SUSE-SU-2022:3751-1
SUSE-SU-2022:3751-1 · Security update for SUSE Manager Client Tools
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
This update fixes the following issues: dracut-saltboot: - Update to version 0.1.1661440542.6cbe0da * Use standard susemanager.conf * Move image services to dracut-saltboot package * Use salt bundle golang-github-lusitaniae-apache_exporter: - Update to upstream release 0.11.0 (jsc#SLE-24791) * Add TLS support * Switch to logger, please check --log.level and --log.format flags - Update to version 0.10.1 * Bugfix: Reset ProxyBalancer metrics on each scrape to remove stale data - Update to version 0.10.0 * Add Apache Proxy and other metrics - Update to version 0.8.0 * Change commandline flags * Add metrics: Apache version, request duration total - Adapted to build on Enterprise Linux 8 - Require building with Go 1.15 - Add %license macro for LICENSE file grafana: - Update to version 8.3.10 + Security: * CVE-2022-31097: Cross Site Scripting vulnerability in the Unified Alerting (bsc#1201535) * CVE-2022-31107: Fixes OAuth account takeover vulnerability (bsc#1201539) - Update to version 8.3.9 + Bug fixes: * Geomap: Display legend * Prometheus: Fix timestamp truncation - Update to version 8.3.7 + Bug fix: * Provisioning: Ensure that the default value for orgID is set when provisioning datasources to be deleted. - Update to version 8.3.6 + Features and enhancements: * Cloud Monitoring: Reduce request size when listing labels. * Explore: Show scalar data result in a table instead of graph. * Snapshots: Updates the default external snapshot server URL. * Table: Makes footer not overlap table content. * Tempo: Add request histogram to service graph datalink. * Tempo: Add time range to tempo search query behind a feature flag. * Tempo: Auto-clear results when changing query type. * Tempo: Display start time in search results as relative time. * CloudMonitoring: Fix resource labels in query editor. * Cursor sync: Apply the settings without saving the dashboard. * LibraryPanels: Fix for Error while cleaning library panels. * Logs Panel: Fix timestamp parsing for string dates without timezone. * Prometheus: Fix some of the alerting queries that use reduce/math operation. * TablePanel: Fix ad-hoc variables not working on default datasources. * Text Panel: Fix alignment of elements. * Variables: Fix for constant variables in self referencing links. - Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422, jsc#SLE-24565) mgr-daemon: - Version 4.3.6-1 * Update translation strings spacecmd: - Version 4.3.15-1 * Process date values in spacecmd api calls (bsc#1198903) spacewalk-client-tools: - Version 4.3.12-1 * Update translation strings uyuni-common-libs: - Version 4.3.6-1 * Do not allow creating path if nonexistent user or group in fileutils.
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system · applications
Productos y versiones afectados
dracut-saltboot SUSE:Manager Client Tools 15
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.1.1661440542.6cbe0da-150000.1.38.1
Actualiza a 0.1.1661440542.6cbe0da-150000.1.38.1
golang-github-lusitaniae-apache_exporter SUSE:Manager Client Tools 15
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.11.0-150000.1.12.1
Actualiza a 0.11.0-150000.1.12.1
grafana SUSE:Manager Client Tools 15
- Intervalos de versiones afectados
- ECOSYSTEM: < 8.3.10-150000.1.33.1
Actualiza a 8.3.10-150000.1.33.1
mgr-daemon SUSE:Manager Client Tools 15
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.3.6-150000.1.38.1
Actualiza a 4.3.6-150000.1.38.1
spacecmd SUSE:Manager Client Tools 15
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.3.15-150000.3.86.1
Actualiza a 4.3.15-150000.3.86.1
spacewalk-client-tools SUSE:Manager Client Tools 15
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.3.12-150000.3.68.2
Actualiza a 4.3.12-150000.3.68.2
uyuni-common-libs SUSE:Manager Client Tools 15
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.3.6-150000.1.27.2
Actualiza a 4.3.6-150000.1.27.2
golang-github-lusitaniae-apache_exporter SUSE:Manager Proxy Module 4.2
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.11.0-150000.1.12.1
Actualiza a 0.11.0-150000.1.12.1
golang-github-lusitaniae-apache_exporter SUSE:Manager Proxy Module 4.3
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.11.0-150000.1.12.1
Actualiza a 0.11.0-150000.1.12.1
golang-github-lusitaniae-apache_exporter SUSE:Manager Server Module 4.2
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.11.0-150000.1.12.1
Actualiza a 0.11.0-150000.1.12.1
golang-github-lusitaniae-apache_exporter SUSE:Manager Server Module 4.3
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.11.0-150000.1.12.1
Actualiza a 0.11.0-150000.1.12.1
golang-github-prometheus-node_exporter SUSE:Linux Enterprise High Performance Computing 15-ESPOS
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.3.0-150000.3.18.1
Actualiza a 1.3.0-150000.3.18.1
golang-github-prometheus-node_exporter SUSE:Linux Enterprise High Performance Computing 15-LTSS
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.3.0-150000.3.18.1
Actualiza a 1.3.0-150000.3.18.1
golang-github-prometheus-node_exporter SUSE:Linux Enterprise Server 15-LTSS
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.3.0-150000.3.18.1
Actualiza a 1.3.0-150000.3.18.1
golang-github-prometheus-node_exporter SUSE:Linux Enterprise Server for SAP Applications 15
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.3.0-150000.3.18.1
Actualiza a 1.3.0-150000.3.18.1
dracut-saltboot openSUSE:Leap 15.3
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.1.1661440542.6cbe0da-150000.1.38.1
Actualiza a 0.1.1661440542.6cbe0da-150000.1.38.1
golang-github-lusitaniae-apache_exporter openSUSE:Leap 15.3
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.11.0-150000.1.12.1
Actualiza a 0.11.0-150000.1.12.1
spacecmd openSUSE:Leap 15.3
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.3.15-150000.3.86.1
Actualiza a 4.3.15-150000.3.86.1
dracut-saltboot openSUSE:Leap 15.4
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.1.1661440542.6cbe0da-150000.1.38.1
Actualiza a 0.1.1661440542.6cbe0da-150000.1.38.1
golang-github-lusitaniae-apache_exporter openSUSE:Leap 15.4
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.11.0-150000.1.12.1
Actualiza a 0.11.0-150000.1.12.1
spacecmd openSUSE:Leap 15.4
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.3.15-150000.3.86.1
Actualiza a 4.3.15-150000.3.86.1
Fuentes originales
- https://www.suse.com/support/update/announcement/2022/suse-su-20223751-1/
- https://bugzilla.suse.com/1198903
- https://bugzilla.suse.com/1201535
- https://bugzilla.suse.com/1201539
- https://www.suse.com/security/cve/CVE-2022-31097
- https://www.suse.com/security/cve/CVE-2022-31107
- https://osv.dev/vulnerability/SUSE-SU-2022:3751-1