{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "SUSE CVE-2023-40577", "title": "Title" }, { "category": "description", "text": "Alertmanager handles alerts sent by client applications such as the Prometheus server. An attacker with the permission to perform POST requests on the /api/v1/alerts endpoint could be able to execute arbitrary JavaScript code on the users of Prometheus Alertmanager. This issue has been fixed in Alertmanager version 0.2.51.", "title": "Description of the CVE" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "CVE-2023-40577", "url": "https://www.suse.com/security/cve/CVE-2023-40577" }, { "category": "external", "summary": "SUSE Security Ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "external", "summary": "SUSE Bug 1218838 for CVE-2023-40577", "url": "https://bugzilla.suse.com/1218838" }, { "category": "external", "summary": "Advisory link for SUSE-SU-2024:0191-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-January/017744.html" }, { "category": "external", "summary": "Advisory link for SUSE-SU-2024:0486-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017932.html" }, { "category": "external", "summary": "Advisory link for SUSE-SU-2024:0512-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017925.html" } ], "title": "SUSE CVE CVE-2023-40577", "tracking": { "current_release_date": "2026-06-06T04:49:50Z", "generator": { "date": "2024-01-17T02:46:21Z", "engine": { "name": "cve-database.git:bin/generate-csaf-vex.pl", "version": "1" } }, "id": "CVE-2023-40577", "initial_release_date": "2024-01-17T02:46:21Z", "revision_history": [ { "date": "2024-01-17T02:46:21Z", "number": "2", "summary": "Current version" }, { "date": "2024-01-20T03:12:47Z", "number": "3", "summary": "Current version" }, { "date": "2024-01-24T02:51:26Z", "number": "4", "summary": "Current version" }, { "date": "2024-02-17T03:23:23Z", "number": "5", "summary": "Current version" }, { "date": "2024-11-16T00:47:51Z", "number": "6", "summary": "Current version" }, { "date": "2025-01-01T01:56:04Z", "number": "7", "summary": "Current version" }, { "date": "2025-02-14T06:15:31Z", "number": "8", "summary": "Current version" }, { "date": "2025-02-16T06:08:33Z", "number": "9", "summary": "Current version" }, { "date": "2025-03-15T06:10:54Z", "number": "10", "summary": "Current version" }, { "date": "2025-04-02T09:14:38Z", "number": "11", "summary": "Current version" }, { "date": "2025-04-09T01:54:36Z", "number": "12", "summary": "Current version" }, { "date": "2025-04-25T02:28:23Z", "number": "13", "summary": "Current version" }, { "date": "2025-06-04T03:44:16Z", "number": "14", "summary": "Current version" }, { "date": "2025-06-26T01:55:41Z", "number": "15", "summary": "Current version" }, { "date": "2025-09-29T00:12:51Z", "number": "16", "summary": "Current version" }, { "date": "2026-06-06T04:49:50Z", "number": "17", "summary": "unknown changes" } ], "status": "interim", "version": "17" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Module for Package Hub 15 SP5", "product": { "name": "SUSE Linux Enterprise Module for Package Hub 15 SP5", "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5", "product_identification_helper": { "cpe": "cpe:/o:suse:packagehub:15:sp5" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Module for Package Hub 15 SP6", "product": { "name": "SUSE Linux Enterprise Module for Package Hub 15 SP6", "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6", "product_identification_helper": { "cpe": "cpe:/o:suse:packagehub:15:sp6" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Module for Package Hub 15 SP7", "product": { "name": "SUSE Linux Enterprise Module for Package Hub 15 SP7", "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7", "product_identification_helper": { "cpe": "cpe:/o:suse:packagehub:15:sp7" } } }, { "category": "product_name", "name": "SUSE Manager Client Tools 12", "product": { "name": "SUSE Manager Client Tools 12", "product_id": "SUSE Manager Client Tools 12" } }, { "category": "product_name", "name": "SUSE Manager Client Tools 12-BETA", "product": { "name": "SUSE Manager Client Tools 12-BETA", "product_id": "SUSE Manager Client Tools 12-BETA" } }, { "category": "product_name", "name": "SUSE Manager Client Tools 15", "product": { "name": "SUSE Manager Client Tools 15", "product_id": "SUSE Manager Client Tools 15" } }, { "category": "product_name", "name": "SUSE Manager Proxy Module 4.2", "product": { "name": "SUSE Manager Proxy Module 4.2", "product_id": "SUSE Manager Proxy Module 4.2", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-suse-manager-proxy:4.2" } } }, { "category": "product_name", "name": "SUSE Manager Proxy Module 4.3", "product": { "name": "SUSE Manager Proxy Module 4.3", "product_id": "SUSE Manager Proxy Module 4.3", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-suse-manager-proxy:4.3" } } }, { "category": "product_name", "name": "openSUSE Leap 