{"schemaVersion":3,"id":"SUSE-SU-2022:3751-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for SUSE Manager Client Tools\n\n\nThis update fixes the following issues:\n\ndracut-saltboot:\n\n- Update to version 0.1.1661440542.6cbe0da\n  * Use standard susemanager.conf\n  * Move image services to dracut-saltboot package\n  * Use salt bundle\n\ngolang-github-lusitaniae-apache_exporter:\n\n- Update to upstream release 0.11.0 (jsc#SLE-24791)\n  * Add TLS support\n  * Switch to logger, please check --log.level and --log.format\n    flags\n- Update to version 0.10.1\n  * Bugfix: Reset ProxyBalancer metrics on each scrape to\n    remove stale data\n- Update to version 0.10.0\n  * Add Apache Proxy and other metrics\n- Update to version 0.8.0\n  * Change commandline flags\n  * Add metrics: Apache version, request duration total\n- Adapted to build on Enterprise Linux 8\n- Require building with Go 1.15\n- Add %license macro for LICENSE file\n\ngrafana:\n\n- Update to version 8.3.10\n  + Security:\n    * CVE-2022-31097: Cross Site Scripting vulnerability in the Unified Alerting (bsc#1201535)\n    * CVE-2022-31107: Fixes OAuth account takeover vulnerability (bsc#1201539)\n- Update to version 8.3.9\n  + Bug fixes:\n    * Geomap: Display legend\n    * Prometheus: Fix timestamp truncation\n- Update to version 8.3.7\n  + Bug fix:\n    * Provisioning: Ensure that the default value for orgID is set\n      when provisioning datasources to be deleted.\n- Update to version 8.3.6\n  + Features and enhancements:\n    * Cloud Monitoring: Reduce request size when listing labels.\n    * Explore: Show scalar data result in a table instead of graph.\n    * Snapshots: Updates the default external snapshot server URL.\n    * Table: Makes footer not overlap table content.\n    * Tempo: Add request histogram to service graph datalink.\n    * Tempo: Add time range to tempo search query behind a feature flag.\n    * Tempo: Auto-clear results when changing query type.\n    * Tempo: Display start time in search results as relative time.\n    * CloudMonitoring: Fix resource labels in query editor.\n    * Cursor sync: Apply the settings without saving the dashboard.\n    * LibraryPanels: Fix for Error while cleaning library panels.\n    * Logs Panel: Fix timestamp parsing for string dates without timezone.\n    * Prometheus: Fix some of the alerting queries that use reduce/math operation.\n    * TablePanel: Fix ad-hoc variables not working on default datasources.\n    * Text Panel: Fix alignment of elements.\n    * Variables: Fix for constant variables in self referencing links.\n- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422, jsc#SLE-24565)\n\nmgr-daemon:\n\n- Version 4.3.6-1\n  * Update translation strings\n\nspacecmd:\n\n- Version 4.3.15-1\n  * Process date values in spacecmd api calls (bsc#1198903)\n\nspacewalk-client-tools:\n\n- Version 4.3.12-1\n  * Update translation strings\n\nuyuni-common-libs:\n\n- Version 4.3.6-1\n  * Do not allow creating path if nonexistent user or group in fileutils.","dates":{"published":"2022-10-26T08:48:09.000Z","modified":"2026-02-04T03:01:36.550Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"opensuse","product":"dracut-saltboot&distro=openSUSE Leap 15.3","name":"dracut-saltboot","label":"dracut-saltboot&distro=openSUSE Leap 15.3","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/dracut-saltboot&distro=openSUSE Leap 15.3","purlType":"rpm","versions":[{"text":"< 0.1.1661440542.6cbe0da-150000.1.38.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.1.1661440542.6cbe0da-150000.1.38.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"dracut-saltboot&distro=openSUSE Leap 15.4","name":"dracut-saltboot","label":"dracut-saltboot&distro=openSUSE Leap 15.4","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/dracut-saltboot&distro=openSUSE Leap 15.4","purlType":"rpm","versions":[{"text":"< 0.1.1661440542.6cbe0da-150000.1.38.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.1.1661440542.6cbe0da-150000.1.38.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"golang-github-lusitaniae-apache_exporter&distro=openSUSE Leap 15.3","name":"golang-github-lusitaniae-apache_exporter","label":"golang-github-lusitaniae-apache_exporter&distro=openSUSE Leap 15.3","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/golang-github-lusitaniae-apache_exporter&distro=openSUSE Leap 15.3","purlType":"rpm","versions":[{"text":"< 0.11.0-150000.1.12.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.11.0-150000.1.12.