SUSE-SU-2026:3714-1
Vulnerability from csaf_suse - Published: 2026-08-24 02:55 - Updated: 2026-08-24 02:55Summary
Security update for Multi-Linux Manager Monitoring stack
Severity
Important
Notes
Title of the patch: Security update for Multi-Linux Manager Monitoring stack
Description of the patch: This update fixes the following issues:
prometheus-postgres_exporter:
- CVE-2022-21698: Replace github.com/prometheus/client_golang with version 1.11.1 and prevent validation bypass
and privilege escalation (bsc#1248699)
golang-github-prometheus-alertmanager:
- CVE-2026-39821: Fix validation bypass and privilege escalation by updating golang.org/x/net to version 0.55.0 (bsc#1266615)
golang-github-prometheus-prometheus was updated from version 3.5.3 to 3.5.4:
Security fixes:
- CVE-2026-39882: Fix reading unbounded HTTP response bodies by bumping OpenTelemetry to 1.43.0 (bsc#1274221)
- CVE-2026-33244: Fixed improper neutralization of the HTTP Location header value in react-router (bsc#1267416)
- CVE-2026-13149: Prevent potential DoS by bumping brace-expansion to version 5.0.7 (bsc#1269917)
- CVE-2026-33814: Fixed infinite loop in HTTP/2 transport (bsc#1265827)
Other changes and fixes:
- STACKIT SD: Fixed secrets being exposed in plaintext via /-/config endpoint
- Chore: Bump golang.org/x/net to version 0.55.0
grafana updated from version 11.6.14+security04 to version 12.4.5:
Security fixes:
- CVE-2026-33382: Limit the size of the request body before processing it at several Grafana API endpoints (bsc#1271331)
- CVE-2026-39882: Prevent memory exhaustion DoS in OpenTelemetry OTLP HTTP exporters (bsc#1274217)
- CVE-2025-12141: Fixed information leakage in Grafana Alerting (bsc#1262187)
- CVE-2026-41607: Fix potential information disclosure in Apache Thrift (bsc#1263272)
Breaking chahnges introduced in version 12.0.0:
- BREAKING: Removed AngularJS and all deprecated UI Extensions APIs.
- BREAKING: Enforced stricter version compatibility checks in plugin CLI install commands.
- BREAKING: Enabled the failWrongDSUID feature flag by default, which rejects data sources with incorrect UIDs.
Other changes introduced from version 11.6.14+security04 to version 12.4.5 (jsc#PED-16512):
- Add Legal-Review-Notice (bsc#1271327)
- Datasources: return 400 when payload UID does not match URL UID in PUT /api/datasources/uid/:uid
- Analytics: Keep internal dashboard id.
- Reporting: Correctly apply appSubURL to report settings requests
- Alerting: Document Grafana HA Alertmanager cluster metrics prefix change.
- Dependency updates to core plugins and UI libraries.
- Updates to data source provisioning and dashboard schemas.
- Introduced dynamic dashboards in public preview.
- Added a new side toolbar that replaces the second top toolbar to provide additional vertical space.
- Added the ability to create dashboards from templates using sample data.
- Revamped the gauge visualization with rounded bars, configurable bar thickness, and endpoint markers.
- Added support to map one variable to multiple values.
- Released a completely redesigned logs visualization.
- Added the ability to export dashboards directly as PNG images.
- Introduced an interactive learning experience within the Grafana UI.
- Added a Switch template variable type to quickly toggle between values in queries.
- Added functionality to style table cells using CSS properties via the field cell option.
- Added support for Entra Workload Identity to enhance authentication capabilities with federated credentials.
- Redesigned the alert rule list page.
- Renamed Mute Timings to Active Time Intervals in Grafana Alerting.
- Added support for Service Account Impersonation in the BigQuery data source.
- Introduced the Grafana Advisor in public preview.
- Introduced a new dashboard schema to replace the original single grid layout.
- MIGRATION: Triggered a full-table rewrite for the annotation table, which may temporarily increase disk usage.
