Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2023:3144-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2023:3144-1

UNKNOWN

Security update for SUSE Manager Client Tools

Published Aug 2, 2023

Modified 2 years ago

Fix available

Details

This update fixes the following issues:

python-tornado:

Security fixes:
- CVE-2023-28370: Fixed an open redirect issue in the static file handler (bsc#1211741)

prometheus-blackbox_exporter:

Use obscpio for go modules service
Set version number
Set build date from SOURCE_DATE_EPOCH
Update to 0.24.0 (bsc#1212279, jsc#PED-4556)
- Requires go1.19
Avoid empty validation script
Add rc symlink for backwards compatibility

spacecmd:

Version 4.3.22-1
- Bypass traditional systems check on older SUMA instances (bsc#1208612)

Affected Packages

SUSE:Enterprise Storage 7python-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Enterprise Storage 7python2-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Enterprise Storage 7python3-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Enterprise Storage 7.1python-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Enterprise Storage 7.1python3-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSpython-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSpython2-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSpython3-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSpython-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSpython2-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSpython3-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSpython-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSpython3-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSpython-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSpython3-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Micro 5.2python-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Micro 5.2python3-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Micro 5.3python-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Micro 5.3python3-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Micro 5.4python-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Micro 5.4python3-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Module for Basesystem 15 SP4python-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Module for Basesystem 15 SP4python3-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Module for Basesystem 15 SP5python-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Module for Basesystem 15 SP5python3-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Real Time 15 SP3python-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Real Time 15 SP3python3-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Server 15 SP1-LTSSpython-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Server 15 SP1-LTSSpython2-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Server 15 SP1-LTSSpython3-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Server 15 SP2-LTSSpython-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Server 15 SP2-LTSSpython2-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Server 15 SP2-LTSSpython3-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Server 15 SP3-LTSSpython-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Server 15 SP3-LTSSpython3-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1python-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1python2-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1python3-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2python-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2python2-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2python3-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3python-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3python3-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Manager Client Tools 15prometheus-blackbox_exporter

Fixed in:

0.24.0-150000.1.20.2

SUSE:Manager Client Tools 15spacecmd

Fixed in:

4.3.22-150000.3.101.1

SUSE:Manager Client Tools 15system-user-prometheus

Fixed in:

1.0.0-150000.10.1

SUSE:Manager Client Tools for SLE Micro 5prometheus-blackbox_exporter

Fixed in:

0.24.0-150000.1.20.2

SUSE:Manager Client Tools for SLE Micro 5system-user-prometheus

Fixed in:

1.0.0-150000.10.1

SUSE:Manager Proxy 4.2python-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Manager Proxy 4.2python3-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Manager Proxy Module 4.2prometheus-blackbox_exporter

Fixed in:

0.24.0-150000.1.20.2

SUSE:Manager Proxy Module 4.2system-user-prometheus

Fixed in:

1.0.0-150000.10.1

SUSE:Manager Proxy Module 4.3prometheus-blackbox_exporter

Fixed in:

0.24.0-150000.1.20.2

SUSE:Manager Proxy Module 4.3system-user-prometheus

Fixed in:

1.0.0-150000.10.1

SUSE:Manager Server 4.2python-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Manager Server 4.2python2-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Manager Server 4.2python3-tornado

Fixed in:

4.5.3-150000.3.6.1

SUSE:Manager Server Module 4.2system-user-prometheus

Fixed in:

1.0.0-150000.10.1

SUSE:Manager Server Module 4.3system-user-prometheus

Fixed in:

1.0.0-150000.10.1

openSUSE:Leap 15.4prometheus-blackbox_exporter

Fixed in:

0.24.0-150000.1.20.2

openSUSE:Leap 15.4python-tornado

Fixed in:

4.5.3-150000.3.6.1

openSUSE:Leap 15.4python3-tornado

Fixed in:

4.5.3-150000.3.6.1

openSUSE:Leap 15.4spacecmd

Fixed in:

4.3.22-150000.3.101.1

openSUSE:Leap 15.4system-user-prometheus

Fixed in:

1.0.0-150000.10.1

openSUSE:Leap 15.5prometheus-blackbox_exporter

Fixed in:

0.24.0-150000.1.20.2

openSUSE:Leap 15.5python-tornado

Fixed in:

4.5.3-150000.3.6.1

openSUSE:Leap 15.5python3-tornado

Fixed in:

4.5.3-150000.3.6.1

openSUSE:Leap 15.5spacecmd

Fixed in:

4.3.22-150000.3.101.1

openSUSE:Leap 15.5system-user-prometheus

Fixed in:

1.0.0-150000.10.1

openSUSE:Leap Micro 5.3python-tornado

Fixed in:

4.5.3-150000.3.6.1

openSUSE:Leap Micro 5.3python3-tornado

Fixed in:

4.5.3-150000.3.6.1

openSUSE:Leap Micro 5.4python-tornado

Fixed in:

4.5.3-150000.3.6.1

openSUSE:Leap Micro 5.4python3-tornado

Fixed in:

4.5.3-150000.3.6.1

References

REPORThttps://bugzilla.suse.com/1208612 REPORThttps://bugzilla.suse.com/1211741 REPORThttps://bugzilla.suse.com/1212279 WEBhttps://www.suse.com/security/cve/CVE-2023-28370 ADVISORYhttps://www.suse.com/support/update/announcement/2023/suse-su-20233144-1/

Upstream

CVE-2023-28370

Ecosystems

Timeline

PublishedAug 2, 2023

ModifiedAug 2, 2023

SUSE-SU-2023:3144-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline