager-nodejs-sdk-devel-4.1.13-150200.3.24.3.aarch64", product_id: "susemanager-nodejs-sdk-devel-4.1.13-150200.3.24.3.aarch64", }, }, { category: "product_version", name: "susemanager-tools-4.1.36-150200.3.52.1.aarch64", product: { name: "susemanager-tools-4.1.36-150200.3.52.1.aarch64", product_id: "susemanager-tools-4.1.36-150200.3.52.1.aarch64", }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "postgresql-jdbc-42.2.10-150200.3.8.2.noarch", product: { name: "postgresql-jdbc-42.2.10-150200.3.8.2.noarch", product_id: "postgresql-jdbc-42.2.10-150200.3.8.2.noarch", }, }, { category: "product_version", name: "prometheus-exporters-formula-0.9.5-150200.3.31.2.noarch", product: { name: "prometheus-exporters-formula-0.9.5-150200.3.31.2.noarch", product_id: "prometheus-exporters-formula-0.9.5-150200.3.31.2.noarch", }, }, { category: "product_version", name: "prometheus-formula-0.3.7-150200.3.21.2.noarch", product: { name: "prometheus-formula-0.3.7-150200.3.21.2.noarch", product_id: "prometheus-formula-0.3.7-150200.3.21.2.noarch", }, }, { category: "product_version", name: "py27-compat-salt-3000.3-150200.6.24.2.noarch", product: { name: "py27-compat-salt-3000.3-150200.6.24.2.noarch", product_id: "py27-compat-salt-3000.3-150200.6.24.2.noarch", }, }, { category: "product_version", name: "spacecmd-4.1.18-150200.4.39.3.noarch", product: { name: "spacecmd-4.1.18-150200.4.39.3.noarch", product_id: "spacecmd-4.1.18-150200.4.39.3.noarch", }, }, { category: "product_version", name: "spacewalk-backend-4.1.31-150200.4.50.4.noarch", product: { name: "spacewalk-backend-4.1.31-150200.4.50.4.noarch", product_id: "spacewalk-backend-4.1.31-150200.4.50.4.noarch", }, }, { category: "product_version", name: "spacewalk-backend-app-4.1.31-150200.4.50.4.noarch", product: { name: "spacewalk-backend-app-4.1.31-150200.4.50.4.noarch", product_id: "spacewalk-backend-app-4.1.31-150200.4.50.4.noarch", }, }, { category: "product_version", name: "spacewalk-backend-applet-4.1.31-150200.4.50.4.noarch", product: { name: "spacewalk-backend-applet-4.1.31-150200.4.50.4.noarch", product_id: "spacewalk-backend-applet-4.1.31-150200.4.50.4.noarch", }, }, { category: "product_version", name: "spacewalk-backend-cdn-4.1.31-150200.4.50.4.noarch", product: { name: "spacewalk-backend-cdn-4.1.31-150200.4.50.4.noarch", product_id: "spacewalk-backend-cdn-4.1.31-150200.4.50.4.noarch", }, }, { category: "product_version", name: "spacewalk-backend-config-files-4.1.31-150200.4.50.4.noarch", product: { name: "spacewalk-backend-config-files-4.1.31-150200.4.50.4.noarch", product_id: "spacewalk-backend-config-files-4.1.31-150200.4.50.4.noarch", }, }, { category: "product_version", name: "spacewalk-backend-config-files-common-4.1.31-150200.4.50.4.noarch", product: { name: "spacewalk-backend-config-files-common-4.1.31-150200.4.50.4.noarch", product_id: "spacewalk-backend-config-files-common-4.1.31-150200.4.50.4.noarch", }, }, { category: "product_version", name: "spacewalk-backend-config-files-tool-4.1.31-150200.4.50.4.noarch", product: { name: "spacewalk-backend-config-files-tool-4.1.31-150200.4.50.4.noarch", product_id: "spacewalk-backend-config-files-tool-4.1.31-150200.4.50.4.noarch", }, }, { category: "product_version", name: "spacewalk-backend-iss-4.1.31-150200.4.50.4.noarch", product: { name: "spacewalk-backend-iss-4.1.31-150200.4.50.4.noarch", product_id: "spacewalk-backend-iss-4.1.31-150200.4.50.4.noarch", }, }, { category: "product_version", name: "spacewalk-backend-iss-export-4.1.31-150200.4.50.4.noarch", product: { name: "spacewalk-backend-iss-export-4.1.31-150200.4.50.4.noarch", product_id: "spacewalk-backend-iss-export-4.1.31-150200.4.50.4.noarch", }, }, { category: "product_version", name: "spacewalk-backend-package-push-server-4.1.31-150200.4.50.4.noarch", product: { name: "spacewalk-backend-package-push-server-4.1.31-150200.4.50.4.noarch", product_id: "spacewalk-backend-package-push-server-4.1.31-150200.4.50.4.noarch", }, }, { category: "product_version", name: "spacewalk-backend-server-4.1.31-150200.4.50.4.noarch", product: { name: "spacewalk-backend-server-4.1.31-150200.4.50.4.noarch", product_id: "spacewalk-backend-server-4.1.31-150200.4.50.4.noarch", }, }, { category: "product_version", name: "spacewalk-backend-sql-4.1.31-150200.4.50.4.noarch", product: { name: "spacewalk-backend-sql-4.1.31-150200.4.50.4.noarch", product_id: "spacewalk-backend-sql-4.1.31-150200.4.50.4.noarch", }, }, { category: "product_version", name: "spacewalk-backend-sql-postgresql-4.1.31-150200.4.50.4.noarch", product: { name: "spacewalk-backend-sql-postgresql-4.1.31-150200.4.50.4.noarch", product_id: "spacewalk-backend-sql-postgresql-4.1.31-150200.4.50.4.noarch", }, }, { category: "product_version", name: "spacewalk-backend-tools-4.1.31-150200.4.50.4.noarch", product: { name: "spacewalk-backend-tools-4.1.31-150200.4.50.4.noarch", product_id: "spacewalk-backend-tools-4.1.31-150200.4.50.4.noarch", }, }, { category: "product_version", name: "spacewalk-backend-xml-export-libs-4.1.31-150200.4.50.4.noarch", product: { name: "spacewalk-backend-xml-export-libs-4.1.31-150200.4.50.4.noarch", product_id: "spacewalk-backend-xml-export-libs-4.1.31-150200.4.50.4.noarch", }, }, { category: "product_version", name: "spacewalk-backend-xmlrpc-4.1.31-150200.4.50.4.noarch", product: { name: "spacewalk-backend-xmlrpc-4.1.31-150200.4.50.4.noarch", product_id: "spacewalk-backend-xmlrpc-4.1.31-150200.4.50.4.noarch", }, }, { category: "product_version", name: "spacewalk-base-4.1.34-150200.3.47.6.noarch", product: { name: "spacewalk-base-4.1.34-150200.3.47.6.noarch", product_id: "spacewalk-base-4.1.34-150200.3.47.6.noarch", }, }, { category: "product_version", name: "spacewalk-base-minimal-4.1.34-150200.3.47.6.noarch", product: { name: "spacewalk-base-minimal-4.1.34-150200.3.47.6.noarch", product_id: "spacewalk-base-minimal-4.1.34-150200.3.47.6.noarch", }, }, { category: "product_version", name: "spacewalk-base-minimal-config-4.1.34-150200.3.47.6.noarch", product: { name: "spacewalk-base-minimal-config-4.1.34-150200.3.47.6.noarch", product_id: "spacewalk-base-minimal-config-4.1.34-150200.3.47.6.noarch", }, }, { category: "product_version", name: "spacewalk-dobby-4.1.34-150200.3.47.6.noarch", product: { name: "spacewalk-dobby-4.1.34-150200.3.47.6.noarch", product_id: "spacewalk-dobby-4.1.34-150200.3.47.6.noarch", }, }, { category: "product_version", name: "spacewalk-html-4.1.34-150200.3.47.6.noarch", product: { name: "spacewalk-html-4.1.34-150200.3.47.6.noarch", product_id: "spacewalk-html-4.1.34-150200.3.47.6.noarch", }, }, { category: "product_version", name: "spacewalk-html-debug-4.1.34-150200.3.47.6.noarch", product: { name: "spacewalk-html-debug-4.1.34-150200.3.47.6.noarch", product_id: "spacewalk-html-debug-4.1.34-150200.3.47.6.noarch", }, }, { category: "product_version", name: "spacewalk-java-4.1.46-150200.3.71.5.noarch", product: { name: "spacewalk-java-4.1.46-150200.3.71.5.noarch", product_id: "spacewalk-java-4.1.46-150200.3.71.5.noarch", }, }, { category: "product_version", name: "spacewalk-java-apidoc-sources-4.1.46-150200.3.71.5.noarch", product: { name: "spacewalk-java-apidoc-sources-4.1.46-150200.3.71.5.noarch", product_id: "spacewalk-java-apidoc-sources-4.1.46-150200.3.71.5.noarch", }, }, { category: "product_version", name: "spacewalk-java-config-4.1.46-150200.3.71.5.noarch", product: { name: "spacewalk-java-config-4.1.46-150200.3.71.5.noarch", product_id: "spacewalk-java-config-4.1.46-150200.3.71.5.noarch", }, }, { category: "product_version", name: "spacewalk-java-lib-4.1.46-150200.3.71.5.noarch", product: { name: "spacewalk-java-lib-4.1.46-150200.3.71.5.noarch", product_id: "spacewalk-java-lib-4.1.46-150200.3.71.5.noarch", }, }, { category: "product_version", name: "spacewalk-java-postgresql-4.1.46-150200.3.71.5.noarch", product: { name: "spacewalk-java-postgresql-4.1.46-150200.3.71.5.noarch", product_id: "spacewalk-java-postgresql-4.1.46-150200.3.71.5.noarch", }, }, { category: "product_version", name: "spacewalk-setup-4.1.11-150200.3.18.2.noarch", product: { name: "spacewalk-setup-4.1.11-150200.3.18.2.noarch", product_id: "spacewalk-setup-4.1.11-150200.3.18.2.noarch", }, }, { category: "product_version", name: "spacewalk-taskomatic-4.1.46-150200.3.71.5.noarch", product: { name: "spacewalk-taskomatic-4.1.46-150200.3.71.5.noarch", product_id: "spacewalk-taskomatic-4.1.46-150200.3.71.5.noarch", }, }, { category: "product_version", name: "spacewalk-utils-4.1.20-150200.3.30.2.noarch", product: { name: "spacewalk-utils-4.1.20-150200.3.30.2.noarch", product_id: "spacewalk-utils-4.1.20-150200.3.30.2.noarch", }, }, { category: "product_version", name: "spacewalk-utils-extras-4.1.20-150200.3.30.2.noarch", product: { name: "spacewalk-utils-extras-4.1.20-150200.3.30.2.noarch", product_id: "spacewalk-utils-extras-4.1.20-150200.3.30.2.noarch", }, }, { category: "product_version", name: "subscription-matcher-0.28-150200.3.15.2.noarch", product: { name: "subscription-matcher-0.28-150200.3.15.2.noarch", product_id: "subscription-matcher-0.28-150200.3.15.2.noarch", }, }, { category: "product_version", name: "susemanager-doc-indexes-4.1-150200.11.55.4.noarch", product: { name: "susemanager-doc-indexes-4.1-150200.11.55.4.noarch", product_id: "susemanager-doc-indexes-4.1-150200.11.55.4.noarch", }, }, { category: "product_version", name: "susemanager-docs_en-4.1-150200.11.55.2.noarch", product: { name: "susemanager-docs_en-4.1-150200.11.55.2.noarch", product_id: "susemanager-docs_en-4.1-150200.11.55.2.noarch", }, }, { category: "product_version", name: "susemanager-docs_en-pdf-4.1-150200.11.55.2.noarch", product: { name: "susemanager-docs_en-pdf-4.1-150200.11.55.2.noarch", product_id: "susemanager-docs_en-pdf-4.1-150200.11.55.2.noarch", }, }, { category: "product_version", name: "susemanager-schema-4.1.26-150200.3.45.4.noarch", product: { name: "susemanager-schema-4.1.26-150200.3.45.4.noarch", product_id: "susemanager-schema-4.1.26-150200.3.45.4.noarch", }, }, { category: "product_version", name: "susemanager-schema-sanity-4.1.26-150200.3.45.4.noarch", product: { name: "susemanager-schema-sanity-4.1.26-150200.3.45.4.noarch", product_id: "susemanager-schema-sanity-4.1.26-150200.3.45.4.noarch", }, }, { category: "product_version", name: "susemanager-sls-4.1.36-150200.3.64.2.noarch", product: { name: "susemanager-sls-4.1.36-150200.3.64.2.noarch", product_id: "susemanager-sls-4.1.36-150200.3.64.2.noarch", }, }, { category: "product_version", name: "susemanager-web-libs-4.1.34-150200.3.47.6.noarch", product: { name: "susemanager-web-libs-4.1.34-150200.3.47.6.noarch", product_id: "susemanager-web-libs-4.1.34-150200.3.47.6.noarch", }, }, { category: "product_version", name: "susemanager-web-libs-debug-4.1.34-150200.3.47.6.noarch", product: { name: "susemanager-web-libs-debug-4.1.34-150200.3.47.6.noarch", product_id: "susemanager-web-libs-debug-4.1.34-150200.3.47.6.noarch", }, }, { category: "product_version", name: "uyuni-config-modules-4.1.36-150200.3.64.2.noarch", product: { name: "uyuni-config-modules-4.1.36-150200.3.64.2.noarch", product_id: "uyuni-config-modules-4.1.36-150200.3.64.2.noarch", }, }, ], category: "architecture", name: "noarch", }, { branches: [ { category: "product_version", name: "golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.ppc64le", product: { name: "golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.ppc64le", product_id: "golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.ppc64le", }, }, { category: "product_version", name: "golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.ppc64le", product: { name: "golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.ppc64le", product_id: "golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.ppc64le", }, }, { category: "product_version", name: "golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.ppc64le", product: { name: "golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.ppc64le", product_id: "golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.ppc64le", }, }, { category: "product_version", name: "patterns-suma_proxy-4.1-150200.6.12.2.ppc64le", product: { name: "patterns-suma_proxy-4.1-150200.6.12.2.ppc64le", product_id: "patterns-suma_proxy-4.1-150200.6.12.2.ppc64le", }, }, { category: "product_version", name: "patterns-suma_retail-4.1-150200.6.12.2.ppc64le", product: { name: "patterns-suma_retail-4.1-150200.6.12.2.ppc64le", product_id: "patterns-suma_retail-4.1-150200.6.12.2.ppc64le", }, }, { category: "product_version", name: "patterns-suma_server-4.1-150200.6.12.2.ppc64le", product: { name: "patterns-suma_server-4.1-150200.6.12.2.ppc64le", product_id: "patterns-suma_server-4.1-150200.6.12.2.ppc64le", }, }, { category: "product_version", name: "susemanager-4.1.36-150200.3.52.1.ppc64le", product: { name: "susemanager-4.1.36-150200.3.52.1.ppc64le", product_id: "susemanager-4.1.36-150200.3.52.1.ppc64le", }, }, { category: "product_version", name: "susemanager-nodejs-sdk-devel-4.1.13-150200.3.24.3.ppc64le", product: { name: "susemanager-nodejs-sdk-devel-4.1.13-150200.3.24.3.ppc64le", product_id: "susemanager-nodejs-sdk-devel-4.1.13-150200.3.24.3.ppc64le", }, }, { category: "product_version", name: "susemanager-tools-4.1.36-150200.3.52.1.ppc64le", product: { name: "susemanager-tools-4.1.36-150200.3.52.1.ppc64le", product_id: "susemanager-tools-4.1.36-150200.3.52.1.ppc64le", }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.s390x", product: { name: "golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.s390x", product_id: "golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.s390x", }, }, { category: "product_version", name: "golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.s390x", product: { name: "golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.s390x", product_id: "golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.s390x", }, }, { category: "product_version", name: "golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.s390x", product: { name: "golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.s390x", product_id: "golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.s390x", }, }, { category: "product_version", name: "patterns-suma_proxy-4.1-150200.6.12.2.s390x", product: { name: "patterns-suma_proxy-4.1-150200.6.12.2.s390x", product_id: "patterns-suma_proxy-4.1-150200.6.12.2.s390x", }, }, { category: "product_version", name: "patterns-suma_retail-4.1-150200.6.12.2.s390x", product: { name: "patterns-suma_retail-4.1-150200.6.12.2.s390x", product_id: "patterns-suma_retail-4.1-150200.6.12.2.s390x", }, }, { category: "product_version", name: "patterns-suma_server-4.1-150200.6.12.2.s390x", product: { name: "patterns-suma_server-4.1-150200.6.12.2.s390x", product_id: "patterns-suma_server-4.1-150200.6.12.2.s390x", }, }, { category: "product_version", name: "susemanager-4.1.36-150200.3.52.1.s390x", product: { name: "susemanager-4.1.36-150200.3.52.1.s390x", product_id: "susemanager-4.1.36-150200.3.52.1.s390x", }, }, { category: "product_version", name: "susemanager-nodejs-sdk-devel-4.1.13-150200.3.24.3.s390x", product: { name: "susemanager-nodejs-sdk-devel-4.1.13-150200.3.24.3.s390x", product_id: "susemanager-nodejs-sdk-devel-4.1.13-150200.3.24.3.s390x", }, }, { category: "product_version", name: "susemanager-tools-4.1.36-150200.3.52.1.s390x", product: { name: "susemanager-tools-4.1.36-150200.3.52.1.s390x", product_id: "susemanager-tools-4.1.36-150200.3.52.1.s390x", }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.x86_64", product: { name: "golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.x86_64", product_id: "golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.x86_64", }, }, { category: "product_version", name: "golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.x86_64", product: { name: "golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.x86_64", product_id: "golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.x86_64", }, }, { category: "product_version", name: "golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.x86_64", product: { name: "golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.x86_64", product_id: "golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.x86_64", }, }, { category: "product_version", name: "patterns-suma_proxy-4.1-150200.6.12.2.x86_64", product: { name: "patterns-suma_proxy-4.1-150200.6.12.2.x86_64", product_id: "patterns-suma_proxy-4.1-150200.6.12.2.x86_64", }, }, { category: "product_version", name: "patterns-suma_retail-4.1-150200.6.12.2.x86_64", product: { name: "patterns-suma_retail-4.1-150200.6.12.2.x86_64", product_id: "patterns-suma_retail-4.1-150200.6.12.2.x86_64", }, }, { category: "product_version", name: "patterns-suma_server-4.1-150200.6.12.2.x86_64", product: { name: "patterns-suma_server-4.1-150200.6.12.2.x86_64", product_id: "patterns-suma_server-4.1-150200.6.12.2.x86_64", }, }, { category: "product_version", name: "susemanager-4.1.36-150200.3.52.1.x86_64", product: { name: "susemanager-4.1.36-150200.3.52.1.x86_64", product_id: "susemanager-4.1.36-150200.3.52.1.x86_64", }, }, { category: "product_version", name: "susemanager-nodejs-sdk-devel-4.1.13-150200.3.24.3.x86_64", product: { name: "susemanager-nodejs-sdk-devel-4.1.13-150200.3.24.3.x86_64", product_id: "susemanager-nodejs-sdk-devel-4.1.13-150200.3.24.3.x86_64", }, }, { category: "product_version", name: "susemanager-tools-4.1.36-150200.3.52.1.x86_64", product: { name: "susemanager-tools-4.1.36-150200.3.52.1.x86_64", product_id: "susemanager-tools-4.1.36-150200.3.52.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Manager Server Module 4.1", product: { name: "SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1", product_identification_helper: { cpe: "cpe:/o:suse:sle-module-suse-manager-server:4.1", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.ppc64le as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.ppc64le", }, product_reference: "golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.ppc64le", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.s390x as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.s390x", }, product_reference: "golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.s390x", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.x86_64 as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.x86_64", }, product_reference: "golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.x86_64", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.ppc64le as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.ppc64le", }, product_reference: "golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.ppc64le", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.s390x as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.s390x", }, product_reference: "golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.s390x", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.x86_64 as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.x86_64", }, product_reference: "golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.x86_64", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.ppc64le as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.ppc64le", }, product_reference: "golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.ppc64le", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.s390x as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.s390x", }, product_reference: "golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.s390x", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.x86_64 as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.x86_64", }, product_reference: "golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.x86_64", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "patterns-suma_retail-4.1-150200.6.12.2.ppc64le as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.ppc64le", }, product_reference: "patterns-suma_retail-4.1-150200.6.12.2.ppc64le", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "patterns-suma_retail-4.1-150200.6.12.2.s390x as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.s390x", }, product_reference: "patterns-suma_retail-4.1-150200.6.12.2.s390x", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "patterns-suma_retail-4.1-150200.6.12.2.x86_64 as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.x86_64", }, product_reference: "patterns-suma_retail-4.1-150200.6.12.2.x86_64", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "patterns-suma_server-4.1-150200.6.12.2.ppc64le as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.ppc64le", }, product_reference: "patterns-suma_server-4.1-150200.6.12.2.ppc64le", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "patterns-suma_server-4.1-150200.6.12.2.s390x as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.s390x", }, product_reference: "patterns-suma_server-4.1-150200.6.12.2.s390x", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "patterns-suma_server-4.1-150200.6.12.2.x86_64 as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.x86_64", }, product_reference: "patterns-suma_server-4.1-150200.6.12.2.x86_64", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "postgresql-jdbc-42.2.10-150200.3.8.2.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:postgresql-jdbc-42.2.10-150200.3.8.2.noarch", }, product_reference: "postgresql-jdbc-42.2.10-150200.3.8.2.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "prometheus-exporters-formula-0.9.5-150200.3.31.2.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:prometheus-exporters-formula-0.9.5-150200.3.31.2.noarch", }, product_reference: "prometheus-exporters-formula-0.9.5-150200.3.31.2.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "prometheus-formula-0.3.7-150200.3.21.2.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:prometheus-formula-0.3.7-150200.3.21.2.noarch", }, product_reference: "prometheus-formula-0.3.7-150200.3.21.2.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "py27-compat-salt-3000.3-150200.6.24.2.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:py27-compat-salt-3000.3-150200.6.24.2.noarch", }, product_reference: "py27-compat-salt-3000.3-150200.6.24.2.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacecmd-4.1.18-150200.4.39.3.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacecmd-4.1.18-150200.4.39.3.noarch", }, product_reference: "spacecmd-4.1.18-150200.4.39.3.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-backend-4.1.31-150200.4.50.4.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-backend-4.1.31-150200.4.50.4.noarch", }, product_reference: "spacewalk-backend-4.1.31-150200.4.50.4.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-backend-app-4.1.31-150200.4.50.4.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-backend-app-4.1.31-150200.4.50.4.noarch", }, product_reference: "spacewalk-backend-app-4.1.31-150200.4.50.4.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-backend-applet-4.1.31-150200.4.50.4.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-backend-applet-4.1.31-150200.4.50.4.noarch", }, product_reference: "spacewalk-backend-applet-4.1.31-150200.4.50.4.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-backend-config-files-4.1.31-150200.4.50.4.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-4.1.31-150200.4.50.4.noarch", }, product_reference: "spacewalk-backend-config-files-4.1.31-150200.4.50.4.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-backend-config-files-common-4.1.31-150200.4.50.4.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-common-4.1.31-150200.4.50.4.noarch", }, product_reference: "spacewalk-backend-config-files-common-4.1.31-150200.4.50.4.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-backend-config-files-tool-4.1.31-150200.4.50.4.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-tool-4.1.31-150200.4.50.4.noarch", }, product_reference: "spacewalk-backend-config-files-tool-4.1.31-150200.4.50.4.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-backend-iss-4.1.31-150200.4.50.4.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-backend-iss-4.1.31-150200.4.50.4.noarch", }, product_reference: "spacewalk-backend-iss-4.1.31-150200.4.50.4.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-backend-iss-export-4.1.31-150200.4.50.4.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-backend-iss-export-4.1.31-150200.4.50.4.noarch", }, product_reference: "spacewalk-backend-iss-export-4.1.31-150200.4.50.4.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-backend-package-push-server-4.1.31-150200.4.50.4.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-backend-package-push-server-4.1.31-150200.4.50.4.noarch", }, product_reference: "spacewalk-backend-package-push-server-4.1.31-150200.4.50.4.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-backend-server-4.1.31-150200.4.50.4.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-backend-server-4.1.31-150200.4.50.4.noarch", }, product_reference: "spacewalk-backend-server-4.1.31-150200.4.50.4.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-backend-sql-4.1.31-150200.4.50.4.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-backend-sql-4.1.31-150200.4.50.4.noarch", }, product_reference: "spacewalk-backend-sql-4.1.31-150200.4.50.4.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-backend-sql-postgresql-4.1.31-150200.4.50.4.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-backend-sql-postgresql-4.1.31-150200.4.50.4.noarch", }, product_reference: "spacewalk-backend-sql-postgresql-4.1.31-150200.4.50.4.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-backend-tools-4.1.31-150200.4.50.4.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-backend-tools-4.1.31-150200.4.50.4.noarch", }, product_reference: "spacewalk-backend-tools-4.1.31-150200.4.50.4.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-backend-xml-export-libs-4.1.31-150200.4.50.4.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-backend-xml-export-libs-4.1.31-150200.4.50.4.noarch", }, product_reference: "spacewalk-backend-xml-export-libs-4.1.31-150200.4.50.4.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-backend-xmlrpc-4.1.31-150200.4.50.4.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-backend-xmlrpc-4.1.31-150200.4.50.4.noarch", }, product_reference: "spacewalk-backend-xmlrpc-4.1.31-150200.4.50.4.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-base-4.1.34-150200.3.47.6.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-base-4.1.34-150200.3.47.6.noarch", }, product_reference: "spacewalk-base-4.1.34-150200.3.47.6.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-base-minimal-4.1.34-150200.3.47.6.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-base-minimal-4.1.34-150200.3.47.6.noarch", }, product_reference: "spacewalk-base-minimal-4.1.34-150200.3.47.6.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-base-minimal-config-4.1.34-150200.3.47.6.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-base-minimal-config-4.1.34-150200.3.47.6.noarch", }, product_reference: "spacewalk-base-minimal-config-4.1.34-150200.3.47.6.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-html-4.1.34-150200.3.47.6.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-html-4.1.34-150200.3.47.6.noarch", }, product_reference: "spacewalk-html-4.1.34-150200.3.47.6.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-java-4.1.46-150200.3.71.5.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-java-4.1.46-150200.3.71.5.noarch", }, product_reference: "spacewalk-java-4.1.46-150200.3.71.5.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-java-config-4.1.46-150200.3.71.5.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-java-config-4.1.46-150200.3.71.5.noarch", }, product_reference: "spacewalk-java-config-4.1.46-150200.3.71.5.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-java-lib-4.1.46-150200.3.71.5.