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"golang-github-lusitaniae-apache_exporter&distro=openSUSE Leap 15.4","name":"golang-github-lusitaniae-apache_exporter","label":"golang-github-lusitaniae-apache_exporter&distro=openSUSE Leap 15.4","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/golang-github-lusitaniae-apache_exporter&distro=openSUSE Leap 15.4","purlType":"rpm","versions":[{"text":"< 0.11.0-150000.1.12.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.11.0-150000.1.12.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"spacecmd&distro=openSUSE Leap 15.3","name":"spacecmd","label":"spacecmd&distro=openSUSE Leap 15.3","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/spacecmd&distro=openSUSE Leap 15.3","purlType":"rpm","versions":[{"text":"< 4.3.15-150000.3.86.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.15-150000.3.86.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"spacecmd&distro=openSUSE Leap 15.4","name":"spacecmd","label":"spacecmd&distro=openSUSE Leap 15.4","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/spacecmd&distro=openSUSE Leap 15.4","purlType":"rpm","versions":[{"text":"< 4.3.15-150000.3.86.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.15-150000.3.86.1","eol":null,"hubHref":null},{"vendor":"suse","product":"dracut-saltboot&distro=SUSE Manager Client Tools 15","name":"dracut-saltboot","label":"dracut-saltboot&distro=SUSE Manager Client Tools 15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/dracut-saltboot&distro=SUSE Manager Client Tools 15","purlType":"rpm","versions":[{"text":"< 0.1.1661440542.6cbe0da-150000.1.38.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.1.1661440542.6cbe0da-150000.1.38.1","eol":null,"hubHref":null},{"vendor":"suse","product":"golang-github-lusitaniae-apache_exporter&distro=SUSE Manager Client Tools 15","name":"golang-github-lusitaniae-apache_exporter","label":"golang-github-lusitaniae-apache_exporter&distro=SUSE Manager Client Tools 15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/golang-github-lusitaniae-apache_exporter&distro=SUSE Manager Client Tools 15","purlType":"rpm","versions":[{"text":"< 0.11.0-150000.1.12.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.11.0-150000.1.12.1","eol":null,"hubHref":null},{"vendor":"suse","product":"golang-github-lusitaniae-apache_exporter&distro=SUSE Manager Proxy Module 4.2","name":"golang-github-lusitaniae-apache_exporter","label":"golang-github-lusitaniae-apache_exporter&distro=SUSE Manager Proxy Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/golang-github-lusitaniae-apache_exporter&distro=SUSE Manager Proxy Module 4.2","purlType":"rpm","versions":[{"text":"< 0.11.0-150000.1.12.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.11.0-150000.1.12.1","eol":null,"hubHref":null},{"vendor":"suse","product":"golang-github-lusitaniae-apache_exporter&distro=SUSE Manager Proxy Module 4.3","name":"golang-github-lusitaniae-apache_exporter","label":"golang-github-lusitaniae-apache_exporter&distro=SUSE Manager Proxy Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/golang-github-lusitaniae-apache_exporter&distro=SUSE Manager Proxy Module 4.3","purlType":"rpm","versions":[{"text":"< 0.11.0-150000.1.12.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.11.0-150000.1.12.1","eol":null,"hubHref":null},{"vendor":"suse","product":"golang-github-lusitaniae-apache_exporter&distro=SUSE Manager Server Module 4.2","name":"golang-github-lusitaniae-apache_exporter","label":"golang-github-lusitaniae-apache_exporter&distro=SUSE Manager Server Module 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/golang-github-lusitaniae-apache_exporter&distro=SUSE Manager Server Module 4.2","purlType":"rpm","versions":[{"text":"< 0.11.0-150000.1.12.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.11.0-150000.1.12.1","eol":null,"hubHref":null},{"vendor":"suse","product":"golang-github-lusitaniae-apache_exporter&distro=SUSE Manager Server Module 4.3","name":"golang-github-lusitaniae-apache_exporter","label":"golang-github-lusitaniae-apache_exporter&distro=SUSE Manager Server Module 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/golang-github-lusitaniae-apache_exporter&distro=SUSE Manager Server Module 4.3","purlType":"rpm","versions":[{"text":"< 0.11.0-150000.1.12.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.11.0-150000.1.12.1","eol":null,"hubHref":null},{"vendor":"suse","product":"golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS","name":"golang-github-prometheus-node_exporter","label":"golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS","purlType":"rpm","versions":[{"text":"< 1.3.0-150000.3.18.