{"schema_version":"1.7.3","id":"SUSE-SU-2023:0353-1","published":"2023-02-10T14:12:55Z","modified":"2026-02-04T03:01:23.357835Z","related":["CVE-2022-31123","CVE-2022-31130","CVE-2022-39201","CVE-2022-39229","CVE-2022-39306","CVE-2022-39307"],"upstream":["CVE-2022-31123","CVE-2022-31130","CVE-2022-39201","CVE-2022-39229","CVE-2022-39306","CVE-2022-39307"],"summary":"Security update for SUSE Manager Client Tools","details":"\nThis update fixes the following issues:\n\ndracut-saltboot:\n\n- Update to version 0.1.1673279145.e7616bd \n  * Add failsafe stop file when salt-minion does not stop (bsc#1172110)\n  * Copy existing wicked config instead of generating new (bsc#1205599)\n  \ngrafana:\n\n- Update to version 8.5.15 (jsc#PED-2617):\n  * CVE-2022-39306: Fix for privilege escalation (bsc#1205225)\n  * CVE-2022-39307: Omit error from http response when user does not exists (bsc#1205227)\n- Update to version 8.5.14:\n  * CVE-2022-39201: Fix do not forward login cookie in outgoing requests (bsc#1204303)\n  * CVE-2022-31130: Make proxy endpoints not leak sensitive HTTP headers (bsc#1204305)\n  * CVE-2022-31123: Fix plugin signature bypass (bsc#1204302)\n  * CVE-2022-39229: Fix blocknig other users from signing in (bsc#1204304)\n    \nmgr-osad:\n\n- Version 4.3.7-1\n  * Updated logrotate configuration (bsc#1206470)\n\nmgr-push:\n\n- Version 4.3.5-1\n  * Update translation strings\n\nrhnlib:\n\n- Version 4.3.5-1\n  * Don't get stuck at the end of SSL transfers (bsc#1204032)\n\nspacecmd:\n\n- Version 4.3.18-1\n  * Add python-dateutil dependency, required to process date values in\n    spacecmd api calls\n- Version 4.3.17-1\n  * Remove python3-simplejson dependency\n  * Correctly understand 'ssm' keyword on scap scheduling\n  * Add vendor_advisory information to errata_details call (bsc#1205207)\n  * Added two missing options to schedule product migration: allow-vendor-change\n    and remove-products-without-successor (bsc#1204126)\n  * Changed schedule product migration to use the correct API method\n  * Change default port of 'Containerized Proxy configuration' 8022\n\nspacewalk-client-tools:\n\n- Version 4.3.14-1\n  * Update translation strings\n\nuyuni-common-libs:\n\n- Version 4.3.7-1\n  * unify user notification code on java side\n\n","affected":[{"package":{"name":"dracut-saltboot","ecosystem":"SUSE:Manager Client Tools 15","purl":"pkg:rpm/suse/dracut-saltboot&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.1673279145.e7616bd-150000.1.44.1"}]}],"ecosystem_specific":{"binaries":[{"dracut-saltboot":"0.1.1673279145.e7616bd-150000.1.44.1","grafana":"8.5.15-150000.1.39.1","mgr-osad":"4.3.7-150000.1.42.1","mgr-push":"4.3.5-150000.1.24.2","python3-mgr-osa-common":"4.3.7-150000.1.42.1","python3-mgr-osad":"4.3.7-150000.1.42.1","python3-mgr-push":"4.3.5-150000.1.24.2","python3-rhnlib":"4.3.5-150000.3.40.1","python3-spacewalk-check":"4.3.14-150000.3.74.1","python3-spacewalk-client-setup":"4.3.14-150000.3.74.1","python3-spacewalk-client-tools":"4.3.14-150000.3.74.1","python3-uyuni-common-libs":"4.3.7-150000.1.30.1","spacecmd":"4.3.18-150000.3.92.1","spacewalk-check":"4.3.14-150000.3.74.1","spacewalk-client-setup":"4.3.14-150000.3.74.1","spacewalk-client-tools":"4.3.14-150000.3.74.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0353-1.json"}},{"package":{"name":"grafana","ecosystem":"SUSE:Manager Client Tools 15","purl":"pkg:rpm/suse/grafana&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.15-150000.1.39.1"}]}],"ecosystem_specific":{"binaries":[{"dracut-saltboot":"0.1.1673279145.e7616bd-150000.1.44.1","grafana":"8.5.15-150000.1.39.1","mgr-osad":"4.3.7-150000.1.42.1","mgr-push":"4.3.5-150000.1.24.2","python3-mgr-osa-common":"4.3.7-150000.1.42.1","python3-mgr-osad":"4.3.7-150000.1.42.1","python3-mgr-push":"4.3.5-150000.1.24.2","python3-rhnlib":"4.3.5-150000.3.40.1","python3-spacewalk-check":"4.3.14-150000.3.74.1","python3-spacewalk-client-setup":"4.3.14-150000.3.74.1","python3-spacewalk-client-tools":"4.3.14-150000.3.74.1","python3-uyuni-common-libs":"4.3.7-150000.1.30.1","spacecmd":"4.3.18-150000.3.92.1","spacewalk-check":"4.3.14-150000.3.74.1","spacewalk-client-setup":"4.3.14-150000.3.74.1","spacewalk-client-tools":"4.3.14-150000.3.74.