15.5", "product": { "name": "openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.5" } } }, { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } }, { "category": "product_version", "name": "golang-github-QubitProducts-exporter_exporter-0.4.0-4.6.2", "product": { "name": "golang-github-QubitProducts-exporter_exporter-0.4.0-4.6.2", "product_id": "golang-github-QubitProducts-exporter_exporter-0.4.0-4.6.2", "product_identification_helper": { "purl": "pkg:rpm/suse/golang-github-QubitProducts-exporter_exporter@0.4.0-4.6.2?upstream=golang-github-QubitProducts-exporter_exporter-0.4.0-4.6.2.src.rpm" } } }, { "category": "product_version", "name": "golang-github-boynux-squid_exporter-1.6-4.9.2", "product": { "name": "golang-github-boynux-squid_exporter-1.6-4.9.2", "product_id": "golang-github-boynux-squid_exporter-1.6-4.9.2", "product_identification_helper": { "purl": "pkg:rpm/suse/golang-github-boynux-squid_exporter@1.6-4.9.2?upstream=golang-github-boynux-squid_exporter-1.6-4.9.2.src.rpm" } } }, { "category": "product_version", "name": "golang-github-lusitaniae-apache_exporter-1.0.0-1.21.2", "product": { "name": "golang-github-lusitaniae-apache_exporter-1.0.0-1.21.2", "product_id": "golang-github-lusitaniae-apache_exporter-1.0.0-1.21.2", "product_identification_helper": { "purl": "pkg:rpm/suse/golang-github-lusitaniae-apache_exporter@1.0.0-1.21.2?upstream=golang-github-lusitaniae-apache_exporter-1.0.0-1.21.2.src.rpm" } } }, { "category": "product_version", "name": "golang-github-lusitaniae-apache_exporter-1.0.0-4.12.4", "product": { "name": "golang-github-lusitaniae-apache_exporter-1.0.0-4.12.4", "product_id": "golang-github-lusitaniae-apache_exporter-1.0.0-4.12.4", "product_identification_helper": { "purl": "pkg:rpm/suse/golang-github-lusitaniae-apache_exporter@1.0.0-4.12.4?upstream=golang-github-lusitaniae-apache_exporter-1.0.0-4.12.4.src.rpm" } } }, { "category": "product_version", "name": "golang-github-prometheus-alertmanager", "product": { "name": "golang-github-prometheus-alertmanager", "product_id": "golang-github-prometheus-alertmanager", "product_identification_helper": { "cpe": "cpe:2.3:a:prometheus:alertmanager:*:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/golang-github-prometheus-alertmanager@?upstream=golang-github-prometheus-alertmanager.src.rpm" } } }, { "category": "product_version", "name": "golang-github-prometheus-alertmanager-0.26.0-1.24.2", "product": { "name": "golang-github-prometheus-alertmanager-0.26.0-1.24.2", "product_id": "golang-github-prometheus-alertmanager-0.26.0-1.24.2", "product_identification_helper": { "cpe": "cpe:2.3:a:prometheus:alertmanager:0.26.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/golang-github-prometheus-alertmanager@0.26.0-1.24.2?upstream=golang-github-prometheus-alertmanager-0.26.0-1.24.2.src.rpm" } } }, { "category": "product_version", "name": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "product": { "name": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "product_id": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "product_identification_helper": { "cpe": "cpe:2.3:a:prometheus:alertmanager:0.26.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/golang-github-prometheus-alertmanager@0.26.0-150100.4.19.1?upstream=golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1.src.rpm" } } }, { "category": "product_version", "name": "golang-github-prometheus-alertmanager-0.26.0-4.1", "product": { "name": "golang-github-prometheus-alertmanager-0.26.0-4.1", "product_id": "golang-github-prometheus-alertmanager-0.26.0-4.1", "product_identification_helper": { "cpe": "cpe:2.3:a:prometheus:alertmanager:0.26.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/golang-github-prometheus-alertmanager@0.26.0-4.1?upstream=golang-github-prometheus-alertmanager-0.26.0-4.1.src.rpm" } } }, { "category": "product_version", "name": "golang-github-prometheus-alertmanager-0.26.0-4.12.4", "product": { "name": "golang-github-prometheus-alertmanager-0.26.0-4.12.4", "product_id": "golang-github-prometheus-alertmanager-0.26.0-4.12.4", "product_identification_helper": { "cpe": "cpe:2.3:a:prometheus:alertmanager:0.26.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/golang-github-prometheus-alertmanager@0.26.0-4.12.4?upstream=golang-github-prometheus-alertmanager-0.26.0-4.12.4.src.rpm" } } }, { "category": "product_version", "name": "golang-github-prometheus-node_exporter-1.5.0-4.15.4", "product": { "name": "golang-github-prometheus-node_exporter-1.5.0-4.15.4", "product_id": "golang-github-prometheus-node_exporter-1.5.0-4.15.4", "product_identification_helper": { "purl": "pkg:rpm/suse/golang-github-prometheus-node_exporter@1.5.0-4.15.4?upstream=golang-github-prometheus-node_exporter-1.5.0-4.15.4.src.rpm" } } }, { "category": "product_version", "name": "golang-github-prometheus-prometheus-2.45.0-1.50.2", "product": { "name": "golang-github-prometheus-prometheus-2.45.0-1.50.2", "product_id": "golang-github-prometheus-prometheus-2.45.0-1.50.2", "product_identification_helper": { "cpe": "cpe:2.3:a:prometheus:prometheus:2.45.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/golang-github-prometheus-prometheus@2.45.0-1.50.2?upstream=golang-github-prometheus-prometheus-2.45.0-1.50.2.src.rpm" } } }, { "category": "product_version", "name": "golang-github-prometheus-prometheus-2.45.0-4.33.3", "product": { "name": "golang-github-prometheus-prometheus-2.45.0-4.33.3", "product_id": "golang-github-prometheus-prometheus-2.45.0-4.33.3", "product_identification_helper": { "cpe": "cpe:2.3:a:prometheus:prometheus:2.45.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/golang-github-prometheus-prometheus@2.45.0-4.33.3?upstream=golang-github-prometheus-prometheus-2.45.0-4.33.3.src.rpm" } } }, { "category": "product_version", "name": "golang-github-prometheus-promu-0.14.0-4.12.2", "product": { "name": "golang-github-prometheus-promu-0.14.0-4.12.2", "product_id": "golang-github-prometheus-promu-0.14.0-4.12.2", "product_identification_helper": { "purl": "pkg:rpm/suse/golang-github-prometheus-promu@0.14.0-4.12.2?upstream=golang-github-prometheus-promu-0.14.0-4.12.2.src.rpm" } } }, { "category": "product_version", "name": "grafana-9.5.8-1.60.1", "product": { "name": "grafana-9.5.8-1.60.1", "product_id": "grafana-9.5.8-1.60.1", "product_identification_helper": { "cpe": "cpe:2.3:a:grafana:grafana:9.5.8:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/grafana@9.5.8-1.60.1?upstream=grafana-9.5.8-1.60.1.src.rpm" } } }, { "category": "product_version", "name": "grafana-9.5.8-4.21.2", "product": { "name": "grafana-9.5.8-4.21.2", "product_id": "grafana-9.5.8-4.21.2", "product_identification_helper": { "cpe": "cpe:2.3:a:grafana:grafana:9.5.8:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/grafana@9.5.8-4.21.2?upstream=grafana-9.5.8-4.21.2.src.rpm" } } }, { "category": "product_version", "name": "kiwi-desc-saltboot-0.1.1687520761.cefb248-4.15.2", "product": { "name": "kiwi-desc-saltboot-0.1.1687520761.cefb248-4.15.2", "product_id": "kiwi-desc-saltboot-0.1.1687520761.cefb248-4.15.2", "product_identification_helper": { "purl": "pkg:rpm/suse/kiwi-desc-saltboot@0.1.1687520761.cefb248-4.15.2?upstream=kiwi-desc-saltboot-0.1.1687520761.cefb248-4.15.2.src.rpm" } } }, { "category": "product_version", "name": "mgr-daemon-4.3.8-1.44.2", "product": { "name": "mgr-daemon-4.3.8-1.44.2", "product_id": "mgr-daemon-4.3.8-1.44.2", "product_identification_helper": { "purl": "pkg:rpm/suse/mgr-daemon@4.3.8-1.44.2?upstream=mgr-daemon-4.3.8-1.44.2.src.rpm" } } }, { "category": "product_version", "name": "mgr-push-5.0.1-4.21.4", "product": { "name": "mgr-push-5.0.1-4.21.4", "product_id": "mgr-push-5.0.1-4.21.4", "product_identification_helper": { "purl": "pkg:rpm/suse/mgr-push@5.0.1-4.21.4?upstream=mgr-push-5.0.1-4.21.4.src.rpm" } } }, { "category": "product_version", "name": "prometheus-blackbox_exporter-0.24.0-3.6.3", "product": { "name": "prometheus-blackbox_exporter-0.24.0-3.6.3", "product_id": "prometheus-blackbox_exporter-0.24.0-3.6.3", "product_identification_helper": { "purl": "pkg:rpm/suse/prometheus-blackbox_exporter@0.24.0-3.6.3?upstream=prometheus-blackbox_exporter-0.24.0-3.6.3.src.rpm" } } }, { "category": "product_version", "name": "prometheus-postgres_exporter-0.10.1-1.17.2", "product": { "name": "prometheus-postgres_exporter-0.10.1-1.17.2", "product_id": "prometheus-postgres_exporter-0.10.1-1.17.2", "product_identification_helper": { "purl": "pkg:rpm/suse/prometheus-postgres_exporter@0.10.1-1.17.2?upstream=prometheus-postgres_exporter-0.10.1-1.17.2.src.rpm" } } }, { "category": "product_version", "name": "prometheus-postgres_exporter-0.10.1-3.6.4", "product": { "name": "prometheus-postgres_exporter-0.10.1-3.6.4", "product_id": "prometheus-postgres_exporter-0.10.1-3.6.4", "product_identification_helper": { "purl": "pkg:rpm/suse/prometheus-postgres_exporter@0.10.1-3.6.4?upstream=prometheus-postgres_exporter-0.10.1-3.6.4.src.rpm" } } }, { "category": "product_version", "name": "python2-hwdata-2.3.5-15.12.2", "product": { "name": "python2-hwdata-2.3.5-15.12.2", "product_id": "python2-hwdata-2.3.5-15.12.2", "product_identification_helper": { "purl": "pkg:rpm/suse/python2-hwdata@2.3.5-15.12.2?upstream=python-hwdata-2.3.5-15.12.2.src.rpm" } } }, { "category": "product_version", "name": "python2-mgr-push-5.0.1-4.21.4", "product": { "name": "python2-mgr-push-5.0.1-4.21.4", "product_id": "python2-mgr-push-5.0.1-4.21.4", "product_identification_helper": { "purl": "pkg:rpm/suse/python2-mgr-push@5.0.1-4.21.4?upstream=mgr-push-5.0.1-4.21.4.src.rpm" } } }, { "category": "product_version", "name": "python2-rhnlib-5.0.1-24.30.3", "product": { "name": "python2-rhnlib-5.0.1-24.30.3", "product_id": "python2-rhnlib-5.0.1-24.30.3", "product_identification_helper": { "purl": "pkg:rpm/suse/python2-rhnlib@5.0.1-24.30.3?upstream=rhnlib-5.0.1-24.30.3.src.rpm" } } }, { "category": "product_version", "name": "python2-spacewalk-check-4.3.18-52.95.2", "product": { "name": "python2-spacewalk-check-4.3.18-52.95.2", "product_id": "python2-spacewalk-check-4.3.18-52.95.2", "product_identification_helper": { "purl": "pkg:rpm/suse/python2-spacewalk-check@4.3.18-52.95.2?upstream=spacewalk-client-tools-4.3.18-52.95.2.src.rpm" } } }, { "category": "product_version", "name": "python2-spacewalk-client-setup-4.3.18-52.95.2", "product": { "name": "python2-spacewalk-client-setup-4.3.18-52.95.2", "product_id": "python2-spacewalk-client-setup-4.3.18-52.95.2", "product_identification_helper": { "purl": "pkg:rpm/suse/python2-spacewalk-client-setup@4.3.18-52.95.2?upstream=spacewalk-client-tools-4.3.18-52.95.2.src.rpm" } } }, { "category": "product_version", "name": "python2-spacewalk-client-tools-4.3.18-52.95.2", "product": { "name": "python2-spacewalk-client-tools-4.3.18-52.95.2", "product_id": "python2-spacewalk-client-tools-4.3.18-52.95.2", "product_identification_helper": { "purl": "pkg:rpm/suse/python2-spacewalk-client-tools@4.3.18-52.95.2?upstream=spacewalk-client-tools-4.3.18-52.95.2.src.rpm" } } }, { "category": "product_version", "name": "python2-uyuni-common-libs-5.0.1-3.33.3", "product": { "name": "python2-uyuni-common-libs-5.0.1-3.33.3", "product_id": "python2-uyuni-common-libs-5.0.1-3.33.3", "product_identification_helper": { "purl": "pkg:rpm/suse/python2-uyuni-common-libs@5.0.1-3.33.3?upstream=uyuni-common-libs-5.0.1-3.33.3.src.rpm" } } }, { "category": "product_version", "name": "spacecmd-4.3.26-38.136.2", "product": { "name": "spacecmd-4.3.26-38.136.2", "product_id": "spacecmd-4.3.26-38.136.2", "product_identification_helper": { "purl": "pkg:rpm/suse/spacecmd@4.3.26-38.136.2?upstream=spacecmd-4.3.26-38.136.2.src.rpm" } } }, { "category": "product_version", "name": "spacecmd-5.0.1-41.42.3", "product": { "name": "spacecmd-5.0.1-41.42.3", "product_id": "spacecmd-5.0.1-41.42.3", "product_identification_helper": { "purl": "pkg:rpm/suse/spacecmd@5.0.1-41.42.3?upstream=spacecmd-5.0.1-41.42.3.src.rpm" } } }, { "category": "product_version", "name": "spacewalk-check-4.3.18-52.95.2", "product": { "name": "spacewalk-check-4.3.18-52.95.2", "product_id": "spacewalk-check-4.3.18-52.95.2", "product_identification_helper": { "purl": "pkg:rpm/suse/spacewalk-check@4.3.18-52.95.2?upstream=spacewalk-client-tools-4.3.18-52.95.2.src.rpm" } } }, { "category": "product_version", "name": "spacewalk-client-setup-4.3.18-52.95.2", "product": { "name": "spacewalk-client-setup-4.3.18-52.95.2", "product_id": "spacewalk-client-setup-4.3.18-52.95.2", "product_identification_helper": { "purl": "pkg:rpm/suse/spacewalk-client-setup@4.3.18-52.95.2?upstream=spacewalk-client-tools-4.3.18-52.95.2.src.rpm" } } }, { "category": "product_version", "name": "spacewalk-client-tools-4.3.18-52.95.2", "product": { "name": "spacewalk-client-tools-4.3.18-52.95.2", "product_id": "spacewalk-client-tools-4.3.18-52.95.2", "product_identification_helper": { "purl": "pkg:rpm/suse/spacewalk-client-tools@4.3.18-52.95.2?upstream=spacewalk-client-tools-4.3.18-52.95.2.src.rpm" } } }, { "category": "product_version", "name": "supportutils-plugin-salt-1.2.2-9.9.2", "product": { "name": "supportutils-plugin-salt-1.2.2-9.9.2", "product_id": "supportutils-plugin-salt-1.2.2-9.9.2", "product_identification_helper": { "purl": "pkg:rpm/suse/supportutils-plugin-salt@1.2.2-9.9.2?upstream=supportutils-plugin-salt-1.2.2-9.9.2.src.rpm" } } }, { "category": "product_version", "name": "supportutils-plugin-susemanager-client-5.0.1-9.15.2", "product": { "name": "supportutils-plugin-susemanager-client-5.0.1-9.15.2", "product_id": "supportutils-plugin-susemanager-client-5.0.1-9.15.2", "product_identification_helper": { "purl": "pkg:rpm/suse/supportutils-plugin-susemanager-client@5.0.1-9.15.2?upstream=supportutils-plugin-susemanager-client-5.0.1-9.15.2.src.rpm" } } }, { "category": "product_version", "name": "system-user-grafana-1.0.0-3.7.2", "product": { "name": "system-user-grafana-1.0.0-3.7.2", "product_id": "system-user-grafana-1.0.0-3.7.2", "product_identification_helper": { "purl": "pkg:rpm/suse/system-user-grafana@1.0.0-3.7.2?upstream=system-user-grafana-1.0.0-3.7.2.src.rpm" } } }, { "category": "product_version", "name": "system-user-prometheus-1.0.0-3.7.2", "product": { "name": "system-user-prometheus-1.0.0-3.7.2", "product_id": "system-user-prometheus-1.0.0-3.7.2", "product_identification_helper": { "purl": "pkg:rpm/suse/system-user-prometheus@1.0.0-3.7.2?upstream=system-user-prometheus-1.0.0-3.7.2.src.rpm" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1 as component of SUSE Linux Enterprise Module for Package Hub 15 SP5", "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1" }, "product_reference": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6", "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1" }, "product_reference": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7", "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP7:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1" }, "product_reference": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP7" }, { "category": "default_component_of", "full_product_name": { "name": "golang-github-lusitaniae-apache_exporter-1.0.0-1.21.2 as component of SUSE Manager Client Tools 12", "product_id": "SUSE Manager Client Tools 12:golang-github-lusitaniae-apache_exporter-1.0.0-1.21.2" }, "product_reference": "golang-github-lusitaniae-apache_exporter-1.0.0-1.21.2", "relates_to_product_reference": "SUSE Manager Client Tools 12" }, { "category": "default_component_of", "full_product_name": { "name": "golang-github-prometheus-alertmanager-0.26.0-1.24.2 as component of SUSE Manager Client Tools 12", "product_id": "SUSE Manager Client Tools 12:golang-github-prometheus-alertmanager-0.26.0-1.24.2" }, "product_reference": "golang-github-prometheus-alertmanager-0.26.0-1.24.2", "relates_to_product_reference": "SUSE Manager Client Tools 12" }, { "category": "default_component_of", "full_product_name": { "name": "golang-github-prometheus-prometheus-2.45.0-1.50.2 as component of SUSE Manager Client Tools 12", "product_id": "SUSE Manager Client Tools 12:golang-github-prometheus-prometheus-2.45.0-1.50.2" }, "product_reference": "golang-github-prometheus-prometheus-2.45.0-1.50.2", "relates_to_product_reference": "SUSE Manager Client Tools 12" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-9.5.8-1.60.1 as component of SUSE Manager Client Tools 12", "product_id": "SUSE Manager Client Tools 12:grafana-9.5.8-1.60.1" }, "product_reference": "grafana-9.5.8-1.60.1", "relates_to_product_reference": "SUSE Manager Client Tools 12" }, { "category": "default_component_of", "full_product_name": { "name": "mgr-daemon-4.3.8-1.44.2 as component of SUSE Manager Client Tools 12", "product_id": "SUSE Manager Client Tools 12:mgr-daemon-4.3.8-1.44.2" }, "product_reference": "mgr-daemon-4.3.8-1.44.2", "relates_to_product_reference": "SUSE Manager Client Tools 12" }, { "category": "default_component_of", "full_product_name": { "name": "prometheus-postgres_exporter-0.10.1-1.17.2 as component of SUSE Manager Client Tools 12", "product_id": "SUSE Manager Client Tools 12:prometheus-postgres_exporter-0.10.1-1.17.2" }, "product_reference": "prometheus-postgres_exporter-0.10.1-1.17.2", "relates_to_product_reference": "SUSE Manager Client Tools 12" }, { "category": "default_component_of", "full_product_name": { "name": "python2-spacewalk-check-4.3.18-52.95.2 as component of SUSE Manager Client Tools 12", "product_id": "SUSE Manager Client Tools 12:python2-spacewalk-check-4.3.18-52.95.2" }, "product_reference": "python2-spacewalk-check-4.3.18-52.95.2", "relates_to_product_reference": "SUSE Manager Client Tools 12" }, { "category": "default_component_of", "full_product_name": { "name": "python2-spacewalk-client-setup-4.3.18-52.95.2 as component of SUSE Manager Client Tools 12", "product_id": "SUSE Manager Client Tools 12:python2-spacewalk-client-setup-4.3.18-52.95.2" }, "product_reference": "python2-spacewalk-client-setup-4.3.18-52.95.2", "relates_to_product_reference": "SUSE