CVE-2021-43138

Upstream information

CVE-2021-43138 at MITRE

Description

In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues() method, aka lib/internal/iterator.js createObjectIterator prototype pollution.

---

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having important severity.

CVSS v2 Scores

	National Vulnerability Database
Base Score	6.8
Vector	AV:N/AC:M/Au:N/C:P/I:P/A:P
Access Vector	Network
Access Complexity	Medium
Authentication	None
Confidentiality Impact	Partial
Integrity Impact	Partial
Availability Impact	Partial

CVSS v3 Scores

	National Vulnerability Database	SUSE
Base Score	7.8	7.8
Vector	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector	Local	Local
Attack Complexity	Low	Low
Privileges Required	None	None
User Interaction	Required	Required
Scope	Unchanged	Unchanged
Confidentiality Impact	High	High
Integrity Impact	High	High
Availability Impact	High	High
CVSSv3 Version	3.1	3.1

SUSE Bugzilla entry: 1200480 [RESOLVED / FIXED]

SUSE Security Advisories:

• SUSE-CU-2022:2727-1, published Wed Oct 26 11:15:04 UTC 2022
• SUSE-CU-2023:3071-1, published Thu Sep 21 07:32:03 UTC 2023
• SUSE-CU-2023:330-1, published Sat Feb 11 08:03:19 UTC 2023
• SUSE-RU-2024:0511-1, published Thu Feb 15 16:31:00 UTC 2024
• SUSE-SU-2022:3313-1, published Mon Sep 19 19:27:28 UTC 2022
• SUSE-SU-2022:3314-1, published Mon Sep 19 19:20:27 UTC 2022
• SUSE-SU-2022:3750-1, published Wed Oct 26 13:30:45 UTC 2022
• SUSE-SU-2022:3761-1, published Wed Oct 26 13:59:25 UTC 2022
• SUSE-SU-2023:2575-1, published Wed Jun 21 12:31:08 UTC 2023
• SUSE-SU-2023:2578-1, published Wed Jun 21 12:30:58 UTC 2023
• SUSE-SU-2023:2579-1, published Wed Jun 21 12:30:50 UTC 2023
• SUSE-SU-2024:0191-1, published Tue Jan 23 20:30:53 UTC 2024
• SUSE-SU-2024:0196-1, published Tue Jan 23 20:30:23 UTC 2024
• SUSE-SU-2024:0486-1, published Thu Feb 15 16:32:09 UTC 2024
• SUSE-SU-2024:0487-1, published Thu Feb 15 16:32:04 UTC 2024

List of released packages

Product(s)	Fixed package version(s)	References
Container ses/7.1/ceph/grafana:9.5.5.3.4.156	grafana >= 9.5.1-150200.3.41.3
Container suse/manager/4.3/proxy-httpd:4.3.4.9.25.2	python3-spacewalk-client-tools >= 4.3.12-150400.3.6.6 python3-uyuni-common-libs >= 4.3.6-150400.3.6.4 release-notes-susemanager-proxy >= 4.3.2-150400.3.9.3 spacewalk-backend >= 4.3.16-150400.3.6.8 spacewalk-client-tools >= 4.3.12-150400.3.6.6 susemanager-tftpsync-recv >= 4.3.7-150400.3.3.3
Container suse/manager/5.0/x86_64/server:5.0.0-beta1.2.122 Image server-image	prometheus-postgres_exporter >= 0.10.1-150000.1.17.1
Image SLES15-SP1-SAP-Azure-LI-BYOS-Production Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production Image SLES15-SP2-BYOS-Azure Image SLES15-SP2-HPC-BYOS-Azure Image SLES15-SP2-SAP-Azure Image SLES15-SP2-SAP-Azure-LI-BYOS-Production Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production Image SLES15-SP2-SAP-BYOS-Azure Image SLES15-SP2-SAP-BYOS-EC2-HVM Image SLES15-SP2-SAP-BYOS-GCE Image SLES15-SP2-SAP-EC2-HVM Image SLES15-SP2-SAP-GCE	bind-utils >= 9.16.6-150000.12.65.1 libbind9-1600 >= 9.16.6-150000.12.65.1 libdns1605 >= 9.16.6-150000.12.65.1 libirs1601 >= 9.16.6-150000.12.65.1 libisc1606 >= 9.16.6-150000.12.65.1 libisccc1600 >= 9.16.6-150000.12.65.1 libisccfg1600 >= 9.16.6-150000.12.65.1 libns1604 >= 9.16.6-150000.12.65.1 python3-bind >= 9.16.6-150000.12.65.1
Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE	patterns-suma_proxy >= 4.2-150300.4.12.2 python3-spacewalk-certs-tools >= 4.2.18-150300.3.24.3 python3-spacewalk-client-tools >= 4.2.20-150300.4.24.3 python3-uyuni-common-libs >= 4.2.7-150300.3.9.2 spacewalk-backend >= 4.2.24-150300.4.29.5 spacewalk-base-minimal >= 4.2.29-150300.3.27.3 spacewalk-base-minimal-config >= 4.2.29-150300.3.27.3 spacewalk-certs-tools >= 4.2.18-150300.3.24.3 spacewalk-client-tools >= 4.2.20-150300.4.24.3 spacewalk-proxy-broker >= 4.2.12-150300.3.21.3 spacewalk-proxy-common >= 4.2.12-150300.3.21.3 spacewalk-proxy-management >= 4.2.12-150300.3.21.3 spacewalk-proxy-package-manager >= 4.2.12-150300.3.21.3 spacewalk-proxy-redirect >= 4.2.12-150300.3.21.3 spacewalk-proxy-salt >= 4.2.12-150300.3.21.3
Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE	drools >= 7.17.0-150300.4.6.2 httpcomponents-asyncclient >= 4.1.4-150300.3.3.2 patterns-suma_server >= 4.2-150300.4.12.2 py27-compat-salt >= 3000.3-150300.7.7.23.2 python3-spacewalk-certs-tools >= 4.2.18-150300.3.24.3 python3-spacewalk-client-tools >= 4.2.20-150300.4.24.3 python3-uyuni-common-libs >= 4.2.7-150300.3.9.2 salt-netapi-client >= 0.20.0-150300.3.9.4 spacecmd >= 4.2.19-150300.4.27.2 spacewalk-admin >= 4.2.12-150300.3.15.3 spacewalk-backend >= 4.2.24-150300.4.29.5 spacewalk-backend-app >= 4.2.24-150300.4.29.5 spacewalk-backend-applet >= 4.2.24-150300.4.29.5 spacewalk-backend-config-files >= 4.2.24-150300.4.29.5 spacewalk-backend-config-files-common >= 4.2.24-150300.4.29.5 spacewalk-backend-config-files-tool >= 4.2.24-150300.4.29.5 spacewalk-backend-iss >= 4.2.24-150300.4.29.5 spacewalk-backend-iss-export >= 4.2.24-150300.4.29.5 spacewalk-backend-package-push-server >= 4.2.24-150300.4.29.5 spacewalk-backend-server >= 4.2.24-150300.4.29.5 spacewalk-backend-sql >= 4.2.24-150300.4.29.5 spacewalk-backend-sql-postgresql >= 4.2.24-150300.4.29.5 spacewalk-backend-tools >= 4.2.24-150300.4.29.5 spacewalk-backend-xml-export-libs >= 4.2.24-150300.4.29.5 spacewalk-backend-xmlrpc >= 4.2.24-150300.4.29.5 spacewalk-base >= 4.2.29-150300.3.27.3 spacewalk-base-minimal >= 4.2.29-150300.3.27.3 spacewalk-base-minimal-config >= 4.2.29-150300.3.27.3 spacewalk-certs-tools >= 4.2.18-150300.3.24.3 spacewalk-client-tools >= 4.2.20-150300.4.24.3 spacewalk-html >= 4.2.29-150300.3.27.3 spacewalk-java >= 4.2.41-150300.3.43.5 spacewalk-java-config >= 4.2.41-150300.3.43.5 spacewalk-java-lib >= 4.2.41-150300.3.43.5 spacewalk-java-postgresql >= 4.2.41-150300.3.43.5 spacewalk-search >= 4.2.8-150300.3.12.2 spacewalk-taskomatic >= 4.2.41-150300.3.43.5 subscription-matcher >= 0.29-150300.6.12.2 susemanager >= 4.2.37-150300.3.41.1 susemanager-doc-indexes >= 4.2-150300.12.33.4 susemanager-docs_en >= 4.2-150300.12.33.2 susemanager-docs_en-pdf >= 4.2-150300.12.33.2 susemanager-schema >= 4.2.24-150300.3.27.3 susemanager-sls >= 4.2.27-150300.3.33.4 susemanager-tools >= 4.2.37-150300.3.41.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE	python3-spacewalk-certs-tools >= 4.3.15-150400.3.6.2 python3-spacewalk-client-tools >= 4.3.12-150400.3.6.6 python3-uyuni-common-libs >= 4.3.6-150400.3.6.4 release-notes-susemanager-proxy >= 4.3.2-150400.3.9.3 spacewalk-backend >= 4.3.16-150400.3.6.8 spacewalk-base-minimal >= 4.3.24-150400.3.6.4 spacewalk-base-minimal-config >= 4.3.24-150400.3.6.4 spacewalk-certs-tools >= 4.3.15-150400.3.6.2 spacewalk-client-tools >= 4.3.12-150400.3.6.6 susemanager-build-keys >= 15.4.3-150400.3.6.1 susemanager-build-keys-web >= 15.4.3-150400.3.6.1