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0353-1.json"}},{"package":{"name":"mgr-osad","ecosystem":"SUSE:Manager Client Tools 15","purl":"pkg:rpm/suse/mgr-osad&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.7-150000.1.42.1"}]}],"ecosystem_specific":{"binaries":[{"dracut-saltboot":"0.1.1673279145.e7616bd-150000.1.44.1","grafana":"8.5.15-150000.1.39.1","mgr-osad":"4.3.7-150000.1.42.1","mgr-push":"4.3.5-150000.1.24.2","python3-mgr-osa-common":"4.3.7-150000.1.42.1","python3-mgr-osad":"4.3.7-150000.1.42.1","python3-mgr-push":"4.3.5-150000.1.24.2","python3-rhnlib":"4.3.5-150000.3.40.1","python3-spacewalk-check":"4.3.14-150000.3.74.1","python3-spacewalk-client-setup":"4.3.14-150000.3.74.1","python3-spacewalk-client-tools":"4.3.14-150000.3.74.1","python3-uyuni-common-libs":"4.3.7-150000.1.30.1","spacecmd":"4.3.18-150000.3.92.1","spacewalk-check":"4.3.14-150000.3.74.1","spacewalk-client-setup":"4.3.14-150000.3.74.1","spacewalk-client-tools":"4.3.14-150000.3.74.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0353-1.json"}},{"package":{"name":"mgr-push","ecosystem":"SUSE:Manager Client Tools 15","purl":"pkg:rpm/suse/mgr-push&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-150000.1.24.2"}]}],"ecosystem_specific":{"binaries":[{"dracut-saltboot":"0.1.1673279145.e7616bd-150000.1.44.1","grafana":"8.5.15-150000.1.39.1","mgr-osad":"4.3.7-150000.1.42.1","mgr-push":"4.3.5-150000.1.24.2","python3-mgr-osa-common":"4.3.7-150000.1.42.1","python3-mgr-osad":"4.3.7-150000.1.42.1","python3-mgr-push":"4.3.5-150000.1.24.2","python3-rhnlib":"4.3.5-150000.3.40.1","python3-spacewalk-check":"4.3.14-150000.3.74.1","python3-spacewalk-client-setup":"4.3.14-150000.3.74.1","python3-spacewalk-client-tools":"4.3.14-150000.3.74.1","python3-uyuni-common-libs":"4.3.7-150000.1.30.1","spacecmd":"4.3.18-150000.3.92.1","spacewalk-check":"4.3.14-150000.3.74.1","spacewalk-client-setup":"4.3.14-150000.3.74.1","spacewalk-client-tools":"4.3.14-150000.3.74.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0353-1.json"}},{"package":{"name":"rhnlib","ecosystem":"SUSE:Manager Client Tools 15","purl":"pkg:rpm/suse/rhnlib&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-150000.3.40.1"}]}],"ecosystem_specific":{"binaries":[{"dracut-saltboot":"0.1.1673279145.e7616bd-150000.1.44.1","grafana":"8.5.15-150000.1.39.1","mgr-osad":"4.3.7-150000.1.42.1","mgr-push":"4.3.5-150000.1.24.2","python3-mgr-osa-common":"4.3.7-150000.1.42.1","python3-mgr-osad":"4.3.7-150000.1.42.1","python3-mgr-push":"4.3.5-150000.1.24.2","python3-rhnlib":"4.3.5-150000.3.40.1","python3-spacewalk-check":"4.3.14-150000.3.74.1","python3-spacewalk-client-setup":"4.3.14-150000.3.74.1","python3-spacewalk-client-tools":"4.3.14-150000.3.74.1","python3-uyuni-common-libs":"4.3.7-150000.1.30.1","spacecmd":"4.3.18-150000.3.92.1","spacewalk-check":"4.3.14-150000.3.74.1","spacewalk-client-setup":"4.3.14-150000.3.74.1","spacewalk-client-tools":"4.3.14-150000.3.74.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0353-1.json"}},{"package":{"name":"spacecmd","ecosystem":"SUSE:Manager Client Tools 15","purl":"pkg:rpm/suse/spacecmd&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.18-150000.3.92.1"}]}],"ecosystem_specific":{"binaries":[{"dracut-saltboot":"0.1.1673279145.e7616bd-150000.1.44.1","grafana":"8.5.15-150000.1.39.1","mgr-osad":"4.3.7-150000.1.42.1","mgr-push":"4.3.5-150000.1.24.2","python3-mgr-osa-common":"4.3.7-150000.1.42.1","python3-mgr-osad":"4.3.7-150000.1.42.1","python3-mgr-push":"4.3.5-150000.1.24.2","python3-rhnlib":"4.3.5-150000.3.40.1","python3-spacewalk-check":"4.3.14-150000.3.74.1","python3-spacewalk-client-setup":"4.3.14-150000.3.74.1","python3-spacewalk-client-tools":"4.3.14-150000.3.74.1","python3-uyuni-common-libs":"4.3.7-150000.1.30.1","spacecmd":"4.3.18-150000.3.92.1","spacewalk-check":"4.3.14-150000.3.74.1","spacewalk-client-setup":"4.3.14-150000.3.74.1","spacewalk-client-tools":"4.3.14-150000.3.74.