Manager Client Tools 12" }, { "category": "default_component_of", "full_product_name": { "name": "python2-spacewalk-client-tools-4.3.18-52.95.2 as component of SUSE Manager Client Tools 12", "product_id": "SUSE Manager Client Tools 12:python2-spacewalk-client-tools-4.3.18-52.95.2" }, "product_reference": "python2-spacewalk-client-tools-4.3.18-52.95.2", "relates_to_product_reference": "SUSE Manager Client Tools 12" }, { "category": "default_component_of", "full_product_name": { "name": "spacecmd-4.3.26-38.136.2 as component of SUSE Manager Client Tools 12", "product_id": "SUSE Manager Client Tools 12:spacecmd-4.3.26-38.136.2" }, "product_reference": "spacecmd-4.3.26-38.136.2", "relates_to_product_reference": "SUSE Manager Client Tools 12" }, { "category": "default_component_of", "full_product_name": { "name": "spacewalk-check-4.3.18-52.95.2 as component of SUSE Manager Client Tools 12", "product_id": "SUSE Manager Client Tools 12:spacewalk-check-4.3.18-52.95.2" }, "product_reference": "spacewalk-check-4.3.18-52.95.2", "relates_to_product_reference": "SUSE Manager Client Tools 12" }, { "category": "default_component_of", "full_product_name": { "name": "spacewalk-client-setup-4.3.18-52.95.2 as component of SUSE Manager Client Tools 12", "product_id": "SUSE Manager Client Tools 12:spacewalk-client-setup-4.3.18-52.95.2" }, "product_reference": "spacewalk-client-setup-4.3.18-52.95.2", "relates_to_product_reference": "SUSE Manager Client Tools 12" }, { "category": "default_component_of", "full_product_name": { "name": "spacewalk-client-tools-4.3.18-52.95.2 as component of SUSE Manager Client Tools 12", "product_id": "SUSE Manager Client Tools 12:spacewalk-client-tools-4.3.18-52.95.2" }, "product_reference": "spacewalk-client-tools-4.3.18-52.95.2", "relates_to_product_reference": "SUSE Manager Client Tools 12" }, { "category": "default_component_of", "full_product_name": { "name": "golang-github-QubitProducts-exporter_exporter-0.4.0-4.6.2 as component of SUSE Manager Client Tools 12-BETA", "product_id": "SUSE Manager Client Tools 12-BETA:golang-github-QubitProducts-exporter_exporter-0.4.0-4.6.2" }, "product_reference": "golang-github-QubitProducts-exporter_exporter-0.4.0-4.6.2", "relates_to_product_reference": "SUSE Manager Client Tools 12-BETA" }, { "category": "default_component_of", "full_product_name": { "name": "golang-github-boynux-squid_exporter-1.6-4.9.2 as component of SUSE Manager Client Tools 12-BETA", "product_id": "SUSE Manager Client Tools 12-BETA:golang-github-boynux-squid_exporter-1.6-4.9.2" }, "product_reference": "golang-github-boynux-squid_exporter-1.6-4.9.2", "relates_to_product_reference": "SUSE Manager Client Tools 12-BETA" }, { "category": "default_component_of", "full_product_name": { "name": "golang-github-lusitaniae-apache_exporter-1.0.0-4.12.4 as component of SUSE Manager Client Tools 12-BETA", "product_id": "SUSE Manager Client Tools 12-BETA:golang-github-lusitaniae-apache_exporter-1.0.0-4.12.4" }, "product_reference": "golang-github-lusitaniae-apache_exporter-1.0.0-4.12.4", "relates_to_product_reference": "SUSE Manager Client Tools 12-BETA" }, { "category": "default_component_of", "full_product_name": { "name": "golang-github-prometheus-alertmanager-0.26.0-4.12.4 as component of SUSE Manager Client Tools 12-BETA", "product_id": "SUSE Manager Client Tools 12-BETA:golang-github-prometheus-alertmanager-0.26.0-4.12.4" }, "product_reference": "golang-github-prometheus-alertmanager-0.26.0-4.12.4", "relates_to_product_reference": "SUSE Manager Client Tools 12-BETA" }, { "category": "default_component_of", "full_product_name": { "name": "golang-github-prometheus-node_exporter-1.5.0-4.15.4 as component of SUSE Manager Client Tools 12-BETA", "product_id": "SUSE Manager Client Tools 12-BETA:golang-github-prometheus-node_exporter-1.5.0-4.15.4" }, "product_reference": "golang-github-prometheus-node_exporter-1.5.0-4.15.4", "relates_to_product_reference": "SUSE Manager Client Tools 12-BETA" }, { "category": "default_component_of", "full_product_name": { "name": "golang-github-prometheus-prometheus-2.45.0-4.33.3 as component of SUSE Manager Client Tools 12-BETA", "product_id": "SUSE Manager Client Tools 12-BETA:golang-github-prometheus-prometheus-2.45.0-4.33.3" }, "product_reference": "golang-github-prometheus-prometheus-2.45.0-4.33.3", "relates_to_product_reference": "SUSE Manager Client Tools 12-BETA" }, { "category": "default_component_of", "full_product_name": { "name": "golang-github-prometheus-promu-0.14.0-4.12.2 as component of SUSE Manager Client Tools 12-BETA", "product_id": "SUSE Manager Client Tools 12-BETA:golang-github-prometheus-promu-0.14.0-4.12.2" }, "product_reference": "golang-github-prometheus-promu-0.14.0-4.12.2", "relates_to_product_reference": "SUSE Manager Client Tools 12-BETA" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-9.5.8-4.21.2 as component of SUSE Manager Client Tools 12-BETA", "product_id": "SUSE Manager Client Tools 12-BETA:grafana-9.5.8-4.21.2" }, "product_reference": "grafana-9.5.8-4.21.2", "relates_to_product_reference": "SUSE Manager Client Tools 12-BETA" }, { "category": "default_component_of", "full_product_name": { "name": "kiwi-desc-saltboot-0.1.1687520761.cefb248-4.15.2 as component of SUSE Manager Client Tools 12-BETA", "product_id": "SUSE Manager Client Tools 12-BETA:kiwi-desc-saltboot-0.1.1687520761.cefb248-4.15.2" }, "product_reference": "kiwi-desc-saltboot-0.1.1687520761.cefb248-4.15.2", "relates_to_product_reference": "SUSE Manager Client Tools 12-BETA" }, { "category": "default_component_of", "full_product_name": { "name": "mgr-push-5.0.1-4.21.4 as component of SUSE Manager Client Tools 