Vulnerability from csaf_suse
Published
2022-12-13 07:33
Modified
2022-12-13 07:33
Summary
Security update for SUSE Manager Client Tools
Notes
Title of the patch
Security update for SUSE Manager Client Tools
Description of the patch
This update fixes the following issues:
dracut-saltboot:
- Update to version 0.1.1665997480.587fa10
* Add dependencies on xz and gzip to support compressed images
golang-github-boynux-squid_exporter:
- Exclude s390 architecture
- Enhanced to build on Enterprise Linux 8.
grafana:
- Version update from 8.3.10 to 8.5.13 (jsc#PED-2145)
- Security fixes:
* CVE-2022-36062: (bsc#1203596)
* CVE-2022-35957: (bsc#1203597)
* CVE-2022-31107: (bsc#1201539)
* CVE-2022-31097: (bsc#1201535)
* CVE-2022-29170: (bsc#1199810)
* CVE-2021-43813, CVE-2021-43815: (bsc#1193686)
* CVE-2021-43798: (bsc#1193492)
* CVE-2021-41244: (bsc#1192763)
* CVE-2021-41174: (bsc#1192383)
* CVE-2021-3711: (bsc#1189520)
* CVE-2021-36222: (bsc#1188571)
- Features and enhancements:
* AccessControl: Disable user remove and user update roles when they do not have the permissions
* AccessControl: Provisioning for teams
* Alerting: Add custom grouping to Alert Panel
* Alerting: Add safeguard for migrations that might cause dataloss
* Alerting: AlertingProxy to elevate permissions for request forwarded to data proxy when RBAC enabled
* Alerting: Grafana uses > instead of >= when checking the For duration
* Alerting: Move slow queries in the scheduler to another goroutine
* Alerting: Remove disabled flag for data source when migrating alerts
* Alerting: Show notification tab of legacy alerting only to editor
* Alerting: Update migration to migrate only alerts that belon to existing org\dashboard
* Alerting: Use expanded labels in dashboard annotations
* Alerting: Use time.Ticker instead of alerting.Ticker in ngalert
* Analytics: Add user id tracking to google analytics
* Angular: Add AngularJS plugin support deprecation plan to docs site
* API: Add usage stats preview endpoint
* API: Extract OpenAPI specification from source code using go-swagger
* Auth: implement auto_sign_up for auth.jwt
* Azure monitor Logs: Optimize data fetching in resource picker
* Azure Monitor Logs: Order subscriptions in resource picker by name
* Azure Monitor: Include datasource ref when interpolating variables.
* AzureMonitor: Add support for not equals and startsWith operators when creating Azure Metrics dimension filters.
* AzureMonitor: Do not quote variables when a custom 'All' variable option is used
* AzureMonitor: Filter list of resources by resourceType
* AzureMonitor: Update allowed namespaces
* BarChart: color by field, x time field, bar radius, label skipping
* Chore: Implement OpenTelemetry in Grafana
* Cloud Monitoring: Adds metric type to Metric drop down options
* CloudMonitor: Correctly encode default project response
* CloudWatch: Add all ElastiCache Redis Metrics
* CloudWatch: Add Data Lifecycle Manager metrics and dimension
* CloudWatch: Add Missing Elasticache Host-level metrics
* CloudWatch: Add multi-value template variable support for log group names in logs query builder
* CloudWatch: Add new AWS/ES metrics. #43034, @sunker
* Cloudwatch: Add support for AWS/PrivateLink* metrics and dimensions
* Cloudwatch: Add support for new AWS/RDS EBS* metrics
* Cloudwatch: Add syntax highlighting and autocomplete for 'Metric Search'
* Cloudwatch: Add template variable query function for listing log groups
* Configuration: Add ability to customize okta login button name and icon
* Elasticsearch: Add deprecation notice for < 7.10 versions.
* Explore: Support custom display label for exemplar links for Prometheus datasource
* Hotkeys: Make time range absolute/permanent
* InfluxDB: Use backend for influxDB by default via feature toggle
* Legend: Use correct unit for percent and count calculations
* Logs: Escape windows newline into single newline
* Loki: Add unpack to autocomplete suggestions
* Loki: Use millisecond steps in Grafana 8.5.x.
* Playlists: Enable sharing direct links to playlists
* Plugins: Allow using both Function and Class components for app plugins
* Plugins: Expose emotion/react to plugins to prevent load failures
* Plugins: Introduce HTTP 207 Multi Status response to api/ds/query
* Rendering: Add support for renderer token
* Setting: Support configuring feature toggles with bools instead of just passing an array
* SQLStore: Prevent concurrent migrations
* SSE: Add Mode to drop NaN/Inf/Null in Reduction operations
* Tempo: Switch out Select with AsyncSelect component to get loading state in Tempo Search
* TimeSeries: Add migration for Graph panel's transform series override
* TimeSeries: Add support for negative Y and constant transform
* TimeSeries: Preserve null/undefined values when performing negative y transform
* Traces: Filter by service/span name and operation in Tempo and Jaeger
* Transformations: Add 'JSON' field type to ConvertFieldTypeTransformer
* Transformations: Add an All Unique Values Reducer
* Transformers: avoid error when the ExtractFields source field is missing
- Breaking changes:
* For a data source query made via /api/ds/query:
+ If the DatasourceQueryMultiStatus feature is enabled and the data source response has an error set as part of the
DataResponse, the resulting HTTP status code is now '207 Multi Status' instead of '400 Bad gateway'
+ If the DatasourceQueryMultiStatus feature is not enabled and the data source response has an error set as part of
the DataResponse, the resulting HTTP status code is '400 BadRequest' (no breaking change)
* For a proxied request, e.g. Grafana's datasource or plugin proxy:
+ If the request is cancelled, e.g. from the browser/by the client, the HTTP status code is now '499 Client closed'
request instead of 502 Bad gateway If the request times out, e.g. takes longer time than allowed, the HTTP status
code is now '504 Gateway timeout' instead of '502 Bad gateway'.
+ The change in behavior is that negative-valued series are now stacked downwards from 0 (in their own stacks),
rather than downwards from the top of the positive stacks. We now automatically group stacks by Draw style, Line
interpolation, and Bar alignment, making it impossible to stack bars on top of lines, or smooth lines on top of
stepped lines
+ The meaning of the default data source has now changed from being a persisted property in a panel. Before when
you selected the default data source for a panel and later changed the default data source to another data source
it would change all panels who were configured to use the default data source. From now on the default data
source is just the default for new panels and changing the default will not impact any currently saved dashboards
+ The Tooltip component provided by @grafana/ui is no longer automatically interactive (that is you can hover onto
it and click a link or select text). It will from now on by default close automatically when you mouse out
from the trigger element. To make tooltips behave like before set the new interactive property to true.
- Deprecations:
* /api/tsdb/query API has been deprecated, please use /api/ds/query instead
* AngularJS plugin support is now in a deprecated state. The documentation site has an article with more details on why, when, and how
- Bug fixes:
* Alerting: Add contact points provisioning API
* Alerting: add field for custom slack endpoint
* Alerting: Add resolved count to notification title when both firing and resolved present
* Alerting: Alert rule should wait For duration when execution error state is Alerting
* Alerting: Allow disabling override timings for notification policies
* Alerting: Allow serving images from custom url path
* Alerting: Apply Custom Headers to datasource queries
* Alerting: Classic conditions can now display multiple values
* Alerting: correctly show all alerts in a folder
* Alerting: Display query from grafana-managed alert rules on /api/v1/rules
* Alerting: Do not overwrite existing alert rule condition
* Alerting: Enhance support for arbitrary group names in managed alerts
* Alerting: Fix access to alerts for viewer with editor permissions when RBAC is disabled
* Alerting: Fix anonymous access to alerting
* Alerting: Fix migrations by making send_alerts_to field nullable
* Alerting: Fix RBAC actions for notification policies
* Alerting: Fix use of > instead of >= when checking the For duration
* Alerting: Remove double quotes from matchers
* API: Include userId, orgId, uname in request logging middleware
* Auth: Guarantee consistency of signed SigV4 headers
* Azure Monitor : Adding json formatting of error messages in Panel Header Corner and Inspect Error Tab
* Azure Monitor: Add 2 more Curated Dashboards for VM Insights
* Azure Monitor: Bug Fix for incorrect variable cascading for template variables
* Azure Monitor: Fix space character encoding for metrics query link to Azure Portal
* Azure Monitor: Fixes broken log queries that use workspace
* Azure Monitor: Small bug fixes for Resource Picker
* AzureAd Oauth: Fix strictMode to reject users without an assigned role
* AzureMonitor: Fixes metric definition for Azure Storage queue/file/blob/table resources
* Cloudwatch : Fixed reseting metric name when changing namespace in Metric Query
* CloudWatch: Added missing MemoryDB Namespace metrics
* CloudWatch: Fix MetricName resetting on Namespace change.