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-java-lib-4.1.46-150200.3.71.5.noarch", }, product_reference: "spacewalk-java-lib-4.1.46-150200.3.71.5.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-java-postgresql-4.1.46-150200.3.71.5.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-java-postgresql-4.1.46-150200.3.71.5.noarch", }, product_reference: "spacewalk-java-postgresql-4.1.46-150200.3.71.5.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-setup-4.1.11-150200.3.18.2.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-setup-4.1.11-150200.3.18.2.noarch", }, product_reference: "spacewalk-setup-4.1.11-150200.3.18.2.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-taskomatic-4.1.46-150200.3.71.5.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-taskomatic-4.1.46-150200.3.71.5.noarch", }, product_reference: "spacewalk-taskomatic-4.1.46-150200.3.71.5.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-utils-4.1.20-150200.3.30.2.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-utils-4.1.20-150200.3.30.2.noarch", }, product_reference: "spacewalk-utils-4.1.20-150200.3.30.2.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "spacewalk-utils-extras-4.1.20-150200.3.30.2.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:spacewalk-utils-extras-4.1.20-150200.3.30.2.noarch", }, product_reference: "spacewalk-utils-extras-4.1.20-150200.3.30.2.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "subscription-matcher-0.28-150200.3.15.2.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:subscription-matcher-0.28-150200.3.15.2.noarch", }, product_reference: "subscription-matcher-0.28-150200.3.15.2.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "susemanager-4.1.36-150200.3.52.1.ppc64le as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.ppc64le", }, product_reference: "susemanager-4.1.36-150200.3.52.1.ppc64le", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "susemanager-4.1.36-150200.3.52.1.s390x as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.s390x", }, product_reference: "susemanager-4.1.36-150200.3.52.1.s390x", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "susemanager-4.1.36-150200.3.52.1.x86_64 as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.x86_64", }, product_reference: "susemanager-4.1.36-150200.3.52.1.x86_64", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "susemanager-doc-indexes-4.1-150200.11.55.4.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:susemanager-doc-indexes-4.1-150200.11.55.4.noarch", }, product_reference: "susemanager-doc-indexes-4.1-150200.11.55.4.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "susemanager-docs_en-4.1-150200.11.55.2.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:susemanager-docs_en-4.1-150200.11.55.2.noarch", }, product_reference: "susemanager-docs_en-4.1-150200.11.55.2.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "susemanager-docs_en-pdf-4.1-150200.11.55.2.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:susemanager-docs_en-pdf-4.1-150200.11.55.2.noarch", }, product_reference: "susemanager-docs_en-pdf-4.1-150200.11.55.2.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "susemanager-schema-4.1.26-150200.3.45.4.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:susemanager-schema-4.1.26-150200.3.45.4.noarch", }, product_reference: "susemanager-schema-4.1.26-150200.3.45.4.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "susemanager-sls-4.1.36-150200.3.64.2.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:susemanager-sls-4.1.36-150200.3.64.2.noarch", }, product_reference: "susemanager-sls-4.1.36-150200.3.64.2.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "susemanager-tools-4.1.36-150200.3.52.1.ppc64le as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.ppc64le", }, product_reference: "susemanager-tools-4.1.36-150200.3.52.1.ppc64le", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "susemanager-tools-4.1.36-150200.3.52.1.s390x as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.s390x", }, product_reference: "susemanager-tools-4.1.36-150200.3.52.1.s390x", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "susemanager-tools-4.1.36-150200.3.52.1.x86_64 as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.x86_64", }, product_reference: "susemanager-tools-4.1.36-150200.3.52.1.x86_64", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "susemanager-web-libs-4.1.34-150200.3.47.6.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:susemanager-web-libs-4.1.34-150200.3.47.6.noarch", }, product_reference: "susemanager-web-libs-4.1.34-150200.3.47.6.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, { category: "default_component_of", full_product_name: { name: "uyuni-config-modules-4.1.36-150200.3.64.2.noarch as component of SUSE Manager Server Module 4.1", product_id: "SUSE Manager Server Module 4.1:uyuni-config-modules-4.1.36-150200.3.64.2.noarch", }, product_reference: "uyuni-config-modules-4.1.36-150200.3.64.2.noarch", relates_to_product_reference: "SUSE Manager Server Module 4.1", }, ], }, vulnerabilities: [ { cve: "CVE-2022-21698", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2022-21698", }, ], notes: [ { category: "general", text: "client_golang is the instrumentation library for Go applications in Prometheus, and the promhttp package in client_golang provides tooling around HTTP servers and clients. In client_golang prior to version 1.11.1, HTTP server is susceptible to a Denial of Service through unbounded cardinality, and potential memory exhaustion, when handling requests with non-standard HTTP methods. In order to be affected, an instrumented software must use any of `promhttp.InstrumentHandler*` middleware except `RequestsInFlight`; not filter any specific methods (e.g GET) before middleware; pass metric with `method` label name to our middleware; and not have any firewall/LB/proxy that filters away requests with unknown `method`. client_golang version 1.11.1 contains a patch for this issue. Several workarounds are available, including removing the `method` label name from counter/gauge used in the InstrumentHandler; turning off affected promhttp handlers; adding custom middleware before promhttp handler that will sanitize the request method given by Go http.Request; and using a reverse proxy or web application firewall, configured to only allow a limited set of methods.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.s390x", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.ppc64le", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.s390x", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:postgresql-jdbc-42.2.10-150200.3.8.2.noarch", "SUSE Manager Server Module 4.1:prometheus-exporters-formula-0.9.5-150200.3.31.2.noarch", "SUSE Manager Server Module 4.1:prometheus-formula-0.3.7-150200.3.21.2.noarch", "SUSE Manager Server Module 4.1:py27-compat-salt-3000.3-150200.6.24.2.noarch", "SUSE Manager Server Module 4.1:spacecmd-4.1.18-150200.4.39.3.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-app-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-applet-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-common-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-tool-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-export-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-package-push-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-postgresql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-tools-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xml-export-libs-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xmlrpc-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-config-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-html-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-config-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-lib-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-postgresql-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-setup-4.1.11-150200.3.18.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-taskomatic-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-extras-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:subscription-matcher-0.28-150200.3.15.2.noarch", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-doc-indexes-4.1-150200.11.55.4.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-pdf-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-schema-4.1.26-150200.3.45.4.noarch", "SUSE Manager Server Module 4.1:susemanager-sls-4.1.36-150200.3.64.2.noarch", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-web-libs-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:uyuni-config-modules-4.1.36-150200.3.64.2.noarch", ], }, references: [ { category: "external", summary: "CVE-2022-21698", url: "https://www.suse.com/security/cve/CVE-2022-21698", }, { category: "external", summary: "SUSE Bug 1196338 for CVE-2022-21698", url: "https://bugzilla.suse.com/1196338", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.s390x", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.ppc64le", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.s390x", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:postgresql-jdbc-42.2.10-150200.3.8.2.noarch", "SUSE Manager Server Module 4.1:prometheus-exporters-formula-0.9.5-150200.3.31.2.noarch", "SUSE Manager Server Module 4.1:prometheus-formula-0.3.7-150200.3.21.2.noarch", "SUSE Manager Server Module 4.1:py27-compat-salt-3000.3-150200.6.24.2.noarch", "SUSE Manager Server Module 4.1:spacecmd-4.1.18-150200.4.39.3.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-app-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-applet-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-common-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-tool-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-export-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-package-push-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-postgresql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-tools-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xml-export-libs-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xmlrpc-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-config-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-html-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-config-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-lib-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-postgresql-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-setup-4.1.11-150200.3.18.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-taskomatic-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-extras-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:subscription-matcher-0.28-150200.3.15.2.noarch", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-doc-indexes-4.1-150200.11.55.4.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-pdf-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-schema-4.1.26-150200.3.45.4.noarch", "SUSE Manager Server Module 4.1:susemanager-sls-4.1.36-150200.3.64.2.noarch", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-web-libs-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:uyuni-config-modules-4.1.36-150200.3.64.2.noarch", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.s390x", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.ppc64le", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.s390x", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:postgresql-jdbc-42.2.10-150200.3.8.2.noarch", "SUSE Manager Server Module 4.1:prometheus-exporters-formula-0.9.5-150200.3.31.2.noarch", "SUSE Manager Server Module 4.1:prometheus-formula-0.3.7-150200.3.21.2.noarch", "SUSE Manager Server Module 4.1:py27-compat-salt-3000.3-150200.6.24.2.noarch", "SUSE Manager Server Module 4.1:spacecmd-4.1.18-150200.4.39.3.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-app-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-applet-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-common-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-tool-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-export-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-package-push-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-postgresql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-tools-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xml-export-libs-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xmlrpc-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-config-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-html-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-config-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-lib-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-postgresql-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-setup-4.1.11-150200.3.18.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-taskomatic-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-extras-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:subscription-matcher-0.28-150200.3.15.2.noarch", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-doc-indexes-4.1-150200.11.55.4.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-pdf-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-schema-4.1.26-150200.3.45.4.noarch", "SUSE Manager Server Module 4.1:susemanager-sls-4.1.36-150200.3.64.2.noarch", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-web-libs-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:uyuni-config-modules-4.1.36-150200.3.64.2.noarch", ], }, ], threats: [ { category: "impact", date: "2022-06-20T14:12:59Z", details: "important", }, ], title: "CVE-2022-21698", }, { cve: "CVE-2022-21724", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2022-21724", }, ], notes: [ { category: "general", text: "pgjdbc is the offical PostgreSQL JDBC Driver. A security hole was found in the jdbc driver for postgresql database while doing security research. The system using the postgresql library will be attacked when attacker control the jdbc url or properties. pgjdbc instantiates plugin instances based on class names provided via `authenticationPluginClassName`, `sslhostnameverifier`, `socketFactory`, `sslfactory`, `sslpasswordcallback` connection properties. However, the driver did not verify if the class implements the expected interface before instantiating the class. This can lead to code execution loaded via arbitrary classes. Users using plugins are advised to upgrade. There are no known workarounds for this issue.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.s390x", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.ppc64le", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.s390x", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:postgresql-jdbc-42.2.10-150200.3.8.2.noarch", "SUSE Manager Server Module 4.1:prometheus-exporters-formula-0.9.5-150200.3.31.2.noarch", "SUSE Manager Server Module 4.1:prometheus-formula-0.3.7-150200.3.21.2.noarch", "SUSE Manager Server Module 4.1:py27-compat-salt-3000.3-150200.6.24.2.noarch", "SUSE Manager Server Module 4.1:spacecmd-4.1.18-150200.4.39.3.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-app-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-applet-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-common-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-tool-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-export-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-package-push-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-postgresql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-tools-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xml-export-libs-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xmlrpc-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-config-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-html-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-config-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-lib-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-postgresql-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-setup-4.1.11-150200.3.18.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-taskomatic-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-extras-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:subscription-matcher-0.28-150200.3.15.2.noarch", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-doc-indexes-4.1-150200.11.55.4.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-pdf-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-schema-4.1.26-150200.3.45.4.noarch", "SUSE Manager Server Module 4.1:susemanager-sls-4.1.36-150200.3.64.2.noarch", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-web-libs-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:uyuni-config-modules-4.1.36-150200.3.64.2.noarch", ], }, references: [ { category: "external", summary: "CVE-2022-21724", url: "https://www.suse.com/security/cve/CVE-2022-21724", }, { category: "external", summary: "SUSE Bug 1195561 for CVE-2022-21724", url: "https://bugzilla.suse.com/1195561", }, { category: "external", summary: "SUSE Bug 1204789 for CVE-2022-21724", url: "https://bugzilla.suse.com/1204789", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.s390x", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.ppc64le", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.s390x", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:postgresql-jdbc-42.2.10-150200.3.8.2.noarch", "SUSE Manager Server Module 4.1:prometheus-exporters-formula-0.9.5-150200.3.31.2.noarch", "SUSE Manager Server Module 4.1:prometheus-formula-0.3.7-150200.3.21.2.noarch", "SUSE Manager Server Module 4.1:py27-compat-salt-3000.3-150200.6.24.2.noarch", "SUSE Manager Server Module 4.1:spacecmd-4.1.18-150200.4.39.3.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-app-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-applet-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-common-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-tool-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-export-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-package-push-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-postgresql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-tools-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xml-export-libs-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xmlrpc-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-config-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-html-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-config-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-lib-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-postgresql-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-setup-4.1.11-150200.3.18.