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0353-1.json"}},{"package":{"name":"spacewalk-client-tools","ecosystem":"SUSE:Manager Client Tools 15","purl":"pkg:rpm/suse/spacewalk-client-tools&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.14-150000.3.74.1"}]}],"ecosystem_specific":{"binaries":[{"dracut-saltboot":"0.1.1673279145.e7616bd-150000.1.44.1","grafana":"8.5.15-150000.1.39.1","mgr-osad":"4.3.7-150000.1.42.1","mgr-push":"4.3.5-150000.1.24.2","python3-mgr-osa-common":"4.3.7-150000.1.42.1","python3-mgr-osad":"4.3.7-150000.1.42.1","python3-mgr-push":"4.3.5-150000.1.24.2","python3-rhnlib":"4.3.5-150000.3.40.1","python3-spacewalk-check":"4.3.14-150000.3.74.1","python3-spacewalk-client-setup":"4.3.14-150000.3.74.1","python3-spacewalk-client-tools":"4.3.14-150000.3.74.1","python3-uyuni-common-libs":"4.3.7-150000.1.30.1","spacecmd":"4.3.18-150000.3.92.1","spacewalk-check":"4.3.14-150000.3.74.1","spacewalk-client-setup":"4.3.14-150000.3.74.1","spacewalk-client-tools":"4.3.14-150000.3.74.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0353-1.json"}},{"package":{"name":"uyuni-common-libs","ecosystem":"SUSE:Manager Client Tools 15","purl":"pkg:rpm/suse/uyuni-common-libs&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.7-150000.1.30.1"}]}],"ecosystem_specific":{"binaries":[{"dracut-saltboot":"0.1.1673279145.e7616bd-150000.1.44.1","grafana":"8.5.15-150000.1.39.1","mgr-osad":"4.3.7-150000.1.42.1","mgr-push":"4.3.5-150000.1.24.2","python3-mgr-osa-common":"4.3.7-150000.1.42.1","python3-mgr-osad":"4.3.7-150000.1.42.1","python3-mgr-push":"4.3.5-150000.1.24.2","python3-rhnlib":"4.3.5-150000.3.40.1","python3-spacewalk-check":"4.3.14-150000.3.74.1","python3-spacewalk-client-setup":"4.3.14-150000.3.74.1","python3-spacewalk-client-tools":"4.3.14-150000.3.74.1","python3-uyuni-common-libs":"4.3.7-150000.1.30.1","spacecmd":"4.3.18-150000.3.92.1","spacewalk-check":"4.3.14-150000.3.74.1","spacewalk-client-setup":"4.3.14-150000.3.74.1","spacewalk-client-tools":"4.3.14-150000.3.74.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0353-1.json"}},{"package":{"name":"dracut-saltboot","ecosystem":"SUSE:Manager Client Tools for SLE Micro 5","purl":"pkg:rpm/suse/dracut-saltboot&distro=SUSE%20Manager%20Client%20Tools%20for%20SLE%20Micro%205"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.1673279145.e7616bd-150000.1.44.1"}]}],"ecosystem_specific":{"binaries":[{"dracut-saltboot":"0.1.1673279145.e7616bd-150000.1.44.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0353-1.json"}},{"package":{"name":"dracut-saltboot","ecosystem":"openSUSE:Leap 15.4","purl":"pkg:rpm/opensuse/dracut-saltboot&distro=openSUSE%20Leap%2015.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.1673279145.e7616bd-150000.1.44.1"}]}],"ecosystem_specific":{"binaries":[{"dracut-saltboot":"0.1.1673279145.e7616bd-150000.1.44.1","spacecmd":"4.3.18-150000.3.92.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0353-1.json"}},{"package":{"name":"spacecmd","ecosystem":"openSUSE:Leap 15.4","purl":"pkg:rpm/opensuse/spacecmd&distro=openSUSE%20Leap%2015.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.18-150000.3.92.1"}]}],"ecosystem_specific":{"binaries":[{"dracut-saltboot":"0.1.1673279145.e7616bd-150000.1.44.1","spacecmd":"4.3.18-150000.3.92.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0353-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230353-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1172110"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204032"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204126"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204302"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204303"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204304"},{"type":"REPORT","url":"https://bugzilla.suse.com/1204305"},{"type":"REPORT","url":"https://bugzilla.suse.com/1205207"},{"type":"REPORT","url":"https://bugzilla.suse.com/1205225"},{"type":"REPORT","url":"https://bugzilla.suse.com/1205227"},{"type":"REPORT","url":"https://bugzilla.suse.com/1205599"},{"type":"REPORT","url":"https://bugzilla.suse.com/1206470"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-31123"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-31130"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-39201"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-39229"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-39306"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-39307"}]}