{"schemaVersion":3,"id":"SUSE-SU-2022:3747-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for SUSE Manager Client Tools\n\n\nThis update fixes the following issues:\n\ngolang-github-lusitaniae-apache_exporter:\n\n- Update to upstream release 0.11.0 (jsc#SLE-24791)\n  * Add TLS support\n  * Switch to logger, please check --log.level and --log.format flags\n- Update to version 0.10.1\n  * Bugfix: Reset ProxyBalancer metrics on each scrape to remove stale data\n- Update to version 0.10.0\n  * Add Apache Proxy and other metrics\n- Update to version 0.8.0\n  * Change commandline flags\n  * Add metrics: Apache version, request duration total\n- Adapted to build on Enterprise Linux 8\n- Require building with Go 1.15\n- Add %license macro for LICENSE file\n\ngolang-github-prometheus-alertmanager:\n\n- Do not include sources (bsc#1200725)\n\ngolang-github-prometheus-node_exporter:\n\n- CVE-2022-21698: Denial of service using InstrumentHandlerCounter. (bsc#1196338, jsc#SLE-24243, jsc#SUMA-114)\n\ngrafana:\n\n- Update to version 8.3.10\n  + Security:\n    * CVE-2022-31097: Cross Site Scripting vulnerability in the Unified Alerting (bsc#1201535)\n    * CVE-2022-31107: OAuth account takeover vulnerability (bsc#1201539)\n- Update to version 8.3.9\n  + Bug fixes:\n    * Geomap: Display legend\n    * Prometheus: Fix timestamp truncation\n- Update to version 8.3.7\n  + Bug fix:\n    * Provisioning: Ensure that the default value for orgID is set when provisioning datasources to be deleted.\n- Update to version 8.3.6\n  + Features and enhancements:\n    * Cloud Monitoring: Reduce request size when listing labels.\n    * Explore: Show scalar data result in a table instead of graph.\n    * Snapshots: Updates the default external snapshot server URL.\n    * Table: Makes footer not overlap table content.\n    * Tempo: Add request histogram to service graph datalink.\n    * Tempo: Add time range to tempo search query behind a feature flag.\n    * Tempo: Auto-clear results when changing query type.\n    * Tempo: Display start time in search results as relative time.\n    * CloudMonitoring: Fix resource labels in query editor.\n    * Cursor sync: Apply the settings without saving the dashboard.\n    * LibraryPanels: Fix for Error while cleaning library panels.\n    * Logs Panel: Fix timestamp parsing for string dates without timezone.\n    * Prometheus: Fix some of the alerting queries that use reduce/math operation.\n    * TablePanel: Fix ad-hoc variables not working on default datasources.\n    * Text Panel: Fix alignment of elements.\n    * Variables: Fix for constant variables in self referencing links.\n- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422, jsc#SLE-24565)\n\nkiwi-desc-saltboot:\n\n- Update to version 0.1.1661440542.6cbe0da\n  * Use standard susemanager.conf\n  * Use salt bundle\n  * Add support fo VirtIO disks\n\nmgr-daemon:\n\n- Version 4.3.6-1\n  * Update translation strings\n\nspacecmd:\n\n- Version 4.3.15-1\n  * Process date values in spacecmd api calls (bsc#1198903)\n\nspacewalk-client-tools:\n\n- Version 4.3.12-1\n  * Update translation strings\n\nuyuni-common-libs:\n\n- Version 4.3.6-1\n  * Do not allow creating path if nonexistent user or group in fileutils.","dates":{"published":"2022-10-26T08:40:53.000Z","modified":"2026-02-04T03:42:40.593Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"golang-github-lusitaniae-apache_exporter&distro=SUSE Manager Client Tools 12","name":"golang-github-lusitaniae-apache_exporter","label":"golang-github-lusitaniae-apache_exporter&distro=SUSE Manager Client Tools 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/golang-github-lusitaniae-apache_exporter&distro=SUSE Manager Client Tools 12","purlType":"rpm","versions":[{"text":"< 0.11.0-1.13.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.11.0-1.13.1","eol":null,"hubHref":null},{"vendor":"suse","product":"golang-github-prometheus-alertmanager&distro=SUSE Manager Client Tools 12","name":"golang-github-prometheus-alertmanager","label":"golang-github-prometheus-alertmanager&distro=SUSE Manager Client Tools 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/golang-github-prometheus-alertmanager&distro=SUSE Manager Client Tools 12","purlType":"rpm","versions":[{"text":"< 0.23.0-1.15.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.23.0-1.15.2","eol":null,"hubHref":null},{"vendor":"suse","product":"golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise Server 12 SP3-BCL","name":"golang-github-prometheus-node_exporter","label":"golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise Server 12 SP3-BCL","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise Server 12 SP3-BCL","purlType":"rpm","versions":[{"text":"< 1.3.0-1.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.0-1.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise Server 12 SP4-LTSS","name":"golang-github-prometheus-node_exporter","label":"golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise Server 12 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise Server 12 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 1.3.0-1.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.0-1.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise Server 12 SP5","name":"golang-github-prometheus-node_exporter","label":"golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise Server 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise Server 12 SP5","purlType":"rpm","versions":[{"text":"< 1.3.0-1.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.0-1.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","name":"golang-github-prometheus-node_exporter","label":"golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","purlType":"rpm","versions":[{"text":"< 1.3.0-1.