[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-SUSE-SU-2024:1427-1":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T08:55:32.481Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":30,"duplicates":31,"related":32,"reserved_at":9,"published_at":41,"modified_at":42,"state":9,"summary":43,"references_raw":45,"kevs":162,"epss":9,"epss_history":163,"metrics":164,"affected":165},"SUSE-SU-2024:1427-1","Security Beta update for SUSE Manager Client Tools and Salt\n\nThis update fixes the following issues:\n\nPOS_Image-Graphical7:\n\n- Update to version 0.1.1710765237.46af599\n  * Move image services to dracut-saltboot package\n  * Use salt bundle\n- Update to version 0.1.1645440615.7f1328c\n  * Remove deprecated kiwi functions\n\nPOS_Image-JeOS7:\n\n- Update to version 0.1.1710765237.46af599\n  * Move image services to dracut-saltboot package\n  * Use salt bundle\n- Update to version 0.1.1645440615.7f1328c\n  * Remove deprecated kiwi functions\n\nansible:\n\n- CVE-2023-5764: Address issues where internal templating can cause unsafe\n  variables to lose their unsafe designation (bsc#1216854)\n  * breaking_changes:\n    assert - Nested templating may result in an inability for the conditional\n    to be evaluated. See the porting guide for more information.\n- CVE-2024-0690: Address issue where ANSIBLE_NO_LOG was ignored (bsc#1219002)\n- CVE-2020-14365: Do a GPG validation if the disable_gpg_check option is not set. (bsc#1175993)\n- Don't Require python-coverage, it is needed only for testing (bsc#1177948)\n- CVE-2018-10874: Inventory variables are loaded from current working directory when running ad-hoc command that can\n  lead to code execution (included upstream in 2.6.1) (bsc#1099805) \n\ndracut-saltboot:\n\n- Update to version 0.1.1710765237.46af599 \n  * Load only first available leaseinfo (bsc#1221092)\n- Update to version 0.1.1681904360.84ef141\n\n\ngrafana:\n\n- Require Go 1.20\n- Update to version 9.5.16:\n  * [SECURITY] CVE-2023-6152: Add email verification when updating\n    user email (bsc#1219912)\n  * [BUGFIX] Annotations: Split cleanup into separate queries and\n    deletes to avoid deadlocks on MySQL\n- Update to version 9.5.15:\n  * [FEATURE] Alerting: Attempt to retry retryable errors\n- Update to version 9.5.14:\n  * [BUGFIX] Alerting: Fix state manager to not keep\n    datasource_uid and ref_id labels in state after Error\n  * [BUGFIX] Transformations: Config overrides being lost when\n    config from query transform is applied\n  * [BUGFIX] LDAP: Fix enable users on successfull login\n- Update to version 9.5.13:\n  * [BUGFIX] BrowseDashboards: Only remember the most recent\n    expanded folder\n  * [BUGFIX] Licensing: Pass func to update env variables when\n    starting plugin\n- Update to version 9.5.12:\n  * [FEATURE] Azure: Add support for Workload Identity\n    authentication\n- Update to version 9.5.9:\n  * [FEATURE] SSE: Fix DSNode to not panic when response has empty\n    response\n  * [FEATURE] Prometheus: Handle the response with different field\n    key order\n  * [BUGFIX] LDAP: Fix user disabling\n\ngolang-github-prometheus-node_exporter:\n\n- Add `device_error` label for filesystem metrics.\n- Update rtnetlink library to fix errors during ARP metrics collection.