GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

SUSE-EL-9-CLIENT-TOOLS-2026-2254

Vulnerability from csaf_suse - Published: 2026-06-03 14:18 - Updated: 2026-09-16 18:55
Summary
Security update 5.0.8 for Multi-Linux Manager Client Tools
Severity
Important
Notes
Title of the patch: Security update 5.0.8 for Multi-Linux Manager Client Tools
Description of the patch: This update fixes the following issues: golang-github-QubitProducts-exporter_exporter: - Security Fixes: - CVE-2022-21698: Fixed denial of service using InstrumentHandlerCounter (bsc#1248707) golang-github-prometheus-node_exporter was updated from version 1.5.0 to 1.10.2: - Security Fixes: - Version 1.9.1: - CVE-2025-22870: Fixed potential proxy bypass using IPv6 zone IDs (bsc#1238686) - Version 1.9.0: - CVE-2023-45288: Close connections when receiving too many headers (bsc#1236516) - Highlights of other changes and bug fixes: - Backward Compatibility and packaging changes: - Added compatibility for Go 1.22/1.23 needed in older RHEL toolchains - Pinned golang.org/x/net to v0.37.0 for Go 1.22 compatibility - Version 1.10.2: - Fixed typo in Zswap metric name (meminfo) - Version 1.10.1: - Fixed mount points being collected multiple times (filesystem) - Refactored mountinfo parsing (bsc#1261810) - Added Zswap/Zswapped metrics (meminfo) - Version 1.10.0: - New collectors: PCIe devices, swaps - Added systemd virtualization metrics, AIX metrics - WiFi packet metrics, additional PCIe and TLB metrics - Changed mdadm to use sysfs, added erofs to excluded filesystems - Fixed bugs: cpufreq collector, ethtool metrics - Version 1.9.1: - Fixed missing IRQ on older kernels (pressure) - Version 1.9.0 (jsc#PED-12485): - Switched to Go log/slog for logging - Converted meminfo to use procfs library - New features: filesystem mount info, Btrfs commit stats, interrupt filtering, slabinfo filters, IRQ PSI metrics, hwmon filtering, network interface alias labels, GPU clock frequencies, AIX support, - Enhancements: TCP receive queue drop, block device rotational status, CPU online status, performance optimizations - Fixed: ZFS integer underflow, CPU pressure on limited systems, dataset name parsing - Version 1.8.x: - Fixed CPU pressure metric collection, CPU seconds on Solaris, pressure collector nil reference - Version 1.8.0: - New collectors: xfrm (IPsec), watchdog - Added CPU vulnerability mitigation labels, TCP out-of-order queue metrics, filesystem device error surfacing - Removed caching of os-release file modtime/filename - Fixed: hwmon nil pointer, ethtool metric sanitization, NetClass data race - Version 1.7.0 (jsc#PED-7893, jsc#PED-7928): - New: CPU vulnerabilities reporting from sysfs - Enhancements: parallelized filesystem stat calls, missing link speeds in ethtool, CPU MHz values, qdisc performance, hwmon filtering, rtnetlink for ARP stats - Fixed: netdev 32-bit fallback, btrfs handle leaks, NFSd v4 index - Version 1.6.0: - Deprecated ntp and supervisord collectors - Removed bcache cache_readaheads_totals metrics - Improved offline CPU handling (removed metrics for offline CPUs) - New: softirqs collector - Enhancements: ZFS zpool states and memory metrics, network interface admin state, CPU frequency governor, reduced btrfs privileges - Fixed: perf tracefs detection, thermal zone noise, Linux aarch64 interrupts prometheus-postgres_exporter: - Security Fixes: - CVE-2022-21698: Fixed denial of service using InstrumentHandlerCounter (bsc#1248699) scap-security-guide: - Update the SSG package description - Add SLE16 profiles to the build - Updated to 0.1.79 (jsc#ECO-3319) - Create SLE16 HIPAA profile - Create SLE16 PCI DSS 4 profile - Use Sequoia in RHEL 10 instead of GPG - New Profile for RHEL10: BSI - Move RHEL Control files to product files - Update RHEL 9 CCN profile - Various updates for SLE 12/15 spacecmd: - Version 5.0.16-0 * Update translation strings uyuni-tools: - Version 0.1.39-0 * mgrpxy ssh tuning should happen before crypto policies (bsc#1254619) * Fix default value for helm registry (bsc#1258927). * Use static supportconfig name to avoid dynamic search (bsc#1257941) * Do not nest multiple tarball files and instead collect all files into one tarball (bsc#1252964) * Show where final tarball was generated (bsc#1259208)
Patchnames: SUSE-EL-9-CLIENT-TOOLS-2026-2254
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2022-21698
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.s390x —
Vendor Fix
Unresolved product id: SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.s390x —
Vendor Fix
Unresolved product id: SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-bash-completion-0.1.39-1.32.1.noarch —
Vendor Fix
Unresolved product id: SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-zsh-completion-0.1.39-1.32.1.noarch —
Vendor Fix
Unresolved product id: SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.s390x —
Vendor Fix
Unresolved product id: SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:scap-security-guide-redhat-0.1.80-1.44.1.noarch —
Vendor Fix
Unresolved product id: SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:spacecmd-5.0.16-1.61.1.noarch —
Vendor Fix
Threats
Impact important
CVE-2023-45288
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Recommended 19 products, the same list as for CVE-2022-21698
Threats
Impact moderate
CVE-2025-22870
4.4 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Affected products
Recommended 19 products, the same list as for CVE-2022-21698
Threats
Impact moderate
References
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update 5.0.8 for Multi-Linux Manager Client Tools",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update fixes the following issues:\n\ngolang-github-QubitProducts-exporter_exporter:\n\n- Security Fixes:\n\n  - CVE-2022-21698: Fixed denial of service using InstrumentHandlerCounter (bsc#1248707)\n\ngolang-github-prometheus-node_exporter was updated from version 1.5.0 to 1.10.2:\n\n- Security Fixes:\n\n  - Version 1.9.1:\n    - CVE-2025-22870: Fixed potential proxy bypass using IPv6 zone IDs (bsc#1238686)\n\n  - Version 1.9.0:\n    - CVE-2023-45288: Close connections when receiving too many headers (bsc#1236516)\n\n- Highlights of other changes and bug fixes:\n\n  - Backward Compatibility and packaging changes:\n    - Added compatibility for Go 1.22/1.23 needed in older RHEL toolchains\n    - Pinned golang.org/x/net to v0.37.0 for Go 1.22 compatibility\n\n  - Version 1.10.2:\n    - Fixed typo in Zswap metric name (meminfo)\n\n  - Version 1.10.1:\n    - Fixed mount points being collected multiple times (filesystem)\n    - Refactored mountinfo parsing (bsc#1261810)\n    - Added Zswap/Zswapped metrics (meminfo)\n\n  - Version 1.10.0:\n    - New collectors: PCIe devices, swaps\n    - Added systemd virtualization metrics, AIX metrics\n    - WiFi packet metrics, additional PCIe and TLB metrics\n    - Changed mdadm to use sysfs, added erofs to excluded filesystems\n    - Fixed bugs: cpufreq collector, ethtool metrics\n\n  - Version 1.9.1:\n    - Fixed missing IRQ on older kernels (pressure)\n\n  - Version 1.9.0 (jsc#PED-12485):\n    - Switched to Go log/slog for logging\n    - Converted meminfo to use procfs library\n    - New features: filesystem mount info, Btrfs commit stats, interrupt filtering, slabinfo filters, IRQ PSI metrics,\n      hwmon filtering, network interface alias labels, GPU clock frequencies, AIX support,\n    - Enhancements: TCP receive queue drop, block device rotational status, CPU online status, performance \n      optimizations\n    - Fixed: ZFS integer underflow, CPU pressure on limited systems, dataset name parsing\n\n  - Version 1.8.x:\n    - Fixed CPU pressure metric collection, CPU seconds on Solaris, pressure collector nil reference\n\n  - Version 1.8.0:\n    - New collectors: xfrm (IPsec), watchdog\n    - Added CPU vulnerability mitigation labels, TCP out-of-order queue metrics, filesystem device error surfacing\n    - Removed caching of os-release file modtime/filename\n    - Fixed: hwmon nil pointer, ethtool metric sanitization, NetClass data race\n\n  - Version 1.7.0 (jsc#PED-7893, jsc#PED-7928):\n    - New: CPU vulnerabilities reporting from sysfs\n    - Enhancements: parallelized filesystem stat calls, missing link speeds in ethtool, CPU MHz values,\n      qdisc performance, hwmon filtering, rtnetlink for ARP stats\n    - Fixed: netdev 32-bit fallback, btrfs handle leaks, NFSd v4 index\n\n  - Version 1.6.0:\n    - Deprecated ntp and supervisord collectors\n    - Removed bcache cache_readaheads_totals metrics\n    - Improved offline CPU handling (removed metrics for offline CPUs)\n    - New: softirqs collector\n    - Enhancements: ZFS zpool states and memory metrics, network interface admin state, CPU frequency governor, reduced\n      btrfs privileges\n    - Fixed: perf tracefs detection, thermal zone noise, Linux aarch64 interrupts\n\nprometheus-postgres_exporter:\n\n- Security Fixes:\n\n  - CVE-2022-21698: Fixed denial of service using InstrumentHandlerCounter (bsc#1248699)    \n    \nscap-security-guide:\n\n- Update the SSG package description \n- Add SLE16 profiles to the build\n- Updated to 0.1.79 (jsc#ECO-3319)\n    - Create SLE16 HIPAA profile\n    - Create SLE16 PCI DSS 4 profile\n    - Use Sequoia in RHEL 10 instead of GPG\n    - New Profile for RHEL10: BSI\n    - Move RHEL Control files to product files\n    - Update RHEL 9 CCN profile\n    - Various updates for SLE 12/15\n\nspacecmd:\n\n- Version 5.0.16-0\n  * Update translation strings\n\nuyuni-tools:\n\n- Version 0.1.39-0\n  * mgrpxy ssh tuning should happen before crypto policies (bsc#1254619)\n  * Fix default value for helm registry (bsc#1258927).\n  * Use static supportconfig name to avoid dynamic search\n    (bsc#1257941)\n  * Do not nest multiple tarball files and instead collect\n    all files into one tarball (bsc#1252964)\n  * Show where final tarball was generated (bsc#1259208)\n\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-EL-9-CLIENT-TOOLS-2026-2254",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-el-9-client-tools-2026-2254.json"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1236516",
        "url": "https://bugzilla.suse.com/1236516"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1238686",
        "url": "https://bugzilla.suse.com/1238686"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1248699",
        "url": "https://bugzilla.suse.com/1248699"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1248707",
        "url": "https://bugzilla.suse.com/1248707"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1252964",
        "url": "https://bugzilla.suse.com/1252964"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1254619",
        "url": "https://bugzilla.suse.com/1254619"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1257941",
        "url": "https://bugzilla.suse.com/1257941"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258927",
        "url": "https://bugzilla.suse.com/1258927"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1259208",
        "url": "https://bugzilla.suse.com/1259208"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1261810",
        "url": "https://bugzilla.suse.com/1261810"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-21698 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-21698/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-45288 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-45288/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-22870 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-22870/"
      }
    ],
    "title": "Security update 5.0.8 for Multi-Linux Manager Client Tools",
    "tracking": {
      "current_release_date": "2026-09-16T18:55:02Z",
      "generator": {
        "date": "2026-06-03T14:18:09Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-EL-9-CLIENT-TOOLS-2026-2254",
      "initial_release_date": "2026-06-03T14:18:09Z",
      "revision_history": [
        {
          "date": "2026-06-03T14:18:09Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-06-03T14:18:09Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T18:10:52Z",
          "number": "3",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T18:55:02Z",
          "number": "4",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.aarch64",
                "product": {
                  "name": "golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.aarch64",
                  "product_id": "golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/golang-github-QubitProducts-exporter_exporter@0.4.0-1.9.1?arch=aarch64\u0026upstream=golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "golang-github-prometheus-node_exporter-1.10.2-1.12.1.aarch64",
                "product": {
                  "name": "golang-github-prometheus-node_exporter-1.10.2-1.12.1.aarch64",
                  "product_id": "golang-github-prometheus-node_exporter-1.10.2-1.12.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/golang-github-prometheus-node_exporter@1.10.2-1.12.1?arch=aarch64\u0026upstream=golang-github-prometheus-node_exporter-1.10.2-1.12.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mgrctl-0.1.39-1.32.1.aarch64",
                "product": {
                  "name": "mgrctl-0.1.39-1.32.1.aarch64",
                  "product_id": "mgrctl-0.1.39-1.32.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mgrctl@0.1.39-1.32.1?arch=aarch64\u0026upstream=uyuni-tools-0.1.39-1.32.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "prometheus-postgres_exporter-0.10.1-1.15.1.aarch64",
                "product": {
                  "name": "prometheus-postgres_exporter-0.10.1-1.15.1.aarch64",
                  "product_id": "prometheus-postgres_exporter-0.10.1-1.15.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/prometheus-postgres_exporter@0.10.1-1.15.1?arch=aarch64\u0026upstream=prometheus-postgres_exporter-0.10.1-1.15.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "mgrctl-bash-completion-0.1.39-1.32.1.noarch",
                "product": {
                  "name": "mgrctl-bash-completion-0.1.39-1.32.1.noarch",
                  "product_id": "mgrctl-bash-completion-0.1.39-1.32.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mgrctl-bash-completion@0.1.39-1.32.1?arch=noarch\u0026upstream=uyuni-tools-0.1.39-1.32.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mgrctl-zsh-completion-0.1.39-1.32.1.noarch",
                "product": {
                  "name": "mgrctl-zsh-completion-0.1.39-1.32.1.noarch",
                  "product_id": "mgrctl-zsh-completion-0.1.39-1.32.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mgrctl-zsh-completion@0.1.39-1.32.1?arch=noarch\u0026upstream=uyuni-tools-0.1.39-1.32.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "scap-security-guide-redhat-0.1.80-1.44.1.noarch",
                "product": {
                  "name": "scap-security-guide-redhat-0.1.80-1.44.1.noarch",
                  "product_id": "scap-security-guide-redhat-0.1.80-1.44.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/scap-security-guide-redhat@0.1.80-1.44.1?arch=noarch\u0026upstream=scap-security-guide-0.1.80-1.44.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "spacecmd-5.0.16-1.61.1.noarch",
                "product": {
                  "name": "spacecmd-5.0.16-1.61.1.noarch",
                  "product_id": "spacecmd-5.0.16-1.61.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/spacecmd@5.0.16-1.61.1?arch=noarch\u0026upstream=spacecmd-5.0.16-1.61.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.ppc64le",
                "product": {
                  "name": "golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.ppc64le",
                  "product_id": "golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/golang-github-QubitProducts-exporter_exporter@0.4.0-1.9.1?arch=ppc64le\u0026upstream=golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "golang-github-prometheus-node_exporter-1.10.2-1.12.1.ppc64le",
                "product": {
                  "name": "golang-github-prometheus-node_exporter-1.10.2-1.12.1.ppc64le",
                  "product_id": "golang-github-prometheus-node_exporter-1.10.2-1.12.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/golang-github-prometheus-node_exporter@1.10.2-1.12.1?arch=ppc64le\u0026upstream=golang-github-prometheus-node_exporter-1.10.2-1.12.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mgrctl-0.1.39-1.32.1.ppc64le",
                "product": {
                  "name": "mgrctl-0.1.39-1.32.1.ppc64le",
                  "product_id": "mgrctl-0.1.39-1.32.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mgrctl@0.1.39-1.32.1?arch=ppc64le\u0026upstream=uyuni-tools-0.1.39-1.32.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "prometheus-postgres_exporter-0.10.1-1.15.1.ppc64le",
                "product": {
                  "name": "prometheus-postgres_exporter-0.10.1-1.15.1.ppc64le",
                  "product_id": "prometheus-postgres_exporter-0.10.1-1.15.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/prometheus-postgres_exporter@0.10.1-1.15.1?arch=ppc64le\u0026upstream=prometheus-postgres_exporter-0.10.1-1.15.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.s390x",
                "product": {
                  "name": "golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.s390x",
                  "product_id": "golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/golang-github-QubitProducts-exporter_exporter@0.4.0-1.9.1?arch=s390x\u0026upstream=golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mgrctl-0.1.39-1.32.1.s390x",
                "product": {
                  "name": "mgrctl-0.1.39-1.32.1.s390x",
                  "product_id": "mgrctl-0.1.39-1.32.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mgrctl@0.1.39-1.32.1?arch=s390x\u0026upstream=uyuni-tools-0.1.39-1.32.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "prometheus-postgres_exporter-0.10.1-1.15.1.s390x",
                "product": {
                  "name": "prometheus-postgres_exporter-0.10.1-1.15.1.s390x",
                  "product_id": "prometheus-postgres_exporter-0.10.1-1.15.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/prometheus-postgres_exporter@0.10.1-1.15.1?arch=s390x\u0026upstream=prometheus-postgres_exporter-0.10.1-1.15.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.x86_64",
                "product": {
                  "name": "golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.x86_64",
                  "product_id": "golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/golang-github-QubitProducts-exporter_exporter@0.4.0-1.9.1?arch=x86_64\u0026upstream=golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "golang-github-prometheus-node_exporter-1.10.2-1.12.1.x86_64",
                "product": {
                  "name": "golang-github-prometheus-node_exporter-1.10.2-1.12.1.x86_64",
                  "product_id": "golang-github-prometheus-node_exporter-1.10.2-1.12.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/golang-github-prometheus-node_exporter@1.10.2-1.12.1?arch=x86_64\u0026upstream=golang-github-prometheus-node_exporter-1.10.2-1.12.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mgrctl-0.1.39-1.32.1.x86_64",
                "product": {
                  "name": "mgrctl-0.1.39-1.32.1.x86_64",
                  "product_id": "mgrctl-0.1.39-1.32.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/mgrctl@0.1.39-1.32.1?arch=x86_64\u0026upstream=uyuni-tools-0.1.39-1.32.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "prometheus-postgres_exporter-0.10.1-1.15.1.x86_64",
                "product": {
                  "name": "prometheus-postgres_exporter-0.10.1-1.15.1.x86_64",
                  "product_id": "prometheus-postgres_exporter-0.10.1-1.15.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/prometheus-postgres_exporter@0.10.1-1.15.1?arch=x86_64\u0026upstream=prometheus-postgres_exporter-0.10.1-1.15.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
                "product": {
                  "name": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
                  "product_id": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.aarch64 as component of SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
          "product_id": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.aarch64"
        },
        "product_reference": "golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.aarch64",
        "relates_to_product_reference": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.ppc64le as component of SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
          "product_id": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.ppc64le"
        },
        "product_reference": "golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.s390x as component of SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
          "product_id": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.s390x"
        },
        "product_reference": "golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.s390x",
        "relates_to_product_reference": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.x86_64 as component of SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
          "product_id": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.x86_64"
        },
        "product_reference": "golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-prometheus-node_exporter-1.10.2-1.12.1.aarch64 as component of SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
          "product_id": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.aarch64"
        },
        "product_reference": "golang-github-prometheus-node_exporter-1.10.2-1.12.1.aarch64",
        "relates_to_product_reference": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-prometheus-node_exporter-1.10.2-1.12.1.ppc64le as component of SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
          "product_id": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.ppc64le"
        },
        "product_reference": "golang-github-prometheus-node_exporter-1.10.2-1.12.1.ppc64le",
        "relates_to_product_reference": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-prometheus-node_exporter-1.10.2-1.12.1.x86_64 as component of SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
          "product_id": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.x86_64"
        },
        "product_reference": "golang-github-prometheus-node_exporter-1.10.2-1.12.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mgrctl-0.1.39-1.32.1.aarch64 as component of SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
          "product_id": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.aarch64"
        },
        "product_reference": "mgrctl-0.1.39-1.32.1.aarch64",
        "relates_to_product_reference": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mgrctl-0.1.39-1.32.1.ppc64le as component of SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
          "product_id": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.ppc64le"
        },
        "product_reference": "mgrctl-0.1.39-1.32.1.ppc64le",
        "relates_to_product_reference": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mgrctl-0.1.39-1.32.1.s390x as component of SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
          "product_id": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.s390x"
        },
        "product_reference": "mgrctl-0.1.39-1.32.1.s390x",
        "relates_to_product_reference": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mgrctl-0.1.39-1.32.1.x86_64 as component of SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
          "product_id": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.x86_64"
        },
        "product_reference": "mgrctl-0.1.39-1.32.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mgrctl-bash-completion-0.1.39-1.32.1.noarch as component of SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
          "product_id": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-bash-completion-0.1.39-1.32.1.noarch"
        },
        "product_reference": "mgrctl-bash-completion-0.1.39-1.32.1.noarch",
        "relates_to_product_reference": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mgrctl-zsh-completion-0.1.39-1.32.1.noarch as component of SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
          "product_id": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-zsh-completion-0.1.39-1.32.1.noarch"
        },
        "product_reference": "mgrctl-zsh-completion-0.1.39-1.32.1.noarch",
        "relates_to_product_reference": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "prometheus-postgres_exporter-0.10.1-1.15.1.aarch64 as component of SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
          "product_id": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.aarch64"
        },
        "product_reference": "prometheus-postgres_exporter-0.10.1-1.15.1.aarch64",
        "relates_to_product_reference": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "prometheus-postgres_exporter-0.10.1-1.15.1.ppc64le as component of SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
          "product_id": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.ppc64le"
        },
        "product_reference": "prometheus-postgres_exporter-0.10.1-1.15.1.ppc64le",
        "relates_to_product_reference": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "prometheus-postgres_exporter-0.10.1-1.15.1.s390x as component of SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
          "product_id": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.s390x"
        },
        "product_reference": "prometheus-postgres_exporter-0.10.1-1.15.1.s390x",
        "relates_to_product_reference": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "prometheus-postgres_exporter-0.10.1-1.15.1.x86_64 as component of SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
          "product_id": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.x86_64"
        },
        "product_reference": "prometheus-postgres_exporter-0.10.1-1.15.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "scap-security-guide-redhat-0.1.80-1.44.1.noarch as component of SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
          "product_id": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:scap-security-guide-redhat-0.1.80-1.44.1.noarch"
        },
        "product_reference": "scap-security-guide-redhat-0.1.80-1.44.1.noarch",
        "relates_to_product_reference": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacecmd-5.0.16-1.61.1.noarch as component of SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
          "product_id": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:spacecmd-5.0.16-1.61.1.noarch"
        },
        "product_reference": "spacecmd-5.0.16-1.61.1.noarch",
        "relates_to_product_reference": "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-21698",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-21698"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "client_golang is the instrumentation library for Go applications in Prometheus, and the promhttp package in client_golang provides tooling around HTTP servers and clients. In client_golang prior to version 1.11.1, HTTP server is susceptible to a Denial of Service through unbounded cardinality, and potential memory exhaustion, when handling requests with non-standard HTTP methods. In order to be affected, an instrumented software must use any of `promhttp.InstrumentHandler*` middleware except `RequestsInFlight`; not filter any specific methods (e.g GET) before middleware; pass metric with `method` label name to our middleware; and not have any firewall/LB/proxy that filters away requests with unknown `method`. client_golang version 1.11.1 contains a patch for this issue. Several workarounds are available, including removing the `method` label name from counter/gauge used in the InstrumentHandler; turning off affected promhttp handlers; adding custom middleware before promhttp handler that will sanitize the request method given by Go http.Request; and using a reverse proxy or web application firewall, configured to only allow a limited set of methods.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.aarch64",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.ppc64le",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.s390x",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.x86_64",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.aarch64",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.ppc64le",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.x86_64",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.aarch64",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.ppc64le",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.s390x",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.x86_64",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-bash-completion-0.1.39-1.32.1.noarch",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-zsh-completion-0.1.39-1.32.1.noarch",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.aarch64",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.ppc64le",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.s390x",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.x86_64",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:scap-security-guide-redhat-0.1.80-1.44.1.noarch",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:spacecmd-5.0.16-1.61.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-21698",
          "url": "https://www.suse.com/security/cve/CVE-2022-21698"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196338 for CVE-2022-21698",
          "url": "https://bugzilla.suse.com/1196338"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1248689 for CVE-2022-21698",
          "url": "https://bugzilla.suse.com/1248689"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.aarch64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.ppc64le",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.s390x",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.x86_64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.aarch64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.ppc64le",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.x86_64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.aarch64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.ppc64le",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.s390x",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.x86_64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-bash-completion-0.1.39-1.32.1.noarch",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-zsh-completion-0.1.39-1.32.1.noarch",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.aarch64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.ppc64le",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.s390x",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.x86_64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:scap-security-guide-redhat-0.1.80-1.44.1.noarch",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:spacecmd-5.0.16-1.61.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.aarch64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.ppc64le",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.s390x",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.x86_64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.aarch64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.ppc64le",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.x86_64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.aarch64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.ppc64le",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.s390x",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.x86_64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-bash-completion-0.1.39-1.32.1.noarch",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-zsh-completion-0.1.39-1.32.1.noarch",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.aarch64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.ppc64le",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.s390x",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.x86_64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:scap-security-guide-redhat-0.1.80-1.44.1.noarch",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:spacecmd-5.0.16-1.61.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-03T14:18:09Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-21698"
    },
    {
      "cve": "CVE-2023-45288",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-45288"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request\u0027s headers exceed MaxHeaderBytes, no memory is allocated to store the excess headers, but they are still parsed. This permits an attacker to cause an HTTP/2 endpoint to read arbitrary amounts of header data, all associated with a request which is going to be rejected. These headers can include Huffman-encoded data which is significantly more expensive for the receiver to decode than for an attacker to send. The fix sets a limit on the amount of excess header frames we will process before closing a connection.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.aarch64",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.ppc64le",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.s390x",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.x86_64",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.aarch64",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.ppc64le",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.x86_64",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.aarch64",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.ppc64le",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.s390x",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.x86_64",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-bash-completion-0.1.39-1.32.1.noarch",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-zsh-completion-0.1.39-1.32.1.noarch",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.aarch64",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.ppc64le",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.s390x",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.x86_64",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:scap-security-guide-redhat-0.1.80-1.44.1.noarch",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:spacecmd-5.0.16-1.61.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-45288",
          "url": "https://www.suse.com/security/cve/CVE-2023-45288"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1221400 for CVE-2023-45288",
          "url": "https://bugzilla.suse.com/1221400"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.aarch64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.ppc64le",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.s390x",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.x86_64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.aarch64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.ppc64le",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.x86_64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.aarch64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.ppc64le",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.s390x",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.x86_64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-bash-completion-0.1.39-1.32.1.noarch",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-zsh-completion-0.1.39-1.32.1.noarch",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.aarch64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.ppc64le",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.s390x",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.x86_64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:scap-security-guide-redhat-0.1.80-1.44.1.noarch",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:spacecmd-5.0.16-1.61.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.aarch64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.ppc64le",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.s390x",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.x86_64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.aarch64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.ppc64le",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.x86_64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.aarch64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.ppc64le",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.s390x",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.x86_64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-bash-completion-0.1.39-1.32.1.noarch",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-zsh-completion-0.1.39-1.32.1.noarch",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.aarch64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.ppc64le",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.s390x",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.x86_64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:scap-security-guide-redhat-0.1.80-1.44.1.noarch",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:spacecmd-5.0.16-1.61.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-03T14:18:09Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-45288"
    },
    {
      "cve": "CVE-2025-22870",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-22870"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to \"*.example.com\", a request to \"[::1%25.example.com]:80` will incorrectly match and not be proxied.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.aarch64",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.ppc64le",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.s390x",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.x86_64",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.aarch64",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.ppc64le",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.x86_64",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.aarch64",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.ppc64le",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.s390x",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.x86_64",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-bash-completion-0.1.39-1.32.1.noarch",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-zsh-completion-0.1.39-1.32.1.noarch",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.aarch64",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.ppc64le",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.s390x",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.x86_64",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:scap-security-guide-redhat-0.1.80-1.44.1.noarch",
          "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:spacecmd-5.0.16-1.61.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-22870",
          "url": "https://www.suse.com/security/cve/CVE-2025-22870"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1238572 for CVE-2025-22870",
          "url": "https://bugzilla.suse.com/1238572"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1238611 for CVE-2025-22870",
          "url": "https://bugzilla.suse.com/1238611"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.aarch64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.ppc64le",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.s390x",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.x86_64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.aarch64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.ppc64le",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.x86_64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.aarch64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.ppc64le",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.s390x",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.x86_64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-bash-completion-0.1.39-1.32.1.noarch",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-zsh-completion-0.1.39-1.32.1.noarch",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.aarch64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.ppc64le",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.s390x",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.x86_64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:scap-security-guide-redhat-0.1.80-1.44.1.noarch",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:spacecmd-5.0.16-1.61.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.aarch64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.ppc64le",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.s390x",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-QubitProducts-exporter_exporter-0.4.0-1.9.1.x86_64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.aarch64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.ppc64le",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:golang-github-prometheus-node_exporter-1.10.2-1.12.1.x86_64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.aarch64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.ppc64le",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.s390x",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-0.1.39-1.32.1.x86_64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-bash-completion-0.1.39-1.32.1.noarch",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:mgrctl-zsh-completion-0.1.39-1.32.1.noarch",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.aarch64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.ppc64le",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.s390x",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:prometheus-postgres_exporter-0.10.1-1.15.1.x86_64",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:scap-security-guide-redhat-0.1.80-1.44.1.noarch",
            "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:spacecmd-5.0.16-1.61.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-03T14:18:09Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-22870"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.