Patchnames: SUSE-2026-3714,SUSE-SLE-Manager-Tools-15-2026-3714,SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-3714
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4.3 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.4 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
44 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for Multi-Linux Manager Monitoring stack",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update fixes the following issues:\n\nprometheus-postgres_exporter:\n\n- CVE-2022-21698: Replace github.com/prometheus/client_golang with version 1.11.1 and prevent validation bypass \n and privilege escalation (bsc#1248699)\n\ngolang-github-prometheus-alertmanager:\n\n- CVE-2026-39821: Fix validation bypass and privilege escalation by updating golang.org/x/net to version 0.55.0 (bsc#1266615)\n\ngolang-github-prometheus-prometheus was updated from version 3.5.3 to 3.5.4:\n\nSecurity fixes:\n\n- CVE-2026-39882: Fix reading unbounded HTTP response bodies by bumping OpenTelemetry to 1.43.0 (bsc#1274221)\n- CVE-2026-33244: Fixed improper neutralization of the HTTP Location header value in react-router (bsc#1267416)\n- CVE-2026-13149: Prevent potential DoS by bumping brace-expansion to version 5.0.7 (bsc#1269917)\n- CVE-2026-33814: Fixed infinite loop in HTTP/2 transport (bsc#1265827)\n\nOther changes and fixes:\n \n- STACKIT SD: Fixed secrets being exposed in plaintext via /-/config endpoint\n- Chore: Bump golang.org/x/net to version 0.55.0\n\ngrafana updated from version 11.6.14+security04 to version 12.4.5:\n\nSecurity fixes:\n\n- CVE-2026-33382: Limit the size of the request body before processing it at several Grafana API endpoints (bsc#1271331)\n- CVE-2026-39882: Prevent memory exhaustion DoS in OpenTelemetry OTLP HTTP exporters (bsc#1274217)\n- CVE-2025-12141: Fixed information leakage in Grafana Alerting (bsc#1262187)\n- CVE-2026-41607: Fix potential information disclosure in Apache Thrift (bsc#1263272)\n\nBreaking chahnges introduced in version 12.0.0:\n\n- BREAKING: Removed AngularJS and all deprecated UI Extensions APIs.\n- BREAKING: Enforced stricter version compatibility checks in plugin CLI install commands.\n- BREAKING: Enabled the failWrongDSUID feature flag by default, which rejects data sources with incorrect UIDs.\n\nOther changes introduced from version 11.6.14+security04 to version 12.4.5 (jsc#PED-16512):\n\n- Add Legal-Review-Notice (bsc#1271327)\n- Datasources: return 400 when payload UID does not match URL UID in PUT /api/datasources/uid/:uid\n- Analytics: Keep internal dashboard id.\n- Reporting: Correctly apply appSubURL to report settings requests\n- Alerting: Document Grafana HA Alertmanager cluster metrics prefix change.\n- Dependency updates to core plugins and UI libraries.\n- Updates to data source provisioning and dashboard schemas.\n- Introduced dynamic dashboards in public preview.\n- Added a new side toolbar that replaces the second top toolbar to provide additional vertical space.\n- Added the ability to create dashboards from templates using sample data.\n- Revamped the gauge visualization with rounded bars, configurable bar thickness, and endpoint markers.\n- Added support to map one variable to multiple values.\n- Released a completely redesigned logs visualization.\n- Added the ability to export dashboards directly as PNG images.\n- Introduced an interactive learning experience within the Grafana UI.\n- Added a Switch template variable type to quickly toggle between values in queries.\n- Added functionality to style table cells using CSS properties via the field cell option.\n- Added support for Entra Workload Identity to enhance authentication capabilities with federated credentials.\n- Redesigned the alert rule list page.\n- Renamed Mute Timings to Active Time Intervals in Grafana Alerting.\n- Added support for Service Account Impersonation in the BigQuery data source.\n- Introduced the Grafana Advisor in public preview.\n- Introduced a new dashboard schema to replace the original single grid layout.\n- MIGRATION: Triggered a full-table rewrite for the annotation table, which may temporarily increase disk usage.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-3714,SUSE-SLE-Manager-Tools-15-2026-3714,SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-3714",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_3714-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:3714-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20263714-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:3714-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-August/049453.html"
},
{
"category": "self",
"summary": "SUSE Bug 1248699",
"url": "https://bugzilla.suse.com/1248699"
},
{
"category": "self",
"summary": "SUSE Bug 1262187",
"url": "https://bugzilla.suse.com/1262187"
},
{
"category": "self",
"summary": "SUSE Bug 1263272",
"url": "https://bugzilla.suse.com/1263272"
},
{
"category": "self",
"summary": "SUSE Bug 1265827",
"url": "https://bugzilla.suse.com/1265827"
},
{
"category": "self",
"summary": "SUSE Bug 1266615",
"url": "https://bugzilla.suse.com/1266615"
},
{
"category": "self",
"summary": "SUSE Bug 1267416",
"url": "https://bugzilla.suse.com/1267416"
},
{
"category": "self",
"summary": "SUSE Bug 1269917",
"url": "https://bugzilla.suse.com/1269917"
},
{
"category": "self",
"summary": "SUSE Bug 1271327",
"url": "https://bugzilla.suse.com/1271327"
},
{
