{"schema_version":"1.7.3","id":"SUSE-SU-2022:3751-1","published":"2022-10-26T08:48:09Z","modified":"2026-02-04T03:01:36.550606Z","related":["CVE-2022-31097","CVE-2022-31107"],"upstream":["CVE-2022-31097","CVE-2022-31107"],"summary":"Security update for SUSE Manager Client Tools","details":"\nThis update fixes the following issues:\n\ndracut-saltboot:\n\n- Update to version 0.1.1661440542.6cbe0da\n  * Use standard susemanager.conf\n  * Move image services to dracut-saltboot package\n  * Use salt bundle\n\ngolang-github-lusitaniae-apache_exporter:\n\n- Update to upstream release 0.11.0 (jsc#SLE-24791)\n  * Add TLS support\n  * Switch to logger, please check --log.level and --log.format\n    flags\n- Update to version 0.10.1\n  * Bugfix: Reset ProxyBalancer metrics on each scrape to\n    remove stale data\n- Update to version 0.10.0\n  * Add Apache Proxy and other metrics\n- Update to version 0.8.0\n  * Change commandline flags\n  * Add metrics: Apache version, request duration total\n- Adapted to build on Enterprise Linux 8\n- Require building with Go 1.15\n- Add %license macro for LICENSE file \n\ngrafana:\n\n- Update to version 8.3.10\n  + Security:\n    * CVE-2022-31097: Cross Site Scripting vulnerability in the Unified Alerting (bsc#1201535)\n    * CVE-2022-31107: Fixes OAuth account takeover vulnerability (bsc#1201539)\n- Update to version 8.3.9\n  + Bug fixes:\n    * Geomap: Display legend\n    * Prometheus: Fix timestamp truncation\n- Update to version 8.3.7\n  + Bug fix:\n    * Provisioning: Ensure that the default value for orgID is set\n      when provisioning datasources to be deleted.\n- Update to version 8.3.6\n  + Features and enhancements:\n    * Cloud Monitoring: Reduce request size when listing labels.\n    * Explore: Show scalar data result in a table instead of graph.\n    * Snapshots: Updates the default external snapshot server URL.\n    * Table: Makes footer not overlap table content.\n    * Tempo: Add request histogram to service graph datalink.\n    * Tempo: Add time range to tempo search query behind a feature flag.\n    * Tempo: Auto-clear results when changing query type.\n    * Tempo: Display start time in search results as relative time.\n    * CloudMonitoring: Fix resource labels in query editor.\n    * Cursor sync: Apply the settings without saving the dashboard.\n    * LibraryPanels: Fix for Error while cleaning library panels.\n    * Logs Panel: Fix timestamp parsing for string dates without timezone.\n    * Prometheus: Fix some of the alerting queries that use reduce/math operation.\n    * TablePanel: Fix ad-hoc variables not working on default datasources.\n    * Text Panel: Fix alignment of elements.\n    * Variables: Fix for constant variables in self referencing links.\n- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422, jsc#SLE-24565)\n\nmgr-daemon:\n\n- Version 4.3.6-1\n  * Update translation strings\n\nspacecmd:\n\n- Version 4.3.15-1\n  * Process date values in spacecmd api calls (bsc#1198903)\n\nspacewalk-client-tools:\n\n- Version 4.3.12-1\n  * Update translation strings\n\nuyuni-common-libs:\n\n- Version 4.3.6-1\n  * Do not allow creating path if nonexistent user or group in fileutils.\n\n","affected":[{"package":{"name":"dracut-saltboot","ecosystem":"SUSE:Manager Client Tools 15","purl":"pkg:rpm/suse/dracut-saltboot&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.1661440542.6cbe0da-150000.1.38.1"}]}],"ecosystem_specific":{"binaries":[{"dracut-saltboot":"0.1.1661440542.6cbe0da-150000.1.38.1","golang-github-lusitaniae-apache_exporter":"0.11.0-150000.1.12.1","grafana":"8.3.10-150000.1.33.1","mgr-daemon":"4.3.6-150000.1.38.1","python3-spacewalk-check":"4.3.12-150000.3.68.2","python3-spacewalk-client-setup":"4.3.12-150000.3.68.2","python3-spacewalk-client-tools":"4.3.12-150000.3.68.2","python3-uyuni-common-libs":"4.3.6-150000.1.27.2","spacecmd":"4.3.15-150000.3.86.1","spacewalk-check":"4.3.12-150000.3.68.2","spacewalk-client-setup":"4.3.12-150000.3.68.2","spacewalk-client-tools":"4.3.12-150000.3.68.