12-BETA", "product_id": "SUSE Manager Client Tools 12-BETA:mgr-push-5.0.1-4.21.4" }, "product_reference": "mgr-push-5.0.1-4.21.4", "relates_to_product_reference": "SUSE Manager Client Tools 12-BETA" }, { "category": "default_component_of", "full_product_name": { "name": "prometheus-blackbox_exporter-0.24.0-3.6.3 as component of SUSE Manager Client Tools 12-BETA", "product_id": "SUSE Manager Client Tools 12-BETA:prometheus-blackbox_exporter-0.24.0-3.6.3" }, "product_reference": "prometheus-blackbox_exporter-0.24.0-3.6.3", "relates_to_product_reference": "SUSE Manager Client Tools 12-BETA" }, { "category": "default_component_of", "full_product_name": { "name": "prometheus-postgres_exporter-0.10.1-3.6.4 as component of SUSE Manager Client Tools 12-BETA", "product_id": "SUSE Manager Client Tools 12-BETA:prometheus-postgres_exporter-0.10.1-3.6.4" }, "product_reference": "prometheus-postgres_exporter-0.10.1-3.6.4", "relates_to_product_reference": "SUSE Manager Client Tools 12-BETA" }, { "category": "default_component_of", "full_product_name": { "name": "python2-hwdata-2.3.5-15.12.2 as component of SUSE Manager Client Tools 12-BETA", "product_id": "SUSE Manager Client Tools 12-BETA:python2-hwdata-2.3.5-15.12.2" }, "product_reference": "python2-hwdata-2.3.5-15.12.2", "relates_to_product_reference": "SUSE Manager Client Tools 12-BETA" }, { "category": "default_component_of", "full_product_name": { "name": "python2-mgr-push-5.0.1-4.21.4 as component of SUSE Manager Client Tools 12-BETA", "product_id": "SUSE Manager Client Tools 12-BETA:python2-mgr-push-5.0.1-4.21.4" }, "product_reference": "python2-mgr-push-5.0.1-4.21.4", "relates_to_product_reference": "SUSE Manager Client Tools 12-BETA" }, { "category": "default_component_of", "full_product_name": { "name": "python2-rhnlib-5.0.1-24.30.3 as component of SUSE Manager Client Tools 12-BETA", "product_id": "SUSE Manager Client Tools 12-BETA:python2-rhnlib-5.0.1-24.30.3" }, "product_reference": "python2-rhnlib-5.0.1-24.30.3", "relates_to_product_reference": "SUSE Manager Client Tools 12-BETA" }, { "category": "default_component_of", "full_product_name": { "name": "python2-uyuni-common-libs-5.0.1-3.33.3 as component of SUSE Manager Client Tools 12-BETA", "product_id": "SUSE Manager Client Tools 12-BETA:python2-uyuni-common-libs-5.0.1-3.33.3" }, "product_reference": "python2-uyuni-common-libs-5.0.1-3.33.3", "relates_to_product_reference": "SUSE Manager Client Tools 12-BETA" }, { "category": "default_component_of", "full_product_name": { "name": "spacecmd-5.0.1-41.42.3 as component of SUSE Manager Client Tools 12-BETA", "product_id": "SUSE Manager Client Tools 12-BETA:spacecmd-5.0.1-41.42.3" }, "product_reference": "spacecmd-5.0.1-41.42.3", "relates_to_product_reference": "SUSE Manager Client Tools 12-BETA" }, { "category": "default_component_of", "full_product_name": { "name": "supportutils-plugin-salt-1.2.2-9.9.2 as component of SUSE Manager Client Tools 12-BETA", "product_id": "SUSE Manager Client Tools 12-BETA:supportutils-plugin-salt-1.2.2-9.9.2" }, "product_reference": "supportutils-plugin-salt-1.2.2-9.9.2", "relates_to_product_reference": "SUSE Manager Client Tools 12-BETA" }, { "category": "default_component_of", "full_product_name": { "name": "supportutils-plugin-susemanager-client-5.0.1-9.15.2 as component of SUSE Manager Client Tools 12-BETA", "product_id": "SUSE Manager Client Tools 12-BETA:supportutils-plugin-susemanager-client-5.0.1-9.15.2" }, "product_reference": "supportutils-plugin-susemanager-client-5.0.1-9.15.2", "relates_to_product_reference": "SUSE Manager Client Tools 12-BETA" }, { "category": "default_component_of", "full_product_name": { "name": "system-user-grafana-1.0.0-3.7.2 as component of SUSE Manager Client Tools 12-BETA", "product_id": "SUSE Manager Client Tools 12-BETA:system-user-grafana-1.0.0-3.7.2" }, "product_reference": "system-user-grafana-1.0.0-3.7.2", "relates_to_product_reference": "SUSE Manager Client Tools 12-BETA" }, { "category": "default_component_of", "full_product_name": { "name": "system-user-prometheus-1.0.0-3.7.2 as component of SUSE Manager Client Tools 12-BETA", "product_id": "SUSE Manager Client Tools 12-BETA:system-user-prometheus-1.0.0-3.7.2" }, "product_reference": "system-user-prometheus-1.0.0-3.7.2", "relates_to_product_reference": "SUSE Manager Client Tools 12-BETA" }, { "category": "default_component_of", "full_product_name": { "name": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1 as component of SUSE Manager Client Tools 15", "product_id": "SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1" }, "product_reference": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "relates_to_product_reference": "SUSE Manager Client Tools 15" }, { "category": "default_component_of", "full_product_name": { "name": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1 as component of SUSE Manager Proxy Module 4.3", "product_id": "SUSE Manager Proxy Module 4.3:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1" }, "product_reference": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "relates_to_product_reference": "SUSE Manager Proxy Module 4.3" }, { "category": "default_component_of", "full_product_name": { "name": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1 as component of openSUSE Leap 15.5", "product_id": "openSUSE Leap 15.5:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1" }, "product_reference": "golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "relates_to_product_reference": "openSUSE Leap 15.5" }, { "category": "default_component_of", "full_product_name": { "name": "golang-github-prometheus-alertmanager-0.26.0-4.1 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:golang-github-prometheus-alertmanager-0.26.0-4.1" }, "product_reference": "golang-github-prometheus-alertmanager-0.26.0-4.1", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "golang-github-prometheus-alertmanager as component of SUSE Manager Proxy Module 4.2", "product_id": "SUSE Manager Proxy Module 4.2:golang-github-prometheus-alertmanager" }, "product_reference": "golang-github-prometheus-alertmanager", "relates_to_product_reference": "SUSE Manager Proxy Module 4.