"category": "self",
"summary": "SUSE Bug 1271331",
"url": "https://bugzilla.suse.com/1271331"
},
{
"category": "self",
"summary": "SUSE Bug 1274217",
"url": "https://bugzilla.suse.com/1274217"
},
{
"category": "self",
"summary": "SUSE Bug 1274221",
"url": "https://bugzilla.suse.com/1274221"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-21698 page",
"url": "https://www.suse.com/security/cve/CVE-2022-21698/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-12141 page",
"url": "https://www.suse.com/security/cve/CVE-2025-12141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-13149 page",
"url": "https://www.suse.com/security/cve/CVE-2026-13149/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-33244 page",
"url": "https://www.suse.com/security/cve/CVE-2026-33244/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-33382 page",
"url": "https://www.suse.com/security/cve/CVE-2026-33382/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-33814 page",
"url": "https://www.suse.com/security/cve/CVE-2026-33814/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39821 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39821/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39882 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39882/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-41607 page",
"url": "https://www.suse.com/security/cve/CVE-2026-41607/"
}
],
"title": "Security update for Multi-Linux Manager Monitoring stack",
"tracking": {
"current_release_date": "2026-08-24T02:55:14Z",
"generator": {
"date": "2026-08-24T02:55:14Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:3714-1",
"initial_release_date": "2026-08-24T02:55:14Z",
"revision_history": [
{
"date": "2026-08-24T02:55:14Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "firewalld-prometheus-config-0.1-150100.4.37.2.aarch64",
"product": {
"name": "firewalld-prometheus-config-0.1-150100.4.37.2.aarch64",
"product_id": "firewalld-prometheus-config-0.1-150100.4.37.2.aarch64"
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"product": {
"name": "golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"product_id": "golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64"
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-prometheus-3.5.4-150100.4.37.2.aarch64",
"product": {
"name": "golang-github-prometheus-prometheus-3.5.4-150100.4.37.2.aarch64",
"product_id": "golang-github-prometheus-prometheus-3.5.4-150100.4.37.2.aarch64"
}
},
{
"category": "product_version",
"name": "grafana-12.4.5-150000.1.98.1.aarch64",
"product": {
"name": "grafana-12.4.5-150000.1.98.1.aarch64",
"product_id": "grafana-12.4.5-150000.1.98.1.aarch64"
}
},
{
"category": "product_version",
"name": "prometheus-postgres_exporter-0.10.1-150400.3.12.1.aarch64",
"product": {
"name": "prometheus-postgres_exporter-0.10.1-150400.3.12.1.aarch64",
"product_id": "prometheus-postgres_exporter-0.10.1-150400.3.12.1.aarch64"
}
},
{
"category": "product_version",
"name": "firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"product": {
"name": "firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"product_id": "firewalld-prometheus-config-0.1-150000.3.75.1.aarch64"
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"product": {
"name": "golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"product_id": "golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "firewalld-prometheus-config-0.1-150100.4.37.2.i586",
"product": {
"name": "firewalld-prometheus-config-0.1-150100.4.37.2.i586",
"product_id": "firewalld-prometheus-config-0.1-150100.4.37.2.i586"
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.i586",
"product": {
"name": "golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.i586",
"product_id": "golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.i586"
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-prometheus-3.5.4-150100.4.37.2.i586",
"product": {
"name": "golang-github-prometheus-prometheus-3.5.4-150100.4.37.2.i586",
"product_id": "golang-github-prometheus-prometheus-3.5.4-150100.4.37.2.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "firewalld-prometheus-config-0.1-150100.4.37.2.ppc64le",
"product": {
"name": "firewalld-prometheus-config-0.1-150100.4.37.2.ppc64le",
"product_id": "firewalld-prometheus-config-0.1-150100.4.37.2.ppc64le"
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"product": {
"name": "golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"product_id": "golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le"
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-prometheus-3.5.4-150100.4.37.2.ppc64le",
"product": {
"name": "golang-github-prometheus-prometheus-3.5.4-150100.4.37.2.ppc64le",
"product_id": "golang-github-prometheus-prometheus-3.5.4-150100.4.37.2.ppc64le"
}
},
{
"category": "product_version",
"name": "grafana-12.4.5-150000.1.98.1.ppc64le",
"product": {
"name": "grafana-12.4.5-150000.1.98.1.ppc64le",
"product_id": "grafana-12.4.5-150000.1.98.1.ppc64le"
}
},
{
"category": "product_version",
"name": "prometheus-postgres_exporter-0.10.1-150400.3.12.1.ppc64le",
"product": {
"name": "prometheus-postgres_exporter-0.10.1-150400.3.12.1.ppc64le",
"product_id": "prometheus-postgres_exporter-0.10.1-150400.3.12.1.ppc64le"
}
},
{
"category": "product_version",
"name": "firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"product": {
"name": "firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"product_id": "firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le"
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"product": {
"name": "golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"product_id": "golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "firewalld-prometheus-config-0.1-150100.4.37.2.s390x",
"product": {
"name": "firewalld-prometheus-config-0.1-150100.4.37.2.s390x",
"product_id": "firewalld-prometheus-config-0.1-150100.4.37.2.s390x"
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"product": {
"name": "golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"product_id": "golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x"
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-prometheus-3.5.4-150100.4.37.2.s390x",
"product": {
"name": "golang-github-prometheus-prometheus-3.5.4-150100.4.37.2.s390x",
"product_id": "golang-github-prometheus-prometheus-3.5.4-150100.4.37.2.s390x"
}
},
{
"category": "product_version",
"name": "grafana-12.4.5-150000.1.98.1.s390x",
"product": {
"name": "grafana-12.4.5-150000.1.98.1.s390x",
"product_id": "grafana-12.4.5-150000.1.98.1.s390x"
}
},
{
"category": "product_version",
"name": "prometheus-postgres_exporter-0.10.1-150400.3.12.1.s390x",
"product": {
"name": "prometheus-postgres_exporter-0.10.1-150400.3.12.1.s390x",
"product_id": "prometheus-postgres_exporter-0.10.1-150400.3.12.1.s390x"
}
},
{
"category": "product_version",
"name": "firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"product": {
"name": "firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"product_id": "firewalld-prometheus-config-0.1-150000.3.75.1.s390x"
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"product": {
"name": "golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"product_id": "golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "firewalld-prometheus-config-0.1-150100.4.37.2.x86_64",
"product": {
"name": "firewalld-prometheus-config-0.1-150100.4.37.2.x86_64",
"product_id": "firewalld-prometheus-config-0.1-150100.4.37.2.x86_64"
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"product": {
"name": "golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"product_id": "golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64"
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-prometheus-3.5.4-150100.4.37.2.x86_64",
"product": {
"name": "golang-github-prometheus-prometheus-3.5.4-150100.4.37.2.x86_64",
"product_id": "golang-github-prometheus-prometheus-3.5.4-150100.4.37.2.x86_64"
}
},
{
"category": "product_version",
"name": "grafana-12.4.5-150000.1.98.1.x86_64",
"product": {
"name": "grafana-12.4.5-150000.1.98.1.x86_64",
"product_id": "grafana-12.4.5-150000.1.98.1.x86_64"
}
},
{
"category": "product_version",
"name": "prometheus-postgres_exporter-0.10.1-150400.3.12.1.x86_64",
"product": {
"name": "prometheus-postgres_exporter-0.10.1-150400.3.12.1.x86_64",
"product_id": "prometheus-postgres_exporter-0.10.1-150400.3.12.1.x86_64"
}
},
{
"category": "product_version",
"name": "firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"product": {
"name": "firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"product_id": "firewalld-prometheus-config-0.1-150000.3.75.1.x86_64"
}
},
{
"category": "product_version",
"name": "golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"product": {
"name": "golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"product_id": "golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Manager Client Tools 15",
"product": {
"name": "SUSE Manager Client Tools 15",
"product_id": "SUSE Manager Client Tools 15"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "firewalld-prometheus-config-0.1-150000.3.75.1.aarch64 as component of SUSE Manager Client Tools 15",
"product_id": "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64"
},
"product_reference": "firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le as component of SUSE Manager Client Tools 15",
"product_id": "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le"
},
"product_reference": "firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firewalld-prometheus-config-0.1-150000.3.75.1.s390x as component of SUSE Manager Client Tools 15",
"product_id": "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x"
},
"product_reference": "firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "firewalld-prometheus-config-0.1-150000.3.75.1.x86_64 as component of SUSE Manager Client Tools 15",
"product_id": "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64"
},
"product_reference": "firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64 as component of SUSE Manager Client Tools 15",
"product_id": "SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64"
},
"product_reference": "golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le as component of SUSE Manager Client Tools 15",
"product_id": "SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le"
},
"product_reference": "golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x as component of SUSE Manager Client Tools 15",
"product_id": "SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x"
},
"product_reference": "golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64 as component of SUSE Manager Client Tools 15",
"product_id": "SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64"
},
"product_reference": "golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64 as component of SUSE Manager Client Tools 15",
