{"schema_version":"1.7.3","id":"SUSE-SU-2023:0811-1","published":"2023-03-20T15:29:15Z","modified":"2026-02-04T02:52:43.048644Z","related":["CVE-2022-23552","CVE-2022-39324","CVE-2022-41723","CVE-2022-46146"],"upstream":["CVE-2022-23552","CVE-2022-39324","CVE-2022-41723","CVE-2022-46146"],"summary":"Security update for SUSE Manager Client Tools","details":"\nThis update fixes the following issues:\n\ngrafana:\n\n- CVE-2022-46146: Fix basic authentication bypass by updating the exporter\n  toolkit to version 0.7.3 (bsc#1208065)\n- CVE-2022-41723: Require Go 1.19 or newer (bsc#1208293)\n- Update to version 8.5.20:\n  * CVE-2022-23552: Security: SVG: Add dompurify preprocessor step (bsc#1207749)\n  * CVE-2022-39324: Security: Snapshots: Fix originalUrl spoof security issue\n    (bsc#1207750)\n  * Security: Omit error from http response \n  * Bug fix: Email and username trimming and invitation validation\n\nspacecmd:\n\n- Version 4.3.19-1\n  * Fix spacecmd not showing any output for softwarechannel_diff\n    and softwarechannel_errata_diff (bsc#1207352)\n  * Prevent string api parameters to be parsed as dates if not in\n    ISO-8601 format (bsc#1205759)\n\nspacewalk-client-tools:\n\n- Version 4.3.15-1\n  * Update translation strings\n\n","affected":[{"package":{"name":"grafana","ecosystem":"SUSE:Manager Client Tools 12","purl":"pkg:rpm/suse/grafana&distro=SUSE%20Manager%20Client%20Tools%2012"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.5.20-1.42.1"}]}],"ecosystem_specific":{"binaries":[{"grafana":"8.5.20-1.42.1","python2-spacewalk-check":"4.3.15-52.86.1","python2-spacewalk-client-setup":"4.3.15-52.86.1","python2-spacewalk-client-tools":"4.3.15-52.86.1","spacecmd":"4.3.19-38.118.1","spacewalk-check":"4.3.15-52.86.1","spacewalk-client-setup":"4.3.15-52.86.1","spacewalk-client-tools":"4.3.15-52.86.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0811-1.json"}},{"package":{"name":"spacecmd","ecosystem":"SUSE:Manager Client Tools 12","purl":"pkg:rpm/suse/spacecmd&distro=SUSE%20Manager%20Client%20Tools%2012"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.19-38.118.1"}]}],"ecosystem_specific":{"binaries":[{"grafana":"8.5.20-1.42.1","python2-spacewalk-check":"4.3.15-52.86.1","python2-spacewalk-client-setup":"4.3.15-52.86.1","python2-spacewalk-client-tools":"4.3.15-52.86.1","spacecmd":"4.3.19-38.118.1","spacewalk-check":"4.3.15-52.86.1","spacewalk-client-setup":"4.3.15-52.86.1","spacewalk-client-tools":"4.3.15-52.86.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0811-1.json"}},{"package":{"name":"spacewalk-client-tools","ecosystem":"SUSE:Manager Client Tools 12","purl":"pkg:rpm/suse/spacewalk-client-tools&distro=SUSE%20Manager%20Client%20Tools%2012"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.15-52.86.1"}]}],"ecosystem_specific":{"binaries":[{"grafana":"8.5.20-1.42.1","python2-spacewalk-check":"4.3.15-52.86.1","python2-spacewalk-client-setup":"4.3.15-52.86.1","python2-spacewalk-client-tools":"4.3.15-52.86.1","spacecmd":"4.3.19-38.118.1","spacewalk-check":"4.3.15-52.86.1","spacewalk-client-setup":"4.3.15-52.86.1","spacewalk-client-tools":"4.3.15-52.86.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0811-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230811-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1205759"},{"type":"REPORT","url":"https://bugzilla.suse.com/1207352"},{"type":"REPORT","url":"https://bugzilla.suse.com/1207749"},{"type":"REPORT","url":"https://bugzilla.suse.com/1207750"},{"type":"REPORT","url":"https://bugzilla.suse.com/1208065"},{"type":"REPORT","url":"https://bugzilla.suse.com/1208293"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-23552"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-39324"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-41723"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-46146"}]}