* Cloudwatch: Fix template variables in variable queries.
* CloudWatch: Fix variable query tag migration
* CloudWatch: Handle new error codes for MetricInsights
* CloudWatch: List all metrics properly in SQL autocomplete
* CloudWatch: Prevent log groups from being removed on query change
* CloudWatch: Remove error message when using multi-valued template vars in region field
* CloudWatch: Run query on blur in logs query field
* CloudWatch: Use default http client from aws-sdk-go
* Dashboard: Fix dashboard update permission check
* Dashboard: Fixes random scrolling on time range change
* Dashboard: Template variables are now correctly persisted when clicking breadcrumb links
* DashboardExport: Fix exporting and importing dashboards where query data source ended up as incorrect
* DashboardPage: Remember scroll position when coming back panel edit / view panel
* Dashboards: Fixes repeating by row and no refresh
* Dashboards: Show changes in save dialog
* DataSource: Default data source is no longer a persisted state but just the default data source for new panels
* DataSourcePlugin API: Allow queries import when changing data source type
* Elasticsearch: Respect maxConcurrentShardRequests datasource setting
* Explore: Allow users to save Explore state to a new panel in a new dashboard
* Explore: Avoid locking timepicker when range is inverted.
* Explore: Fix closing split pane when logs panel is used
* Explore: Prevent direct access to explore if disabled via feature toggle
* Explore: Remove return to panel button
* FileUpload: clicking the Upload file button now opens their modal correctly
* Gauge: Fixes blank viz when data link exists and orientation was horizontal
* GrafanaUI: Fix color of links in error Tooltips in light theme
* Histogram Panel: Take decimal into consideration
* InfluxDB: Fixes invalid no data alerts. #48295, @yesoreyeram
* Instrumentation: Fix HTTP request instrumentation of authentication failures
* Instrumentation: Make backend plugin metrics endpoints available with optional authentication
* Instrumentation: Proxy status code correction and various improvements
* LibraryPanels: Fix library panels not connecting properly in imported dashboards
* LibraryPanels: Prevent long descriptions and names from obscuring the delete button
* Logger: Use specified format for file logger
* Logging: Introduce feature toggle to activate gokit/log format
* Logs: Handle missing fields in dataframes better
* Loki: Improve unpack parser handling
* ManageDashboards: Fix error when deleting all dashboards from folder view
* Middleware: Fix IPv6 host parsing in CSRF check
* Navigation: Prevent navbar briefly showing on login
* NewsPanel: Add support for Atom feeds. #45390, @kaydelaney
* OAuth: Fix parsing of ID token if header contains non-string value
* Panel Edit: Options search now works correctly when a logarithmic scale option is set
* Panel Edit: Visualization search now works correctly with special characters
* Plugins Catalog: Fix styling of hyperlinks
* Plugins: Add deprecation notice for /api/tsdb/query endpoint
* Plugins: Adding support for traceID field to accept variables
* Plugins: Ensure catching all appropriate 4xx api/ds/query scenarios
* Postgres: Return tables with hyphenated schemes
* PostgreSQL: __unixEpochGroup to support arithmetic expression as argument
* Profile/Help: Expose option to disable profile section and help menu
* Prometheus: Enable new visual query builder by default
* Provisioning: Fix duplicate validation when multiple organizations have been configured inserted
* RBAC: Fix Anonymous Editors missing dashboard controls
* RolePicker: Fix menu position on smaller screens
* SAML: Allow disabling of SAML signups
* Search: Sort results correctly when using postgres
* Security: Fixes minor code scanning security warnings in old vendored javascript libs
* Table panel: Fix horizontal scrolling when pagination is enabled
* Table panel: Show datalinks for cell display modes JSON View and Gauge derivates
* Table: Fix filter crashes table
* Table: New pagination option
* TablePanel: Add cell inspect option
* TablePanel: Do not prefix columns with frame name if multipleframes and override active
* TagsInput: Fix tags remove button accessibility issues
* Tempo / Trace Viewer: Support Span Links in Trace Viewer
* Tempo: Download span references in data inspector
* Tempo: Separate trace to logs and loki search datasource config
* TextPanel: Sanitize after markdown has been rendered to html
* TimeRange: Fixes updating time range from url and browser history
* TimeSeries: Fix detection & rendering of sparse datapoints
* Timeseries: Fix outside range stale state
* TimeSeries: Properly stack series with missing datapoints
* TimeSeries: Sort tooltip values based on raw values
* Tooltip: Fix links not legible in Tooltips when using light theme
* Tooltip: Sort decimals using standard numeric compare
* Trace View: Show number of child spans
* Transformations: Support escaped characters in key-value pair parsing
* Transforms: Labels to fields, fix label picker layout
* Variables: Ensure variables in query params are correctly recognised
* Variables: Fix crash when changing query variable datasource
* Variables: Fixes issue with data source variables not updating queries with variable
* Visualizations: Stack negative-valued series downwards
- Plugin development fixes:
* Card: Increase clickable area when meta items are present.
* ClipboardButton: Use a fallback when the Clipboard API is unavailable
* Loki: Fix operator description propup from being shortened.
* OAuth: Add setting to skip org assignment for external users
* Tooltips: Make tooltips non interactive by default
* Tracing: Add option to map tag names to log label names in trace to logs settings
prometheus-blackbox_exporter:
- Add requirement for go1.18 (bsc#1203599)
spacecmd:
- Version 4.3.16-1
* Fix dict_keys not supporting indexing in systems_setconfigchannelorger
* Improve Proxy FQDN hint message
* Added a warning message for traditional stack deprecation
* Stop always showing help for valid proxy_container_config calls
* Remove 'Undefined return code' from debug messages (bsc#1203283)
spacewalk-client-tools:
- Version 4.3.13-1
* Update translation strings
uyuni-proxy-systemd-services:
- Version 4.3.7-1
* Expose /etc/sysconfig/proxy variables to container services (bsc#1202945)
Patchnames
SUSE-2022-4437,SUSE-SLE-Manager-Tools-15-2022-4437,SUSE-SLE-Manager-Tools-For-Micro-5-2022-4437,SUSE-SLE-Module-SUSE-Manager-Proxy-4.2-2022-4437,SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2022-4437,openSUSE-SLE-15.3-2022-4437,openSUSE-SLE-15.4-2022-4437
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for SUSE Manager Client Tools", title: "Title of the patch", }, { category: "description", text: "This update fixes the following issues:\n\ndracut-saltboot:\n\n- Update to version 0.1.1665997480.587fa10\n * Add dependencies on xz and gzip to support compressed images\n\ngolang-github-boynux-squid_exporter:\n\n- Exclude s390 architecture\n- Enhanced to build on Enterprise Linux 8.\n\ngrafana:\n\n- Version update from 8.3.10 to 8.5.13 (jsc#PED-2145)\n- Security fixes:\n * CVE-2022-36062: (bsc#1203596)\n * CVE-2022-35957: (bsc#1203597)\n * CVE-2022-31107: (bsc#1201539)\n * CVE-2022-31097: (bsc#1201535)\n * CVE-2022-29170: (bsc#1199810)\n * CVE-2021-43813, CVE-2021-43815: (bsc#1193686)\n * CVE-2021-43798: (bsc#1193492)\n * CVE-2021-41244: (bsc#1192763)\n * CVE-2021-41174: (bsc#1192383)\n * CVE-2021-3711: (bsc#1189520)\n * CVE-2021-36222: (bsc#1188571)\n- Features and enhancements:\n * AccessControl: Disable user remove and user update roles when they do not have the permissions\n * AccessControl: Provisioning for teams\n * Alerting: Add custom grouping to Alert Panel\n * Alerting: Add safeguard for migrations that might cause dataloss\n * Alerting: AlertingProxy to elevate permissions for request forwarded to data proxy when RBAC enabled\n * Alerting: Grafana uses > instead of >= when checking the For duration\n * Alerting: Move slow queries in the scheduler to another goroutine\n * Alerting: Remove disabled flag for data source when migrating alerts\n * Alerting: Show notification tab of legacy alerting only to editor\n * Alerting: Update migration to migrate only alerts that belon to existing org\\dashboard\n * Alerting: Use expanded labels in dashboard annotations\n * Alerting: Use time.Ticker instead of alerting.Ticker in ngalert\n * Analytics: Add user id tracking to google analytics\n * Angular: Add AngularJS plugin support deprecation plan to docs site\n * API: Add usage stats preview endpoint\n * API: Extract OpenAPI specification from source code using go-swagger\n * Auth: implement auto_sign_up for auth.jwt\n * Azure monitor Logs: Optimize data fetching in resource picker\n * Azure Monitor Logs: Order subscriptions in resource picker by name\n * Azure Monitor: Include datasource ref when interpolating variables.\n * AzureMonitor: Add support for not equals and startsWith operators when creating Azure Metrics dimension filters.\n * AzureMonitor: Do not quote variables when a custom 'All' variable option is used\n * AzureMonitor: Filter list of resources by resourceType\n * AzureMonitor: Update allowed namespaces\n * BarChart: color by field, x time field, bar radius, label skipping\n * Chore: Implement OpenTelemetry in Grafana\n * Cloud Monitoring: Adds metric type to Metric drop down options\n * CloudMonitor: Correctly encode default project response\n * CloudWatch: Add all ElastiCache Redis Metrics\n * CloudWatch: Add Data Lifecycle Manager metrics and dimension\n * CloudWatch: Add Missing Elasticache Host-level metrics\n * CloudWatch: Add multi-value template variable support for log group names in logs query builder\n * CloudWatch: Add new AWS/ES metrics. #43034, @sunker\n * Cloudwatch: Add support for AWS/PrivateLink* metrics and dimensions\n * Cloudwatch: Add support for new AWS/RDS EBS* metrics\n * Cloudwatch: Add syntax highlighting and autocomplete for 'Metric Search'\n * Cloudwatch: Add template variable query function for listing log groups\n * Configuration: Add ability to customize okta login button name and icon\n * Elasticsearch: Add deprecation notice for < 7.10 versions.\n * Explore: Support custom display label for exemplar links for Prometheus datasource\n * Hotkeys: Make time range absolute/permanent\n * InfluxDB: Use backend for influxDB by default via feature toggle\n * Legend: Use correct unit for percent and count calculations\n * Logs: Escape windows newline into single newline\n * Loki: Add unpack to autocomplete suggestions\n * Loki: Use millisecond steps in Grafana 8.5.x.\n * Playlists: Enable sharing direct links to playlists\n * Plugins: Allow using both Function and Class components for app plugins\n * Plugins: Expose emotion/react to plugins to prevent load failures\n * Plugins: Introduce HTTP 207 Multi Status response to api/ds/query\n * Rendering: Add support for renderer token\n * Setting: Support configuring feature toggles with bools instead of just passing an array\n * SQLStore: Prevent concurrent migrations\n * SSE: Add Mode to drop NaN/Inf/Null in Reduction operations\n * Tempo: Switch out Select with AsyncSelect component to get loading state in Tempo Search\n * TimeSeries: Add migration for Graph panel's transform series override\n * TimeSeries: Add support for negative Y and constant transform\n * TimeSeries: Preserve null/undefined values when performing negative y transform\n * Traces: Filter by service/span name and operation in Tempo and Jaeger\n * Transformations: Add 'JSON' field type to ConvertFieldTypeTransformer\n * Transformations: Add an All Unique Values Reducer\n * Transformers: avoid error when the ExtractFields source field is missing\n- Breaking changes:\n * For a data source query made via /api/ds/query:\n + If the DatasourceQueryMultiStatus feature is enabled and the data source response has an error set as part of the\n DataResponse, the resulting HTTP status code is now '207 Multi Status' instead of '400 Bad gateway'\n + If the DatasourceQueryMultiStatus feature is not enabled and the data source response has an error set as part of\n the DataResponse, the resulting HTTP status code is '400 BadRequest' (no breaking change)\n * For a proxied request, e.g. Grafana's datasource or plugin proxy: \n + If the request is cancelled, e.g. from the browser/by the client, the HTTP status code is now '499 Client closed'\n request instead of 502 Bad gateway If the request times out, e.g. takes longer time than allowed, the HTTP status\n code is now '504 Gateway timeout' instead of '502 Bad gateway'.\n + The change in behavior is that negative-valued series are now stacked downwards from 0 (in their own stacks),\n rather than downwards from the top of the positive stacks. We now automatically group stacks by Draw style, Line\n interpolation, and Bar alignment, making it impossible to stack bars on top of lines, or smooth lines on top of\n stepped lines\n + The meaning of the default data source has now changed from being a persisted property in a panel. Before when\n you selected the default data source for a panel and later changed the default data source to another data source\n it would change all panels who were configured to use the default data source. From now on the default data\n source is just the default for new panels and changing the default will not impact any currently saved dashboards\n + The Tooltip component provided by @grafana/ui is no longer automatically interactive (that is you can hover onto\n it and click a link or select text). It will from now on by default close automatically when you mouse out\n from the trigger element. To make tooltips behave like before set the new interactive property to true.\n- Deprecations:\n * /api/tsdb/query API has been deprecated, please use /api/ds/query instead\n * AngularJS plugin support is now in a deprecated state. The documentation site has an article with more details on why, when, and how\n- Bug fixes:\n * Alerting: Add contact points provisioning API\n * Alerting: add field for custom slack endpoint\n * Alerting: Add resolved count to notification title when both firing and resolved present\n * Alerting: Alert rule should wait For duration when execution error state is Alerting\n * Alerting: Allow disabling override timings for notification policies\n * Alerting: Allow serving images from custom url path\n * Alerting: Apply Custom Headers to datasource queries\n * Alerting: Classic conditions can now display multiple values\n * Alerting: correctly show all alerts in a folder\n * Alerting: Display query from grafana-managed alert rules on /api/v1/rules\n * Alerting: Do not overwrite existing alert rule condition\n * Alerting: Enhance support for arbitrary group names in managed alerts\n * Alerting: Fix access to alerts for viewer with editor permissions when RBAC is disabled\n * Alerting: Fix anonymous access to alerting\n * Alerting: Fix migrations by making send_alerts_to field nullable\n * Alerting: Fix RBAC actions for notification policies\n * Alerting: Fix use of > instead of >= when checking the For duration\n * Alerting: Remove double quotes from matchers\n * API: Include userId, orgId, uname in request logging middleware\n * Auth: Guarantee consistency of signed SigV4 headers\n * Azure Monitor : Adding json formatting of error messages in Panel Header Corner and Inspect Error Tab\n * Azure Monitor: Add 2 more Curated Dashboards for VM Insights\n * Azure Monitor: Bug Fix for incorrect variable cascading for template variables\n * Azure Monitor: Fix space character encoding for metrics query link to Azure Portal\n * Azure Monitor: Fixes broken log queries that use workspace\n * Azure Monitor: Small bug fixes for Resource Picker\n * AzureAd Oauth: Fix strictMode to reject users without an assigned role\n * AzureMonitor: Fixes metric definition for Azure Storage queue/file/blob/table resources\n * Cloudwatch : Fixed reseting metric name when changing namespace in Metric Query\n * CloudWatch: Added missing MemoryDB Namespace metrics\n * CloudWatch: Fix MetricName resetting on Namespace change.\n * Cloudwatch: Fix template variables in variable queries.\n * CloudWatch: Fix variable query tag migration\n * CloudWatch: Handle new error codes for MetricInsights\n * CloudWatch: List all metrics properly in SQL autocomplete\n * CloudWatch: Prevent log groups from being removed on query change\n * CloudWatch: Remove error message when using multi-valued template vars in region field\n * CloudWatch: Run query on blur in logs query field\n * CloudWatch: Use default http client from aws-sdk-go\n * Dashboard: Fix dashboard update permission check\n * Dashboard: Fixes random scrolling on time range change\n * Dashboard: Template variables are now correctly persisted when clicking breadcrumb links\n * DashboardExport: Fix exporting and importing dashboards where query data source ended up as incorrect\n * DashboardPage: Remember scroll position when coming back panel edit / view panel\n * Dashboards: Fixes repeating by row and no refresh\n * Dashboards: Show changes in save dialog\n * DataSource: Default data source is no longer a persisted state but just the default data source for new panels\n * DataSourcePlugin API: Allow queries import when changing data source type\n * Elasticsearch: Respect maxConcurrentShardRequests datasource setting\n * Explore: Allow users to save Explore state to a new panel in a new dashboard\n * Explore: Avoid locking timepicker when range is inverted.\n * Explore: Fix closing split pane when logs panel is used\n * Explore: Prevent direct access to explore if disabled via feature toggle\n * Explore: Remove return to panel button\n * FileUpload: clicking the Upload file button now opens their modal correctly\n * Gauge: Fixes blank viz when data link exists and orientation was horizontal\n * GrafanaUI: Fix color of links in error Tooltips in light theme\n * Histogram Panel: Take decimal into consideration\n * InfluxDB: Fixes invalid no data alerts. #48295, @yesoreyeram\n * Instrumentation: Fix HTTP request instrumentation of authentication failures\n * Instrumentation: Make backend plugin metrics endpoints available with optional authentication\n * Instrumentation: Proxy status code correction and various improvements\n * LibraryPanels: Fix library panels not connecting properly in imported dashboards\n * LibraryPanels: Prevent long descriptions and names from obscuring the delete button\n * Logger: Use specified format for file logger\n * Logging: Introduce feature toggle to activate gokit/log format\n * Logs: Handle missing fields in dataframes better\n * Loki: Improve unpack parser handling\n * ManageDashboards: Fix error when deleting all dashboards from folder view\n * Middleware: Fix IPv6 host parsing in CSRF check\n * Navigation: Prevent navbar briefly showing on login\n * NewsPanel: Add support for Atom feeds. #45390, @kaydelaney\n * OAuth: Fix parsing of ID token if header contains non-string value\n * Panel Edit: Options search now works correctly when a logarithmic scale option is set\n * Panel Edit: Visualization search now works correctly with special characters\n * Plugins Catalog: Fix styling of hyperlinks\n * Plugins: Add deprecation notice for /api/tsdb/query endpoint\n * Plugins: Adding support for traceID field to accept variables\n * Plugins: Ensure catching all appropriate 4xx api/ds/query scenarios\n * Postgres: Return tables with hyphenated schemes\n * PostgreSQL: __unixEpochGroup to support arithmetic expression as argument\n * Profile/Help: Expose option to disable profile section and help menu\n * Prometheus: Enable new visual query builder by default\n * Provisioning: Fix duplicate validation when multiple organizations have been configured inserted\n * RBAC: Fix Anonymous Editors missing dashboard controls\n * RolePicker: Fix menu position on smaller screens\n * SAML: Allow disabling of SAML signups\n * Search: Sort results correctly when using postgres\n * Security: Fixes minor code scanning security warnings in old vendored javascript libs\n * Table panel: Fix horizontal scrolling when pagination is enabled\n * Table panel: Show datalinks for cell display modes JSON View and Gauge derivates\n * Table: Fix filter crashes table\n * Table: New pagination option\n * TablePanel: Add cell inspect option\n * TablePanel: Do not prefix columns with frame name if multipleframes and override active\n * TagsInput: Fix tags remove button accessibility issues\n * Tempo / Trace Viewer: Support Span Links in Trace Viewer\n * Tempo: Download span references in data inspector\n * Tempo: Separate trace to logs and loki search datasource config\n * TextPanel: Sanitize after markdown has been rendered to html\n * TimeRange: Fixes updating time range from url and browser history\n * TimeSeries: Fix detection & rendering of sparse datapoints\n * Timeseries: Fix outside range stale state\n * TimeSeries: Properly stack series with missing datapoints\n * TimeSeries: Sort tooltip values based on raw values\n * Tooltip: Fix links not legible in Tooltips when using light theme\n * Tooltip: Sort decimals using standard numeric compare\n * Trace View: Show number of child spans\n * Transformations: Support escaped characters in key-value pair parsing\n * Transforms: Labels to fields, fix label picker layout\n * Variables: Ensure variables in query params are correctly recognised\n * Variables: Fix crash when changing query variable datasource\n * Variables: Fixes issue with data source variables not updating queries with variable\n * Visualizations: Stack negative-valued series downwards\n- Plugin development fixes:\n * Card: Increase clickable area when meta items are present.