\n- Update to 1.7.0 (jsc#PED-7893, jsc#PED-7928):\n  * [FEATURE] Add ZFS freebsd per dataset stats #2753\n  * [FEATURE] Add cpu vulnerabilities reporting from sysfs #2721\n  * [ENHANCEMENT] Parallelize stat calls in Linux filesystem\n    collector #1772\n  * [ENHANCEMENT] Add missing linkspeeds to ethtool collector #2711\n  * [ENHANCEMENT] Add CPU MHz as the value for node_cpu_info metric\n    #2778\n  * [ENHANCEMENT] Improve qdisc collector performance #2779\n  * [ENHANCEMENT] Add include and exclude filter for hwmon\n    collector #2699\n  * [ENHANCEMENT] Optionally fetch ARP stats via rtnetlink instead\n    of procfs #2777\n  * [BUFFIX] Fix ZFS arcstats on FreeBSD 14.0+ 2754\n  * [BUGFIX] Fallback to 32-bit stats in netdev #2757\n  * [BUGFIX] Close btrfs.FS handle after use #2780\n  * [BUGFIX] Move RO status before error return #2807\n  * [BUFFIX] Fix promhttp_metric_handler_errors_total being always\n    active #2808\n  * [BUGFIX] Fix nfsd v4 index miss #2824\n- Update to 1.6.1:\n  (no source code changes in this release)\n- BuildRequire go1.20\n- Update to 1.6.0:\n  * [CHANGE] Fix cpustat when some cpus are offline #2318\n  * [CHANGE] Remove metrics of offline CPUs in CPU collector #2605\n  * [CHANGE] Deprecate ntp collector #2603\n  * [CHANGE] Remove bcache `cache_readaheads_totals` metrics #2583\n  * [CHANGE] Deprecate supervisord collector #2685\n  * [FEATURE] Enable uname collector on NetBSD #2559\n  * [FEATURE] NetBSD support for the meminfo collector #2570\n  * [FEATURE] NetBSD support for CPU collector #2626\n  * [FEATURE] Add FreeBSD collector for netisr subsystem #2668\n  * [FEATURE] Add softirqs collector #2669\n  * [ENHANCEMENT] Add suspended as a `node_zfs_zpool_state` #2449\n  * [ENHANCEMENT] Add administrative state of Linux network\n    interfaces #2515\n  * [ENHANCEMENT] Log current value of GOMAXPROCS #2537\n  * [ENHANCEMENT] Add profiler options for perf collector #2542\n  * [ENHANCEMENT] Allow root path as metrics path #2590\n  * [ENHANCEMENT] Add cpu frequency governor metrics #2569\n  * [ENHANCEMENT] Add new landing page #2622\n  * [ENHANCEMENT] Reduce privileges needed for btrfs device stats #2634\n  * [ENHANCEMENT] Add ZFS `memory_available_bytes` #2687\n  * [ENHANCEMENT] Use `SCSI_IDENT_SERIAL` as serial in diskstats #2612\n  * [ENHANCEMENT] Read missing from netlink netclass attributes from sysfs #2669\n  * [BUGFIX] perf: fixes for automatically detecting the correct\n    tracefs mountpoints #2553\n  * [BUGFIX] Fix `thermal_zone` collector noise @2554\n  * [BUGFIX] Fix a problem fetching the user wire count on FreeBSD\n    2584\n  * [BUGFIX] interrupts: Fix fields on linux aarch64 #2631\n  * [BUGFIX] Remove metrics of offline CPUs in CPU collector #2605\n  * [BUGFIX] Fix OpenBSD filesystem collector string parsing #2637\n  * [BUGFIX] Fix bad reporting of `node_cpu_seconds_total` in\n    OpenBSD #2663\n- Change go_modules archive in _service to use obscpio file\n\nspacecmd:\n\n- Version 5.0.5-0\n  * Update translation strings\n\nspacewalk-client-tools:\n\n- Version 5.0.4-0\n  * Remove rhn-profile-sync rhn_register spacewalk-channel and\n    spacewalk-update-status\n\nsupportutils-plugin-susemanager-client:\n\n- Version 5.0.3-0\n  * Remove rhnsd from client actions and server backend\n\nuyuni-tools:\n\n- Version 0.1.7-0\n  * Fix wrong Cobbler spacewalk_authentication_endpoint property after upgrade or migration\n  * Fix migration script using missing awk in migration image\n- Version 0.1.6-0\n  * Pull image from authenticated registry\n  * Port 80 should be published to the port 80 of the containers.