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-40577", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-40577" } ], "notes": [ { "category": "general", "text": "Alertmanager handles alerts sent by client applications such as the Prometheus server. An attacker with the permission to perform POST requests on the /api/v1/alerts endpoint could be able to execute arbitrary JavaScript code on the users of Prometheus Alertmanager. This issue has been fixed in Alertmanager version 0.2.51.", "title": "CVE description" } ], "product_status": { "known_not_affected": [ "SUSE Manager Proxy Module 4.2:golang-github-prometheus-alertmanager" ], "recommended": [ "SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "SUSE Linux Enterprise Module for Package Hub 15 SP6:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "SUSE Linux Enterprise Module for Package Hub 15 SP7:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "SUSE Manager Client Tools 12-BETA:golang-github-QubitProducts-exporter_exporter-0.4.0-4.6.2", "SUSE Manager Client Tools 12-BETA:golang-github-boynux-squid_exporter-1.6-4.9.2", "SUSE Manager Client Tools 12-BETA:golang-github-lusitaniae-apache_exporter-1.0.0-4.12.4", "SUSE Manager Client Tools 12-BETA:golang-github-prometheus-alertmanager-0.26.0-4.12.4", "SUSE Manager Client Tools 12-BETA:golang-github-prometheus-node_exporter-1.5.0-4.15.4", "SUSE Manager Client Tools 12-BETA:golang-github-prometheus-prometheus-2.45.0-4.33.3", "SUSE Manager Client Tools 12-BETA:golang-github-prometheus-promu-0.14.0-4.12.2", "SUSE Manager Client Tools 12-BETA:grafana-9.5.8-4.21.2", "SUSE Manager Client Tools 12-BETA:kiwi-desc-saltboot-0.1.1687520761.cefb248-4.15.2", "SUSE Manager Client Tools 12-BETA:mgr-push-5.0.1-4.21.4", "SUSE Manager Client Tools 12-BETA:prometheus-blackbox_exporter-0.24.0-3.6.3", "SUSE Manager Client Tools 12-BETA:prometheus-postgres_exporter-0.10.1-3.6.4", "SUSE Manager Client Tools 12-BETA:python2-hwdata-2.3.5-15.12.2", "SUSE Manager Client Tools 12-BETA:python2-mgr-push-5.0.1-4.21.4", "SUSE Manager Client Tools 12-BETA:python2-rhnlib-5.0.1-24.30.3", "SUSE Manager Client Tools 12-BETA:python2-uyuni-common-libs-5.0.1-3.33.3", "SUSE Manager Client Tools 12-BETA:spacecmd-5.0.1-41.42.3", "SUSE Manager Client Tools 12-BETA:supportutils-plugin-salt-1.2.2-9.9.2", "SUSE Manager Client Tools 12-BETA:supportutils-plugin-susemanager-client-5.0.1-9.15.2", "SUSE Manager Client Tools 12-BETA:system-user-grafana-1.0.0-3.7.2", "SUSE Manager Client Tools 12-BETA:system-user-prometheus-1.0.0-3.7.2", "SUSE Manager Client Tools 12:golang-github-lusitaniae-apache_exporter-1.0.0-1.21.2", "SUSE Manager Client Tools 12:golang-github-prometheus-alertmanager-0.26.0-1.24.2", "SUSE Manager Client Tools 12:golang-github-prometheus-prometheus-2.45.0-1.50.2", "SUSE Manager Client Tools 12:grafana-9.5.8-1.60.1", "SUSE Manager Client Tools 12:mgr-daemon-4.3.8-1.44.2", "SUSE Manager Client Tools 12:prometheus-postgres_exporter-0.10.1-1.17.2", "SUSE Manager Client Tools 12:python2-spacewalk-check-4.3.18-52.95.2", "SUSE Manager Client Tools 12:python2-spacewalk-client-setup-4.3.18-52.95.2", "SUSE Manager Client Tools 12:python2-spacewalk-client-tools-4.3.18-52.95.2", "SUSE Manager Client Tools 12:spacecmd-4.3.26-38.136.2", "SUSE Manager Client Tools 12:spacewalk-check-4.3.18-52.95.2", "SUSE Manager Client Tools 12:spacewalk-client-setup-4.3.18-52.95.2", "SUSE Manager Client Tools 12:spacewalk-client-tools-4.3.18-52.95.2", "SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "SUSE Manager Proxy Module 4.3:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "openSUSE Leap 15.5:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "openSUSE Tumbleweed:golang-github-prometheus-alertmanager-0.26.0-4.1" ] }, "references": [ { "category": "external", "summary": "CVE-2023-40577", "url": "https://www.suse.com/security/cve/CVE-2023-40577" }, { "category": "external", "summary": "SUSE Security Ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "external", "summary": "SUSE Bug 1218838 for CVE-2023-40577", "url": "https://bugzilla.suse.com/1218838" }, { "category": "external", "summary": "Advisory link for SUSE-SU-2024:0191-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-January/017744.html" }, { "category": "external", "summary": "Advisory link for SUSE-SU-2024:0486-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017932.html" }, { "category": "external", "summary": "Advisory link for SUSE-SU-2024:0512-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017925.html" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "SUSE Linux Enterprise Module for Package Hub 15 SP6:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "SUSE Linux Enterprise Module for Package Hub 15 SP7:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "SUSE Manager Client Tools 12-BETA:golang-github-QubitProducts-exporter_exporter-0.4.0-4.6.2", "SUSE Manager Client Tools 12-BETA:golang-github-boynux-squid_exporter-1.6-4.9.2", "SUSE Manager Client Tools 12-BETA:golang-github-lusitaniae-apache_exporter-1.0.0-4.12.4", "SUSE Manager Client Tools 12-BETA:golang-github-prometheus-alertmanager-0.26.0-4.12.4", "SUSE Manager Client Tools 12-BETA:golang-github-prometheus-node_exporter-1.5.0-4.15.4", "SUSE