"product_id": "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64"
},
"product_reference": "golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le as component of SUSE Manager Client Tools 15",
"product_id": "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le"
},
"product_reference": "golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x as component of SUSE Manager Client Tools 15",
"product_id": "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x"
},
"product_reference": "golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64 as component of SUSE Manager Client Tools 15",
"product_id": "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64"
},
"product_reference": "golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-12.4.5-150000.1.98.1.aarch64 as component of SUSE Manager Client Tools 15",
"product_id": "SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64"
},
"product_reference": "grafana-12.4.5-150000.1.98.1.aarch64",
"relates_to_product_reference": "SUSE Manager Client Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-12.4.5-150000.1.98.1.ppc64le as component of SUSE Manager Client Tools 15",
"product_id": "SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le"
},
"product_reference": "grafana-12.4.5-150000.1.98.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Client Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-12.4.5-150000.1.98.1.s390x as component of SUSE Manager Client Tools 15",
"product_id": "SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x"
},
"product_reference": "grafana-12.4.5-150000.1.98.1.s390x",
"relates_to_product_reference": "SUSE Manager Client Tools 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-12.4.5-150000.1.98.1.x86_64 as component of SUSE Manager Client Tools 15",
"product_id": "SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
},
"product_reference": "grafana-12.4.5-150000.1.98.1.x86_64",
"relates_to_product_reference": "SUSE Manager Client Tools 15"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-21698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-21698"
}
],
"notes": [
{
"category": "general",
"text": "client_golang is the instrumentation library for Go applications in Prometheus, and the promhttp package in client_golang provides tooling around HTTP servers and clients. In client_golang prior to version 1.11.1, HTTP server is susceptible to a Denial of Service through unbounded cardinality, and potential memory exhaustion, when handling requests with non-standard HTTP methods. In order to be affected, an instrumented software must use any of `promhttp.InstrumentHandler*` middleware except `RequestsInFlight`; not filter any specific methods (e.g GET) before middleware; pass metric with `method` label name to our middleware; and not have any firewall/LB/proxy that filters away requests with unknown `method`. client_golang version 1.11.1 contains a patch for this issue. Several workarounds are available, including removing the `method` label name from counter/gauge used in the InstrumentHandler; turning off affected promhttp handlers; adding custom middleware before promhttp handler that will sanitize the request method given by Go http.Request; and using a reverse proxy or web application firewall, configured to only allow a limited set of methods.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-21698",
"url": "https://www.suse.com/security/cve/CVE-2022-21698"
},
{
"category": "external",
"summary": "SUSE Bug 1196338 for CVE-2022-21698",
"url": "https://bugzilla.suse.com/1196338"
},
{
"category": "external",
"summary": "SUSE Bug 1248689 for CVE-2022-21698",
"url": "https://bugzilla.suse.com/1248689"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-24T02:55:14Z",
"details": "important"
}
],
"title": "CVE-2022-21698"
},
{
"cve": "CVE-2025-12141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-12141"
}
],
"notes": [
{
"category": "general",
"text": "In Grafana\u0027s alerting system, users with edit permissions for a contact point, specifically the permissions \u201calert.notifications:write\u201d or \u201calert.notifications.receivers:test\u201d that are granted as part of the fixed role \"Contact Point Writer\", which is part of the basic role Editor - can edit contact points created by other users, modify the endpoint URL to a controlled server. By invoking the test functionality, attackers can capture and extract redacted secure settings, such as authentication credentials for third-party services (e.g., Slack tokens). This leads to unauthorized access and potential compromise of external integrations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-12141",
"url": "https://www.suse.com/security/cve/CVE-2025-12141"
},
{
"category": "external",
"summary": "SUSE Bug 1262187 for CVE-2025-12141",
"url": "https://bugzilla.suse.com/1262187"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-24T02:55:14Z",
"details": "moderate"
}
],
"title": "CVE-2025-12141"
},
{
"cve": "CVE-2026-13149",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-13149"
}
],
"notes": [
{
"category": "general",
"text": "brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding \u0027{}\u0027 brace groups. An attacker who passes a crafted string to expand(), directly or transitively, can cause significant CPU consumption and event-loop blocking. The max option does not mitigate this, as it bounds the output size rather than the recursion work.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-13149",