\n    8080 is squid\n  * Autogenerate the database password\n  * Add mgrctl term command\n  * Fix --version flag\n  * Deny uyuni to suma upgrade and viceversa\n  * Refactor upgrade to clarify script end adding post upgrade\n    script (bsc#1219887)\n  * Add mgradm install podman arguments to define big volumes storage\n  * k8s migration use same functions as upgrade\n  * Allow to use images from RPM if present\n  * Schedule a system list refresh after migrate if not runned before\n  * Ignore error on optional flag\n  * Fix migration of multiple autoinstallable distributions\n  * Obsolete uyuni-proxy-systemd-service package by mgrpxy\n  * Add GitHub workflow for checking changelog\n  * Allow installation using --image image:tag\n  * Add command to register Peripheral server to Hub\n  * Add Node exporter (9100) and Taskomatic (9800) ports to the list\n    of open TCP ports\n  * Fix minimal administrator password length\n  * Do not assume the current host is a cluster node when getting\n    kubelet version\n  * Add mgrpxy start, stop and restart commands\n  * Remove shm size constraints on the server\n  * Add mgrpxy and mgradm status commands\n  * Use uninstall commands dry run by default to avoid unintended\n    removals\n  * Make first user mandatory at install time\n  * Add inspect and upgrade command\n  * Improve error handling when exec.Command is used\n  * Start/Stop/Restart command with kubernetes\n- Version 0.1.5-0\n  * Install aardvark-dns if netavark is installed (bsc#1220371)\n\n",null,[],[],[],[14,16,18,20,22,24,26,28],{"_key":15},"CVE-2016-8647",{"_key":17},"CVE-2016-9587",{"_key":19},"CVE-2017-7550",{"_key":21},"CVE-2018-10874",{"_key":23},"CVE-2020-14365",{"_key":25},"CVE-2023-5764",{"_key":27},"CVE-2023-6152",{"_key":29},"CVE-2024-0690",[],[],[33,34,35,36,37,38,39,40],{"_key":15},{"_key":17},{"_key":19},{"_key":21},{"_key":23},{"_key":25},{"_key":27},{"_key":29},"2024-04-24T09:10:16Z","2026-02-04T02:18:06.444085Z",{"cisa_kev":44,"cisa_ransomware":44,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":9},false,[46,52,57,61,65,69,73,77,81,85,89,93,97,101,105,109,113,117,121,125,129,134,138,142,146,150,154,158],{"url":47,"sources":48,"tags":50},"https://www.suse.com/support/update/announcement/2024/suse-su-20241427-1/",[49],"osv_suse",[51],"Advisory",{"url":53,"sources":54,"tags":55},"https://bugzilla.suse.com/1008037",[49],[56],"REPORT",{"url":58,"sources":59,"tags":60},"https://bugzilla.suse.com/1008038",[49],[56],{"url":62,"sources":63,"tags":64},"https://bugzilla.suse.com/1010940",[49],[56],{"url":66,"sources":67,"tags":68},"https://bugzilla.suse.com/1019021",[49],[56],{"url":70,"sources":71,"tags":72},"https://bugzilla.suse.com/1038785",[49],[56],{"url":74,"sources":75,"tags":76},"https://bugzilla.suse.com/1059235",[49],[56],{"url":78,"sources":79,"tags":80},"https://bugzilla.suse.com/1099805",[49],[56],{"url":82,"sources":83,"tags":84},"https://bugzilla.suse.com/1166389",[49],[56],{"url":86,"sources":87,"tags":88},"https://bugzilla.suse.com/1171823",[49],[56],{"url":90,"sources":91,"tags":92},"https://bugzilla.suse.com/1174145",[49],[56],{"url":94,"sources":95,"tags":96},"https://bugzilla.suse.com/1174302",[49],[56],{"url":98,"sources":99,"tags":100},"https://bugzilla.suse.com/1175993",[49],[56],{"url":102,"sources":103,"tags":104},"https://bugzilla.suse.com/1177948",[49],[56],{"url":106,"sources":107,"tags":108},"https://bugzilla.suse.com/1216854",[49],[56],{"url":110,"sources":111,"tags":112},"https://bugzilla.suse.com/1219002",[49],[56],{"url":114,"sources":115,"tags":116},"https://bugzilla.suse.com/1219887",[49],[56],{"url":118,"sources":119,"tags":120},"https://bugzilla.suse.com/1219912",[49],[56],{"url":122,"sources":123,"tags":124},"https://bugzilla.suse.com/1220371",[49],[56],{"url":126,"sources":127,"tags":128},"https://bugzilla.suse.com/1221092",[49],[56],{"url":130,"sources":131,"tags":132},"https://www.suse.com/security/cve/CVE-2016-8647",[49],[133],"WEB",{"url":135,"sources":136,"tags":137},"https://www.suse.com/security/cve/CVE-2016-9587",[49],[133],{"url":139,"sources":140,"tags":141},"https://www.suse.com/security/cve/CVE-2017-7550",[49],[133],{"url":143,"sources":144,"tags":145},"https://www.suse.com/security/cve/CVE-2018-10874",[49],[133],{"url":147,"sources":148,"tags":149},"https://www.suse.com/security/cve/CVE-2020-14365",[49],[133],{"url":151,"sources":152,"tags":153},"https://www.suse.com/security/cve/CVE-2023-5764",[49],[133],{"url":155,"sources":156,"tags":157},"https://www.suse.com/security/cve/CVE-2023-6152",[49],[133],{"url":159,"sources":160,"tags":161},"https://www.suse.com/security/cve/CVE-2024-0690",[49],[133],[],[],[],[166,179,186,193,200,207,212,219,226,233,240],{"ecosystem":167,"name":168,"vendor":169,"product":170,"cpe_part":9,"purl_type":171,"purl_namespace":169,"purl_name":170,"source":9,"versions":172},"SUSE Linux Enterprise","ansible","suse","ansible&distro=SUSE Manager Client Tools 15-BETA","rpm",[173],{"version":174,"is_range":175,"range_type":176,"version_start":9,"version_start_type":9,"version_end":177,"version_end_type":178,"fixed_in":9},"lt2_9_27_159000_3_12_2",true,"ecosystem","2.9.27-159000.3.12.2","excluding",{"ecosystem":167,"name":180,"vendor":169,"product":181,"cpe_part":9,"purl_type":171,"purl_namespace":169,"purl_name":181,"source":9,"versions":182},"dracut-saltboot","dracut-saltboot&distro=SUSE Manager Client Tools 15-BETA",[183],{"version":184,"is_range":175,"range_type":176,"version_start":9,"version_start_type":9,"version_end":185,"version_end_type":178,"fixed_in":9},"lt0_1_1710765237_46af599_159000_3_33_2","0.1.1710765237.46af599-159000.3.33.2",{"ecosystem":167,"name":187,"vendor":169,"product":188,"cpe_part":9,"purl_type":171,"purl_namespace":169,"purl_name":188,"source":9,"versions":189},"golang-github-prometheus-node_exporter","golang-github-prometheus-node_exporter&distro=SUSE Manager Client Tools Beta for SLE Micro 5",[190],{"version":191,"is_range":175,"range_type":176,"version_start":9,"version_start_type":9,"version_end":192,"version_end_type":178,"fixed_in":9},"lt1_5_0_159000_6_2_1","1.5.0-159000.6.2.1",{"ecosystem":167,"name":194,"vendor":169,"product":195,"cpe_part":9,"purl_type":171,"purl_namespace":169,"purl_name":195,"source":9,"versions":196},"grafana","grafana&distro=SUSE