SUSE-SU-2026:3713-1

Vulnerability from csaf_suse - Published: 2026-08-24 02:53 - Updated: 2026-08-24 02:53
Summary
Security update for Multi-Linux Manager Client Tools - Monitoring stack
Severity
Important
Notes
Title of the patch: Security update for Multi-Linux Manager Client Tools - Monitoring stack
Description of the patch: This update fixes the following issues: golang-github-prometheus-alertmanager: - CVE-2026-39821: Fix validation bypass and privilege escalation by updating golang.org/x/net to version 0.55.0 (bsc#1266615) golang-github-prometheus-prometheus updated from version 3.5.3 to 3.5.4: - Security fixes: - CVE-2026-39882: Fix reading unbounded HTTP response bodies by bumping OpenTelemetry to 1.43.0 (bsc#1274221) - CVE-2026-33244: Fix improper neutralization of the HTTP Location header value in react-router (bsc#1267416) - CVE-2026-13149: Prevent potential DoS by bumping brace-expansion to version 5.0.7 (bsc#1269917) - CVE-2026-33814: Fix infinite loop in HTTP/2 transport (bsc#1265827) - Other bugs fixed and changes: * STACKIT SD: Fix secrets being exposed in plaintext via /-/config endpoint * Chore: Bump golang.org/x/net to version 0.55.0 grafana updated from version 11.6.14+security04 to version 12.4.5: Security fixes: - CVE-2026-39882: Prevent memory exhaustion DoS in OpenTelemetry OTLP HTTP exporters (bsc#1274217) - CVE-2026-33382: Limit the size of the request body before processing it at several Grafana API endpoints (bsc#1271331) - CVE-2025-12141: Fixed information leakage in Grafana Alerting (bsc#1262187) - CVE-2026-41607: Fix potential information disclosure in Apache Thrift (bsc#1263272) Breaking chahnges introduced in version 12.0.0: - BREAKING: Removed AngularJS and all deprecated UI Extensions APIs. - BREAKING: Enforced stricter version compatibility checks in plugin CLI install commands. - BREAKING: Enabled the failWrongDSUID feature flag by default, which rejects data sources with incorrect UIDs. Other changes introduced from version 11.6.14+security04 to version 12.4.5 (jsc#PED-16512): - Add Legal-Review-Notice (bsc#1271327) - Datasources: return 400 when payload UID does not match URL UID in PUT /api/datasources/uid/:uid - Analytics: Keep internal dashboard id. - Reporting: Correctly apply appSubURL to report settings requests - Alerting: Document Grafana HA Alertmanager cluster metrics prefix change. - Dependency updates to core plugins and UI libraries. - Updates to data source provisioning and dashboard schemas. - Introduced dynamic dashboards in public preview. - Added a new side toolbar that replaces the second top toolbar to provide additional vertical space. - Added the ability to create dashboards from templates using sample data. - Revamped the gauge visualization with rounded bars, configurable bar thickness, and endpoint markers. - Added support to map one variable to multiple values. - Released a completely redesigned logs visualization. - Added the ability to export dashboards directly as PNG images. - Introduced an interactive learning experience within the Grafana UI. - Added a Switch template variable type to quickly toggle between values in queries. - Added functionality to style table cells using CSS properties via the field cell option. - Added support for Entra Workload Identity to enhance authentication capabilities with federated credentials. - Redesigned the alert rule list page. - Renamed Mute Timings to Active Time Intervals in Grafana Alerting. - Added support for Service Account Impersonation in the BigQuery data source. - Introduced the Grafana Advisor in public preview. - Introduced a new dashboard schema to replace the original single grid layout. - MIGRATION: Triggered a full-table rewrite for the annotation table, which may temporarily increase disk usage.
