[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-SUSE-SU-2026:0628-1":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-06T02:55:33.997Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":18,"duplicates":19,"related":20,"reserved_at":9,"published_at":23,"modified_at":24,"state":9,"summary":25,"references_raw":27,"kevs":132,"epss":9,"epss_history":133,"metrics":134,"affected":135},"SUSE-SU-2026:0628-1","Security update 5.1.2 for Multi-Linux Manager Client Tools\n\nThis update fixes the following issues:\n\ngolang-github-QubitProducts-exporter_exporter:\n\n- Non-customer-facing optimization around source building\n\ngolang-github-boynux-squid_exporter:\n\n- Update to version 1.13.0 (jsc#PED-14971)\n  - Add support for squid-internal-mgr path for metrics.\n- Update to version 1.12.0\n  - Add TLS and basic authentication support for the web interface.\n- Update to version 1.11.0\n  - Allow adding custom labels to all metrics.\n- Update to version 1.10.0\n  - Add ability to configure the exporter using environment variables.\n  - Add support for Squid 6\n  - Add `squid_up` metric\n  - Add `squid_scrape_duration_seconds` metric\n  - Add `squid_scrape_error` metric\n- Update to version 1.9.0\n  - Add `process_open_fds` metric to monitor open file descriptors.\n  - Use `CAP_DAC_READ_SEARCH` capability to allow reading process information without running as root.\n- Update to version 1.8.0\n  - Add various service time metrics to provide more detailed performance data.\n- Update to version 1.7.0\n  - Add support for basic authentication against the Squid proxy.\n  - Fix `squid_client_http_requests_total` metric\n- Upstream changes for v1.9.0:\n  - Use `CAP_DAC_READ_SEARCH` capability to allow\n    reading process information without running as root.\n- Upstream changes for v1.8.0:\n  - Add various service time metrics to provide more detailed\n    performance data.\n- Upstream changes for v1.7.0:\n    Squid proxy.Update to version 1.10.0\n  - Add ability to configure the exporter using environment\n    variables.\n  - Add `process_open_fds` metric to monitor open file descriptors.\n  - Use `CAP_DAC_READ_SEARCH` capability to allow reading process\n    information without running as root.\n  - Add various service time metrics to provide more detailed\n    performance data.\n  - Add support for basic authentication against the Squid proxy.\n- Use current distro go default version.  Use auto-versioning\n  on SUSE as well.\n\ngolang-github-lusitaniae-apache_exporter:\n\n- Build without apparmor for openSUSE Leap 16, SLES 16 or newer\n- Update to version 1.0.10\n  * Update github.com/prometheus/client_golang to 1.21.1\n  * Update github.com/prometheus/common to 0.63.0\n  * Update github.com/prometheus/exporter-toolkit to 0.14.0\n- Update to version 1.0.9\n  * Update github.com/prometheus/client_golang to 1.20.4\n  * Update github.com/prometheus/common to 0.59.1\n  * Update github.com/prometheus/exporter-toolkit to 0.13.0\n  * Migrate logging to log/slog\n  * Fix signal handler logging\n\ngolang-github-prometheus-alertmanager:\n\n- Require gcc11-c++ for building with SLE 12\n\ngolang-github-prometheus-node_exporter:\n\n- Require gcc11-c++ for building with SLE 12\n\ngolang-github-prometheus-prometheus:\n\n- Security issues fixed:\n  * CVE-2025-12816: Interpretation conflict vulnerability allowing bypassing cryptographic verifications (bsc#1255588)\n\n- Update to 3.5.0 (jsc#PED-13824):\n  This is a Long-Term Support (LTS) release.\n  * [FEATURE] Remote-write: Add support for Azure Workload Identity as an authentication method for the receiver.\n  * [FEATURE] PromQL: Add first_over_time(...) and ts_of_first_over_time(...) behind feature flag.\n  * [FEATURE] Federation: Add support for native histograms with custom buckets (NHCB).