Image SLES15-SP4-Manager-Server-4-3 Image SLES15-SP4-Manager-Server-4-3-Azure-llc Image SLES15-SP4-Manager-Server-4-3-Azure-ltd Image SLES15-SP4-Manager-Server-4-3-BYOS Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE Image SLES15-SP4-Manager-Server-4-3-EC2-llc Image SLES15-SP4-Manager-Server-4-3-EC2-ltd	cobbler >= 3.3.3-150400.5.7.1 drools >= 7.17.0-150400.3.6.1 python3-schema >= 0.6.7-150400.10.3.1 python3-spacewalk-certs-tools >= 4.3.15-150400.3.6.2 python3-spacewalk-client-tools >= 4.3.12-150400.3.6.6 python3-urlgrabber >= 4.1.0-150400.3.6.1 python3-uyuni-common-libs >= 4.3.6-150400.3.6.4 release-notes-susemanager >= 4.3.2-150400.3.15.1 reprepro >= 5.4.0-150400.3.6.1 spacecmd >= 4.3.15-150400.3.6.4 spacewalk-admin >= 4.3.10-150400.3.3.2 spacewalk-backend >= 4.3.16-150400.3.6.8 spacewalk-backend-app >= 4.3.16-150400.3.6.8 spacewalk-backend-applet >= 4.3.16-150400.3.6.8 spacewalk-backend-config-files >= 4.3.16-150400.3.6.8 spacewalk-backend-config-files-common >= 4.3.16-150400.3.6.8 spacewalk-backend-config-files-tool >= 4.3.16-150400.3.6.8 spacewalk-backend-iss >= 4.3.16-150400.3.6.8 spacewalk-backend-iss-export >= 4.3.16-150400.3.6.8 spacewalk-backend-package-push-server >= 4.3.16-150400.3.6.8 spacewalk-backend-server >= 4.3.16-150400.3.6.8 spacewalk-backend-sql >= 4.3.16-150400.3.6.8 spacewalk-backend-sql-postgresql >= 4.3.16-150400.3.6.8 spacewalk-backend-tools >= 4.3.16-150400.3.6.8 spacewalk-backend-xml-export-libs >= 4.3.16-150400.3.6.8 spacewalk-backend-xmlrpc >= 4.3.16-150400.3.6.8 spacewalk-base >= 4.3.24-150400.3.6.4 spacewalk-base-minimal >= 4.3.24-150400.3.6.4 spacewalk-base-minimal-config >= 4.3.24-150400.3.6.4 spacewalk-certs-tools >= 4.3.15-150400.3.6.2 spacewalk-client-tools >= 4.3.12-150400.3.6.6 spacewalk-html >= 4.3.24-150400.3.6.4 spacewalk-java >= 4.3.38-150400.3.8.3 spacewalk-java-config >= 4.3.38-150400.3.8.3 spacewalk-java-lib >= 4.3.38-150400.3.8.3 spacewalk-java-postgresql >= 4.3.38-150400.3.8.3 spacewalk-search >= 4.3.7-150400.3.6.2 spacewalk-setup >= 4.3.12-150400.3.8.1 spacewalk-taskomatic >= 4.3.38-150400.3.8.3 spacewalk-utils >= 4.3.14-150400.3.6.3 subscription-matcher >= 0.29-150400.3.7.1 susemanager >= 4.3.19-150400.3.6.4 susemanager-build-keys >= 15.4.3-150400.3.6.1 susemanager-build-keys-web >= 15.4.3-150400.3.6.1 susemanager-docs_en >= 4.3-150400.9.6.1 susemanager-docs_en-pdf >= 4.3-150400.9.6.1 susemanager-schema >= 4.3.14-150400.3.6.5 susemanager-schema-utility >= 4.3.14-150400.3.6.5 susemanager-sls >= 4.3.25-150400.3.6.4 susemanager-sync-data >= 4.3.9-150400.3.3.1 susemanager-tools >= 4.3.19-150400.3.6.4 uyuni-reportdb-schema >= 4.3.6-150400.3.3.6
SUSE CaaS Platform 4.0	bind >= 9.16.6-150000.12.65.1 bind-chrootenv >= 9.16.6-150000.12.65.1 bind-devel >= 9.16.6-150000.12.65.1 bind-doc >= 9.16.6-150000.12.65.1 bind-utils >= 9.16.6-150000.12.65.1 libbind9-1600 >= 9.16.6-150000.12.65.1 libdns1605 >= 9.16.6-150000.12.65.1 libirs-devel >= 9.16.6-150000.12.65.1 libirs1601 >= 9.16.6-150000.12.65.1 libisc1606 >= 9.16.6-150000.12.65.1 libisccc1600 >= 9.16.6-150000.12.65.1 libisccfg1600 >= 9.16.6-150000.12.65.1 libns1604 >= 9.16.6-150000.12.65.1 python3-bind >= 9.16.6-150000.12.65.1	Patchnames: SUSE-SUSE-CAASP-4.0-2023-2578
SUSE Enterprise Storage 7	bind >= 9.16.6-150000.12.65.1 bind-chrootenv >= 9.16.6-150000.12.65.1 bind-devel >= 9.16.6-150000.12.65.1 bind-doc >= 9.16.6-150000.12.65.1 bind-utils >= 9.16.6-150000.12.65.1 libbind9-1600 >= 9.16.6-150000.12.65.1 libdns1605 >= 9.16.6-150000.12.65.1 libirs-devel >= 9.16.6-150000.12.65.1 libirs1601 >= 9.16.6-150000.12.65.1 libisc1606 >= 9.16.6-150000.12.65.1 libisccc1600 >= 9.16.6-150000.12.65.1 libisccfg1600 >= 9.16.6-150000.12.65.1 libns1604 >= 9.16.6-150000.12.65.1 python3-bind >= 9.16.6-150000.12.65.1	Patchnames: SUSE-Storage-7-2023-2578
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS	bind >= 9.16.6-150000.12.65.1 bind-chrootenv >= 9.16.6-150000.12.65.1 bind-devel >= 9.16.6-150000.12.65.1 bind-doc >= 9.16.6-150000.12.65.1 bind-utils >= 9.16.6-150000.12.65.1 libbind9-1600 >= 9.16.6-150000.12.65.1 libdns1605 >= 9.16.6-150000.12.65.1 libirs-devel >= 9.16.6-150000.12.65.1 libirs1601 >= 9.16.6-150000.12.65.1 libisc1606 >= 9.16.6-150000.12.65.1 libisccc1600 >= 9.16.6-150000.12.65.1 libisccfg1600 >= 9.16.6-150000.12.65.1 libns1604 >= 9.16.6-150000.12.65.1 python3-bind >= 9.16.6-150000.12.65.1	Patchnames: SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-2578
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS	bind >= 9.16.6-150000.12.65.1 bind-chrootenv >= 9.16.6-150000.12.65.1 bind-devel >= 9.16.6-150000.12.65.1 bind-doc >= 9.16.6-150000.12.65.1 bind-utils >= 9.16.6-150000.12.65.1 libbind9-1600 >= 9.16.6-150000.12.65.1 libdns1605 >= 9.16.6-150000.12.65.1 libirs-devel >= 9.16.6-150000.12.65.1 libirs1601 >= 9.16.6-150000.12.65.1 libisc1606 >= 9.16.6-150000.12.65.1 libisccc1600 >= 9.16.6-150000.12.65.1 libisccfg1600 >= 9.16.6-150000.12.65.1 libns1604 >= 9.16.6-150000.12.65.1 python3-bind >= 9.16.6-150000.12.65.1	Patchnames: SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-2578
SUSE Linux Enterprise Module for Package Hub 15 SP4	grafana >= 9.5.1-150200.3.41.3	Patchnames: SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-2575