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-taskomatic-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-extras-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:subscription-matcher-0.28-150200.3.15.2.noarch", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-doc-indexes-4.1-150200.11.55.4.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-pdf-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-schema-4.1.26-150200.3.45.4.noarch", "SUSE Manager Server Module 4.1:susemanager-sls-4.1.36-150200.3.64.2.noarch", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-web-libs-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:uyuni-config-modules-4.1.36-150200.3.64.2.noarch", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", version: "3.1", }, products: [ "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.s390x", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.ppc64le", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.s390x", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:postgresql-jdbc-42.2.10-150200.3.8.2.noarch", "SUSE Manager Server Module 4.1:prometheus-exporters-formula-0.9.5-150200.3.31.2.noarch", "SUSE Manager Server Module 4.1:prometheus-formula-0.3.7-150200.3.21.2.noarch", "SUSE Manager Server Module 4.1:py27-compat-salt-3000.3-150200.6.24.2.noarch", "SUSE Manager Server Module 4.1:spacecmd-4.1.18-150200.4.39.3.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-app-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-applet-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-common-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-tool-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-export-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-package-push-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-postgresql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-tools-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xml-export-libs-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xmlrpc-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-config-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-html-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-config-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-lib-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-postgresql-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-setup-4.1.11-150200.3.18.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-taskomatic-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-extras-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:subscription-matcher-0.28-150200.3.15.2.noarch", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-doc-indexes-4.1-150200.11.55.4.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-pdf-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-schema-4.1.26-150200.3.45.4.noarch", "SUSE Manager Server Module 4.1:susemanager-sls-4.1.36-150200.3.64.2.noarch", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-web-libs-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:uyuni-config-modules-4.1.36-150200.3.64.2.noarch", ], }, ], threats: [ { category: "impact", date: "2022-06-20T14:12:59Z", details: "moderate", }, ], title: "CVE-2022-21724", }, { cve: "CVE-2022-21952", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2022-21952", }, ], notes: [ { category: "general", text: "A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to easily exhaust available disk resources leading to DoS. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37.\n\n", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.s390x", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.ppc64le", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.s390x", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:postgresql-jdbc-42.2.10-150200.3.8.2.noarch", "SUSE Manager Server Module 4.1:prometheus-exporters-formula-0.9.5-150200.3.31.2.noarch", "SUSE Manager Server Module 4.1:prometheus-formula-0.3.7-150200.3.21.2.noarch", "SUSE Manager Server Module 4.1:py27-compat-salt-3000.3-150200.6.24.2.noarch", "SUSE Manager Server Module 4.1:spacecmd-4.1.18-150200.4.39.3.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-app-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-applet-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-common-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-tool-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-export-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-package-push-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-postgresql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-tools-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xml-export-libs-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xmlrpc-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-config-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-html-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-config-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-lib-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-postgresql-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-setup-4.1.11-150200.3.18.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-taskomatic-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-extras-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:subscription-matcher-0.28-150200.3.15.2.noarch", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-doc-indexes-4.1-150200.11.55.4.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-pdf-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-schema-4.1.26-150200.3.45.4.noarch", "SUSE Manager Server Module 4.1:susemanager-sls-4.1.36-150200.3.64.2.noarch", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-web-libs-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:uyuni-config-modules-4.1.36-150200.3.64.2.noarch", ], }, references: [ { category: "external", summary: "CVE-2022-21952", url: "https://www.suse.com/security/cve/CVE-2022-21952", }, { category: "external", summary: "SUSE Bug 1199512 for CVE-2022-21952", url: "https://bugzilla.suse.com/1199512", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.s390x", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.ppc64le", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.s390x", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:postgresql-jdbc-42.2.10-150200.3.8.2.noarch", "SUSE Manager Server Module 4.1:prometheus-exporters-formula-0.9.5-150200.3.31.2.noarch", "SUSE Manager Server Module 4.1:prometheus-formula-0.3.7-150200.3.21.2.noarch", "SUSE Manager Server Module 4.1:py27-compat-salt-3000.3-150200.6.24.2.noarch", "SUSE Manager Server Module 4.1:spacecmd-4.1.18-150200.4.39.3.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-app-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-applet-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-common-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-tool-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-export-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-package-push-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-postgresql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-tools-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xml-export-libs-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xmlrpc-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-config-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-html-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-config-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-lib-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-postgresql-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-setup-4.1.11-150200.3.18.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-taskomatic-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-extras-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:subscription-matcher-0.28-150200.3.15.2.noarch", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-doc-indexes-4.1-150200.11.55.4.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-pdf-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-schema-4.1.26-150200.3.45.4.noarch", "SUSE Manager Server Module 4.1:susemanager-sls-4.1.36-150200.3.64.2.noarch", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-web-libs-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:uyuni-config-modules-4.1.36-150200.3.64.2.noarch", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.s390x", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.ppc64le", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.s390x", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:postgresql-jdbc-42.2.10-150200.3.8.2.noarch", "SUSE Manager Server Module 4.1:prometheus-exporters-formula-0.9.5-150200.3.31.2.noarch", "SUSE Manager Server Module 4.1:prometheus-formula-0.3.7-150200.3.21.2.noarch", "SUSE Manager Server Module 4.1:py27-compat-salt-3000.3-150200.6.24.2.noarch", "SUSE Manager Server Module 4.1:spacecmd-4.1.18-150200.4.39.3.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-app-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-applet-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-common-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-tool-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-export-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-package-push-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-postgresql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-tools-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xml-export-libs-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xmlrpc-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-config-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-html-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-config-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-lib-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-postgresql-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-setup-4.1.11-150200.3.18.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-taskomatic-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-extras-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:subscription-matcher-0.28-150200.3.15.2.noarch", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-doc-indexes-4.1-150200.11.55.4.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-pdf-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-schema-4.1.26-150200.3.45.4.noarch", "SUSE Manager Server Module 4.1:susemanager-sls-4.1.36-150200.3.64.2.noarch", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-web-libs-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:uyuni-config-modules-4.1.36-150200.3.64.2.noarch", ], }, ], threats: [ { category: "impact", date: "2022-06-20T14:12:59Z", details: "important", }, ], title: "CVE-2022-21952", }, { cve: "CVE-2022-26520", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2022-26520", }, ], notes: [ { category: "general", text: "** DISPUTED ** In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or properties) can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection properties. An example situation is that an attacker could create an executable JSP file under a Tomcat web root. NOTE: the vendor's position is that there is no pgjdbc vulnerability; instead, it is a vulnerability for any application to use the pgjdbc driver with untrusted connection properties.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.s390x", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.ppc64le", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.s390x", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:postgresql-jdbc-42.2.10-150200.3.8.2.noarch", "SUSE Manager Server Module 4.1:prometheus-exporters-formula-0.9.5-150200.3.31.2.noarch", "SUSE Manager Server Module 4.1:prometheus-formula-0.3.7-150200.3.21.2.noarch", "SUSE Manager Server Module 4.1:py27-compat-salt-3000.3-150200.6.24.2.noarch", "SUSE Manager Server Module 4.1:spacecmd-4.1.18-150200.4.39.3.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-app-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-applet-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-common-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-tool-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-export-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-package-push-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-postgresql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-tools-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xml-export-libs-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xmlrpc-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-config-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-html-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-config-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-lib-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-postgresql-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-setup-4.1.11-150200.3.18.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-taskomatic-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-extras-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:subscription-matcher-0.28-150200.3.15.2.noarch", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-doc-indexes-4.1-150200.11.55.4.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-pdf-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-schema-4.1.26-150200.3.45.4.noarch", "SUSE Manager Server Module 4.1:susemanager-sls-4.1.36-150200.3.64.2.noarch", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-web-libs-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:uyuni-config-modules-4.1.36-150200.3.64.2.noarch", ], }, references: [ { category: "external", summary: "CVE-2022-26520", url: "https://www.suse.com/security/cve/CVE-2022-26520", }, { category: "external", summary: "SUSE Bug 1197356 for CVE-2022-26520", url: "https://bugzilla.suse.com/1197356", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.s390x", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.ppc64le", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.s390x", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:postgresql-jdbc-42.2.10-150200.3.8.2.noarch", "SUSE Manager Server Module 4.1:prometheus-exporters-formula-0.9.5-150200.3.31.2.noarch", "SUSE Manager Server Module 4.1:prometheus-formula-0.3.7-150200.3.21.2.noarch", "SUSE Manager Server Module 4.1:py27-compat-salt-3000.3-150200.6.24.2.noarch", "SUSE Manager Server Module 4.1:spacecmd-4.1.18-150200.4.39.3.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-app-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-applet-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-common-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-tool-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-export-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-package-push-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-postgresql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-tools-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xml-export-libs-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xmlrpc-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-config-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-html-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-config-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-lib-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-postgresql-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-setup-4.1.11-150200.3.18.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-taskomatic-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-extras-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:subscription-matcher-0.28-150200.3.15.2.noarch", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-doc-indexes-4.1-150200.11.55.4.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-pdf-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-schema-4.1.26-150200.3.45.4.noarch", "SUSE Manager Server Module 4.1:susemanager-sls-4.1.36-150200.3.64.2.noarch", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-web-libs-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:uyuni-config-modules-4.1.36-150200.3.64.2.noarch", ], }, ], scores: [ { cvss_v3: { baseScore: 6.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", version: "3.1", }, products: [ "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.s390x", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.ppc64le", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.s390x", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:postgresql-jdbc-42.2.10-150200.3.8.2.noarch", "SUSE Manager Server Module 4.1:prometheus-exporters-formula-0.9.5-150200.3.31.2.noarch", "SUSE Manager Server Module 4.1:prometheus-formula-0.3.7-150200.3.21.2.noarch", "SUSE Manager Server Module 4.1:py27-compat-salt-3000.3-150200.6.24.2.noarch", "SUSE Manager Server Module 4.1:spacecmd-4.1.18-150200.4.39.3.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-app-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-applet-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-common-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-tool-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-export-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-package-push-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-postgresql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-tools-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xml-export-libs-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xmlrpc-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-config-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-html-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-config-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-lib-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-postgresql-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-setup-4.1.11-150200.3.18.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-taskomatic-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-extras-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:subscription-matcher-0.28-150200.3.15.2.noarch", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-doc-indexes-4.1-150200.11.55.4.