\n  * [ENHANCEMENT] PromQL: Add warn-level annotations for counter reset conflicts in certain histogram operations.\n  * [ENHANCEMENT] UI: Add scrape interval and scrape timeout to targets page.\n- Update to 3.4.0:\n  * [FEATURE] SD: Add unified AWS service discovery for ec2, lightsail and ecs services.\n  * [FEATURE] Native histograms are now a stable, but optional feature.\n  * [FEATURE] UI: Show detailed relabeling steps for each discovered target.\n  * [ENHANCEMENT] Alerting: Add 'unknown' state for alerting rules that haven't been evaluated yet.\n  * [BUGFIX] Scrape: Fix a bug where scrape cache would not be cleared on startup.\n- Update to 3.3.0:\n  * [FEATURE] Spring Boot 3.3 includes support for the Prometheus Client 1.x.\n  * [ENHANCEMENT] Dependency management for Dropwizard Metrics has been removed.\n- Update to 3.2.0:\n  * [FEATURE] OAuth2: support jwt-bearer grant-type (RFC7523 3.1).\n  * [ENHANCEMENT] PromQL: Reconcile mismatched NHCB bounds in Add\n    and Sub.\n  * [BUGFIX] TSDB: Native Histogram Custom Bounds with a NaN\n    threshold are now rejected.\n- Update to 3.1.0:\n  * [FEATURE] Remote-write 2 (receiving): Update to 2.0-rc.4 spec.\n    'created timestamp' (CT) is now called 'start timestamp' (ST).\n  * [BUGFIX] Mixin: Add static UID to the remote-write dashboard.\n- Update to 3.0.1:\n  * [BUGFIX] Promql: Make subqueries left open.\n  * [BUGFIX] Fix memory leak when query log is enabled.\n  * [BUGFIX] Support utf8 names on /v1/label/:name/values endpoint.\n- Update to 3.0.0:\n  This release includes new features such as a brand new UI and\n  UTF-8 support enabled by default.\n  * [CHANGE] Deprecated feature flags removed.\n  * [FEATURE] New UI.\n  * [FEATURE] Remote Write 2.0.\n  * [FEATURE] OpenTelemetry Support.\n  * [FEATURE] UTF-8 support is now stable and enabled by default.\n  * [FEATURE] OTLP Ingestion.\n  * [FEATURE] Native Histograms.\n  * [BUGFIX] PromQL: Fix count_values for histograms.\n  * [BUGFIX] TSDB: Fix race on stale values in headAppender.\n  * [BUGFIX] UI: Fix selector / series formatting for empty metric\n    names.\n- Update to 2.55.0:\n  * [FEATURE] PromQL: Add `last_over_time` function.\n  * [FEATURE] Agent: Add `prometheus_agent_build_info` metric.\n  * [ENHANCEMENT] PromQL: Optimise `group()` and `group by()`.\n  * [ENHANCEMENT] TSDB: Reduce memory usage when loading blocks.\n  * [BUGFIX] Scrape: Fix a bug where a target could be scraped\n    multiple times.\n- Update to 2.54.0:\n  This release brings a release candidate of a major new version of\n  Remote Write: 2.0.\n  * [CHANGE] Remote-Write: highest_timestamp_in_seconds and queue_highest_sent_timestamp_seconds metrics now initialized\n    to 0.\n  * [CHANGE] API: Split warnings from info annotations in API response.\n  * [FEATURE] Remote-Write: Version 2.0 experimental, plus metadata\n    in WAL via feature flag.\n  * [FEATURE] PromQL: add limitk() and limit_ratio() aggregation\n    operators.\n  * [ENHANCEMENT] PromQL: Accept underscores in literal numbers.\n  * [ENHANCEMENT] PromQL: float literal numbers and durations are\n    now interchangeable (experimental).\n  * [ENHANCEMENT] PromQL (experimental native histograms): Optimize\n    histogram_count and histogram_sum functions.\n  * [BUGFIX] PromQL: Fix various issues with native histograms.\n  * [BUGFIX] OTLP receiver: Allow colons in non-standard units.