File _patchinfo of Package patchinfo.32207

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.32207

<patchinfo incident="32207">
  <issue tracker="ijsc" id="MSQA-719"/>
  <issue tracker="bnc" id="1192154">VUL-0: CVE-2021-3807: nodejs12,nodejs4,nodejs6,nodejs8,nodejs10,nodejs14: node-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes</issue>
  <issue tracker="bnc" id="1192696">VUL-0: CVE-2021-3918: nodejs14, nodejs10, nodejs12, nodejs8: json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')</issue>
  <issue tracker="bnc" id="1193492">VUL-0: CVE-2021-43798: grafana: arbitrary file read in the graph native plugin</issue>
  <issue tracker="bnc" id="1193686">VUL-1: CVE-2021-43815: grafana: directory traversal for .csv files</issue>
  <issue tracker="bnc" id="1200480">VUL-0: CVE-2021-43138: spacewalk-web: a malicious user can obtain privileges via the mapValues() method</issue>
  <issue tracker="bnc" id="1204023">VUL-0: CVE-2022-41715: go1.18,go1.19: regexp/syntax: limit memory used by parsing regexps</issue>
  <issue tracker="bnc" id="1218843">VUL-0: CVE-2020-7753: grafana: nodejs-trim: Regular Expression Denial of Service (ReDoS) in trim function</issue>
  <issue tracker="bnc" id="1218844">VUL-0: CVE-2022-0155: grafana: follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor</issue>
  <issue tracker="cve" id="2022-41715"/>
  <issue tracker="cve" id="2020-7753"/>
  <issue tracker="cve" id="2021-3807"/>
  <issue tracker="cve" id="2021-3918"/>
  <issue tracker="cve" id="2021-43138"/>
  <issue tracker="cve" id="2022-0155"/>
  <issue tracker="cve" id="2021-43815"/>
  <issue tracker="cve" id="2021-43798"/>
  <packager>raulosuna</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for SUSE Manager Client Tools</summary>
  <description>
This update fixes the following issues:

golang-github-lusitaniae-apache_exporter:

- Do not strip if SUSE Linux Enterprise 15 SP3
- Exclude debug for Red Hat Enterprise Linux &gt;= 8
- Build with Go &gt;= 1.20 when the OS is not Red Hat Enterprise Linux

mgr-daemon:

- Version 4.3.8-1
  * Update translation strings

prometheus-postgres_exporter:

- Remove duplicated call to systemd requirements
- Do not build debug if Red Hat Enterprise Linux &gt;= 8
- Do not strip if SUSE Linux Enterprise 15 SP3
- Build at least with with Go &gt;= 1.18 on Red Hat Enterprise Linux
- Build with Go &gt;= 1.20 elsewhere

spacecmd:

- Version 4.3.26-1
  * Update translation strings

spacewalk-client-tools:

- Version 4.3.18-1
  * Update translation strings

uyuni-proxy-systemd-services:

- Version 4.3.10-1
  * Update the image version
- Version 4.3.9-1
  * Integrate the containerized proxy into the usual rel-eng workflow

</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.32207

Places