\n * ClipboardButton: Use a fallback when the Clipboard API is unavailable\n * Loki: Fix operator description propup from being shortened.\n * OAuth: Add setting to skip org assignment for external users\n * Tooltips: Make tooltips non interactive by default\n * Tracing: Add option to map tag names to log label names in trace to logs settings\n\nprometheus-blackbox_exporter:\n\n- Add requirement for go1.18 (bsc#1203599)\n\nspacecmd:\n\n- Version 4.3.16-1\n * Fix dict_keys not supporting indexing in systems_setconfigchannelorger\n * Improve Proxy FQDN hint message\n * Added a warning message for traditional stack deprecation\n * Stop always showing help for valid proxy_container_config calls\n * Remove 'Undefined return code' from debug messages (bsc#1203283)\n\nspacewalk-client-tools:\n\n- Version 4.3.13-1\n * Update translation strings\n\nuyuni-proxy-systemd-services:\n\n- Version 4.3.7-1\n * Expose /etc/sysconfig/proxy variables to container services (bsc#1202945)\n\n", title: "Description of the patch", }, { category: "details", text: "SUSE-2022-4437,SUSE-SLE-Manager-Tools-15-2022-4437,SUSE-SLE-Manager-Tools-For-Micro-5-2022-4437,SUSE-SLE-Module-SUSE-Manager-Proxy-4.2-2022-4437,SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2022-4437,openSUSE-SLE-15.3-2022-4437,openSUSE-SLE-15.4-2022-4437", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_4437-1.json", }, { category: "self", summary: "URL for SUSE-SU-2022:4437-1", url: "https://www.suse.com/support/update/announcement/2022/suse-su-20224437-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2022:4437-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2022-December/013220.html", }, { category: "self", summary: "SUSE Bug 1188571", url: "https://bugzilla.suse.com/1188571", }, { category: "self", summary: "SUSE Bug 1189520", url: "https://bugzilla.suse.com/1189520", }, { category: "self", summary: "SUSE Bug 1192383", url: "https://bugzilla.suse.com/1192383", }, { category: "self", summary: "SUSE Bug 1192763", url: "https://bugzilla.suse.com/1192763", }, { category: "self", summary: "SUSE Bug 1193492", url: "https://bugzilla.suse.com/1193492", }, { category: "self", summary: "SUSE Bug 1193686", url: "https://bugzilla.suse.com/1193686", }, { category: "self", summary: "SUSE Bug 1199810", url: "https://bugzilla.suse.com/1199810", }, { category: "self", summary: "SUSE Bug 1201535", url: "https://bugzilla.suse.com/1201535", }, { category: "self", summary: "SUSE Bug 1201539", url: "https://bugzilla.suse.com/1201539", }, { category: "self", summary: "SUSE Bug 1202945", url: "https://bugzilla.suse.com/1202945", }, { category: "self", summary: "SUSE Bug 1203283", url: "https://bugzilla.suse.com/1203283", }, { category: "self", summary: "SUSE Bug 1203596", url: "https://bugzilla.suse.com/1203596", }, { category: "self", summary: "SUSE Bug 1203597", url: "https://bugzilla.suse.com/1203597", }, { category: "self", summary: "SUSE Bug 1203599", url: "https://bugzilla.suse.com/1203599", }, { category: "self", summary: "SUSE CVE CVE-2021-36222 page", url: "https://www.suse.com/security/cve/CVE-2021-36222/", }, { category: "self", summary: "SUSE CVE CVE-2021-3711 page", url: "https://www.suse.com/security/cve/CVE-2021-3711/", }, { category: "self", summary: "SUSE CVE CVE-2021-41174 page", url: "https://www.suse.com/security/cve/CVE-2021-41174/", }, { category: "self", summary: "SUSE CVE CVE-2021-41244 page", url: "https://www.suse.com/security/cve/CVE-2021-41244/", }, { category: "self", summary: "SUSE CVE CVE-2021-43798 page", url: "https://www.suse.com/security/cve/CVE-2021-43798/", }, { category: "self", summary: "SUSE CVE CVE-2021-43813 page", url: "https://www.suse.com/security/cve/CVE-2021-43813/", }, { category: "self", summary: "SUSE CVE CVE-2021-43815 page", url: "https://www.suse.com/security/cve/CVE-2021-43815/", }, { category: "self", summary: "SUSE CVE CVE-2022-29170 page", url: "https://www.suse.com/security/cve/CVE-2022-29170/", }, { category: "self", summary: "SUSE CVE CVE-2022-31097 page", url: "https://www.suse.com/security/cve/CVE-2022-31097/", }, { category: "self", summary: "SUSE CVE CVE-2022-31107 page", url: "https://www.suse.com/security/cve/CVE-2022-31107/", }, { category: "self", summary: "SUSE CVE CVE-2022-35957 page", url: "https://www.suse.com/security/cve/CVE-2022-35957/", }, { category: "self", summary: "SUSE CVE CVE-2022-36062 page", url: "https://www.suse.com/security/cve/CVE-2022-36062/", }, ], title: "Security update for SUSE Manager Client Tools", tracking: { current_release_date: "2022-12-13T07:33:38Z", generator: { date: "2022-12-13T07:33:38Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2022:4437-1", initial_release_date: "2022-12-13T07:33:38Z", revision_history: [ { date: "2022-12-13T07:33:38Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", product: { name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", product_id: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", }, }, { category: "product_version", name: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", product: { name: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", product_id: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", }, }, { category: "product_version", name: "grafana-8.5.13-150000.1.36.3.aarch64", product: { name: "grafana-8.5.13-150000.1.36.3.aarch64", product_id: "grafana-8.5.13-150000.1.36.3.aarch64", }, }, { category: "product_version", name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", product: { name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", product_id: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", }, }, { category: "product_version", name: "wire-0.5.0-150000.1.9.3.aarch64", product: { name: "wire-0.5.0-150000.1.9.3.aarch64", product_id: "wire-0.5.0-150000.1.9.3.aarch64", }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.i586", product: { name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.i586", product_id: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.i586", }, }, { category: "product_version", name: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.i586", product: { name: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.i586", product_id: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.i586", }, }, { category: "product_version", name: "grafana-8.5.13-150000.1.36.3.i586", product: { name: "grafana-8.5.13-150000.1.36.3.i586", product_id: "grafana-8.5.13-150000.1.36.3.i586", }, }, { category: "product_version", name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.i586", product: { name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.i586", product_id: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.i586", }, }, { category: "product_version", name: "wire-0.5.0-150000.1.9.3.i586", product: { name: "wire-0.5.0-150000.1.9.3.i586", product_id: "wire-0.5.0-150000.1.9.3.i586", }, }, ], category: "architecture", name: "i586", }, { branches: [ { category: "product_version", name: "dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", product: { name: "dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", product_id: "dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", }, }, { category: "product_version", name: "python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", product: { name: "python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", product_id: "python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", }, }, { category: "product_version", name: "python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", product: { name: "python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", product_id: "python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", }, }, { category: "product_version", name: "python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", product: { name: "python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", product_id: "python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", }, }, { category: "product_version", name: "spacecmd-4.3.16-150000.3.89.1.noarch", product: { name: "spacecmd-4.3.16-150000.3.89.1.noarch", product_id: "spacecmd-4.3.16-150000.3.89.1.noarch", }, }, { category: "product_version", name: "spacewalk-check-4.3.13-150000.3.71.3.noarch", product: { name: "spacewalk-check-4.3.13-150000.3.71.3.noarch", product_id: "spacewalk-check-4.3.13-150000.3.71.3.noarch", }, }, { category: "product_version", name: "spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", product: { name: "spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", product_id: "spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", }, }, { category: "product_version", name: "spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", product: { name: "spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", product_id: "spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", }, }, { category: "product_version", name: "uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", product: { name: "uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", product_id: "uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", }, }, ], category: "architecture", name: "noarch", }, { branches: [ { category: "product_version", name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", product: { name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", product_id: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", }, }, { category: "product_version", name: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", product: { name: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", product_id: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", }, }, { category: "product_version", name: "grafana-8.5.13-150000.1.36.3.ppc64le", product: { name: "grafana-8.5.13-150000.1.36.3.ppc64le", product_id: "grafana-8.5.13-150000.1.36.3.ppc64le", }, }, { category: "product_version", name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", product: { name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", product_id: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", }, }, { category: "product_version", name: "wire-0.5.0-150000.1.9.3.ppc64le", product: { name: "wire-0.5.0-150000.1.9.3.ppc64le", product_id: "wire-0.5.0-150000.1.9.3.ppc64le", }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", product: { name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", product_id: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", }, }, { category: "product_version", name: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", product: { name: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", product_id: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", }, }, { category: "product_version", name: "grafana-8.5.13-150000.1.36.3.s390x", product: { name: "grafana-8.5.13-150000.1.36.3.s390x", product_id: "grafana-8.5.13-150000.1.36.3.s390x", }, }, { category: "product_version", name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", product: { name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", product_id: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", }, }, { category: "product_version", name: "wire-0.5.0-150000.1.9.3.s390x", product: { name: "wire-0.5.0-150000.1.9.3.s390x", product_id: "wire-0.5.0-150000.1.9.3.s390x", }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", product: { name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", product_id: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", }, }, { category: "product_version", name: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", product: { name: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", product_id: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", }, }, { category: "product_version", name: "grafana-8.5.13-150000.1.36.3.x86_64", product: { name: "grafana-8.5.13-150000.1.36.3.x86_64", product_id: "grafana-8.5.13-150000.1.36.3.x86_64", }, }, { category: "product_version", name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", product: { name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", product_id: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", }, }, { category: "product_version", name: "wire-0.5.0-150000.1.9.3.x86_64", product: { name: "wire-0.5.0-150000.1.9.3.x86_64", product_id: "wire-0.5.0-150000.1.9.3.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Manager Client Tools 15", product: { name: "SUSE Manager Client Tools 15", product_id: "SUSE Manager Client Tools 15", }, }, { category: "product_name", name: "SUSE Manager Client Tools for SLE Micro 5", product: { name: "SUSE Manager Client Tools for SLE Micro 5", product_id: "SUSE Manager Client Tools for SLE Micro 5", product_identification_helper: { cpe: "cpe:/o:suse:sle-manager-tools-micro:5", }, }, }, { category: "product_name", name: "SUSE Manager Proxy Module 4.2", product: { name: "SUSE Manager Proxy Module 4.2", product_id: "SUSE Manager Proxy Module 4.2", product_identification_helper: { cpe: "cpe:/o:suse:sle-module-suse-manager-proxy:4.2", }, }, }, { category: "product_name", name: "SUSE Manager Proxy Module 4.3", product: { name: "SUSE Manager Proxy Module 4.3", product_id: "SUSE Manager Proxy Module 4.3", product_identification_helper: { cpe: "cpe:/o:suse:sle-module-suse-manager-proxy:4.3", }, }, }, { category: "product_name", name: "openSUSE Leap 15.3", product: { name: "openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3", product_identification_helper: { cpe: "cpe:/o:opensuse:leap:15.3", }, }, }, { category: "product_name", name: "openSUSE Leap 15.4", product: { name: "openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4", product_identification_helper: { cpe: "cpe:/o:opensuse:leap:15.4", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch as component of SUSE Manager Client Tools 15", product_id: "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", }, product_reference: "dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", relates_to_product_reference: "SUSE Manager Client Tools 15", }, { category: "default_component_of", full_product_name: { name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64 as component of SUSE Manager Client Tools 15", product_id: "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", }, product_reference: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", relates_to_product_reference: "SUSE Manager Client Tools 15", }, { category: "default_component_of", full_product_name: { name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le as component of SUSE Manager Client Tools 15", product_id: "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", }, product_reference: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", relates_to_product_reference: "SUSE Manager Client Tools 15", }, { category: "default_component_of", full_product_name: { name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x as component of SUSE Manager Client Tools 15", product_id: "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", }, product_reference: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", relates_to_product_reference: "SUSE Manager Client Tools 15", }, { category: "default_component_of", full_product_name: { name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64 as component of SUSE Manager Client Tools 15", product_id: "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", }, product_reference: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", relates_to_product_reference: "SUSE Manager Client Tools 15", }, { category: "default_component_of", full_product_name: { name: "grafana-8.5.13-150000.1.36.3.aarch64 as component of SUSE Manager Client Tools 15", product_id: "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", }, product_reference: "grafana-8.5.13-150000.1.36.3.aarch64", relates_to_product_reference: "SUSE Manager Client Tools 15", }, { category: "default_component_of", full_product_name: { name: "grafana-8.5.13-150000.1.36.3.ppc64le as component of SUSE Manager Client Tools 15", product_id: "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", }, product_reference: "grafana-8.5.13-150000.1.36.3.ppc64le", relates_to_product_reference: "SUSE Manager Client Tools 15", }, { category: "default_component_of", full_product_name: { name: "grafana-8.5.13-150000.1.36.3.s390x as component of SUSE Manager Client Tools 15", product_id: "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", }, product_reference: "grafana-8.5.13-150000.1.36.3.s390x", relates_to_product_reference: "SUSE Manager Client Tools 15", }, { category: "default_component_of", full_product_name: { name: "grafana-8.5.13-150000.1.36.3.x86_64 as component of SUSE Manager Client Tools 15", product_id: "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", }, product_reference: "grafana-8.5.13-150000.1.36.3.x86_64", relates_to_product_reference: "SUSE Manager Client Tools 15", }, { category: "default_component_of", full_product_name: { name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64 as component of SUSE Manager Client Tools 15", product_id: "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", }, product_reference: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", relates_to_product_reference: "SUSE Manager Client Tools 15", }, { category: "default_component_of", full_product_name: { name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le as component of SUSE Manager Client Tools 15", product_id: "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", }, product_reference: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", relates_to_product_reference: "SUSE Manager Client Tools 15", }, { category: "default_component_of", full_product_name: { name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x as component of SUSE Manager Client Tools 15", product_id: "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", }, product_reference: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", relates_to_product_reference: "SUSE Manager Client Tools 15", }, { category: "default_component_of", full_product_name: { name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64 as component of SUSE Manager Client Tools 15", product_id: "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", }, product_reference: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", relates_to_product_reference: "SUSE Manager Client Tools 15", }, { category: "default_component_of", full_product_name: { name: "python3-spacewalk-check-4.3.13-150000.3.71.3.noarch as component of SUSE Manager Client Tools 15", product_id: "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", }, product_reference: "python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", relates_to_product_reference: "SUSE Manager Client Tools 15", }, { category: "default_component_of", full_product_name: { name: "python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch as component of SUSE Manager Client Tools 15", product_id: "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", }, product_reference: "python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", relates_to_product_reference: "SUSE Manager Client Tools 15", }, { category: "default_component_of", full_product_name: { name: "python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch as component of SUSE Manager Client Tools 15", product_id: "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", }, product_reference: "python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", relates_to_product_reference: "SUSE Manager Client Tools 15", }, { category: "default_component_of", full_product_name: { name: "spacecmd-4.3.16-150000.3.89.1.noarch as component of SUSE Manager Client Tools 15", product_id: "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", }, product_reference: "spacecmd-4.3.16-150000.3.89.1.noarch", relates_to_product_reference: "SUSE Manager Client Tools 15", }, { category: "default_component_of", full_product_name: { name: "spacewalk-check-4.3.13-150000.3.71.3.noarch as component of SUSE Manager Client Tools 15", product_id: "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", }, product_reference: "spacewalk-check-4.3.13-150000.3.71.3.noarch", relates_to_product_reference: "SUSE Manager Client Tools 15", }, { category: "default_component_of", full_product_name: { name: "spacewalk-client-setup-4.3.13-150000.3.71.3.noarch as component of SUSE Manager Client Tools 15", product_id: "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", }, product_reference: "spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", relates_to_product_reference: "SUSE Manager Client Tools 15", }, { category: "default_component_of", full_product_name: { name: "spacewalk-client-tools-4.3.13-150000.3.71.3.noarch as component of SUSE Manager Client Tools 15", product_id: "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", }, product_reference: "spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", relates_to_product_reference: "SUSE Manager Client Tools 15", }, { category: "default_component_of", full_product_name: { name: "uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch as component of SUSE Manager Client Tools 15", product_id: "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", }, product_reference: "uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", relates_to_product_reference: "SUSE Manager Client Tools 15", }, { category: "default_component_of", full_product_name: { name: "dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch as component of SUSE Manager Client Tools for SLE Micro 5", product_id: "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", }, product_reference: "dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", relates_to_product_reference: "SUSE Manager Client Tools for SLE Micro 5", }, { category: "default_component_of", full_product_name: { name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64 as component of SUSE Manager Client Tools for SLE Micro 5", product_id: "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", }, product_reference: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", relates_to_product_reference: "SUSE Manager Client Tools for SLE Micro 5", }, { category: "default_component_of", full_product_name: { name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x as component of SUSE Manager Client Tools for SLE Micro 5", product_id: "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", }, product_reference: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", relates_to_product_reference: "SUSE Manager Client Tools for SLE Micro 5", }, { category: "default_component_of", full_product_name: { name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64 as component of SUSE Manager Client Tools for SLE Micro 5", product_id: "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", }, product_reference: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", relates_to_product_reference: "SUSE Manager Client Tools for SLE Micro 5", }, { category: "default_component_of", full_product_name: { name: "uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch as component of SUSE Manager Client Tools for SLE Micro 5", product_id: "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", }, product_reference: "uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", relates_to_product_reference: "SUSE Manager Client Tools for SLE Micro 5", }, { category: "default_component_of", full_product_name: { name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64 as component of SUSE Manager Proxy Module 4.2", product_id: "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", }, product_reference: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", relates_to_product_reference: "SUSE Manager Proxy Module 4.2", }, { category: "default_component_of", full_product_name: { name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le as component of SUSE Manager Proxy Module 4.2", product_id: "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", }, product_reference: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", relates_to_product_reference: "SUSE Manager Proxy Module 4.2", }, { category: "default_component_of", full_product_name: { name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x as component of SUSE Manager Proxy Module 4.2", product_id: "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", }, product_reference: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", relates_to_product_reference: "SUSE Manager Proxy Module 4.2", }, { category: "default_component_of", full_product_name: { name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64 as component of SUSE Manager Proxy Module 4.2", product_id: "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", }, product_reference: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", relates_to_product_reference: "SUSE Manager Proxy Module 4.2", }, { category: "default_component_of", full_product_name: { name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64 as component of SUSE Manager Proxy Module 4.2", product_id: "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", }, product_reference: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", relates_to_product_reference: "SUSE Manager Proxy Module 4.2", }, { category: "default_component_of", full_product_name: { name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le as component of SUSE Manager Proxy Module 4.2", product_id: "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", }, product_reference: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", relates_to_product_reference: "SUSE Manager Proxy Module 4.2", }, { category: "default_component_of", full_product_name: { name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x as component of SUSE Manager Proxy Module 4.2", product_id: "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", }, product_reference: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", relates_to_product_reference: "SUSE Manager Proxy Module 4.2", }, { category: "default_component_of", full_product_name: { name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64 as component of SUSE Manager Proxy Module 4.2", product_id: "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", }, product_reference: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", relates_to_product_reference: "SUSE Manager Proxy Module 4.2", }, { category: "default_component_of", full_product_name: { name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64 as component of SUSE Manager Proxy Module 4.3", product_id: "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", }, product_reference: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", relates_to_product_reference: "SUSE Manager Proxy Module 4.3", }, { category: "default_component_of", full_product_name: { name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le as component of SUSE Manager Proxy Module 4.3", product_id: "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", }, product_reference: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", relates_to_product_reference: "SUSE Manager Proxy Module 4.3", }, { category: "default_component_of", full_product_name: { name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x as component of SUSE Manager Proxy Module 4.3", product_id: "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", }, product_reference: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", relates_to_product_reference: "SUSE Manager Proxy Module 4.3", }, { category: "default_component_of", full_product_name: { name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64 as component of SUSE Manager Proxy Module 4.3", product_id: "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", }, product_reference: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", relates_to_product_reference: "SUSE Manager Proxy Module 4.3", }, { category: "default_component_of", full_product_name: { name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64 as component of SUSE Manager Proxy Module 4.3", product_id: "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", }, product_reference: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", relates_to_product_reference: "SUSE Manager Proxy Module 4.3", }, { category: "default_component_of", full_product_name: { name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le as component of SUSE Manager Proxy Module 4.3", product_id: "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", }, product_reference: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", relates_to_product_reference: "SUSE Manager Proxy Module 4.3", }, { category: "default_component_of", full_product_name: { name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x as component of SUSE Manager Proxy Module 4.3", product_id: "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", }, product_reference: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", relates_to_product_reference: "SUSE Manager Proxy Module 4.3", }, { category: "default_component_of", full_product_name: { name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64 as component of SUSE Manager Proxy Module 4.3", product_id: "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", }, product_reference: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", relates_to_product_reference: "SUSE Manager Proxy Module 4.3", }, { category: "default_component_of", full_product_name: { name: "dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", }, product_reference: "dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64 as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", }, product_reference: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", }, product_reference: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", }, product_reference: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64 as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", }, product_reference: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64 as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", }, product_reference: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", }, product_reference: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", }, product_reference: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64 as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", }, product_reference: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "spacecmd-4.3.16-150000.3.89.1.noarch as component of openSUSE Leap 15.3", product_id: "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", }, product_reference: "spacecmd-4.3.16-150000.3.89.1.noarch", relates_to_product_reference: "openSUSE Leap 15.3", }, { category: "default_component_of", full_product_name: { name: "dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", }, product_reference: "dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64 as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", }, product_reference: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", }, product_reference: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", }, product_reference: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64 as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", }, product_reference: "golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64 as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", }, product_reference: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", }, product_reference: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", }, product_reference: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64 as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", }, product_reference: "golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64 as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", }, product_reference: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", }, product_reference: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", }, product_reference: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64 