SUSE Linux Enterprise Module for Package Hub 15 SP5	grafana >= 9.5.8-150200.3.53.2	Patchnames: SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-2575 SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-511
SUSE Linux Enterprise Module for Package Hub 15 SP6	grafana >= 9.5.8-150200.3.53.2	Patchnames: SUSE Linux Enterprise Module for Package Hub 15 SP6 GA grafana-9.5.8-150200.3.53.2
SUSE Linux Enterprise Module for Package Hub 15 SP7	grafana >= 9.5.8-150200.3.53.2	Patchnames: SUSE Linux Enterprise Module for Package Hub 15 SP7 GA grafana-10.4.15-150200.3.67.1 SUSE Linux Enterprise Module for Package Hub 15 SP7 GA grafana-10.4.15-150200.3.69.1
SUSE Linux Enterprise Server 15 SP1-LTSS	bind >= 9.16.6-150000.12.65.1 bind-chrootenv >= 9.16.6-150000.12.65.1 bind-devel >= 9.16.6-150000.12.65.1 bind-doc >= 9.16.6-150000.12.65.1 bind-utils >= 9.16.6-150000.12.65.1 libbind9-1600 >= 9.16.6-150000.12.65.1 libdns1605 >= 9.16.6-150000.12.65.1 libirs-devel >= 9.16.6-150000.12.65.1 libirs1601 >= 9.16.6-150000.12.65.1 libisc1606 >= 9.16.6-150000.12.65.1 libisccc1600 >= 9.16.6-150000.12.65.1 libisccfg1600 >= 9.16.6-150000.12.65.1 libns1604 >= 9.16.6-150000.12.65.1 python3-bind >= 9.16.6-150000.12.65.1	Patchnames: SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-2578
SUSE Linux Enterprise Server 15 SP2-LTSS	bind >= 9.16.6-150000.12.65.1 bind-chrootenv >= 9.16.6-150000.12.65.1 bind-devel >= 9.16.6-150000.12.65.1 bind-doc >= 9.16.6-150000.12.65.1 bind-utils >= 9.16.6-150000.12.65.1 libbind9-1600 >= 9.16.6-150000.12.65.1 libdns1605 >= 9.16.6-150000.12.65.1 libirs-devel >= 9.16.6-150000.12.65.1 libirs1601 >= 9.16.6-150000.12.65.1 libisc1606 >= 9.16.6-150000.12.65.1 libisccc1600 >= 9.16.6-150000.12.65.1 libisccfg1600 >= 9.16.6-150000.12.65.1 libns1604 >= 9.16.6-150000.12.65.1 python3-bind >= 9.16.6-150000.12.65.1	Patchnames: SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-2578
SUSE Linux Enterprise Server for SAP Applications 15 SP1	bind >= 9.16.6-150000.12.65.1 bind-chrootenv >= 9.16.6-150000.12.65.1 bind-devel >= 9.16.6-150000.12.65.1 bind-doc >= 9.16.6-150000.12.65.1 bind-utils >= 9.16.6-150000.12.65.1 libbind9-1600 >= 9.16.6-150000.12.65.1 libdns1605 >= 9.16.6-150000.12.65.1 libirs-devel >= 9.16.6-150000.12.65.1 libirs1601 >= 9.16.6-150000.12.65.1 libisc1606 >= 9.16.6-150000.12.65.1 libisccc1600 >= 9.16.6-150000.12.65.1 libisccfg1600 >= 9.16.6-150000.12.65.1 libns1604 >= 9.16.6-150000.12.65.1 python3-bind >= 9.16.6-150000.12.65.1	Patchnames: SUSE-SLE-Product-SLES_SAP-15-SP1-2023-2578
SUSE Linux Enterprise Server for SAP Applications 15 SP2	bind >= 9.16.6-150000.12.65.1 bind-chrootenv >= 9.16.6-150000.12.65.1 bind-devel >= 9.16.6-150000.12.65.1 bind-doc >= 9.16.6-150000.12.65.1 bind-utils >= 9.16.6-150000.12.65.1 libbind9-1600 >= 9.16.6-150000.12.65.1 libdns1605 >= 9.16.6-150000.12.65.1 libirs-devel >= 9.16.6-150000.12.65.1 libirs1601 >= 9.16.6-150000.12.65.1 libisc1606 >= 9.16.6-150000.12.65.1 libisccc1600 >= 9.16.6-150000.12.65.1 libisccfg1600 >= 9.16.6-150000.12.65.1 libns1604 >= 9.16.6-150000.12.65.1 python3-bind >= 9.16.6-150000.12.65.1	Patchnames: SUSE-SLE-Product-SLES_SAP-15-SP2-2023-2578
SUSE Manager Client Tools 12-BETA	golang-github-QubitProducts-exporter_exporter >= 0.4.0-4.6.2 golang-github-boynux-squid_exporter >= 1.6-4.9.2 golang-github-lusitaniae-apache_exporter >= 1.0.0-4.12.4 golang-github-prometheus-alertmanager >= 0.26.0-4.12.4 golang-github-prometheus-node_exporter >= 1.5.0-4.15.4 golang-github-prometheus-prometheus >= 2.45.0-4.33.3 golang-github-prometheus-promu >= 0.14.0-4.12.2 grafana >= 9.5.8-4.21.2 kiwi-desc-saltboot >= 0.1.1687520761.cefb248-4.15.2 mgr-push >= 5.0.1-4.21.4 prometheus-blackbox_exporter >= 0.24.0-3.6.3 prometheus-postgres_exporter >= 0.10.1-3.6.4 python2-hwdata >= 2.3.5-15.12.2 python2-mgr-push >= 5.0.1-4.21.4 python2-rhnlib >= 5.0.1-24.30.3 python2-uyuni-common-libs >= 5.0.1-3.33.3 spacecmd >= 5.0.1-41.42.3 supportutils-plugin-salt >= 1.2.2-9.9.2 supportutils-plugin-susemanager-client >= 5.0.1-9.15.2 system-user-grafana >= 1.0.0-3.7.2 system-user-prometheus >= 1.0.0-3.7.2	Patchnames: SUSE-SLE-Manager-Tools-12-BETA-2024-191
SUSE Manager Client Tools 12	golang-github-lusitaniae-apache_exporter >= 1.0.0-1.21.2 golang-github-prometheus-alertmanager >= 0.26.0-1.24.2 golang-github-prometheus-prometheus >= 2.45.0-1.50.2 grafana >= 9.5.8-1.60.1 mgr-daemon >= 4.3.8-1.44.2 prometheus-postgres_exporter >= 0.10.1-1.17.2 python2-spacewalk-check >= 4.3.18-52.95.2 python2-spacewalk-client-setup >= 4.3.18-52.95.2 python2-spacewalk-client-tools >= 4.3.18-52.95.2 python2-uyuni-common-libs >= 4.3.8-1.33.1 python2-zypp-plugin-spacewalk >= 1.0.14-30.42.1 spacecmd >= 4.3.26-38.136.2 spacewalk-check >= 4.3.18-52.95.2 spacewalk-client-setup >= 4.3.18-52.95.2 spacewalk-client-tools >= 4.3.18-52.95.2 zypp-plugin-spacewalk >= 1.0.14-30.42.1	Patchnames: SUSE-SLE-Manager-Tools-12-2023-2579 SUSE-SLE-Manager-Tools-12-2024-486