Patchnames: SUSE-2026-3713,SUSE-MultiLinuxManagerTools-SLE-15-2026-3713
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2025-12141
4.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2026-13149
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64 —
Vendor Fix
Threats
Impact important
CVE-2026-33244
6.1 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2026-33382
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64 —
Vendor Fix
Threats
Impact important
CVE-2026-33814
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64 —
Vendor Fix
Threats
Impact important
CVE-2026-39821
7.4 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64 —
Vendor Fix
Threats
Impact important
CVE-2026-39882
5.3 (Medium)
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2026-41607
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x —
Vendor Fix
Unresolved product id: SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64 —
Vendor Fix
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/s… self
https://www.suse.com/support/update/announcement/… self
https://lists.suse.com/pipermail/sle-updates/2026… self
https://bugzilla.suse.com/1262187 self
https://bugzilla.suse.com/1263272 self
https://bugzilla.suse.com/1265827 self
https://bugzilla.suse.com/1266615 self
https://bugzilla.suse.com/1267416 self
https://bugzilla.suse.com/1269917 self
https://bugzilla.suse.com/1271327 self
https://bugzilla.suse.com/1271331 self
https://bugzilla.suse.com/1274221 self
https://www.suse.com/security/cve/CVE-2025-12141/ self
https://www.suse.com/security/cve/CVE-2026-13149/ self
https://www.suse.com/security/cve/CVE-2026-33244/ self
https://www.suse.com/security/cve/CVE-2026-33382/ self
https://www.suse.com/security/cve/CVE-2026-33814/ self
https://www.suse.com/security/cve/CVE-2026-39821/ self
https://www.suse.com/security/cve/CVE-2026-39882/ self
https://www.suse.com/security/cve/CVE-2026-41607/ self
https://www.suse.com/security/cve/CVE-2025-12141 external
https://bugzilla.suse.com/1262187 external
https://www.suse.com/security/cve/CVE-2026-13149 external
https://bugzilla.suse.com/1269911 external
https://www.suse.com/security/cve/CVE-2026-33244 external
https://bugzilla.suse.com/1267413 external
https://www.suse.com/security/cve/CVE-2026-33382 external
https://bugzilla.suse.com/1271331 external
https://www.suse.com/security/cve/CVE-2026-33814 external
https://bugzilla.suse.com/1264506 external
https://bugzilla.suse.com/1268758 external
https://www.suse.com/security/cve/CVE-2026-39821 external
https://bugzilla.suse.com/1266474 external
https://www.suse.com/security/cve/CVE-2026-39882 external
https://bugzilla.suse.com/1274212 external
https://www.suse.com/security/cve/CVE-2026-41607 external
https://bugzilla.suse.com/1263256 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for Multi-Linux Manager Client Tools - Monitoring stack",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update fixes the following issues:\n\ngolang-github-prometheus-alertmanager:\n\n- CVE-2026-39821: Fix validation bypass and privilege escalation by  updating golang.org/x/net to version 0.55.0 (bsc#1266615)\n\ngolang-github-prometheus-prometheus updated from version 3.5.3 to 3.5.4:\n    \n- Security fixes:\n\n  - CVE-2026-39882: Fix reading unbounded HTTP response bodies by bumping OpenTelemetry to 1.43.0 (bsc#1274221)\n  - CVE-2026-33244: Fix improper neutralization of the HTTP Location header value in react-router (bsc#1267416)\n  - CVE-2026-13149: Prevent potential DoS by bumping brace-expansion to version 5.0.7 (bsc#1269917)\n  - CVE-2026-33814: Fix infinite loop in HTTP/2 transport (bsc#1265827)\n    \n- Other bugs fixed and changes:\n\n   * STACKIT SD: Fix secrets being exposed in plaintext via /-/config endpoint\n   * Chore: Bump golang.org/x/net to version 0.55.0\n\ngrafana updated from version 11.6.14+security04 to version 12.4.5:\n\nSecurity fixes:\n\n- CVE-2026-39882: Prevent memory exhaustion DoS in OpenTelemetry OTLP HTTP exporters (bsc#1274217)\n- CVE-2026-33382: Limit the size of the request body before processing it at several Grafana API endpoints (bsc#1271331)\n- CVE-2025-12141: Fixed information leakage in Grafana Alerting (bsc#1262187)\n- CVE-2026-41607: Fix potential information disclosure in Apache Thrift (bsc#1263272)\n\nBreaking chahnges introduced in version 12.0.0:\n\n- BREAKING: Removed AngularJS and all deprecated UI Extensions  APIs.\n- BREAKING: Enforced stricter version compatibility checks in plugin CLI install commands.\n- BREAKING: Enabled the failWrongDSUID feature flag by default, which rejects data sources with incorrect UIDs.\n\nOther changes introduced from version 11.6.14+security04 to version 12.4.5 (jsc#PED-16512):\n\n- Add Legal-Review-Notice (bsc#1271327)\n- Datasources: return 400 when payload UID does not match URL UID in PUT /api/datasources/uid/:uid\n- Analytics: Keep internal dashboard id.\n- Reporting: Correctly apply appSubURL to report settings requests\n- Alerting: Document Grafana HA Alertmanager cluster metrics prefix change.\n- Dependency updates to core plugins and UI libraries.\n- Updates to data source provisioning and dashboard schemas.\n- Introduced dynamic dashboards in public preview.\n- Added a new side toolbar that replaces the second top toolbar to provide additional vertical space.\n- Added the ability to create dashboards from templates using sample data.\n- Revamped the gauge visualization with rounded bars, configurable bar thickness, and endpoint markers.\n- Added support to map one variable to multiple values.\n- Released a completely redesigned logs visualization.\n- Added the ability to export dashboards directly as PNG images.\n- Introduced an interactive learning experience within the Grafana UI.\n- Added a Switch template variable type to quickly toggle between values in queries.\n- Added functionality to style table cells using CSS properties via the field cell option.\n- Added support for Entra Workload Identity to enhance authentication capabilities with federated credentials.\n- Redesigned the alert rule list page.\n- Renamed Mute Timings to Active Time Intervals in Grafana Alerting.\n- Added support for Service Account Impersonation in the BigQuery data source.\n- Introduced the Grafana Advisor in public preview.\n- Introduced a new dashboard schema to replace the original single grid layout.\n- MIGRATION: Triggered a full-table rewrite for the annotation table, which may temporarily increase disk usage.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2026-3713,SUSE-MultiLinuxManagerTools-SLE-15-2026-3713",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_3713-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:3713-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20263713-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:3713-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2026-August/049454.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1262187",