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-pdf-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-schema-4.1.26-150200.3.45.4.noarch", "SUSE Manager Server Module 4.1:susemanager-sls-4.1.36-150200.3.64.2.noarch", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-web-libs-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:uyuni-config-modules-4.1.36-150200.3.64.2.noarch", ], }, ], threats: [ { category: "impact", date: "2022-06-20T14:12:59Z", details: "moderate", }, ], title: "CVE-2022-26520", }, { cve: "CVE-2022-31248", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2022-31248", }, ], notes: [ { category: "general", text: "A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to discover valid usernames. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46-1. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37-1.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.s390x", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.ppc64le", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.s390x", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:postgresql-jdbc-42.2.10-150200.3.8.2.noarch", "SUSE Manager Server Module 4.1:prometheus-exporters-formula-0.9.5-150200.3.31.2.noarch", "SUSE Manager Server Module 4.1:prometheus-formula-0.3.7-150200.3.21.2.noarch", "SUSE Manager Server Module 4.1:py27-compat-salt-3000.3-150200.6.24.2.noarch", "SUSE Manager Server Module 4.1:spacecmd-4.1.18-150200.4.39.3.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-app-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-applet-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-common-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-tool-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-export-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-package-push-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-postgresql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-tools-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xml-export-libs-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xmlrpc-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-config-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-html-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-config-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-lib-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-postgresql-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-setup-4.1.11-150200.3.18.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-taskomatic-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-extras-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:subscription-matcher-0.28-150200.3.15.2.noarch", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-doc-indexes-4.1-150200.11.55.4.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-pdf-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-schema-4.1.26-150200.3.45.4.noarch", "SUSE Manager Server Module 4.1:susemanager-sls-4.1.36-150200.3.64.2.noarch", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-web-libs-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:uyuni-config-modules-4.1.36-150200.3.64.2.noarch", ], }, references: [ { category: "external", summary: "CVE-2022-31248", url: "https://www.suse.com/security/cve/CVE-2022-31248", }, { category: "external", summary: "SUSE Bug 1199629 for CVE-2022-31248", url: "https://bugzilla.suse.com/1199629", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.s390x", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.ppc64le", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.s390x", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:postgresql-jdbc-42.2.10-150200.3.8.2.noarch", "SUSE Manager Server Module 4.1:prometheus-exporters-formula-0.9.5-150200.3.31.2.noarch", "SUSE Manager Server Module 4.1:prometheus-formula-0.3.7-150200.3.21.2.noarch", "SUSE Manager Server Module 4.1:py27-compat-salt-3000.3-150200.6.24.2.noarch", "SUSE Manager Server Module 4.1:spacecmd-4.1.18-150200.4.39.3.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-app-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-applet-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-common-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-tool-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-export-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-package-push-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-postgresql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-tools-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xml-export-libs-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xmlrpc-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-config-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-html-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-config-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-lib-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-postgresql-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-setup-4.1.11-150200.3.18.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-taskomatic-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-extras-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:subscription-matcher-0.28-150200.3.15.2.noarch", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-doc-indexes-4.1-150200.11.55.4.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-pdf-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-schema-4.1.26-150200.3.45.4.noarch", "SUSE Manager Server Module 4.1:susemanager-sls-4.1.36-150200.3.64.2.noarch", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-web-libs-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:uyuni-config-modules-4.1.36-150200.3.64.2.noarch", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", version: "3.1", }, products: [ "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:golang-github-QubitProducts-exporter_exporter-0.4.0-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.ppc64le", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.s390x", "SUSE Manager Server Module 4.1:golang-github-lusitaniae-apache_exporter-0.7.0-150200.2.6.2.x86_64", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.ppc64le", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.s390x", "SUSE Manager Server Module 4.1:golang-github-prometheus-node_exporter-1.3.0-150200.3.9.3.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_retail-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.ppc64le", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.s390x", "SUSE Manager Server Module 4.1:patterns-suma_server-4.1-150200.6.12.2.x86_64", "SUSE Manager Server Module 4.1:postgresql-jdbc-42.2.10-150200.3.8.2.noarch", "SUSE Manager Server Module 4.1:prometheus-exporters-formula-0.9.5-150200.3.31.2.noarch", "SUSE Manager Server Module 4.1:prometheus-formula-0.3.7-150200.3.21.2.noarch", "SUSE Manager Server Module 4.1:py27-compat-salt-3000.3-150200.6.24.2.noarch", "SUSE Manager Server Module 4.1:spacecmd-4.1.18-150200.4.39.3.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-app-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-applet-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-common-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-config-files-tool-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-iss-export-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-package-push-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-server-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-sql-postgresql-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-tools-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xml-export-libs-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-backend-xmlrpc-4.1.31-150200.4.50.4.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-base-minimal-config-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-html-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-config-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-lib-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-java-postgresql-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-setup-4.1.11-150200.3.18.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-taskomatic-4.1.46-150200.3.71.5.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:spacewalk-utils-extras-4.1.20-150200.3.30.2.noarch", "SUSE Manager Server Module 4.1:subscription-matcher-0.28-150200.3.15.2.noarch", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-doc-indexes-4.1-150200.11.55.4.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-docs_en-pdf-4.1-150200.11.55.2.noarch", "SUSE Manager Server Module 4.1:susemanager-schema-4.1.26-150200.3.45.4.noarch", "SUSE Manager Server Module 4.1:susemanager-sls-4.1.36-150200.3.64.2.noarch", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.ppc64le", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.s390x", "SUSE Manager Server Module 4.1:susemanager-tools-4.1.36-150200.3.52.1.x86_64", "SUSE Manager Server Module 4.1:susemanager-web-libs-4.1.34-150200.3.47.6.noarch", "SUSE Manager Server Module 4.1:uyuni-config-modules-4.1.36-150200.3.64.2.noarch", ], }, ], threats: [ { category: "impact", date: "2022-06-20T14:12:59Z", details: "moderate", }, ], title: "CVE-2022-31248", }, ], }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
Title of the comment
Description of the comment
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.