SUSE Manager Client Tools 15-BETA	ansible >= 2.9.27-159000.3.9.1 ansible-doc >= 2.9.27-159000.3.9.1 dracut-saltboot >= 0.1.1681904360.84ef141-159000.3.30.1 firewalld-prometheus-config >= 0.1-159000.6.33.1 golang-github-QubitProducts-exporter_exporter >= 0.4.0-159000.4.6.1 golang-github-boynux-squid_exporter >= 1.6-159000.4.9.1 golang-github-lusitaniae-apache_exporter >= 1.0.0-159000.4.12.1 golang-github-prometheus-prometheus >= 2.45.0-159000.6.33.1 grafana >= 9.5.8-159000.4.24.1 mgr-push >= 5.0.1-159000.4.21.1 prometheus-blackbox_exporter >= 0.24.0-159000.3.6.1 prometheus-postgres_exporter >= 0.10.1-159000.3.6.1 python3-hwdata >= 2.3.5-159000.5.13.1 python3-mgr-push >= 5.0.1-159000.4.21.1 python3-pyvmomi >= 6.7.3-159000.3.6.1 python3-rhnlib >= 5.0.1-159000.6.30.1 python3-spacewalk-check >= 5.0.1-159000.6.48.1 python3-spacewalk-client-setup >= 5.0.1-159000.6.48.1 python3-spacewalk-client-tools >= 5.0.1-159000.6.48.1 python3-uyuni-common-libs >= 5.0.1-159000.3.33.1 spacecmd >= 5.0.1-159000.6.42.1 spacewalk-check >= 5.0.1-159000.6.48.1 spacewalk-client-setup >= 5.0.1-159000.6.48.1 spacewalk-client-tools >= 5.0.1-159000.6.48.1 supportutils-plugin-salt >= 1.2.2-159000.5.9.1 supportutils-plugin-susemanager-client >= 5.0.1-159000.6.15.1 uyuni-proxy-systemd-services >= 5.0.1-159000.3.9.1	Patchnames: SUSE-SLE-Manager-Tools-15-BETA-2024-196
SUSE Manager Client Tools 15	dracut-saltboot >= 0.1.1681904360.84ef141-150000.1.50.1 firewalld-prometheus-config >= 0.1-150000.3.53.1 golang-github-lusitaniae-apache_exporter >= 1.0.0-150000.1.20.1 golang-github-prometheus-prometheus >= 2.45.0-150000.3.53.1 grafana >= 9.5.8-150000.1.60.2 mgr-daemon >= 4.3.8-150000.1.44.1 prometheus-postgres_exporter >= 0.10.1-150000.1.17.1 python3-spacewalk-check >= 4.3.18-150000.3.86.2 python3-spacewalk-client-setup >= 4.3.18-150000.3.86.2 python3-spacewalk-client-tools >= 4.3.18-150000.3.86.2 python3-uyuni-common-libs >= 4.3.8-150000.1.33.1 python3-zypp-plugin-spacewalk >= 1.0.14-150000.3.35.1 spacecmd >= 4.3.26-150000.3.113.1 spacewalk-check >= 4.3.18-150000.3.86.2 spacewalk-client-setup >= 4.3.18-150000.3.86.2 spacewalk-client-tools >= 4.3.18-150000.3.86.2 uyuni-proxy-systemd-services >= 4.3.10-150000.1.15.1 zypp-plugin-spacewalk >= 1.0.14-150000.3.35.1	Patchnames: SUSE-SLE-Manager-Tools-15-2023-2578 SUSE-SLE-Manager-Tools-15-2024-487
SUSE Manager Client Tools Beta for SLE Micro 5	dracut-saltboot >= 0.1.1681904360.84ef141-159000.3.30.1 golang-github-QubitProducts-exporter_exporter >= 0.4.0-159000.4.6.1 prometheus-blackbox_exporter >= 0.24.0-159000.3.6.1 uyuni-proxy-systemd-services >= 5.0.1-159000.3.9.1	Patchnames: SUSE-SLE-Manager-Tools-Beta-For-Micro-5-2024-196
SUSE Manager Client Tools for SLE Micro 5	bind-utils >= 9.16.6-150000.12.65.1 dracut-saltboot >= 0.1.1681904360.84ef141-150000.1.50.1 libbind9-1600 >= 9.16.6-150000.12.65.1 libbind9-1600-64bit >= 9.16.6-150000.12.65.1 libdns1605 >= 9.16.6-150000.12.65.1 libdns1605-64bit >= 9.16.6-150000.12.65.1 libirs1601 >= 9.16.6-150000.12.65.1 libirs1601-64bit >= 9.16.6-150000.12.65.1 libisc1606 >= 9.16.6-150000.12.65.1 libisc1606-64bit >= 9.16.6-150000.12.65.1 libisccc1600 >= 9.16.6-150000.12.65.1 libisccc1600-64bit >= 9.16.6-150000.12.65.1 libisccfg1600 >= 9.16.6-150000.12.65.1 libisccfg1600-64bit >= 9.16.6-150000.12.65.1 libns1604 >= 9.16.6-150000.12.65.1 python3-bind >= 9.16.6-150000.12.65.1 uyuni-proxy-systemd-services >= 4.3.10-150000.1.15.1	Patchnames: SUSE-SLE-Manager-Tools-For-Micro-5-2023-2578 SUSE-SLE-Manager-Tools-For-Micro-5-2024-487
SUSE Manager Proxy 4.2	release-notes-susemanager-proxy >= 4.2.9-150300.3.43.1	Patchnames: SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2022-3313
SUSE Manager Proxy 4.3	release-notes-susemanager-proxy >= 4.3.2-150400.3.9.3	Patchnames: SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2022-3761
SUSE Manager Proxy Module 4.2	mgr-daemon >= 4.2.10-150300.2.9.4 patterns-suma_proxy >= 4.2-150300.4.12.2 python3-spacewalk-certs-tools >= 4.2.18-150300.3.24.3 python3-spacewalk-check >= 4.2.20-150300.4.24.3 python3-spacewalk-client-setup >= 4.2.20-150300.4.24.3 python3-spacewalk-client-tools >= 4.2.20-150300.4.24.3 python3-uyuni-common-libs >= 4.2.7-150300.3.9.2 python3-zypp-plugin-spacewalk >= 1.0.14-150000.3.35.1 spacecmd >= 4.2.19-150300.4.27.2 spacewalk-backend >= 4.2.24-150300.4.29.5 spacewalk-base-minimal >= 4.2.29-150300.3.27.3 spacewalk-base-minimal-config >= 4.2.29-150300.3.27.3 spacewalk-certs-tools >= 4.2.18-150300.3.24.3 spacewalk-check >= 4.2.20-150300.4.24.3 spacewalk-client-setup >= 4.2.20-150300.4.24.3 spacewalk-client-tools >= 4.2.20-150300.4.24.3 spacewalk-proxy-broker >= 4.2.12-150300.3.21.3 spacewalk-proxy-common >= 4.2.12-150300.3.21.3 spacewalk-proxy-management >= 4.2.12-150300.3.21.3 spacewalk-proxy-package-manager >= 4.2.12-150300.3.21.3 spacewalk-proxy-redirect >= 4.2.12-150300.3.21.3 spacewalk-proxy-salt >= 4.2.12-150300.3.21.3 susemanager-tftpsync-recv >= 4.2.5-150300.3.6.2 zypp-plugin-spacewalk >= 1.0.14-150000.3.35.1	Patchnames: SUSE-SLE-Module-SUSE-Manager-Proxy-4.2-2022-3314 SUSE-SLE-Module-SUSE-Manager-Proxy-4.2-2023-2578