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3751-1.json"}},{"package":{"name":"golang-github-lusitaniae-apache_exporter","ecosystem":"SUSE:Manager Client Tools 15","purl":"pkg:rpm/suse/golang-github-lusitaniae-apache_exporter&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.0-150000.1.12.1"}]}],"ecosystem_specific":{"binaries":[{"dracut-saltboot":"0.1.1661440542.6cbe0da-150000.1.38.1","golang-github-lusitaniae-apache_exporter":"0.11.0-150000.1.12.1","grafana":"8.3.10-150000.1.33.1","mgr-daemon":"4.3.6-150000.1.38.1","python3-spacewalk-check":"4.3.12-150000.3.68.2","python3-spacewalk-client-setup":"4.3.12-150000.3.68.2","python3-spacewalk-client-tools":"4.3.12-150000.3.68.2","python3-uyuni-common-libs":"4.3.6-150000.1.27.2","spacecmd":"4.3.15-150000.3.86.1","spacewalk-check":"4.3.12-150000.3.68.2","spacewalk-client-setup":"4.3.12-150000.3.68.2","spacewalk-client-tools":"4.3.12-150000.3.68.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3751-1.json"}},{"package":{"name":"grafana","ecosystem":"SUSE:Manager Client Tools 15","purl":"pkg:rpm/suse/grafana&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.3.10-150000.1.33.1"}]}],"ecosystem_specific":{"binaries":[{"dracut-saltboot":"0.1.1661440542.6cbe0da-150000.1.38.1","golang-github-lusitaniae-apache_exporter":"0.11.0-150000.1.12.1","grafana":"8.3.10-150000.1.33.1","mgr-daemon":"4.3.6-150000.1.38.1","python3-spacewalk-check":"4.3.12-150000.3.68.2","python3-spacewalk-client-setup":"4.3.12-150000.3.68.2","python3-spacewalk-client-tools":"4.3.12-150000.3.68.2","python3-uyuni-common-libs":"4.3.6-150000.1.27.2","spacecmd":"4.3.15-150000.3.86.1","spacewalk-check":"4.3.12-150000.3.68.2","spacewalk-client-setup":"4.3.12-150000.3.68.2","spacewalk-client-tools":"4.3.12-150000.3.68.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3751-1.json"}},{"package":{"name":"mgr-daemon","ecosystem":"SUSE:Manager Client Tools 15","purl":"pkg:rpm/suse/mgr-daemon&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.6-150000.1.38.1"}]}],"ecosystem_specific":{"binaries":[{"dracut-saltboot":"0.1.1661440542.6cbe0da-150000.1.38.1","golang-github-lusitaniae-apache_exporter":"0.11.0-150000.1.12.1","grafana":"8.3.10-150000.1.33.1","mgr-daemon":"4.3.6-150000.1.38.1","python3-spacewalk-check":"4.3.12-150000.3.68.2","python3-spacewalk-client-setup":"4.3.12-150000.3.68.2","python3-spacewalk-client-tools":"4.3.12-150000.3.68.2","python3-uyuni-common-libs":"4.3.6-150000.1.27.2","spacecmd":"4.3.15-150000.3.86.1","spacewalk-check":"4.3.12-150000.3.68.2","spacewalk-client-setup":"4.3.12-150000.3.68.2","spacewalk-client-tools":"4.3.12-150000.3.68.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3751-1.json"}},{"package":{"name":"spacecmd","ecosystem":"SUSE:Manager Client Tools 15","purl":"pkg:rpm/suse/spacecmd&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.15-150000.3.86.1"}]}],"ecosystem_specific":{"binaries":[{"dracut-saltboot":"0.1.1661440542.6cbe0da-150000.1.38.1","golang-github-lusitaniae-apache_exporter":"0.11.0-150000.1.12.1","grafana":"8.3.10-150000.1.33.1","mgr-daemon":"4.3.6-150000.1.38.1","python3-spacewalk-check":"4.3.12-150000.3.68.2","python3-spacewalk-client-setup":"4.3.12-150000.3.68.2","python3-spacewalk-client-tools":"4.3.12-150000.3.68.2","python3-uyuni-common-libs":"4.3.6-150000.1.27.2","spacecmd":"4.3.15-150000.3.86.1","spacewalk-check":"4.3.12-150000.3.68.2","spacewalk-client-setup":"4.3.12-150000.3.68.2","spacewalk-client-tools":"4.3.12-150000.3.68.