{
  "affected": [
    {
      "affectedData": [
        {
          "product": "prometheus",
          "vendor": "prometheus",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 2.23.0, \u003c 2.27.1"
            }
          ]
        }
      ],
      "source": "security-advisories@github.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:prometheus:prometheus:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2A93B617-8482-4109-8C83-A06AC85D74F8",
              "versionEndExcluding": "2.26.1",
              "versionStartIncluding": "2.23.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:prometheus:prometheus:2.27.0:-:*:*:*:*:*:*",
              "matchCriteriaId": "B1E1B501-8DA3-46E7-A4B4-B30A9E2C3335",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:prometheus:prometheus:2.27.0:rc0:*:*:*:*:*:*",
              "matchCriteriaId": "F4251CCD-DFC2-4571-8448-319882AAAB08",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Prometheus is an open-source monitoring system and time series database. In 2.23.0, Prometheus changed its default UI to the New ui. To ensure a seamless transition, the URL\u0027s prefixed by /new redirect to /. Due to a bug in the code, it is possible for an attacker to craft an URL that can redirect to any other URL, in the /new endpoint. If a user visits a prometheus server with a specially crafted address, they can be redirected to an arbitrary URL. The issue was patched in the 2.26.1 and 2.27.1 releases. In 2.28.0, the /new endpoint will be removed completely. The workaround is to disable access to /new via a reverse proxy in front of Prometheus."
    },
    {
      "lang": "es",
      "value": "Prometheus es un sistema de monitoreo de c\u00f3digo abierto y una base de datos de series de tiempo.\u0026#xa0;En la versi\u00f3n 2.23.0, Prometheus cambi\u00f3 su Interfaz de Usuario predeterminada a la Nueva interfaz de usuario.\u0026#xa0;Para garantizar una transici\u00f3n sin problemas, la URL con el prefijo /new redirecciona a /.\u0026#xa0;Debido a un bug en el c\u00f3digo, es posible para un atacante dise\u00f1ar una URL que pueda redireccionar a cualquier otra URL, en el endpoint /new.\u0026#xa0;Si un usuario visita un servidor de Prometheus con una direcci\u00f3n especialmente dise\u00f1ada, ellos pueden ser redirigidos a una URL arbitraria.\u0026#xa0;El problema fue parcheado en las versiones 2.26.1 y 2.27.1.\u0026#xa0;En la versi\u00f3n 2.28.0, el endpoint /new ser\u00e1 eliminado completamente.\u0026#xa0;La soluci\u00f3n es deshabilitar un acceso a /new por medio de un proxy inverso en frente de Prometheus"
    }
  ],
  "id": "CVE-2021-29622",
  "lastModified": "2026-06-17T03:48:02.743",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.8,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 4.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.6,
        "source": "security-advisories@github.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 6.1,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "privilegesRequired": "NONE",
          "scope": "CHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 2.7,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2021-05-19T20:15:07.487",
  "references": [
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://github.com/prometheus/prometheus/releases/tag/v2.26.1"
    },
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://github.com/prometheus/prometheus/releases/tag/v2.27.1"
    },
    {
      "source": "security-advisories@github.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-vx57-7f4q-fpc7"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://github.com/prometheus/prometheus/releases/tag/v2.26.1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://github.com/prometheus/prometheus/releases/tag/v2.27.1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-vx57-7f4q-fpc7"
    }
  ],
  "sourceIdentifier": "security-advisories@github.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-601"
        }
      ],
      "source": "security-advisories@github.com",
      "type": "Secondary"
    }
  ]
}

{
  "affected": [
    {
      "package": {
        "ecosystem": "Go",
        "name": "github.com/prometheus/prometheus"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "2.23.0"
            },
            {
              "fixed": "2.26.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Go",
        "name": "github.com/prometheus/prometheus"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "2.27.0"
            },
            {
              "fixed": "2.27.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.27.0"
      ]
    }
  ],
  "aliases": [
    "CVE-2021-29622"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-601"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2021-05-19T17:58:51Z",
    "nvd_published_at": "2021-05-19T20:15:00Z",
    "severity": "MODERATE"
  },
  "details": "### Impact\n\nIn 2.23.0, Prometheus changed its default UI to the New ui. To ensure a seamless transition, the URL\u0027s prefixed by /new redirect to /.\nDue to a bug in the code, it is possible for an attacker to craft an URL that can redirect to any other URL, in the /new endpoint.\n\nIf a user visits a prometheus server with a specially crafted address (e.g.: `http://127.0.0.1:9090/new/new\u003curl\u003e`), they can be redirected to an arbitrary URL.\n\ne.g. if a user visits http://127.0.0.1:9090/new/newhttp://www.google.com/, they will be redirected to http://google.com.\n\n### Patches\n\nThe issue will be patched in 2.26.1 and 2.27.1 releases.\nIn 2.28.0, the /new endpoint will be removed completely.\n\n### Workarounds\n\nThe workaround is to disable access to /new via a reverse proxy in front of Prometheus.\n\nNote: Users who use a `--web.external-url=` flag _with a path_ (e.g.  `--web.external-url=http://example.com/prometheus`) are not affected.\n\n### For more information\n\nIf you have any questions or comments about this advisory, please use our community channels (https://prometheus.io/community).\nOur security policy is available at https://prometheus.io/docs/operating/security/\n",
  "id": "GHSA-vx57-7f4q-fpc7",
  "modified": "2021-05-28T22:05:12Z",
  "published": "2022-02-15T01:57:18Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-vx57-7f4q-fpc7"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-29622"
    },
    {
      "type": "WEB",
      "url": "https://github.com/prometheus/prometheus/releases/tag/v2.26.1"
    },
    {
      "type": "WEB",
      "url": "https://github.com/prometheus/prometheus/releases/tag/v2.27.1"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Arbitrary redirects under /new endpoint"
}

{
  "GSD": {
    "alias": "CVE-2021-29622",
    "description": "Prometheus is an open-source monitoring system and time series database. In 2.23.0, Prometheus changed its default UI to the New ui. To ensure a seamless transition, the URL\u0027s prefixed by /new redirect to /. Due to a bug in the code, it is possible for an attacker to craft an URL that can redirect to any other URL, in the /new endpoint. If a user visits a prometheus server with a specially crafted address, they can be redirected to an arbitrary URL. The issue was patched in the 2.26.1 and 2.27.1 releases. In 2.28.0, the /new endpoint will be removed completely. The workaround is to disable access to /new via a reverse proxy in front of Prometheus.",
    "id": "GSD-2021-29622",
    "references": [
      "https://www.suse.com/security/cve/CVE-2021-29622.html",
      "https://access.redhat.com/errata/RHSA-2021:2438",
      "https://security.archlinux.org/CVE-2021-29622"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2021-29622"
      ],
      "details": "Prometheus is an open-source monitoring system and time series database. In 2.23.0, Prometheus changed its default UI to the New ui. To ensure a seamless transition, the URL\u0027s prefixed by /new redirect to /. Due to a bug in the code, it is possible for an attacker to craft an URL that can redirect to any other URL, in the /new endpoint. If a user visits a prometheus server with a specially crafted address, they can be redirected to an arbitrary URL. The issue was patched in the 2.26.1 and 2.27.1 releases. In 2.28.0, the /new endpoint will be removed completely. The workaround is to disable access to /new via a reverse proxy in front of Prometheus.",
      "id": "GSD-2021-29622",
      "modified": "2023-12-13T01:23:36.560303Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security-advisories@github.com",
        "ID": "CVE-2021-29622",
        "STATE": "PUBLIC",
        "TITLE": "Arbitrary redirects under /new endpoint"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "prometheus",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "\u003e= 2.23.0, \u003c 2.27.1"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "prometheus"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Prometheus is an open-source monitoring system and time series database. In 2.23.0, Prometheus changed its default UI to the New ui. To ensure a seamless transition, the URL\u0027s prefixed by /new redirect to /. Due to a bug in the code, it is possible for an attacker to craft an URL that can redirect to any other URL, in the /new endpoint. If a user visits a prometheus server with a specially crafted address, they can be redirected to an arbitrary URL. The issue was patched in the 2.26.1 and 2.27.1 releases. In 2.28.0, the /new endpoint will be removed completely. The workaround is to disable access to /new via a reverse proxy in front of Prometheus."