as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", }, product_reference: "prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "spacecmd-4.3.16-150000.3.89.1.noarch as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", }, product_reference: "spacecmd-4.3.16-150000.3.89.1.noarch", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "wire-0.5.0-150000.1.9.3.aarch64 as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", }, product_reference: "wire-0.5.0-150000.1.9.3.aarch64", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "wire-0.5.0-150000.1.9.3.ppc64le as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", }, product_reference: "wire-0.5.0-150000.1.9.3.ppc64le", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "wire-0.5.0-150000.1.9.3.s390x as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", }, product_reference: "wire-0.5.0-150000.1.9.3.s390x", relates_to_product_reference: "openSUSE Leap 15.4", }, { category: "default_component_of", full_product_name: { name: "wire-0.5.0-150000.1.9.3.x86_64 as component of openSUSE Leap 15.4", product_id: "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", }, product_reference: "wire-0.5.0-150000.1.9.3.x86_64", relates_to_product_reference: "openSUSE Leap 15.4", }, ], }, vulnerabilities: [ { cve: "CVE-2021-36222", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2021-36222", }, ], notes: [ { category: "general", text: "ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, references: [ { category: "external", summary: "CVE-2021-36222", url: "https://www.suse.com/security/cve/CVE-2021-36222", }, { category: "external", summary: "SUSE Bug 1188571 for CVE-2021-36222", url: "https://bugzilla.suse.com/1188571", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, ], threats: [ { category: "impact", date: "2022-12-13T07:33:38Z", details: "important", }, ], title: "CVE-2021-36222", }, { cve: "CVE-2021-3711", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2021-3711", }, ], notes: [ { category: "general", text: "In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the \"out\" parameter can be NULL and, on exit, the \"outlen\" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the \"out\" parameter. A bug in the implementation of the SM2 decryption code means that the calculation of the buffer size required to hold the plaintext returned by the first call to EVP_PKEY_decrypt() can be smaller than the actual size required by the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is called by the application a second time with a buffer that is too small. A malicious attacker who is able present SM2 content for decryption to an application could cause attacker chosen data to overflow the buffer by up to a maximum of 62 bytes altering the contents of other data held after the buffer, possibly changing application behaviour or causing the application to crash. The location of the buffer is application dependent but is typically heap allocated. Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k).", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, references: [ { category: "external", summary: "CVE-2021-3711", url: "https://www.suse.com/security/cve/CVE-2021-3711", }, { category: "external", summary: "SUSE Bug 1189520 for CVE-2021-3711", url: "https://bugzilla.suse.com/1189520", }, { category: "external", summary: "SUSE Bug 1190129 for CVE-2021-3711", url: "https://bugzilla.suse.com/1190129", }, { category: "external", summary: "SUSE Bug 1192100 for CVE-2021-3711", url: "https://bugzilla.suse.com/1192100", }, { category: "external", summary: "SUSE Bug 1205663 for CVE-2021-3711", url: "https://bugzilla.suse.com/1205663", }, { category: "external", summary: "SUSE Bug 1225628 for CVE-2021-3711", url: "https://bugzilla.suse.com/1225628", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, ], threats: [ { category: "impact", date: "2022-12-13T07:33:38Z", details: "critical", }, ], title: "CVE-2021-3711", }, { cve: "CVE-2021-41174", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2021-41174", }, ], notes: [ { category: "general", text: "Grafana is an open-source platform for monitoring and observability. In affected versions if an attacker is able to convince a victim to visit a URL referencing a vulnerable page, arbitrary JavaScript content may be executed within the context of the victim's browser. The user visiting the malicious link must be unauthenticated and the link must be for a page that contains the login button in the menu bar. The url has to be crafted to exploit AngularJS rendering and contain the interpolation binding for AngularJS expressions. AngularJS uses double curly braces for interpolation binding: {{ }} ex: {{constructor.constructor('alert(1)')()}}. When the user follows the link and the page renders, the login button will contain the original link with a query parameter to force a redirect to the login page. The URL is not validated and the AngularJS rendering engine will execute the JavaScript expression contained in the URL. Users are advised to upgrade as soon as possible. If for some reason you cannot upgrade, you can use a reverse proxy or similar to block access to block the literal string {{ in the path.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, references: [ { category: "external", summary: "CVE-2021-41174", url: "https://www.suse.com/security/cve/CVE-2021-41174", }, { category: "external", summary: "SUSE Bug 1192383 for CVE-2021-41174", url: "https://bugzilla.suse.com/1192383", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:N", version: "3.1", }, products: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, ], threats: [ { category: "impact", date: "2022-12-13T07:33:38Z", details: "moderate", }, ], title: "CVE-2021-41174", }, { cve: "CVE-2021-41244", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2021-41244", }, ], notes: [ { category: "general", text: "Grafana is an open-source platform for monitoring and observability. In affected versions when the fine-grained access control beta feature is enabled and there is more than one organization in the Grafana instance admins are able to access users from other organizations. Grafana 8.0 introduced a mechanism which allowed users with the Organization Admin role to list, add, remove, and update users' roles in other organizations in which they are not an admin. With fine-grained access control enabled, organization admins can list, add, remove and update users' roles in another organization, where they do not have organization admin role. All installations between v8.0 and v8.2.3 that have fine-grained access control beta enabled and more than one organization should be upgraded as soon as possible. If you cannot upgrade, you should turn off the fine-grained access control using a feature flag.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, references: [ { category: "external", summary: "CVE-2021-41244", url: "https://www.suse.com/security/cve/CVE-2021-41244", }, { category: "external", summary: "SUSE Bug 1192763 for CVE-2021-41244", url: "https://bugzilla.suse.com/1192763", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.1, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, ], threats: [ { category: "impact", date: "2022-12-13T07:33:38Z", details: "critical", }, ], title: "CVE-2021-41244", }, { cve: "CVE-2021-43798", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2021-43798", }, ], notes: [ { category: "general", text: "Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url>/public/plugins//`, where is the plugin ID for any installed plugin. At no time has Grafana Cloud been vulnerable. Users are advised to upgrade to patched versions 8.0.7, 8.1.8, 8.2.7, or 8.3.1. The GitHub Security Advisory contains more information about vulnerable URL paths, mitigation, and the disclosure timeline.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, references: [ { category: "external", summary: "CVE-2021-43798", url: "https://www.suse.com/security/cve/CVE-2021-43798", }, { category: "external", summary: "SUSE Bug 1193492 for CVE-2021-43798", url: "https://bugzilla.suse.com/1193492", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", version: "3.1", }, products: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, ], threats: [ { category: "impact", date: "2022-12-13T07:33:38Z", details: "important", }, ], title: "CVE-2021-43798", }, { cve: "CVE-2021-43813", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2021-43813", }, ], notes: [ { category: "general", text: "Grafana is an open-source platform for monitoring and observability. Grafana prior to versions 8.3.2 and 7.5.12 contains a directory traversal vulnerability for fully lowercase or fully uppercase .md files. The vulnerability is limited in scope, and only allows access to files with the extension .md to authenticated users only. Grafana Cloud instances have not been affected by the vulnerability. Users should upgrade to patched versions 8.3.2 or 7.5.12. For users who cannot upgrade, running a reverse proxy in front of Grafana that normalizes the PATH of the request will mitigate the vulnerability. The proxy will have to also be able to handle url encoded paths. Alternatively, for fully lowercase or fully uppercase .md files, users can block /api/plugins/.*/markdown/.* without losing any functionality beyond inlined plugin help text.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, references: [ { category: "external", summary: "CVE-2021-43813", url: "https://www.suse.com/security/cve/CVE-2021-43813", }, { category: "external", summary: "SUSE Bug 1193686 for CVE-2021-43813", url: "https://bugzilla.suse.com/1193686", }, { category: "external", summary: "SUSE Bug 1193688 for CVE-2021-43813", url: "https://bugzilla.suse.com/1193688", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", version: "3.1", }, products: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, ], threats: [ { category: "impact", date: "2022-12-13T07:33:38Z", details: "moderate", }, ], title: "CVE-2021-43813", }, { cve: "CVE-2021-43815", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2021-43815", }, ], notes: [ { category: "general", text: "Grafana is an open-source platform for monitoring and observability. Grafana prior to versions 8.3.2 and 7.5.12 has a directory traversal for arbitrary .csv files. It only affects instances that have the developer testing tool called TestData DB data source enabled and configured. The vulnerability is limited in scope, and only allows access to files with the extension .csv to authenticated users only. Grafana Cloud instances have not been affected by the vulnerability. Versions 8.3.2 and 7.5.12 contain a patch for this issue. There is a workaround available for users who cannot upgrade. Running a reverse proxy in front of Grafana that normalizes the PATH of the request will mitigate the vulnerability. The proxy will have to also be able to handle url encoded paths.