        "url": "https://bugzilla.suse.com/1262187"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1263272",
        "url": "https://bugzilla.suse.com/1263272"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1265827",
        "url": "https://bugzilla.suse.com/1265827"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1266615",
        "url": "https://bugzilla.suse.com/1266615"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267416",
        "url": "https://bugzilla.suse.com/1267416"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269917",
        "url": "https://bugzilla.suse.com/1269917"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1271327",
        "url": "https://bugzilla.suse.com/1271327"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1271331",
        "url": "https://bugzilla.suse.com/1271331"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1274221",
        "url": "https://bugzilla.suse.com/1274221"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-12141 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-12141/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-13149 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-13149/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33244 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33244/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33382 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33382/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33814 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33814/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-39821 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-39821/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-39882 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-39882/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-41607 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-41607/"
      }
    ],
    "title": "Security update for Multi-Linux Manager Client Tools - Monitoring stack",
    "tracking": {
      "current_release_date": "2026-08-24T02:53:30Z",
      "generator": {
        "date": "2026-08-24T02:53:30Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:3713-1",
      "initial_release_date": "2026-08-24T02:53:30Z",
      "revision_history": [
        {
          "date": "2026-08-24T02:53:30Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
                "product": {
                  "name": "firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
                  "product_id": "firewalld-prometheus-config-0.1-150002.3.16.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
                "product": {
                  "name": "golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
                  "product_id": "golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
                "product": {
                  "name": "golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
                  "product_id": "golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "grafana-12.4.5-150002.4.24.1.aarch64",
                "product": {
                  "name": "grafana-12.4.5-150002.4.24.1.aarch64",
                  "product_id": "grafana-12.4.5-150002.4.24.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
                "product": {
                  "name": "firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
                  "product_id": "firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
                "product": {
                  "name": "golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
                  "product_id": "golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
                "product": {
                  "name": "golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
                  "product_id": "golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "grafana-12.4.5-150002.4.24.1.ppc64le",
                "product": {
                  "name": "grafana-12.4.5-150002.4.24.1.ppc64le",
                  "product_id": "grafana-12.4.5-150002.4.24.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
                "product": {
                  "name": "firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
                  "product_id": "firewalld-prometheus-config-0.1-150002.3.16.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
                "product": {
                  "name": "golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
                  "product_id": "golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
                "product": {
                  "name": "golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
                  "product_id": "golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "grafana-12.4.5-150002.4.24.1.s390x",
                "product": {
                  "name": "grafana-12.4.5-150002.4.24.1.s390x",
                  "product_id": "grafana-12.4.5-150002.4.24.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
                "product": {
                  "name": "firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
                  "product_id": "firewalld-prometheus-config-0.1-150002.3.16.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
                "product": {
                  "name": "golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