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3751-1.json"}},{"package":{"name":"spacewalk-client-tools","ecosystem":"SUSE:Manager Client Tools 15","purl":"pkg:rpm/suse/spacewalk-client-tools&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.12-150000.3.68.2"}]}],"ecosystem_specific":{"binaries":[{"dracut-saltboot":"0.1.1661440542.6cbe0da-150000.1.38.1","golang-github-lusitaniae-apache_exporter":"0.11.0-150000.1.12.1","grafana":"8.3.10-150000.1.33.1","mgr-daemon":"4.3.6-150000.1.38.1","python3-spacewalk-check":"4.3.12-150000.3.68.2","python3-spacewalk-client-setup":"4.3.12-150000.3.68.2","python3-spacewalk-client-tools":"4.3.12-150000.3.68.2","python3-uyuni-common-libs":"4.3.6-150000.1.27.2","spacecmd":"4.3.15-150000.3.86.1","spacewalk-check":"4.3.12-150000.3.68.2","spacewalk-client-setup":"4.3.12-150000.3.68.2","spacewalk-client-tools":"4.3.12-150000.3.68.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3751-1.json"}},{"package":{"name":"uyuni-common-libs","ecosystem":"SUSE:Manager Client Tools 15","purl":"pkg:rpm/suse/uyuni-common-libs&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.6-150000.1.27.2"}]}],"ecosystem_specific":{"binaries":[{"dracut-saltboot":"0.1.1661440542.6cbe0da-150000.1.38.1","golang-github-lusitaniae-apache_exporter":"0.11.0-150000.1.12.1","grafana":"8.3.10-150000.1.33.1","mgr-daemon":"4.3.6-150000.1.38.1","python3-spacewalk-check":"4.3.12-150000.3.68.2","python3-spacewalk-client-setup":"4.3.12-150000.3.68.2","python3-spacewalk-client-tools":"4.3.12-150000.3.68.2","python3-uyuni-common-libs":"4.3.6-150000.1.27.2","spacecmd":"4.3.15-150000.3.86.1","spacewalk-check":"4.3.12-150000.3.68.2","spacewalk-client-setup":"4.3.12-150000.3.68.2","spacewalk-client-tools":"4.3.12-150000.3.68.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3751-1.json"}},{"package":{"name":"golang-github-lusitaniae-apache_exporter","ecosystem":"SUSE:Manager Proxy Module 4.2","purl":"pkg:rpm/suse/golang-github-lusitaniae-apache_exporter&distro=SUSE%20Manager%20Proxy%20Module%204.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.0-150000.1.12.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-lusitaniae-apache_exporter":"0.11.0-150000.1.12.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3751-1.json"}},{"package":{"name":"golang-github-lusitaniae-apache_exporter","ecosystem":"SUSE:Manager Proxy Module 4.3","purl":"pkg:rpm/suse/golang-github-lusitaniae-apache_exporter&distro=SUSE%20Manager%20Proxy%20Module%204.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.0-150000.1.12.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-lusitaniae-apache_exporter":"0.11.0-150000.1.12.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3751-1.json"}},{"package":{"name":"golang-github-lusitaniae-apache_exporter","ecosystem":"SUSE:Manager Server Module 4.2","purl":"pkg:rpm/suse/golang-github-lusitaniae-apache_exporter&distro=SUSE%20Manager%20Server%20Module%204.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.0-150000.1.12.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-lusitaniae-apache_exporter":"0.11.0-150000.1.12.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3751-1.json"}},{"package":{"name":"golang-github-lusitaniae-apache_exporter","ecosystem":"SUSE:Manager Server Module 4.3","purl":"pkg:rpm/suse/golang-github-lusitaniae-apache_exporter&distro=SUSE%20Manager%20Server%20Module%204.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.0-150000.1.12.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-lusitaniae-apache_exporter":"0.11.0-150000.1.12.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3751-1.json"}},{"package":{"name":"golang-github-prometheus-node_exporter","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","purl":"pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.3.18.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-prometheus-node_exporter":"1.3.0-150000.3.18.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3751-1.json"}},{"package":{"name":"golang-github-prometheus-node_exporter","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","purl":"pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.3.18.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-prometheus-node_exporter":"1.3.0-150000.3.18.