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.0-150000.3.18.1","eol":null,"hubHref":null},{"vendor":"suse","product":"golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS","name":"golang-github-prometheus-node_exporter","label":"golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS","purlType":"rpm","versions":[{"text":"< 1.3.0-150000.3.18.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.0-150000.3.18.1","eol":null,"hubHref":null},{"vendor":"suse","product":"golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise Server 15-LTSS","name":"golang-github-prometheus-node_exporter","label":"golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise Server 15-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise Server 15-LTSS","purlType":"rpm","versions":[{"text":"< 1.3.0-150000.3.18.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.0-150000.3.18.1","eol":null,"hubHref":null},{"vendor":"suse","product":"golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise Server for SAP Applications 15","name":"golang-github-prometheus-node_exporter","label":"golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise Server for SAP Applications 15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE Linux Enterprise Server for SAP Applications 15","purlType":"rpm","versions":[{"text":"< 1.3.0-150000.3.18.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.0-150000.3.18.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grafana&distro=SUSE Manager Client Tools 15","name":"grafana","label":"grafana&distro=SUSE Manager Client Tools 15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grafana&distro=SUSE Manager Client Tools 15","purlType":"rpm","versions":[{"text":"< 8.3.10-150000.1.33.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.3.10-150000.1.33.1","eol":null,"hubHref":null},{"vendor":"suse","product":"mgr-daemon&distro=SUSE Manager Client Tools 15","name":"mgr-daemon","label":"mgr-daemon&distro=SUSE Manager Client Tools 15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/mgr-daemon&distro=SUSE Manager Client Tools 15","purlType":"rpm","versions":[{"text":"< 4.3.6-150000.1.38.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.6-150000.1.38.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacecmd&distro=SUSE Manager Client Tools 15","name":"spacecmd","label":"spacecmd&distro=SUSE Manager Client Tools 15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacecmd&distro=SUSE Manager Client Tools 15","purlType":"rpm","versions":[{"text":"< 4.3.15-150000.3.86.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.15-150000.3.86.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-client-tools&distro=SUSE Manager Client Tools 15","name":"spacewalk-client-tools","label":"spacewalk-client-tools&distro=SUSE Manager Client Tools 15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-client-tools&distro=SUSE Manager Client Tools 15","purlType":"rpm","versions":[{"text":"< 4.3.12-150000.3.68.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.12-150000.3.68.2","eol":null,"hubHref":null},{"vendor":"suse","product":"uyuni-common-libs&distro=SUSE Manager Client Tools 15","name":"uyuni-common-libs","label":"uyuni-common-libs&distro=SUSE Manager Client Tools 15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/uyuni-common-libs&distro=SUSE Manager Client Tools 15","purlType":"rpm","versions":[{"text":"< 4.3.6-150000.1.27.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.6-150000.1.27.2","eol":null,"hubHref":null}],"affectedCount":21,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223751-1/","label":"www.suse.com/support/update/announcement/2022/suse-su-20223751-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1198903","label":"bugzilla.suse.com/1198903","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1201535","label":"bugzilla.suse.com/1201535","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1201539","label":"bugzilla.suse.com/1201539","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31097","label":"www.suse.com/security/cve/CVE-2022-31097","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31107","label":"www.suse.com/security/cve/CVE-2022-31107","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2022-31097","CVE-2022-31107"],"downstream":[],"duplicates":[],"related":["CVE-2022-31097","CVE-2022-31107"]},"timeline":[{"kind":"published","date":"2022-10-26T08:48:09.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:01:36.550Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T14:25:44.834Z","stale":false,"partial":false}}