          }
        ]
      },
      "impact": {
        "cvss": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
          "version": "3.1"
        }
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "CWE-601: URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://github.com/prometheus/prometheus/security/advisories/GHSA-vx57-7f4q-fpc7",
            "refsource": "CONFIRM",
            "url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-vx57-7f4q-fpc7"
          },
          {
            "name": "https://github.com/prometheus/prometheus/releases/tag/v2.26.1",
            "refsource": "MISC",
            "url": "https://github.com/prometheus/prometheus/releases/tag/v2.26.1"
          },
          {
            "name": "https://github.com/prometheus/prometheus/releases/tag/v2.27.1",
            "refsource": "MISC",
            "url": "https://github.com/prometheus/prometheus/releases/tag/v2.27.1"
          }
        ]
      },
      "source": {
        "advisory": "GHSA-vx57-7f4q-fpc7",
        "discovery": "UNKNOWN"
      }
    },
    "gitlab.com": {
      "advisories": [
        {
          "affected_range": "\u003e=2.23.0 \u003c2.26.1||=2.27.0",
          "affected_versions": "All versions starting from 2.23.0 before 2.26.1, version 2.27.0",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "cwe_ids": [
            "CWE-1035",
            "CWE-601",
            "CWE-937"
          ],
          "date": "2022-04-12",
          "description": "Prometheus is an open-source monitoring system and time series database. In 2.23.0, Prometheus changed its default UI to the New ui. To ensure a seamless transition, the URL\u0027s prefixed by /new redirect to /. Due to a bug in the code, it is possible for an attacker to craft an URL that can redirect to any other URL, in the /new endpoint. If a user visits a prometheus server with a specially crafted address, they can be redirected to an arbitrary URL. The issue was patched in the 2.26.1 and 2.27.1 releases. In 2.28.0, the /new endpoint will be removed completely. The workaround is to disable access to /new via a reverse proxy in front of Prometheus.",
          "fixed_versions": [
            "2.26.1",
            "2.27.1"
          ],
          "identifier": "CVE-2021-29622",
          "identifiers": [
            "GHSA-vx57-7f4q-fpc7",
            "CVE-2021-29622"
          ],
          "not_impacted": "All versions before 2.23.0, all versions starting from 2.26.1 before 2.27.0, all versions after 2.27.0",
          "package_slug": "go/github.com/prometheus/prometheus",
          "pubdate": "2022-02-15",
          "solution": "Upgrade to versions 2.26.1, 2.27.1 or above.",
          "title": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
          "urls": [
            "https://github.com/prometheus/prometheus/security/advisories/GHSA-vx57-7f4q-fpc7",
            "https://nvd.nist.gov/vuln/detail/CVE-2021-29622",
            "https://github.com/prometheus/prometheus/releases/tag/v2.26.1",
            "https://github.com/prometheus/prometheus/releases/tag/v2.27.1",
            "https://github.com/advisories/GHSA-vx57-7f4q-fpc7"
          ],
          "uuid": "532f09b0-7ee3-42e9-b766-7d6bd0b5f561"
        },
        {
          "affected_range": "\u003e=v2.23.0 \u003cv2.26.1 || =v2.27.0",
          "affected_versions": "All versions starting from 2.23.0 before 2.26.1, version 2.27.0",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "cwe_ids": [
            "CWE-1035",
            "CWE-601",
            "CWE-937"
          ],
          "date": "2021-05-26",
          "description": "Due to a bug in the code, it is possible for an attacker to craft an URL that can redirect to any other URL, in the `/new` endpoint.",
          "fixed_versions": [],
          "identifier": "CVE-2021-29622",
          "identifiers": [
            "CVE-2021-29622",
            "GHSA-vx57-7f4q-fpc7"
          ],
          "not_impacted": "",
          "package_slug": "go/github.com/prometheus/prometheus/web/ui",
          "pubdate": "2021-05-19",
          "solution": "Unfortunately, there is no solution available yet.",
          "title": "URL Redirection to Untrusted Site (Open Redirect)",
          "urls": [
            "https://nvd.nist.gov/vuln/detail/CVE-2021-29622"
          ],
          "uuid": "4a7eb152-d366-4a32-a80d-7936f0abd07b",
          "versions": [
            {
              "commit": {
                "sha": "2447c56ec7835da037c6dff4c3f6094c03692f16",
                "tags": [
                  "v2.23.0"
                ],
                "timestamp": "20201126101154"
              },
              "number": "v2.23.0"
            },
            {
              "commit": {
                "sha": "2c266fff772d180d527db10b04c08c85b2508014",
                "tags": [
                  "v2.27.0"
                ],
                "timestamp": "20210512173212"
              },