Manager Client Tools 12-BETA:golang-github-prometheus-prometheus-2.45.0-4.33.3", "SUSE Manager Client Tools 12-BETA:golang-github-prometheus-promu-0.14.0-4.12.2", "SUSE Manager Client Tools 12-BETA:grafana-9.5.8-4.21.2", "SUSE Manager Client Tools 12-BETA:kiwi-desc-saltboot-0.1.1687520761.cefb248-4.15.2", "SUSE Manager Client Tools 12-BETA:mgr-push-5.0.1-4.21.4", "SUSE Manager Client Tools 12-BETA:prometheus-blackbox_exporter-0.24.0-3.6.3", "SUSE Manager Client Tools 12-BETA:prometheus-postgres_exporter-0.10.1-3.6.4", "SUSE Manager Client Tools 12-BETA:python2-hwdata-2.3.5-15.12.2", "SUSE Manager Client Tools 12-BETA:python2-mgr-push-5.0.1-4.21.4", "SUSE Manager Client Tools 12-BETA:python2-rhnlib-5.0.1-24.30.3", "SUSE Manager Client Tools 12-BETA:python2-uyuni-common-libs-5.0.1-3.33.3", "SUSE Manager Client Tools 12-BETA:spacecmd-5.0.1-41.42.3", "SUSE Manager Client Tools 12-BETA:supportutils-plugin-salt-1.2.2-9.9.2", "SUSE Manager Client Tools 12-BETA:supportutils-plugin-susemanager-client-5.0.1-9.15.2", "SUSE Manager Client Tools 12-BETA:system-user-grafana-1.0.0-3.7.2", "SUSE Manager Client Tools 12-BETA:system-user-prometheus-1.0.0-3.7.2", "SUSE Manager Client Tools 12:golang-github-lusitaniae-apache_exporter-1.0.0-1.21.2", "SUSE Manager Client Tools 12:golang-github-prometheus-alertmanager-0.26.0-1.24.2", "SUSE Manager Client Tools 12:golang-github-prometheus-prometheus-2.45.0-1.50.2", "SUSE Manager Client Tools 12:grafana-9.5.8-1.60.1", "SUSE Manager Client Tools 12:mgr-daemon-4.3.8-1.44.2", "SUSE Manager Client Tools 12:prometheus-postgres_exporter-0.10.1-1.17.2", "SUSE Manager Client Tools 12:python2-spacewalk-check-4.3.18-52.95.2", "SUSE Manager Client Tools 12:python2-spacewalk-client-setup-4.3.18-52.95.2", "SUSE Manager Client Tools 12:python2-spacewalk-client-tools-4.3.18-52.95.2", "SUSE Manager Client Tools 12:spacecmd-4.3.26-38.136.2", "SUSE Manager Client Tools 12:spacewalk-check-4.3.18-52.95.2", "SUSE Manager Client Tools 12:spacewalk-client-setup-4.3.18-52.95.2", "SUSE Manager Client Tools 12:spacewalk-client-tools-4.3.18-52.95.2", "SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "SUSE Manager Proxy Module 4.3:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "openSUSE Leap 15.5:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "openSUSE Tumbleweed:golang-github-prometheus-alertmanager-0.26.0-4.1" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "SUSE Linux Enterprise Module for Package Hub 15 SP5:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "SUSE Linux Enterprise Module for Package Hub 15 SP6:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "SUSE Linux Enterprise Module for Package Hub 15 SP7:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "SUSE Manager Client Tools 12-BETA:golang-github-QubitProducts-exporter_exporter-0.4.0-4.6.2", "SUSE Manager Client Tools 12-BETA:golang-github-boynux-squid_exporter-1.6-4.9.2", "SUSE Manager Client Tools 12-BETA:golang-github-lusitaniae-apache_exporter-1.0.0-4.12.4", "SUSE Manager Client Tools 12-BETA:golang-github-prometheus-alertmanager-0.26.0-4.12.4", "SUSE Manager Client Tools 12-BETA:golang-github-prometheus-node_exporter-1.5.0-4.15.4", "SUSE Manager Client Tools 12-BETA:golang-github-prometheus-prometheus-2.45.0-4.33.3", "SUSE Manager Client Tools 12-BETA:golang-github-prometheus-promu-0.14.0-4.12.2", "SUSE Manager Client Tools 12-BETA:grafana-9.5.8-4.21.2", "SUSE Manager Client Tools 12-BETA:kiwi-desc-saltboot-0.1.1687520761.cefb248-4.15.2", "SUSE Manager Client Tools 12-BETA:mgr-push-5.0.1-4.21.4", "SUSE Manager Client Tools 12-BETA:prometheus-blackbox_exporter-0.24.0-3.6.3", "SUSE Manager Client Tools 12-BETA:prometheus-postgres_exporter-0.10.1-3.6.4", "SUSE Manager Client Tools 12-BETA:python2-hwdata-2.3.5-15.12.2", "SUSE Manager Client Tools 12-BETA:python2-mgr-push-5.0.1-4.21.4", "SUSE Manager Client Tools 12-BETA:python2-rhnlib-5.0.1-24.30.3", "SUSE Manager Client Tools 12-BETA:python2-uyuni-common-libs-5.0.1-3.33.3", "SUSE Manager Client Tools 12-BETA:spacecmd-5.0.1-41.42.3", "SUSE Manager Client Tools 12-BETA:supportutils-plugin-salt-1.2.2-9.9.2", "SUSE Manager Client Tools 12-BETA:supportutils-plugin-susemanager-client-5.0.1-9.15.2", "SUSE Manager Client Tools 12-BETA:system-user-grafana-1.0.0-3.7.2", "SUSE Manager Client Tools 12-BETA:system-user-prometheus-1.0.0-3.7.2", "SUSE Manager Client Tools 12:golang-github-lusitaniae-apache_exporter-1.0.0-1.21.2", "SUSE Manager Client Tools 12:golang-github-prometheus-alertmanager-0.26.0-1.24.2", "SUSE Manager Client Tools 12:golang-github-prometheus-prometheus-2.45.0-1.50.2", "SUSE Manager Client Tools 12:grafana-9.5.8-1.60.1", "SUSE Manager Client Tools 12:mgr-daemon-4.3.8-1.44.2", "SUSE Manager Client Tools 12:prometheus-postgres_exporter-0.10.1-1.17.2", "SUSE Manager Client Tools 12:python2-spacewalk-check-4.3.18-52.95.2", "SUSE Manager Client Tools 12:python2-spacewalk-client-setup-4.3.18-52.95.2", "SUSE Manager Client Tools 12:python2-spacewalk-client-tools-4.3.18-52.95.2", "SUSE Manager Client Tools 12:spacecmd-4.3.26-38.136.2", "SUSE Manager Client Tools 12:spacewalk-check-4.3.18-52.95.2", "SUSE Manager Client Tools 12:spacewalk-client-setup-4.3.18-52.95.2", "SUSE Manager Client Tools 12:spacewalk-client-tools-4.3.18-52.95.2", "SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "SUSE Manager Proxy Module 4.3:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "openSUSE Leap 15.5:golang-github-prometheus-alertmanager-0.26.0-150100.4.19.1", "openSUSE Tumbleweed:golang-github-prometheus-alertmanager-0.26.0-4.1" ] } ], "threats": [ { "category": "impact", "date": "2023-08-25T02:00:45Z", "details": "important" } ], "title": "CVE-2023-40577" } ] }