"url": "https://www.suse.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "SUSE Bug 1269911 for CVE-2026-13149",
"url": "https://bugzilla.suse.com/1269911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-24T02:55:14Z",
"details": "important"
}
],
"title": "CVE-2026-13149"
},
{
"cve": "CVE-2026-33244",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-33244"
}
],
"notes": [
{
"category": "general",
"text": "React Router is a router for React. In versions 7.5.1 through 7.13.1, when using Framework Mode with pre-rendering enabled, improper neutralization of the HTTP `Location` header value can permit Cross-Site Scripting (XSS) in the statically generated HTML files if the redirect location comes from an untrusted source. This does not impact applications using Declarative Mode (`\u003cBrowserRouter\u003e`) or Data Mode (`createBrowserRouter/\u003cRouterProvider\u003e`). This is patched in version 7.13.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-33244",
"url": "https://www.suse.com/security/cve/CVE-2026-33244"
},
{
"category": "external",
"summary": "SUSE Bug 1267413 for CVE-2026-33244",
"url": "https://bugzilla.suse.com/1267413"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-24T02:55:14Z",
"details": "moderate"
}
],
"title": "CVE-2026-33244"
},
{
"cve": "CVE-2026-33382",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-33382"
}
],
"notes": [
{
"category": "general",
"text": "Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker can send very large payloads that force excessive memory allocation, potentially exhausting memory and causing a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-33382",
"url": "https://www.suse.com/security/cve/CVE-2026-33382"
},
{
"category": "external",
"summary": "SUSE Bug 1271331 for CVE-2026-33382",
"url": "https://bugzilla.suse.com/1271331"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-24T02:55:14Z",
"details": "important"
}
],
"title": "CVE-2026-33382"
},
{
"cve": "CVE-2026-33814",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-33814"
}
],
"notes": [
{
"category": "general",
"text": "When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-33814",
"url": "https://www.suse.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "SUSE Bug 1264506 for CVE-2026-33814",
"url": "https://bugzilla.suse.com/1264506"
},
{
"category": "external",
"summary": "SUSE Bug 1268758 for CVE-2026-33814",
"url": "https://bugzilla.suse.com/1268758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-24T02:55:14Z",
"details": "important"
}
],
"title": "CVE-2026-33814"
},
{
"cve": "CVE-2026-39821",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39821"
}
],
"notes": [
{
"category": "general",
"text": "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\".",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39821",
"url": "https://www.suse.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "SUSE Bug 1266474 for CVE-2026-39821",
"url": "https://bugzilla.suse.com/1266474"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-24T02:55:14Z",
"details": "important"
}
],
"title": "CVE-2026-39821"
},
{
"cve": "CVE-2026-39882",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39882"
}
],
"notes": [
{
"category": "general",
"text": "OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters (traces/metrics/logs) read the full HTTP response body into an in-memory bytes.Buffer without a size cap. This is exploitable for memory exhaustion when the configured collector endpoint is attacker-controlled (or a network attacker can mitm the exporter connection). This vulnerability is fixed in 1.43.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39882",
"url": "https://www.suse.com/security/cve/CVE-2026-39882"
},
{
"category": "external",
"summary": "SUSE Bug 1274212 for CVE-2026-39882",
"url": "https://bugzilla.suse.com/1274212"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-24T02:55:14Z",
"details": "moderate"
}
],
"title": "CVE-2026-39882"
},
{
"cve": "CVE-2026-41607",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-41607"
}
],
"notes": [
{
"category": "general",
"text": "Out-of-bounds Read vulnerability in Apache Thrift.\n\nThis issue affects Apache Thrift: before 0.23.0.\n\nUsers are recommended to upgrade to version 0.23.0, which fixes the issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-41607",
"url": "https://www.suse.com/security/cve/CVE-2026-41607"
},
{
"category": "external",
"summary": "SUSE Bug 1263256 for CVE-2026-41607",
"url": "https://bugzilla.suse.com/1263256"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-alertmanager-0.28.1-150100.4.34.1.x86_64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.aarch64",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.ppc64le",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.s390x",
"SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-3.5.4-150000.3.75.1.x86_64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.aarch64",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.ppc64le",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.s390x",
"SUSE Manager Client Tools 15:grafana-12.4.5-150000.1.98.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-24T02:55:14Z",
"details": "moderate"
}
],
"title": "CVE-2026-41607"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…