Manager Client Tools 15-BETA",[197],{"version":198,"is_range":175,"range_type":176,"version_start":9,"version_start_type":9,"version_end":199,"version_end_type":178,"fixed_in":9},"lt9_5_16_159000_4_30_2","9.5.16-159000.4.30.2",{"ecosystem":167,"name":201,"vendor":169,"product":202,"cpe_part":9,"purl_type":171,"purl_namespace":169,"purl_name":202,"source":9,"versions":203},"POS_Image-Graphical7","POS_Image-Graphical7&distro=SUSE Manager Client Tools 15-BETA",[204],{"version":205,"is_range":175,"range_type":176,"version_start":9,"version_start_type":9,"version_end":206,"version_end_type":178,"fixed_in":9},"lt0_1_1710765237_46af599_159000_3_24_2","0.1.1710765237.46af599-159000.3.24.2",{"ecosystem":167,"name":208,"vendor":169,"product":209,"cpe_part":9,"purl_type":171,"purl_namespace":169,"purl_name":209,"source":9,"versions":210},"POS_Image-JeOS7","POS_Image-JeOS7&distro=SUSE Manager Client Tools 15-BETA",[211],{"version":205,"is_range":175,"range_type":176,"version_start":9,"version_start_type":9,"version_end":206,"version_end_type":178,"fixed_in":9},{"ecosystem":167,"name":213,"vendor":169,"product":214,"cpe_part":9,"purl_type":171,"purl_namespace":169,"purl_name":214,"source":9,"versions":215},"spacecmd","spacecmd&distro=SUSE Manager Client Tools 15-BETA",[216],{"version":217,"is_range":175,"range_type":176,"version_start":9,"version_start_type":9,"version_end":218,"version_end_type":178,"fixed_in":9},"lt5_0_5_159000_6_48_2","5.0.5-159000.6.48.2",{"ecosystem":167,"name":220,"vendor":169,"product":221,"cpe_part":9,"purl_type":171,"purl_namespace":169,"purl_name":221,"source":9,"versions":222},"spacewalk-client-tools","spacewalk-client-tools&distro=SUSE Manager Client Tools 15-BETA",[223],{"version":224,"is_range":175,"range_type":176,"version_start":9,"version_start_type":9,"version_end":225,"version_end_type":178,"fixed_in":9},"lt5_0_4_159000_6_54_2","5.0.4-159000.6.54.2",{"ecosystem":167,"name":227,"vendor":169,"product":228,"cpe_part":9,"purl_type":171,"purl_namespace":169,"purl_name":228,"source":9,"versions":229},"supportutils-plugin-susemanager-client","supportutils-plugin-susemanager-client&distro=SUSE Manager Client Tools 15-BETA",[230],{"version":231,"is_range":175,"range_type":176,"version_start":9,"version_start_type":9,"version_end":232,"version_end_type":178,"fixed_in":9},"lt5_0_3_159000_6_21_2","5.0.3-159000.6.21.2",{"ecosystem":167,"name":234,"vendor":169,"product":235,"cpe_part":9,"purl_type":171,"purl_namespace":169,"purl_name":235,"source":9,"versions":236},"uyuni-tools","uyuni-tools&distro=SUSE Manager Client Tools 15-BETA",[237],{"version":238,"is_range":175,"range_type":176,"version_start":9,"version_start_type":9,"version_end":239,"version_end_type":178,"fixed_in":9},"lt0_1_7_159000_3_8_1","0.1.7-159000.3.8.1",{"ecosystem":167,"name":234,"vendor":169,"product":241,"cpe_part":9,"purl_type":171,"purl_namespace":169,"purl_name":241,"source":9,"versions":242},"uyuni-tools&distro=SUSE Manager Client Tools Beta for SLE Micro 5",[243],{"version":238,"is_range":175,"range_type":176,"version_start":9,"version_start_type":9,"version_end":239,"version_end_type":178,"fixed_in":9}]