              "number": "v2.27.0"
            },
            {
              "commit": {
                "sha": "0cf098df8f7d50f13d8e2c2b080ba1a1acd37236",
                "tags": [
                  "v2.26.1"
                ],
                "timestamp": "20210518124745"
              },
              "number": "v2.26.1"
            }
          ]
        }
      ]
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:prometheus:prometheus:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2.26.1",
                "versionStartIncluding": "2.23.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:prometheus:prometheus:2.27.0:-:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:prometheus:prometheus:2.27.0:rc0:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "security-advisories@github.com",
          "ID": "CVE-2021-29622"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Prometheus is an open-source monitoring system and time series database. In 2.23.0, Prometheus changed its default UI to the New ui. To ensure a seamless transition, the URL\u0027s prefixed by /new redirect to /. Due to a bug in the code, it is possible for an attacker to craft an URL that can redirect to any other URL, in the /new endpoint. If a user visits a prometheus server with a specially crafted address, they can be redirected to an arbitrary URL. The issue was patched in the 2.26.1 and 2.27.1 releases. In 2.28.0, the /new endpoint will be removed completely. The workaround is to disable access to /new via a reverse proxy in front of Prometheus."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-601"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/prometheus/prometheus/security/advisories/GHSA-vx57-7f4q-fpc7",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-vx57-7f4q-fpc7"
            },
            {
              "name": "https://github.com/prometheus/prometheus/releases/tag/v2.26.1",
              "refsource": "MISC",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://github.com/prometheus/prometheus/releases/tag/v2.26.1"
            },
            {
              "name": "https://github.com/prometheus/prometheus/releases/tag/v2.27.1",
              "refsource": "MISC",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://github.com/prometheus/prometheus/releases/tag/v2.27.1"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 4.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": true
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 2.8,
          "impactScore": 2.7
        }
      },
      "lastModifiedDate": "2021-05-26T22:29Z",
      "publishedDate": "2021-05-19T20:15Z"
    }
  }
}

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2021-29622 Arbitrary redirects under /new endpoint - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2021/msrc_cve-2021-29622.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Arbitrary redirects under /new endpoint",
    "tracking": {
      "current_release_date": "2021-12-16T00:00:00.000Z",
      "generator": {
        "date": "2025-10-19T21:59:28.364Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2021-29622",
      "initial_release_date": "2021-05-02T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2021-12-16T00:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "2.0",
                "product": {
                  "name": "CBL Mariner 2.0",
                  "product_id": "17086"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 prometheus 2.36.0-2",
                "product": {
                  "name": "\u003ccbl2 prometheus 2.36.0-2",
                  "product_id": "1"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 prometheus 2.36.0-2",
                "product": {
                  "name": "cbl2 prometheus 2.36.0-2",
                  "product_id": "19483"
                }
              }
            ],
            "category": "product_name",
            "name": "prometheus"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 prometheus 2.36.0-2 as a component of CBL Mariner 2.0",
          "product_id": "17086-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 prometheus 2.36.0-2 as a component of CBL Mariner 2.0",
          "product_id": "19483-17086"
        },
        "product_reference": "19483",
        "relates_to_product_reference": "17086"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-29622",
      "cwe": {
        "id": "CWE-601",
        "name": "URL Redirection to Untrusted Site (\u0026#39;Open Redirect\u0026#39;)"
      },
      "notes": [
        {
          "category": "general",
          "text": "GitHub_M",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "fixed": [
          "19483-17086"
        ],
        "known_affected": [
          "17086-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2021-29622 Arbitrary redirects under /new endpoint - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2021/msrc_cve-2021-29622.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-12-16T00:00:00.000Z",
