SUSE-SU-2024:1814-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2024/suse-su-20241814-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:1814-1.json

JSON Data

https://api.test.osv.dev/v1/vulns/SUSE-SU-2024:1814-1

Upstream

CVE-2024-1313

Related

CVE-2024-1313

Published

2024-05-29T08:21:07Z

Modified

2025-05-08T17:33:04.526090Z

Summary

Security Beta update for SUSE Manager Client Tools and Salt

Details

This update fixes the following issues:

golang-github-prometheus-node_exporter:

Add device_error label for filesystem metrics.
Update rtnetlink library to fix errors during ARP metrics collection.
update to 1.7.0 (jsc#PED-7893, jsc#PED-7928):
- [FEATURE] Add ZFS freebsd per dataset stats #2753
- [FEATURE] Add cpu vulnerabilities reporting from sysfs #2721
- [ENHANCEMENT] Parallelize stat calls in Linux filesystem collector #1772
- [ENHANCEMENT] Add missing linkspeeds to ethtool collector #2711
- [ENHANCEMENT] Add CPU MHz as the value for nodecpuinfo metric #2778
- [ENHANCEMENT] Improve qdisc collector performance #2779
- [ENHANCEMENT] Add include and exclude filter for hwmon collector #2699
- [ENHANCEMENT] Optionally fetch ARP stats via rtnetlink instead of procfs #2777
- [BUGFIX] Fallback to 32-bit stats in netdev #2757
- [BUGFIX] Close btrfs.FS handle after use #2780
- [BUGFIX] Move RO status before error return #2807
- [BUFFIX] Fix promhttpmetrichandlererrorstotal being always active #2808
- [BUGFIX] Fix nfsd v4 index miss #2824
update to 1.6.1:
- Rebuild with updated Go version, no source code changes in this release.
update to 1.6.0:
- [CHANGE] Fix cpustat when some cpus are offline #2318
- [CHANGE] Remove metrics of offline CPUs in CPU collector #2605
- [CHANGE] Deprecate ntp collector #2603
- [CHANGE] Remove bcache cache_readaheads_totals metrics #2583
- [CHANGE] Deprecate supervisord collector #2685
- [FEATURE] Add softirqs collector #2669
- [ENHANCEMENT] Add suspended as a node_zfs_zpool_state #2449
- [ENHANCEMENT] Add administrative state of Linux network interfaces #2515
- [ENHANCEMENT] Log current value of GOMAXPROCS #2537
- [ENHANCEMENT] Add profiler options for perf collector #2542
- [ENHANCEMENT] Allow root path as metrics path #2590
- [ENHANCEMENT] Add cpu frequency governor metrics #2569
- [ENHANCEMENT] Add new landing page #2622
- [ENHANCEMENT] Reduce privileges needed for btrfs device stats #2634
- [ENHANCEMENT] Add ZFS memory_available_bytes #2687
- [ENHANCEMENT] Use SCSI_IDENT_SERIAL as serial in diskstats #2612
- [ENHANCEMENT] Read missing from netlink netclass attributes from sysfs #2669
- [BUGFIX] perf: fixes for automatically detecting the correct tracefs mountpoints #2553
- [BUGFIX] Fix thermal_zone collector noise #2554
- [BUGFIX] interrupts: Fix fields on linux aarch64 #2631
- [BUGFIX] Remove metrics of offline CPUs in CPU collector #2605

grafana:

Packaging improvements:
- Changed deprecated disabled service mode to manual
- Drop golang-packaging macros
- Drop explicit mod=vendor as it is enabled automatically
Update to version 9.5.18:
- [SECURITY] CVE-2024-1313: Require same organisation when deleting snapshots (bsc#1222155)
Update to version 9.5.17:
- [FEATURE] Alerting: Backport use Alertmanager API v2

mgr-push:

Version 5.0.2-0
- Remove unused code from the traditional stack
- Use bundle CA certificate in rhnpush (bsc#1222731)

spacecmd:

Version 5.0.6-0
- Update translations

uyuni-common-libs:

Version 5.0.3-0
- Add support for package signature type V4 RSA/SHA384
- Add support for package signature type V4 RSA/SHA512 (bsc#1221465)

uyuni-tools:

Version 0.1.9-0
- Redact passwords from the API payload in traces
- Fix build on Ubuntu 20.04 due to version change
Version 0.1.8-0
- Add 'mgradm support sql' command
- Improve GPG help
- podman-mount* flag should be used only on Server installation and migration
- Add flag groups in help text
- Attach Proxy pod to our Podman network
- Create support ptf commands
- Create mgrpxy upgrade command
- Add domain for internal container network
- Stop the Server if first user creation failed
- Add localization support
- Require Podman 4.5.0 for its --shm-size-systemd parameter
- Add --podman-mount-www flag for install and migration
- Only colorize output if outputting to a terminal
- Fix output missing newlines due to the spinner
- Add product version and commit id to the version output
- Add missing whitespace between podman common arguments and additional ones
- Bump the push tag to 5.0.0-RC
- Add gpg command to mgradm
- Hide message in stdout if SCCcredentials is missing (bsc#1222277)
- Redact password in stdout and uyuni-tools.log
- Rework distribution mapping to work with distros without .treeinfo data
- Add initial installation support for Confidental Computing attestation container
- Allow PAM and LDAP authentication using SSSD
- Change pull policy default to Always during upgrade
- Allow migration with non-root user on source server

References

Affected packages

SUSE:Manager Client Tools 15-BETA / grafana

Package

Name: grafana
Purl: pkg:rpm/suse/grafana&distro=SUSE%20Manager%20Client%20Tools%2015-BETA

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

9.5.18-159000.4.33.4

Ecosystem specific

{
    "binaries": [
        {
            "python3-mgr-push": "5.0.2-159000.4.24.5",
            "python3-uyuni-common-libs": "5.0.3-159000.3.39.3",
            "mgrctl-zsh-completion": "0.1.9-159000.3.11.5",
            "grafana": "9.5.18-159000.4.33.4",
            "mgrctl-bash-completion": "0.1.9-159000.3.11.5",
            "mgrctl": "0.1.9-159000.3.11.5",
            "mgr-push": "5.0.2-159000.4.24.5",
            "spacecmd": "5.0.6-159000.6.51.4",
            "mgrctl-lang": "0.1.9-159000.3.11.5"
        }
    ]
}

SUSE:Manager Client Tools 15-BETA / mgr-push

Package

Name: mgr-push
Purl: pkg:rpm/suse/mgr-push&distro=SUSE%20Manager%20Client%20Tools%2015-BETA

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.0.2-159000.4.24.5

Ecosystem specific

{
    "binaries": [
        {
            "python3-mgr-push": "5.0.2-159000.4.24.5",
            "python3-uyuni-common-libs": "5.0.3-159000.3.39.3",
            "mgrctl-zsh-completion": "0.1.9-159000.3.11.5",
            "grafana": "9.5.18-159000.4.33.4",
            "mgrctl-bash-completion": "0.1.9-159000.3.11.5",
            "mgrctl": "0.1.9-159000.3.11.5",
            "mgr-push": "5.0.2-159000.4.24.5",
            "spacecmd": "5.0.6-159000.6.51.4",
            "mgrctl-lang": "0.1.9-159000.3.11.5"
        }
    ]
}

SUSE:Manager Client Tools 15-BETA / spacecmd

Package

Name: spacecmd
Purl: pkg:rpm/suse/spacecmd&distro=SUSE%20Manager%20Client%20Tools%2015-BETA

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.0.6-159000.6.51.4

Ecosystem specific

{
    "binaries": [
        {
            "python3-mgr-push": "5.0.2-159000.4.24.5",
            "python3-uyuni-common-libs": "5.0.3-159000.3.39.3",
            "mgrctl-zsh-completion": "0.1.9-159000.3.11.5",
            "grafana": "9.5.18-159000.4.33.4",
            "mgrctl-bash-completion": "0.1.9-159000.3.11.5",
            "mgrctl": "0.1.9-159000.3.11.5",
            "mgr-push": "5.0.2-159000.4.24.5",
            "spacecmd": "5.0.6-159000.6.51.4",
            "mgrctl-lang": "0.1.9-159000.3.11.5"
        }
    ]
}

SUSE:Manager Client Tools 15-BETA / uyuni-common-libs

Package

Name: uyuni-common-libs
Purl: pkg:rpm/suse/uyuni-common-libs&distro=SUSE%20Manager%20Client%20Tools%2015-BETA

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.0.3-159000.3.39.3

Ecosystem specific

{
    "binaries": [
        {
            "python3-mgr-push": "5.0.2-159000.4.24.5",
            "python3-uyuni-common-libs": "5.0.3-159000.3.39.3",
            "mgrctl-zsh-completion": "0.1.9-159000.3.11.5",
            "grafana": "9.5.18-159000.4.33.4",
            "mgrctl-bash-completion": "0.1.9-159000.3.11.5",
            "mgrctl": "0.1.9-159000.3.11.5",
            "mgr-push": "5.0.2-159000.4.24.5",
            "spacecmd": "5.0.6-159000.6.51.4",
            "mgrctl-lang": "0.1.9-159000.3.11.5"
        }
    ]
}

SUSE:Manager Client Tools 15-BETA / uyuni-tools

Package

Name: uyuni-tools
Purl: pkg:rpm/suse/uyuni-tools&distro=SUSE%20Manager%20Client%20Tools%2015-BETA

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.1.9-159000.3.11.5

Ecosystem specific

{
    "binaries": [
        {
            "python3-mgr-push": "5.0.2-159000.4.24.5",
            "python3-uyuni-common-libs": "5.0.3-159000.3.39.3",
            "mgrctl-zsh-completion": "0.1.9-159000.3.11.5",
            "grafana": "9.5.18-159000.4.33.4",
            "mgrctl-bash-completion": "0.1.9-159000.3.11.5",
            "mgrctl": "0.1.9-159000.3.11.5",
            "mgr-push": "5.0.2-159000.4.24.5",
            "spacecmd": "5.0.6-159000.6.51.4",
            "mgrctl-lang": "0.1.9-159000.3.11.5"
        }
    ]
}

SUSE:Manager Client Tools Beta for SLE Micro 5 / golang-github-prometheus-node_exporter

Package

Name: golang-github-prometheus-node_exporter
Purl: pkg:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Manager%20Client%20Tools%20Beta%20for%20SLE%20Micro%205

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.7.0-159000.6.5.5

Ecosystem specific

{
    "binaries": [
        {
            "mgrctl": "0.1.9-159000.3.11.5",
            "mgrctl-lang": "0.1.9-159000.3.11.5",
            "golang-github-prometheus-node_exporter": "1.7.0-159000.6.5.5",
            "mgrctl-bash-completion": "0.1.9-159000.3.11.5",
            "mgrctl-zsh-completion": "0.1.9-159000.3.11.5"
        }
    ]
}

SUSE:Manager Client Tools Beta for SLE Micro 5 / uyuni-tools

Package

Name: uyuni-tools
Purl: pkg:rpm/suse/uyuni-tools&distro=SUSE%20Manager%20Client%20Tools%20Beta%20for%20SLE%20Micro%205

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.1.9-159000.3.11.5

Ecosystem specific

{
    "binaries": [
        {
            "mgrctl": "0.1.9-159000.3.11.5",
            "mgrctl-lang": "0.1.9-159000.3.11.5",
            "golang-github-prometheus-node_exporter": "1.7.0-159000.6.5.5",
            "mgrctl-bash-completion": "0.1.9-159000.3.11.5",
            "mgrctl-zsh-completion": "0.1.9-159000.3.11.5"
        }
    ]
}