SUSE Manager Proxy Module 4.3	golang-github-lusitaniae-apache_exporter >= 1.0.0-150000.1.20.1 mgr-daemon >= 4.3.6-150400.3.6.4 python3-spacewalk-certs-tools >= 4.3.15-150400.3.6.2 python3-spacewalk-check >= 4.3.12-150400.3.6.6 python3-spacewalk-client-setup >= 4.3.12-150400.3.6.6 python3-spacewalk-client-tools >= 4.3.12-150400.3.6.6 python3-uyuni-common-libs >= 4.3.6-150400.3.6.4 python3-zypp-plugin-spacewalk >= 1.0.14-150000.3.35.1 spacecmd >= 4.3.15-150400.3.6.4 spacewalk-backend >= 4.3.16-150400.3.6.8 spacewalk-base-minimal >= 4.3.24-150400.3.6.4 spacewalk-base-minimal-config >= 4.3.24-150400.3.6.4 spacewalk-certs-tools >= 4.3.15-150400.3.6.2 spacewalk-check >= 4.3.12-150400.3.6.6 spacewalk-client-setup >= 4.3.12-150400.3.6.6 spacewalk-client-tools >= 4.3.12-150400.3.6.6 susemanager-build-keys >= 15.4.3-150400.3.6.1 susemanager-build-keys-web >= 15.4.3-150400.3.6.1 susemanager-tftpsync-recv >= 4.3.7-150400.3.3.3 zypp-plugin-spacewalk >= 1.0.14-150000.3.35.1	Patchnames: SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2022-3750 SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2023-2578 SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2024-487
SUSE Manager Retail Branch Server 4.2	release-notes-susemanager-proxy >= 4.2.9-150300.3.43.1	Patchnames: SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2022-3313
SUSE Manager Retail Branch Server 4.3	release-notes-susemanager-proxy >= 4.3.2-150400.3.9.3	Patchnames: SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.3-2022-3761
SUSE Manager Server 4.2	release-notes-susemanager >= 4.2.9-150300.3.54.1	Patchnames: SUSE-SLE-Product-SUSE-Manager-Server-4.2-2022-3313
SUSE Manager Server 4.3	release-notes-susemanager >= 4.3.2-150400.3.15.1	Patchnames: SUSE-SLE-Product-SUSE-Manager-Server-4.3-2022-3761
SUSE Manager Server Module 4.2	drools >= 7.17.0-150300.4.6.2 httpcomponents-asyncclient >= 4.1.4-150300.3.3.2 image-sync-formula >= 0.1.1661440526.b08d95b-150300.3.3.2 inter-server-sync >= 0.2.3-150300.8.22.2 patterns-suma_retail >= 4.2-150300.4.12.2 patterns-suma_server >= 4.2-150300.4.12.2 py27-compat-salt >= 3000.3-150300.7.7.23.2 python3-spacewalk-certs-tools >= 4.2.18-150300.3.24.3 python3-spacewalk-client-tools >= 4.2.20-150300.4.24.3 python3-uyuni-common-libs >= 4.2.7-150300.3.9.2 salt-netapi-client >= 0.20.0-150300.3.9.4 saltboot-formula >= 0.1.1661440526.b08d95b-150300.3.12.2 spacecmd >= 4.2.19-150300.4.27.2 spacewalk-admin >= 4.2.12-150300.3.15.3 spacewalk-backend >= 4.2.24-150300.4.29.5 spacewalk-backend-app >= 4.2.24-150300.4.29.5 spacewalk-backend-applet >= 4.2.24-150300.4.29.5 spacewalk-backend-config-files >= 4.2.24-150300.4.29.5 spacewalk-backend-config-files-common >= 4.2.24-150300.4.29.5 spacewalk-backend-config-files-tool >= 4.2.24-150300.4.29.5 spacewalk-backend-iss >= 4.2.24-150300.4.29.5 spacewalk-backend-iss-export >= 4.2.24-150300.4.29.5 spacewalk-backend-package-push-server >= 4.2.24-150300.4.29.5 spacewalk-backend-server >= 4.2.24-150300.4.29.5 spacewalk-backend-sql >= 4.2.24-150300.4.29.5 spacewalk-backend-sql-postgresql >= 4.2.24-150300.4.29.5 spacewalk-backend-tools >= 4.2.24-150300.4.29.5 spacewalk-backend-xml-export-libs >= 4.2.24-150300.4.29.5 spacewalk-backend-xmlrpc >= 4.2.24-150300.4.29.5 spacewalk-base >= 4.2.29-150300.3.27.3 spacewalk-base-minimal >= 4.2.29-150300.3.27.3 spacewalk-base-minimal-config >= 4.2.29-150300.3.27.3 spacewalk-certs-tools >= 4.2.18-150300.3.24.3 spacewalk-client-tools >= 4.2.20-150300.4.24.3 spacewalk-html >= 4.2.29-150300.3.27.3 spacewalk-java >= 4.2.41-150300.3.43.5 spacewalk-java-config >= 4.2.41-150300.3.43.5 spacewalk-java-lib >= 4.2.41-150300.3.43.5 spacewalk-java-postgresql >= 4.2.41-150300.3.43.5 spacewalk-search >= 4.2.8-150300.3.12.2 spacewalk-taskomatic >= 4.2.41-150300.3.43.5 subscription-matcher >= 0.29-150300.6.12.2 susemanager >= 4.2.37-150300.3.41.1 susemanager-doc-indexes >= 4.2-150300.12.33.4 susemanager-docs_en >= 4.2-150300.12.33.2 susemanager-docs_en-pdf >= 4.2-150300.12.33.2 susemanager-schema >= 4.2.24-150300.3.27.3 susemanager-sls >= 4.2.27-150300.3.33.4 susemanager-tools >= 4.2.37-150300.3.41.1 uyuni-config-modules >= 4.2.27-150300.3.33.4	Patchnames: SUSE-SLE-Module-SUSE-Manager-Server-4.2-2022-3314
SUSE Manager Server Module 4.3	golang-github-lusitaniae-apache_exporter >= 1.0.0-150000.1.20.1	Patchnames: SUSE-SLE-Module-SUSE-Manager-Server-4.3-2024-487
openSUSE Leap 15.4	bind-devel-32bit >= 9.16.6-150000.12.65.1 dracut-saltboot >= 0.1.1681904360.84ef141-150000.1.50.1 grafana >= 9.5.1-150200.3.41.3 libbind9-1600-32bit >= 9.16.6-150000.12.65.1 libdns1605-32bit >= 9.16.6-150000.12.65.1 libirs1601-32bit >= 9.16.6-150000.12.65.1 libisc1606-32bit >= 9.16.6-150000.12.65.1 libisccc1600-32bit >= 9.16.6-150000.12.65.1 libisccfg1600-32bit >= 9.16.6-150000.12.65.1 libns1604-32bit >= 9.16.6-150000.12.65.1 spacecmd >= 4.3.21-150000.3.98.1 wire >= 0.5.0-150000.1.12.3	Patchnames: openSUSE-SLE-15.4-2023-2575 openSUSE-SLE-15.4-2023-2578
openSUSE Leap 15.5	dracut-saltboot >= 0.1.1681904360.84ef141-150000.1.50.1 golang-github-lusitaniae-apache_exporter >= 1.0.0-150000.1.20.1 grafana >= 9.5.8-150200.3.53.2 prometheus-postgres_exporter >= 0.10.1-150000.1.17.1 spacecmd >= 4.3.26-150000.3.113.1 wire >= 0.5.0-150000.1.12.3	Patchnames: openSUSE-SLE-15.5-2023-2575 openSUSE-SLE-15.5-2023-2578 openSUSE-SLE-15.5-2024-487 openSUSE-SLE-15.5-2024-511
openSUSE Tumbleweed	grafana >= 9.3.6-1.1	Patchnames: openSUSE-Tumbleweed-2024-12723