\n- Require gcc11-c++ for building with SLE 12\n\ngrafana:\n\n- CVE-2025-68156: Fix potential DoS via unbounded recursion in builtin functions (bsc#1255340)\n\nmgr-push:\n\n- Version 5.1.5-0\n  * Non-customer-facing optimization and update\n\nprometheus-blackbox_exporter:\n\n- Non-customer-facing optimization and update\n\nrhnlib:\n\n- Version 5.1.4-0\n  * Non-customer-facing optimization and update  \n\nspacecmd:\n\n- Version 5.1.12-0\n  * Fix spacecmd binary file upload (bsc#1253659)\n  * Fix typo in spacecmd help ca-cert flag (bsc#1253174)\n  * Convert cached IDs to int (bsc#1251995)\n  * Fix methods in api namespace in spacecmd (bsc#1249532)\n  * Make caching code Py 2.7 compatible\n  * Use JSON instead of pickle for spacecmd\n    cache (bsc#1227579)\n  * Python 2.7 cannot re-raise exceptions\n\nspacewalk-client-tools:\n\n- Version 5.1.8-0\n  * Non-customer-facing optimization and update\n\nsupportutils-plugin-susemanager-client:\n\n- Version 5.1.5-0\n  * Non-customer-facing optimization and update\n\nuyuni-common-libs:\n\n- Version 5.1.5-0\n  * Non-customer-facing optimization and update\n\nuyuni-tools:\n\n- Version 5.1.24-0\n  * Actually use the --dbupgrade-tag parameter when computing the\n    image URL (bsc#1249400)\n  * Handle CA files with symlinks during migration (bsc#1251044)\n  * Adjust traefik exposed configuration for chart v27+ (bsc#1247721)\n  * Fix systemd object initialization in server rename. (bsc#1250981)\n  * Add SSL secrets to the db setup container during migration. (bsc#1250976)\n  * Fix images handling in mgrpxy support ptf (bsc#1250940)\n  * Fix helm upgrade parameters (bsc#1253966)\n  * Detect custom apache and squid config in the /etc/uyuni/proxy folder\n  * Add ssh tuning to configure sshd (bsc#1253738)\n  * Move the SSL checks at the beginning of the migration\n  * Remove cgroup mount for podman containers (bsc#1253347)\n  * Convert the traefik install time to local time (bsc#1251138)\n  * During migration, krb5.conf.d should be copied in /etc/rhn (bsc#1254478)\n  * Read env var from http conf file (bsc#1253282)\n  * Add --registry-host, --registry-user and --registry-password\n    to pull images from an authenticate registry\n  * Deprecate --registry\n  * Unify backup create and restore dryrun option case\n  * Fix calling of squid -z in mgrpxy cache clear (bsc#1247644)\n  * Always start database container even if enabled\n  * Remove extra ipv6 mapping and nftables workaround (bsc#1248848)\n  * Remove old PostgreSQL exporter environment file before migration\n  * Support config command parse correctly supportconfig output (bsc#1255781)\n\n",null,[],[],[],[14,16],{"_key":15},"CVE-2025-12816",{"_key":17},"CVE-2025-68156",[],[],[21,22],{"_key":15},{"_key":17},"2026-02-25T09:44:32Z","2026-02-26T16:16:55.939079Z",{"cisa_kev":26,"cisa_ransomware":26,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":9},false,[28,34,39,43,47,51,55,59,63,67,71,75,79,83,87,91,95,99,103,107,111,115,119,123,128],{"url":29,"sources":30,"tags":32},"https://www.suse.com/support/update/announcement/2026/suse-su-20260628-1/",[31],"osv_suse",[33],"Advisory",{"url":35,"sources":36,"tags":37},"https://bugzilla.suse.com/1227579",[31],[38],"REPORT",{"url":40,"sources":41,"tags":42},"https://bugzilla.suse.com/1247644",[31],[38],{"url":44,"sources":45,"tags":46},"https://bugzilla.suse.com/1247721",[31],[38],{"url":48,"sources":49,"tags":50},"https://bugzilla.suse.com/1248848",[31],[38],{"url":52,"sources":53,"tags":54},"https://bugzilla.suse.com/1249400",[31],[38],{"url":56,"sources":57,"tags":58},"https://bugzilla.suse.com/1249532",[31],[38],{"url":60,"sources":61,"tags":62},"https://bugzilla.suse.com/1250940",[31],[38],{"url":64,"sources":65,"tags":66},"https://bugzilla.suse.com/1250976",[31],[38],{"url":68,"sources":69,"tags":70},"https://bugzilla.suse.com/1250981",[31],[38],{"url":72,"sources":73,"tags":74},"https://bugzilla.suse.com/1251044",[31],[38],{"url":76,"sources":77,"tags":78},"https://bugzilla.suse.com/1251138",[31],[38],{"url":80,"sources":81,"tags":82},"https://bugzilla.suse.com/1251995",[31],[38],{"url":84,"sources":85,"tags":86},"https://bugzilla.suse.com/1253174",[31],[38],{"url":88,"sources":89,"tags":90},"https://bugzilla.suse.com/1253282",[31],[38],{"url":92,"sources":93,"tags":94},"https://bugzilla.suse.com/1253347",[31],[38],{"url":96,"sources":97,"tags":98},"https://bugzilla.suse.com/1253659",[31],[38],{"url":100,"sources":101,"tags":102},"https://bugzilla.suse.com/1253738",[31],[38],{"url":104,"sources":105,"tags":106},"https://bugzilla.suse.com/1253966",[31],[38],{"url":108,"sources":109,"tags":110},"https://bugzilla.suse.com/1254478",[31],[38],{"url":112,"sources":113,"tags":114},"https://bugzilla.suse.com/1255340",[31],[38],{"url":116,"sources":117,"tags":118},"https://bugzilla.suse.com/1255588",[31],[38],{"url":120,"sources":121,"tags":122},"https://bugzilla.suse.com/1255781",[31],[38],{"url":124,"sources":125,"tags":126},"https://www.suse.com/security/cve/CVE-2025-12816",[31],[127],"WEB",{"url":129,"sources":130,"tags":131},"https://www.suse.com/security/cve/CVE-2025-68156",[31],[127],[],[],[],[136,149,156,163,170,177,184,191,198,205,212,219,226,231,238],{"ecosystem":137,"name":138,"vendor":139,"product":140,"cpe_part":9,"purl_type":141,"purl_namespace":139,"purl_name":140,"source":9,"versions":142},"SUSE Linux Enterprise","golang-github-boynux-squid_exporter","suse","golang-github-boynux-squid_exporter&distro=SUSE Multi Linux Manager Tools SLE-12","rpm",[143],{"version":144,"is_range":145,"range_type":146,"version_start":9,"version_start_type":9,"version_end":147,"version_end_type":148,"fixed_in":9},"lt1_13_0_120002_3_3_1",true,"ecosystem","1.13.0-120002.3.3.1","excluding",{"ecosystem":137,"name":150,"vendor":139,"product":151,"cpe_part":9,"purl_type":141,"purl_namespace":139,"purl_name":151,"source":9,"versions":152},"golang-github-lusitaniae-apache_exporter","golang-github-lusitaniae-apache_exporter&distro=SUSE Multi Linux Manager Tools SLE-12",[153],{"version":154,"is_range":145,"range_type":146,"version_start":9,"version_start_type":9,"version_end":155,"version_end_type":148,"fixed_in":9},"lt1_0_10_120002_3_3_1","1.0.10-120002.3.3.1",{"ecosystem":137,"name":157,"vendor":139,"product":158,"cpe_part":9,"purl_type":141,"purl_namespace":139,"purl_name":158,"source":9,"versions":159},"golang-github-prometheus-alertmanager","golang-github-prometheus-alertmanager&distro=SUSE Multi Linux Manager Tools SLE-12",[160],{"version":161,"is_range":145,"range_type":146,"version_start":9,"version_start_type":9,"version_end":162,"version_end_type":148,"fixed_in":9},"lt0_28_1_120002_4_6_1","0.28.1-120002.4.6.1",{"ecosystem":137,"name":164,"vendor":139,"product":165,"cpe_part":9,"purl_type":141,"purl_namespace":139,"purl_name":165,"source":9,"versions":166},"golang-github-prometheus-node_exporter","golang-github-prometheus-node_exporter&distro=SUSE Multi Linux Manager Tools SLE-12",[167],{"version":168,"is_range":145,"range_type":146,"version_start":9,"version_start_type":9,"version_end":169,"version_end_type":148,"fixed_in":9},"lt1_9_1_120002_3_3_1","1.9.1-120002.3.3.1",{"ecosystem":137,"name":171,"vendor":139,"product":172,"cpe_part":9,"purl_type":141,"purl_namespace":139,"purl_name":172,"source":9,"versions":173},"golang-github-prometheus-prometheus","golang-github-prometheus-prometheus&distro=SUSE Multi Linux Manager Tools SLE-12",[174],{"version":175,"is_range":145,"range_type":146,"version_start":9,"version_start_type":9,"version_end":176,"version_end_type":148,"fixed_in":9},"lt3_5_0_120002_3_3_1","3.5.0-120002.3.3.1",{"ecosystem":137,"name":178,"vendor":139,"product":179,"cpe_part":9,"purl_type":141,"purl_namespace":139,"purl_name":179,"source":9,"versions":180},"golang-github-QubitProducts-exporter_exporter","golang-github-QubitProducts-exporter_exporter&distro=SUSE Multi Linux Manager Tools SLE-12",[181],{"version":182,"is_range":145,"range_type":146,"version_start":9,"version_start_type":9,"version_end":183,"version_end_type":148,"fixed_in":9},"lt0_4_0_120002_3_3_1","0.4.0-120002.3.3.1",{"ecosystem":137,"name":185,"vendor":139,"product":186,"cpe_part":9,"purl_type":141,"purl_namespace":139,"purl_name":186,"source":9,"versions":187},"grafana","grafana&distro=SUSE Multi Linux Manager Tools SLE-12",[188],{"version":189,"is_range":145,"range_type":146,"version_start":9,"version_start_type":9,"version_end":190,"version_end_type":148,"fixed_in":9},"lt11_5_10_120002_4_9_1","11.5.10-120002.4.9.1",{"ecosystem":137,"name":192,"vendor":139,"product":193,"cpe_part":9,"purl_type":141,"purl_namespace":139,"purl_name":193,"source":9,"versions":194},"mgr-push","mgr-push&distro=SUSE Multi Linux Manager Tools SLE-12",[195],{"version":196,"is_range":145,"range_type":146,"version_start":9,"version_start_type":9,"version_end":197,"version_end_type":148,"fixed_in":9},"lt5_1_5_120002_3_6_1","5.1.5-120002.3.6.1",{"ecosystem":137,"name":199,"vendor":139,"product":200,"cpe_part":9,"purl_type":141,"purl_namespace":139,"purl_name":200,"source":9,"versions":201},"prometheus-blackbox_exporter","prometheus-blackbox_exporter&distro=SUSE Multi Linux Manager Tools SLE-12",[202],{"version":203,"is_range":145,"range_type":146,"version_start":9,"version_start_type":9,"version_end":204,"version_end_type":148,"fixed_in":9},"lt0_26_0_120002_3_3_1","0.26.0-120002.3.3.1",{"ecosystem":137,"name":206,"vendor":139,"product":207,"cpe_part":9,"purl_type":141,"purl_namespace":139,"purl_name":207,"source":9,"versions":208},"rhnlib","rhnlib&distro=SUSE Multi Linux Manager Tools SLE-12",[209],{"version":210,"is_range":145,"range_type":146,"version_start":9,"version_start_type":9,"version_end":211,"version_end_type":148,"fixed_in":9},"lt5_1_4_120002_3_6_1","5.1.4-120002.3.6.1",{"ecosystem":137,"name":213,"vendor":139,"product":214,"cpe_part":9,"purl_type":141,"purl_namespace":139,"purl_name":214,"source":9,"versions":215},"spacecmd","spacecmd&distro=SUSE Multi Linux Manager Tools SLE-12",[216],{"version":217,"is_range":145,"range_type":146,"version_start":9,"version_start_type":9,"version_end":218,"version_end_type":148,"fixed_in":9},"lt5_1_12_120002_3_6_1","5.1.12-120002.3.6.1",{"ecosystem":137,"name":220,"vendor":139,"product":221,"cpe_part":9,"purl_type":141,"purl_namespace":139,"purl_name":221,"source":9,"versions":222},"spacewalk-client-tools","spacewalk-client-tools&distro=SUSE Multi Linux Manager Tools SLE-12",[223],{"version":224,"is_range":145,"range_type":146,"version_start":9,"version_start_type":9,"version_end":225,"version_end_type":148,"fixed_in":9},"lt5_1_8_120002_3_6_1","5.1.8-120002.3.6.1",{"ecosystem":137,"name":227,"vendor":139,"product":228,"cpe_part":9,"purl_type":141,"purl_namespace":139,"purl_name":228,"source":9,"versions":229},"supportutils-plugin-susemanager-client","supportutils-plugin-susemanager-client&distro=SUSE Multi Linux Manager Tools SLE-12",[230],{"version":196,"is_range":145,"range_type":146,"version_start":9,"version_start_type":9,"version_end":197,"version_end_type":148,"fixed_in":9},{"ecosystem":137,"name":232,"vendor":139,"product":233,"cpe_part":9,"purl_type":141,"purl_namespace":139,"purl_name":233,"source":9,"versions":234},"uyuni-common-libs","uyuni-common-libs&distro=SUSE Multi Linux Manager Tools SLE-12",[235],{"version":236,"is_range":145,"range_type":146,"version_start":9,"version_start_type":9,"version_end":237,"version_end_type":148,"fixed_in":9},"lt5_1_5_120002_3_3_1","5.1.5-120002.3.3.1",{"ecosystem":137,"name":239,"vendor":139,"product":240,"cpe_part":9,"purl_type":141,"purl_namespace":139,"purl_name":240,"source":9,"versions":241},"uyuni-tools","uyuni-tools&distro=SUSE Multi Linux Manager Tools SLE-12",[242],{"version":243,"is_range":145,"range_type":146,"version_start":9,"version_start_type":9,"version_end":244,"version_end_type":148,"fixed_in":9},"lt5_1_24_120002_3_9_1","5.1.24-120002.3.9.1"]