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.0-1.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","name":"golang-github-prometheus-node_exporter","label":"golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","purlType":"rpm","versions":[{"text":"< 1.3.0-1.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.0-1.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"golang-github-prometheus-node_exporter&distro=SUSE Manager Client Tools 12","name":"golang-github-prometheus-node_exporter","label":"golang-github-prometheus-node_exporter&distro=SUSE Manager Client Tools 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE Manager Client Tools 12","purlType":"rpm","versions":[{"text":"< 1.3.0-1.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.0-1.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"golang-github-prometheus-node_exporter&distro=SUSE OpenStack Cloud 9","name":"golang-github-prometheus-node_exporter","label":"golang-github-prometheus-node_exporter&distro=SUSE OpenStack Cloud 9","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE OpenStack Cloud 9","purlType":"rpm","versions":[{"text":"< 1.3.0-1.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.0-1.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"golang-github-prometheus-node_exporter&distro=SUSE OpenStack Cloud Crowbar 9","name":"golang-github-prometheus-node_exporter","label":"golang-github-prometheus-node_exporter&distro=SUSE OpenStack Cloud Crowbar 9","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE OpenStack Cloud Crowbar 9","purlType":"rpm","versions":[{"text":"< 1.3.0-1.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.0-1.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grafana&distro=SUSE Manager Client Tools 12","name":"grafana","label":"grafana&distro=SUSE Manager Client Tools 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grafana&distro=SUSE Manager Client Tools 12","purlType":"rpm","versions":[{"text":"< 8.3.10-1.33.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.3.10-1.33.2","eol":null,"hubHref":null},{"vendor":"suse","product":"kiwi-desc-saltboot&distro=SUSE Manager Client Tools 12","name":"kiwi-desc-saltboot","label":"kiwi-desc-saltboot&distro=SUSE Manager Client Tools 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kiwi-desc-saltboot&distro=SUSE Manager Client Tools 12","purlType":"rpm","versions":[{"text":"< 0.1.1661440542.6cbe0da-1.29.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.1.1661440542.6cbe0da-1.29.1","eol":null,"hubHref":null},{"vendor":"suse","product":"mgr-daemon&distro=SUSE Manager Client Tools 12","name":"mgr-daemon","label":"mgr-daemon&distro=SUSE Manager Client Tools 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/mgr-daemon&distro=SUSE Manager Client Tools 12","purlType":"rpm","versions":[{"text":"< 4.3.6-1.38.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.6-1.38.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacecmd&distro=SUSE Manager Client Tools 12","name":"spacecmd","label":"spacecmd&distro=SUSE Manager Client Tools 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacecmd&distro=SUSE Manager Client Tools 12","purlType":"rpm","versions":[{"text":"< 4.3.15-38.109.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.15-38.109.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-client-tools&distro=SUSE Manager Client Tools 12","name":"spacewalk-client-tools","label":"spacewalk-client-tools&distro=SUSE Manager Client Tools 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-client-tools&distro=SUSE Manager Client Tools 12","purlType":"rpm","versions":[{"text":"< 4.3.12-52.77.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.12-52.77.1","eol":null,"hubHref":null},{"vendor":"suse","product":"uyuni-common-libs&distro=SUSE Manager Client Tools 12","name":"uyuni-common-libs","label":"uyuni-common-libs&distro=SUSE Manager Client Tools 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/uyuni-common-libs&distro=SUSE Manager Client Tools 12","purlType":"rpm","versions":[{"text":"< 4.3.6-1.27.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.6-1.27.1","eol":null,"hubHref":null}],"affectedCount":16,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223747-1/","label":"www.suse.com/support/update/announcement/2022/suse-su-20223747-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1196338","label":"bugzilla.suse.com/1196338","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1198903","label":"bugzilla.suse.com/1198903","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1200725","label":"bugzilla.suse.com/1200725","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1201535","label":"bugzilla.suse.com/1201535","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1201539","label":"bugzilla.suse.com/1201539","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21698","label":"www.suse.com/security/cve/CVE-2022-21698","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31097","label":"www.suse.com/security/cve/CVE-2022-31097","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31107","label":"www.suse.com/security/cve/CVE-2022-31107","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2022-21698","CVE-2022-31097","CVE-2022-31107"],"downstream":[],"duplicates":[],"related":["CVE-2022-21698","CVE-2022-31097","CVE-2022-31107"]},"timeline":[{"kind":"published","date":"2022-10-26T08:40:53.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:42:40.593Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T20:49:45.784Z","stale":false,"partial":false}}