---

First public cloud image revisions this CVE is fixed in:

• amazon/suse-manager-proxy-4-2-byos-v20221105-hvm-ssd-x86_64
• amazon/suse-manager-proxy-4-3-byos-v20221105-hvm-ssd-x86_64
• amazon/suse-manager-server-4-2-byos-v20221105-hvm-ssd-x86_64
• amazon/suse-manager-server-4-3-byos-v20230121-hvm-ssd-x86_64
• google/suse-manager-proxy-4-2-byos-v20221104-x86-64
• google/suse-manager-proxy-4-3-byos-v20221104-x86-64
• google/suse-manager-server-4-2-byos-v20221104-x86-64
• google/suse-manager-server-4-3-byos-v20221105-x86-64
• microsoft/suse-manager-proxy-4-2-byos-v20221104-x86_64
• microsoft/suse-manager-proxy-4-3-byos-v20221104-x86_64
• microsoft/suse-manager-server-4-2-byos-v20221104-x86_64
• microsoft/suse-manager-server-4-3-byos-v20221105-x86_64

---

Status of this issue by product and package

Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification. The updates are grouped by state of their lifecycle. SUSE product lifecycles are documented on the lifecycle page.

Product(s)	Source package	State
Products under general support and receiving all security fixes.
SUSE Linux Enterprise Module for Package Hub 15 SP5	grafana	Released
SUSE Linux Enterprise Module for Package Hub 15 SP6	grafana	Released
SUSE Linux Enterprise Module for Package Hub 15 SP7	grafana	Released
SUSE Manager Client Tools 12	golang-github-lusitaniae-apache_exporter	Released
SUSE Manager Client Tools 12	golang-github-prometheus-alertmanager	Released
SUSE Manager Client Tools 12	golang-github-prometheus-prometheus	Released
SUSE Manager Client Tools 12	grafana	Released
SUSE Manager Client Tools 12	mgr-daemon	Released
SUSE Manager Client Tools 12	prometheus-postgres_exporter	Released
SUSE Manager Client Tools 12	spacecmd	Released
SUSE Manager Client Tools 12	spacewalk-client-tools	Released
SUSE Manager Client Tools 12	uyuni-common-libs	Released
SUSE Manager Client Tools 12	zypp-plugin-spacewalk	Released
SUSE Manager Client Tools 12-BETA	golang-github-QubitProducts-exporter_exporter	Released
SUSE Manager Client Tools 12-BETA	golang-github-boynux-squid_exporter	Released
SUSE Manager Client Tools 12-BETA	golang-github-lusitaniae-apache_exporter	Released
SUSE Manager Client Tools 12-BETA	golang-github-prometheus-alertmanager	Released
SUSE Manager Client Tools 12-BETA	golang-github-prometheus-node_exporter	Released
SUSE Manager Client Tools 12-BETA	golang-github-prometheus-prometheus	Released
SUSE Manager Client Tools 12-BETA	golang-github-prometheus-promu	Released
SUSE Manager Client Tools 12-BETA	grafana	Released
SUSE Manager Client Tools 12-BETA	kiwi-desc-saltboot	Released
SUSE Manager Client Tools 12-BETA	mgr-push	Released
SUSE Manager Client Tools 12-BETA	prometheus-blackbox_exporter	Released
SUSE Manager Client Tools 12-BETA	prometheus-postgres_exporter	Released
SUSE Manager Client Tools 12-BETA	python-hwdata	Released
SUSE Manager Client Tools 12-BETA	rhnlib	Released
SUSE Manager Client Tools 12-BETA	spacecmd	Released
SUSE Manager Client Tools 12-BETA	supportutils-plugin-salt	Released
SUSE Manager Client Tools 12-BETA	supportutils-plugin-susemanager-client	Released
SUSE Manager Client Tools 12-BETA	system-user-grafana	Released
SUSE Manager Client Tools 12-BETA	system-user-prometheus	Released
SUSE Manager Client Tools 12-BETA	uyuni-common-libs	Released
SUSE Manager Client Tools 15	dracut-saltboot	Released
SUSE Manager Client Tools 15	golang-github-lusitaniae-apache_exporter	Released
SUSE Manager Client Tools 15	golang-github-prometheus-prometheus	Released
SUSE Manager Client Tools 15	grafana	Released
SUSE Manager Client Tools 15	mgr-daemon	Released
SUSE Manager Client Tools 15	prometheus-postgres_exporter	Released
SUSE Manager Client Tools 15	spacecmd	Released
SUSE Manager Client Tools 15	spacewalk-client-tools	Released
SUSE Manager Client Tools 15	uyuni-common-libs	Released
SUSE Manager Client Tools 15	uyuni-proxy-systemd-services	Released
SUSE Manager Client Tools 15	zypp-plugin-spacewalk	Released
SUSE Manager Client Tools 15-BETA	ansible	Released
SUSE Manager Client Tools 15-BETA	dracut-saltboot	Released
SUSE Manager Client Tools 15-BETA	golang-github-QubitProducts-exporter_exporter	Released
SUSE Manager Client Tools 15-BETA	golang-github-boynux-squid_exporter	Released
SUSE Manager Client Tools 15-BETA	golang-github-lusitaniae-apache_exporter	Released
SUSE Manager Client Tools 15-BETA	golang-github-prometheus-prometheus	Released
SUSE Manager Client Tools 15-BETA	grafana	Released
SUSE Manager Client Tools 15-BETA	mgr-push	Released
SUSE Manager Client Tools 15-BETA	prometheus-blackbox_exporter	Released
SUSE Manager Client Tools 15-BETA	prometheus-postgres_exporter	Released
SUSE Manager Client Tools 15-BETA	python-hwdata	Released
SUSE Manager Client Tools 15-BETA	python-pyvmomi	Released
SUSE Manager Client Tools 15-BETA	rhnlib	Released
SUSE Manager Client Tools 15-BETA	spacecmd	Released
SUSE Manager Client Tools 15-BETA	spacewalk-client-tools	Released
SUSE Manager Client Tools 15-BETA	supportutils-plugin-salt	Released
SUSE Manager Client Tools 15-BETA	supportutils-plugin-susemanager-client	Released
SUSE Manager Client Tools 15-BETA	uyuni-common-libs	Released
SUSE Manager Client Tools 15-BETA	uyuni-proxy-systemd-services	Released
SUSE Manager Client Tools Beta for SLE 12	grafana	Released
SUSE Manager Client Tools Beta for SLE 15	grafana	Released