                  "product_id": "golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
                "product": {
                  "name": "golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
                  "product_id": "golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "grafana-12.4.5-150002.4.24.1.x86_64",
                "product": {
                  "name": "grafana-12.4.5-150002.4.24.1.x86_64",
                  "product_id": "grafana-12.4.5-150002.4.24.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Multi Linux Manager Tools SLE-15",
                "product": {
                  "name": "SUSE Multi Linux Manager Tools SLE-15",
                  "product_id": "SUSE Multi Linux Manager Tools SLE-15"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firewalld-prometheus-config-0.1-150002.3.16.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-15",
          "product_id": "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64"
        },
        "product_reference": "firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
        "relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-15",
          "product_id": "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le"
        },
        "product_reference": "firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
        "relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firewalld-prometheus-config-0.1-150002.3.16.1.s390x as component of SUSE Multi Linux Manager Tools SLE-15",
          "product_id": "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x"
        },
        "product_reference": "firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
        "relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firewalld-prometheus-config-0.1-150002.3.16.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-15",
          "product_id": "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64"
        },
        "product_reference": "firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
        "relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-15",
          "product_id": "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64"
        },
        "product_reference": "golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
        "relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-15",
          "product_id": "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le"
        },
        "product_reference": "golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
        "relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x as component of SUSE Multi Linux Manager Tools SLE-15",
          "product_id": "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x"
        },
        "product_reference": "golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
        "relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-15",
          "product_id": "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64"
        },
        "product_reference": "golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
        "relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-15",
          "product_id": "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64"
        },
        "product_reference": "golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
        "relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-15",
          "product_id": "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le"
        },
        "product_reference": "golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
        "relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x as component of SUSE Multi Linux Manager Tools SLE-15",
          "product_id": "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x"
        },
        "product_reference": "golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
        "relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-15",
          "product_id": "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64"
        },
        "product_reference": "golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
        "relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-12.4.5-150002.4.24.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-15",
          "product_id": "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64"
        },
        "product_reference": "grafana-12.4.5-150002.4.24.1.aarch64",
        "relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-12.4.5-150002.4.24.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-15",
          "product_id": "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le"
        },
        "product_reference": "grafana-12.4.5-150002.4.24.1.ppc64le",
        "relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-12.4.5-150002.4.24.1.s390x as component of SUSE Multi Linux Manager Tools SLE-15",
          "product_id": "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x"
        },
        "product_reference": "grafana-12.4.5-150002.4.24.1.s390x",
        "relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-12.4.5-150002.4.24.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-15",
          "product_id": "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64"
        },
        "product_reference": "grafana-12.4.5-150002.4.24.1.x86_64",
        "relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-15"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-12141",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-12141"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Grafana\u0027s alerting system, users with edit permissions for a contact point, specifically the permissions \u201calert.notifications:write\u201d or \u201calert.notifications.receivers:test\u201d that are granted as part of the fixed role \"Contact Point Writer\", which is part of the basic role Editor - can edit contact points created by other users, modify the endpoint URL to a controlled server. By invoking the test functionality, attackers can capture and extract redacted secure settings, such as authentication credentials for third-party services (e.g., Slack tokens). This leads to unauthorized access and potential compromise of external integrations.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-12141",
          "url": "https://www.suse.com/security/cve/CVE-2025-12141"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262187 for CVE-2025-12141",
          "url": "https://bugzilla.suse.com/1262187"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-24T02:53:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-12141"
    },
    {
      "cve": "CVE-2026-13149",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-13149"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding \u0027{}\u0027 brace groups. An attacker who passes a crafted string to expand(), directly or transitively, can cause significant CPU consumption and event-loop blocking. The max option does not mitigate this, as it bounds the output size rather than the recursion work.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-13149",
          "url": "https://www.suse.com/security/cve/CVE-2026-13149"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269911 for CVE-2026-13149",
          "url": "https://bugzilla.suse.com/1269911"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-24T02:53:30Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-13149"
    },
    {
      "cve": "CVE-2026-33244",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33244"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "React Router is a router for React. In versions 7.5.1 through 7.13.1, when using Framework Mode with pre-rendering enabled, improper neutralization of the HTTP `Location` header value can permit Cross-Site Scripting (XSS) in the statically generated HTML files if the redirect location comes from an untrusted source. This does not impact applications using Declarative Mode (`\u003cBrowserRouter\u003e`) or Data Mode (`createBrowserRouter/\u003cRouterProvider\u003e`). This is patched in version 7.13.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33244",
          "url": "https://www.suse.com/security/cve/CVE-2026-33244"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267413 for CVE-2026-33244",
          "url": "https://bugzilla.suse.com/1267413"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-24T02:53:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-33244"
    },
    {
      "cve": "CVE-2026-33382",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33382"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker can send very large payloads that force excessive memory allocation, potentially exhausting memory and causing a denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33382",
          "url": "https://www.suse.com/security/cve/CVE-2026-33382"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271331 for CVE-2026-33382",
          "url": "https://bugzilla.suse.com/1271331"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-24T02:53:30Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33382"
    },
    {
      "cve": "CVE-2026-33814",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33814"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33814",
          "url": "https://www.suse.com/security/cve/CVE-2026-33814"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264506 for CVE-2026-33814",
          "url": "https://bugzilla.suse.com/1264506"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268758 for CVE-2026-33814",
          "url": "https://bugzilla.suse.com/1268758"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-24T02:53:30Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33814"
    },
    {
      "cve": "CVE-2026-39821",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-39821"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\".",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-39821",
          "url": "https://www.suse.com/security/cve/CVE-2026-39821"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266474 for CVE-2026-39821",
          "url": "https://bugzilla.suse.com/1266474"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-24T02:53:30Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-39821"
    },
    {
      "cve": "CVE-2026-39882",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-39882"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters (traces/metrics/logs) read the full HTTP response body into an in-memory bytes.Buffer without a size cap. This is exploitable for memory exhaustion when the configured collector endpoint is attacker-controlled (or a network attacker can mitm the exporter connection). This vulnerability is fixed in 1.43.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-39882",
          "url": "https://www.suse.com/security/cve/CVE-2026-39882"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274212 for CVE-2026-39882",
          "url": "https://bugzilla.suse.com/1274212"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-24T02:53:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-39882"
    },
    {
      "cve": "CVE-2026-41607",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-41607"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out-of-bounds Read vulnerability in Apache Thrift.\n\nThis issue affects Apache Thrift: before 0.23.0.\n\nUsers are recommended to upgrade to version 0.23.0, which fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x",
          "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-41607",
          "url": "https://www.suse.com/security/cve/CVE-2026-41607"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1263256 for CVE-2026-41607",
          "url": "https://bugzilla.suse.com/1263256"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.14.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.4-150002.3.16.1.x86_64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.aarch64",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.ppc64le",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.s390x",
            "SUSE Multi Linux Manager Tools SLE-15:grafana-12.4.5-150002.4.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-24T02:53:30Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-41607"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.