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, references: [ { category: "external", summary: "CVE-2021-43815", url: "https://www.suse.com/security/cve/CVE-2021-43815", }, { category: "external", summary: "SUSE Bug 1193686 for CVE-2021-43815", url: "https://bugzilla.suse.com/1193686", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", version: "3.1", }, products: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, ], threats: [ { category: "impact", date: "2022-12-13T07:33:38Z", details: "moderate", }, ], title: "CVE-2021-43815", }, { cve: "CVE-2022-29170", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2022-29170", }, ], notes: [ { category: "general", text: "Grafana is an open-source platform for monitoring and observability. In Grafana Enterprise, the Request security feature allows list allows to configure Grafana in a way so that the instance doesn't call or only calls specific hosts. The vulnerability present starting with version 7.4.0-beta1 and prior to versions 7.5.16 and 8.5.3 allows someone to bypass these security configurations if a malicious datasource (running on an allowed host) returns an HTTP redirect to a forbidden host. The vulnerability only impacts Grafana Enterprise when the Request security allow list is used and there is a possibility to add a custom datasource to Grafana which returns HTTP redirects. In this scenario, Grafana would blindly follow the redirects and potentially give secure information to the clients. Grafana Cloud is not impacted by this vulnerability. Versions 7.5.16 and 8.5.3 contain a patch for this issue. There are currently no known workarounds.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, references: [ { category: "external", summary: "CVE-2022-29170", url: "https://www.suse.com/security/cve/CVE-2022-29170", }, { category: "external", summary: "SUSE Bug 1199810 for CVE-2022-29170", url: "https://bugzilla.suse.com/1199810", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.6, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:L", version: "3.1", }, products: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, ], threats: [ { category: "impact", date: "2022-12-13T07:33:38Z", details: "moderate", }, ], title: "CVE-2022-29170", }, { cve: "CVE-2022-31097", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2022-31097", }, ], notes: [ { category: "general", text: "Grafana is an open-source platform for monitoring and observability. Versions on the 8.x and 9.x branch prior to 9.0.3, 8.5.9, 8.4.10, and 8.3.10 are vulnerable to stored cross-site scripting via the Unified Alerting feature of Grafana. An attacker can exploit this vulnerability to escalate privilege from editor to admin by tricking an authenticated admin to click on a link. Versions 9.0.3, 8.5.9, 8.4.10, and 8.3.10 contain a patch. As a workaround, it is possible to disable alerting or use legacy alerting.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, references: [ { category: "external", summary: "CVE-2022-31097", url: "https://www.suse.com/security/cve/CVE-2022-31097", }, { category: "external", summary: "SUSE Bug 1201535 for CVE-2022-31097", url: "https://bugzilla.suse.com/1201535", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.3, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N", version: "3.1", }, products: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, ], threats: [ { category: "impact", date: "2022-12-13T07:33:38Z", details: "important", }, ], title: "CVE-2022-31097", }, { cve: "CVE-2022-31107", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2022-31107", }, ], notes: [ { category: "general", text: "Grafana is an open-source platform for monitoring and observability. In versions 5.3 until 9.0.3, 8.5.9, 8.4.10, and 8.3.10, it is possible for a malicious user who has authorization to log into a Grafana instance via a configured OAuth IdP which provides a login name to take over the account of another user in that Grafana instance. This can occur when the malicious user is authorized to log in to Grafana via OAuth, the malicious user's external user id is not already associated with an account in Grafana, the malicious user's email address is not already associated with an account in Grafana, and the malicious user knows the Grafana username of the target user. If these conditions are met, the malicious user can set their username in the OAuth provider to that of the target user, then go through the OAuth flow to log in to Grafana. Due to the way that external and internal user accounts are linked together during login, if the conditions above are all met then the malicious user will be able to log in to the target user's Grafana account. Versions 9.0.3, 8.5.9, 8.4.10, and 8.3.10 contain a patch for this issue. As a workaround, concerned users can disable OAuth login to their Grafana instance, or ensure that all users authorized to log in via OAuth have a corresponding user account in Grafana linked to their email address.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, references: [ { category: "external", summary: "CVE-2022-31107", url: "https://www.suse.com/security/cve/CVE-2022-31107", }, { category: "external", summary: "SUSE Bug 1201539 for CVE-2022-31107", url: "https://bugzilla.suse.com/1201539", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.1, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L", version: "3.1", }, products: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, ], threats: [ { category: "impact", date: "2022-12-13T07:33:38Z", details: "important", }, ], title: "CVE-2022-31107", }, { cve: "CVE-2022-35957", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2022-35957", }, ], notes: [ { category: "general", text: "Grafana is an open-source platform for monitoring and observability. Versions prior to 9.1.6 and 8.5.13 are vulnerable to an escalation from admin to server admin when auth proxy is used, allowing an admin to take over the server admin account and gain full control of the grafana instance. All installations should be upgraded as soon as possible. As a workaround deactivate auth proxy following the instructions at: https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-authentication/auth-proxy/", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, references: [ { category: "external", summary: "CVE-2022-35957", url: "https://www.suse.com/security/cve/CVE-2022-35957", }, { category: "external", summary: "SUSE Bug 1203597 for CVE-2022-35957", url: "https://bugzilla.suse.com/1203597", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.6, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, ], threats: [ { category: "impact", date: "2022-12-13T07:33:38Z", details: "moderate", }, ], title: "CVE-2022-35957", }, { cve: "CVE-2022-36062", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2022-36062", }, ], notes: [ { category: "general", text: "Grafana is an open-source platform for monitoring and observability. In versions prior to 8.5.13, 9.0.9, and 9.1.6, Grafana is subject to Improper Preservation of Permissions resulting in privilege escalation on some folders where Admin is the only used permission. The vulnerability impacts Grafana instances where RBAC was disabled and enabled afterwards, as the migrations which are translating legacy folder permissions to RBAC permissions do not account for the scenario where the only user permission in the folder is Admin, as a result RBAC adds permissions for Editors and Viewers which allow them to edit and view folders accordingly. This issue has been patched in versions 8.5.13, 9.0.9, and 9.1.6. A workaround when the impacted folder/dashboard is known is to remove the additional permissions manually.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, references: [ { category: "external", summary: "CVE-2022-36062", url: "https://www.suse.com/security/cve/CVE-2022-36062", }, { category: "external", summary: "SUSE Bug 1203596 for CVE-2022-36062", url: "https://bugzilla.suse.com/1203596", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.4, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L", version: "3.1", }, products: [ "SUSE Manager Client Tools 15:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Client Tools 15:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.aarch64", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.ppc64le", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.s390x", "SUSE Manager Client Tools 15:grafana-8.5.13-150000.1.36.3.x86_64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacecmd-4.3.16-150000.3.89.1.noarch", "SUSE Manager Client Tools 15:spacewalk-check-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.13-150000.3.71.3.noarch", "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.7-150000.1.9.3.noarch", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.2:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.2:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "SUSE Manager Proxy Module 4.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.3:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.3:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.3:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.3:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:dracut-saltboot-0.1.1665997480.587fa10-150000.1.41.1.noarch", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.aarch64", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.s390x", "openSUSE Leap 15.4:golang-github-boynux-squid_exporter-1.6-150000.1.9.1.x86_64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.aarch64", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.ppc64le", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.s390x", "openSUSE Leap 15.4:golang-github-prometheus-promu-0.13.0-150000.3.9.1.x86_64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.aarch64", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.ppc64le", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.s390x", "openSUSE Leap 15.4:prometheus-blackbox_exporter-0.19.0-150000.1.14.3.x86_64", "openSUSE Leap 15.4:spacecmd-4.3.16-150000.3.89.1.noarch", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.aarch64", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.ppc64le", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.s390x", "openSUSE Leap 15.4:wire-0.5.0-150000.1.9.3.x86_64", ], }, ], threats: [ { category: "impact", date: "2022-12-13T07:33:38Z", details: "moderate", }, ], title: "CVE-2022-36062", }, ], }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
Title of the comment
Description of the comment
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.