SUSE: Security Advisory (SUSE-SU-2022:3751-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:3751-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: dracut-saltboot: - Update to version 0.1.1661440542.6cbe0da Use standard susemanager.conf Move image services to dracut-saltboot package Use salt bundle golang-github-lusitaniae-apacheexporter: - Update to upstream release 0.11.0 jscSLE-24791 Add TLS suppor...

SUSE-SU-2022:3747-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: golang-github-lusitaniae-apacheexporter: - Update to upstream release 0.11.0 jscSLE-24791 Add TLS support Switch to logger, please check --log.level and --log.format flags - Update to version 0.10.1 Bugfix: Reset ProxyBalancer metrics on each scrape to remo...

SUSE SLES15: ansible / ansible-doc / ansible-test / dracut-saltboot / etc (SUSE-SU-2022:3178-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3178-1 advisory. ansible: - Update to version 2.9.27 jscSLE-23631, jscSLE-24133 CVE-2021-3620 ansible-connection module discloses...

SUSE: Security Advisory (SUSE-SU-2022:3178-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:2134-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in tag-manager-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 986d6aa3c75a03f6fe0c133f3da8dd1c573c7d82babb32b0b72179891bb9650f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6413 Malicious code in tag-manager-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 986d6aa3c75a03f6fe0c133f3da8dd1c573c7d82babb32b0b72179891bb9650f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE-SU-2022:2134-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: golang-github-QubitProducts-exporterexporter: - Adapted to build on Enterprise Linux. - Fix build for RedHat 7 - Require Go = 1.14 also for CentOS - Add support for CentOS - Replace %?systemdrequires with %?systemdordering...

ITarian 安全漏洞

ITarian is a remote access and IT management solution from ITarian, Inc. It helps organizations connect and communicate with their customers and employees, facilitating remote file access, system monitoring, troubleshooting and operations management across teams. A security vulnerability exists i...

SUSE-SU-2022:1545-1 Security Beta update for SUSE Manager Client Tools

This update fixes the following issues: golang-github-prometheus-alertmanager: - CVE-2022-21698: Denial of service using InstrumentHandlerCounter Update vendor tarball with prometheus/clientgolang 1.11.1 bsc1196338, jscSLE-24077 - Update to version 0.23.0: amtool: Detect version drift and warn...

SUSE-SU-2022:1531-1 Security Beta update for SUSE Manager Client Tools

This update fixes the following issues: golang-github-prometheus-alertmanager: - CVE-2022-21698: Update vendor tarball with prometheus/clientgolang 1.11.1 bsc1196338, jscSLE-24077 - Update to version 0.23.0: amtool: Detect version drift and warn users 2672 Add ability to skip TLS verification for...

SUSE-SU-2022:1396-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: grafana: - Update from version 7.5.12 to version 8.3.5 jscSLE-23439, jscSLE-23422 + Security: Fixes XSS vulnerability in handling data sources bsc1195726, CVE-2022-21702 Fixes cross-origin request forgery vulnerability bsc1195727, CVE-2022-21703 Fixes...

SUSE-SU-2022:0751-1 Security Beta update for SUSE Manager Client Tools

This security update fixes the following issues: golang-github-prometheus-prometheus: - Upgrade to upstream version 2.32.1 jscSLE-22863 + Bugfixes: Scrape: Fix reporting metrics when sample limit is reached during the report. 9996 Scrape: Ensure that scrape interval and scrape timeout are always...

SUSE-FU-2022:0750-1 Feature update for SUSE Manager Client Tools

This feature update fixes the following issues: cobbler: - Move configuration files ownership to apache bsc1195906 - Make configuration files only readable by root bsc1193671, CVE-2021-45083 golang-github-prometheus-prometheus: - Upgrade to upstream version 2.32.1 jscSLE-22863 + Bugfixes: Scrape:...

SUSE-SU-2022:0311-1 Security Beta update for SUSE Manager Client Tools

This update fixes the following issues: ansible: - Require python macros for building grafana: - Update to version 7.5.12: Fix markdown path traversal 42969, bsc1193688, CVE-2021-43813 - Recreate tarballs using the makefile to update the npm and go modules required - Update to version 7.5.11: Fix...

SUSE-SU-2021:3907-1 Security Beta update for SUSE Manager Client Tools

This update fixes the following issues: cobbler: - Fixed rce in the xmlrpc which additionally allowed arbirtrary file read and write as root bsc1189458 golang-github-prometheus-prometheus: - Provide and reload firewalld configuration only for: + openSUSE Leap 15.0, 15.1, 15.2 + SUSE SLE15, SLE15...

SUSE: Security Advisory (SUSE-SU-2021:14833-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : SUSE Manager Client Tools (openSUSE-SU-2021:1162-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1162-1 advisory. - Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning...

OPENSUSE-SU-2021:1162-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: ansible: - The support level for ansible is l2, not l3 dracut-saltboot: - Force installation of libexpat.so.1 bsc1188846 - Use kernel parameters from PXE formula also for local boot golang-github-prometheus-prometheus: - Provide and reload firewalld...