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3751-1.json"}},{"package":{"name":"golang-github-prometheus-node_exporter","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","purl":"pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.3.18.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-prometheus-node_exporter":"1.3.0-150000.3.18.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3751-1.json"}},{"package":{"name":"golang-github-prometheus-node_exporter","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","purl":"pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150000.3.18.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-prometheus-node_exporter":"1.3.0-150000.3.18.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3751-1.json"}},{"package":{"name":"dracut-saltboot","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/dracut-saltboot&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.1661440542.6cbe0da-150000.1.38.1"}]}],"ecosystem_specific":{"binaries":[{"dracut-saltboot":"0.1.1661440542.6cbe0da-150000.1.38.1","golang-github-lusitaniae-apache_exporter":"0.11.0-150000.1.12.1","spacecmd":"4.3.15-150000.3.86.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3751-1.json"}},{"package":{"name":"golang-github-lusitaniae-apache_exporter","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/golang-github-lusitaniae-apache_exporter&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.0-150000.1.12.1"}]}],"ecosystem_specific":{"binaries":[{"dracut-saltboot":"0.1.1661440542.6cbe0da-150000.1.38.1","golang-github-lusitaniae-apache_exporter":"0.11.0-150000.1.12.1","spacecmd":"4.3.15-150000.3.86.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3751-1.json"}},{"package":{"name":"spacecmd","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/spacecmd&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.15-150000.3.86.1"}]}],"ecosystem_specific":{"binaries":[{"dracut-saltboot":"0.1.1661440542.6cbe0da-150000.1.38.1","golang-github-lusitaniae-apache_exporter":"0.11.0-150000.1.12.1","spacecmd":"4.3.15-150000.3.86.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3751-1.json"}},{"package":{"name":"dracut-saltboot","ecosystem":"openSUSE:Leap 15.4","purl":"pkg:rpm/opensuse/dracut-saltboot&distro=openSUSE%20Leap%2015.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.1661440542.6cbe0da-150000.1.38.1"}]}],"ecosystem_specific":{"binaries":[{"dracut-saltboot":"0.1.1661440542.6cbe0da-150000.1.38.1","golang-github-lusitaniae-apache_exporter":"0.11.0-150000.1.12.1","spacecmd":"4.3.15-150000.3.86.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3751-1.json"}},{"package":{"name":"golang-github-lusitaniae-apache_exporter","ecosystem":"openSUSE:Leap 15.4","purl":"pkg:rpm/opensuse/golang-github-lusitaniae-apache_exporter&distro=openSUSE%20Leap%2015.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.0-150000.1.12.1"}]}],"ecosystem_specific":{"binaries":[{"dracut-saltboot":"0.1.1661440542.6cbe0da-150000.1.38.1","golang-github-lusitaniae-apache_exporter":"0.11.0-150000.1.12.1","spacecmd":"4.3.15-150000.3.86.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3751-1.json"}},{"package":{"name":"spacecmd","ecosystem":"openSUSE:Leap 15.4","purl":"pkg:rpm/opensuse/spacecmd&distro=openSUSE%20Leap%2015.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.15-150000.3.86.1"}]}],"ecosystem_specific":{"binaries":[{"dracut-saltboot":"0.1.1661440542.6cbe0da-150000.1.38.1","golang-github-lusitaniae-apache_exporter":"0.11.0-150000.1.12.1","spacecmd":"4.3.15-150000.3.86.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3751-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223751-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1198903"},{"type":"REPORT","url":"https://bugzilla.suse.com/1201535"},{"type":"REPORT","url":"https://bugzilla.suse.com/1201539"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-31097"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-31107"}]}