SUSE Manager Client Tools Beta for SLE Micro 5	dracut-saltboot	Released
SUSE Manager Client Tools Beta for SLE Micro 5	golang-github-QubitProducts-exporter_exporter	Released
SUSE Manager Client Tools Beta for SLE Micro 5	prometheus-blackbox_exporter	Released
SUSE Manager Client Tools Beta for SLE Micro 5	uyuni-proxy-systemd-services	Released
SUSE Manager Client Tools for SLE 12	grafana	Released
SUSE Manager Client Tools for SLE 15	grafana	Released
SUSE Manager Client Tools for SLE Micro 5	bind	Released
SUSE Manager Client Tools for SLE Micro 5	dracut-saltboot	Released
SUSE Manager Client Tools for SLE Micro 5	uyuni-proxy-systemd-services	Released
SUSE Manager Proxy 4.3	release-notes-susemanager-proxy	Released
SUSE Manager Proxy Module 4.3	golang-github-lusitaniae-apache_exporter	Released
SUSE Manager Proxy Module 4.3	mgr-daemon	Released
SUSE Manager Proxy Module 4.3	spacecmd	Released
SUSE Manager Proxy Module 4.3	spacewalk-backend	Released
SUSE Manager Proxy Module 4.3	spacewalk-certs-tools	Released
SUSE Manager Proxy Module 4.3	spacewalk-client-tools	Released
SUSE Manager Proxy Module 4.3	spacewalk-web	Released
SUSE Manager Proxy Module 4.3	susemanager-build-keys	Released
SUSE Manager Proxy Module 4.3	susemanager-tftpsync-recv	Released
SUSE Manager Proxy Module 4.3	uyuni-common-libs	Released
SUSE Manager Proxy Module 4.3	zypp-plugin-spacewalk	Released
SUSE Manager Retail Branch Server 4.3	release-notes-susemanager-proxy	Released
SUSE Manager Server 4.3	release-notes-susemanager	Released
SUSE Manager Server Module 4.3	golang-github-lusitaniae-apache_exporter	Released
SUSE Manager Server Module 4.3	spacewalk-web	Released
openSUSE Leap 15.6	grafana	Affected
Products past their end of life and not receiving proactive updates anymore.
SUSE CaaS Platform 4.0	bind	Released
SUSE Enterprise Storage 7	bind	Released
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS	bind	Released
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS	bind	Released
SUSE Linux Enterprise Module for Package Hub 15 SP4	grafana	Released
SUSE Linux Enterprise Server 15 SP1-LTSS	bind	Released
SUSE Linux Enterprise Server 15 SP2-LTSS	bind	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP1	bind	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP2	bind	Released
SUSE Manager Proxy 4.2	release-notes-susemanager-proxy	Released
SUSE Manager Proxy Module 4.1	spacewalk-web	Not affected
SUSE Manager Proxy Module 4.2	mgr-daemon	Released
SUSE Manager Proxy Module 4.2	patterns-suse-manager	Released
SUSE Manager Proxy Module 4.2	spacecmd	Released
SUSE Manager Proxy Module 4.2	spacewalk-backend	Released
SUSE Manager Proxy Module 4.2	spacewalk-certs-tools	Released
SUSE Manager Proxy Module 4.2	spacewalk-client-tools	Released
SUSE Manager Proxy Module 4.2	spacewalk-proxy	Released
SUSE Manager Proxy Module 4.2	spacewalk-web	Released
SUSE Manager Proxy Module 4.2	susemanager-tftpsync-recv	Released
SUSE Manager Proxy Module 4.2	uyuni-common-libs	Released
SUSE Manager Proxy Module 4.2	zypp-plugin-spacewalk	Released
SUSE Manager Retail Branch Server 4.2	release-notes-susemanager-proxy	Released
SUSE Manager Server 4.2	release-notes-susemanager	Released
SUSE Manager Server Module 4.1	spacewalk-web	Not affected
SUSE Manager Server Module 4.2	drools	Released
SUSE Manager Server Module 4.2	httpcomponents-asyncclient	Released
SUSE Manager Server Module 4.2	image-sync-formula	Released
SUSE Manager Server Module 4.2	inter-server-sync	Released
SUSE Manager Server Module 4.2	patterns-suse-manager	Released
SUSE Manager Server Module 4.2	py27-compat-salt	Released
SUSE Manager Server Module 4.2	salt-netapi-client	Released
SUSE Manager Server Module 4.2	saltboot-formula	Released
SUSE Manager Server Module 4.2	spacecmd	Released
SUSE Manager Server Module 4.2	spacewalk-admin	Released
SUSE Manager Server Module 4.2	spacewalk-backend	Released
SUSE Manager Server Module 4.2	spacewalk-certs-tools	Released
SUSE Manager Server Module 4.2	spacewalk-client-tools	Released
SUSE Manager Server Module 4.2	spacewalk-java	Released
SUSE Manager Server Module 4.2	spacewalk-search	Released
SUSE Manager Server Module 4.2	spacewalk-web	Released
SUSE Manager Server Module 4.2	subscription-matcher	Released
SUSE Manager Server Module 4.2	susemanager	Released
SUSE Manager Server Module 4.2	susemanager-doc-indexes	Released
SUSE Manager Server Module 4.2	susemanager-docs_en	Released
SUSE Manager Server Module 4.2	susemanager-schema	Released
SUSE Manager Server Module 4.2	susemanager-sls	Released
SUSE Manager Server Module 4.2	uyuni-common-libs	Released
openSUSE Leap 15.3	grafana	Affected
openSUSE Leap 15.3	release-notes-susemanager	Released
openSUSE Leap 15.3	release-notes-susemanager-proxy	Released
openSUSE Leap 15.4	grafana	Released
openSUSE Leap 15.4	release-notes-susemanager	Released
openSUSE Leap 15.4	release-notes-susemanager-proxy	Released
openSUSE Leap 15.5	grafana	Released
Products at an unknown state of their lifecycle.
SUSE Manager Tools 15 SP1	grafana	Released
SUSE Multi Linux Manager Tools Beta SLE-12	grafana	Affected
SUSE Multi Linux Manager Tools Beta SLE-15	grafana	Affected
Container Status
ses/7.1/ceph/grafana	grafana	Released
ses/7/ceph/grafana	grafana	In progress
suse/manager/4.3/proxy-httpd	release-notes-susemanager-proxy	Released

---

SUSE Timeline for this CVE

CVE page created: Thu Apr 7 00:00:17 2022
CVE page last modified: Tue Apr 8 15:53:08 2025