          "details": "2.36.0-2:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17086-1"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "environmentalsScore": 0.0,
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "temporalScore": 6.1,
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "17086-1"
          ]
        }
      ],
      "title": "Arbitrary redirects under /new endpoint"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for SUSE Manager Client Tools",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThis update fixes the following issues:\n\nansible:\n\n- The support level for ansible is l2, not l3\n\ndracut-saltboot:\n\n- Force installation of libexpat.so.1 (bsc#1188846)\n- Use kernel parameters from PXE formula also for local boot\n\ngolang-github-prometheus-prometheus:\n\n- Provide and reload firewalld configuration only for:\n  + openSUSE Leap 15.0, 15.1, 15.2\n  + SUSE Linux Enterprise 15, 15 SP1, 15 SP2\n- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)\n  + Bugfix:\n   * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)\n   * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659\n    * TSDB: Do not panic when writing very large records to the WAL. #8790\n    * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723\n    * Scaleway Discovery: Fix nil pointer dereference. #8737\n    * Consul Discovery: Restart no longer required after config update with no targets. #8766\n  + Features:\n    * Promtool: Retroactive rule evaluation functionality.\n    * Configuration: Environment variable expansion for external labels. \n      Behind \u0027--enable-feature=expand-external-labels\u0027 flag.\n    * Add a flag \u0027--storage.tsdb.max-block-chunk-segment-size\u0027 to control the max chunks file size of the blocks for \n      small Prometheus instances.\n    * UI: Add a dark theme.\n    * AWS Lightsail Discovery: Add AWS Lightsail Discovery.\n    * Docker Discovery: Add Docker Service Discovery.\n    * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used.\n    * Remote Write: Send exemplars via remote write. Experimental and disabled by default.\n  + Enhancements:\n    * Digital Ocean Discovery: Add \u0027__meta_digitalocean_vpc\u0027 label.\n    * Scaleway Discovery: Read Scaleway secret from a file.\n    * Scrape: Add configurable limits for label size and count.\n    * UI: Add 16w and 26w time range steps.\n    * Templating: Enable parsing strings in humanize functions.\n- Update package with changes from `server:monitoring` (bsc#1175478)\n  Left out removal of \u0027firewalld\u0027 related configuration files as SUSE Linux Enterprise 15-SP1\u0027s\n  `firewalld` package does not contain \u0027prometheus\u0027 configuration yet.\n\nmgr-cfg:\n\n- No visible impact for the user\n\nmgr-custom-info:\n\n- No visible impact for the user\n\nmgr-osad:\n\n- No visible impact for the user\n\nmgr-push:\n\n- No visible impact for the user\n\nmgr-virtualization:\n\n- No visible impact for the user\n\nrhnlib:\n\n- No visible impact for the user\n\nspacecmd:\n\n- Make spacecmd aware of retracted patches/packages\n- Enhance help for installation types when creating distributions (bsc#1186581)\n- Parse empty argument when nothing in between the separator\n\nspacewalk-client-tools:\n\n- Update translation strings\n\nspacewalk-koan:\n\n- Fix for spacewalk-koan tests after switching to the new\n  Docker images\n\nspacewalk-oscap:\n\n- No visible impact for the user\n\nsuseRegisterInfo:\n\n- No visible impact for the user\n\nuyuni-common-libs:\n\n- Handle broken RPM packages to prevent exceptions\n  causing fails on repository synchronization (bsc#1186650)\n- Maintainer field in debian packages are only recommended (bsc#1186508)\n\n\nThis update was imported from the SUSE:SLE-15:Update update project.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2021-1162",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_1162-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2021:1162-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2SW3762PL7VO3NVHZJOSVYMKION77NYI/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2021:1162-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2SW3762PL7VO3NVHZJOSVYMKION77NYI/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175478",
        "url": "https://bugzilla.suse.com/1175478"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1186242",
        "url": "https://bugzilla.suse.com/1186242"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1186508",
        "url": "https://bugzilla.suse.com/1186508"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1186581",
        "url": "https://bugzilla.suse.com/1186581"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1186650",
        "url": "https://bugzilla.suse.com/1186650"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188846",
        "url": "https://bugzilla.suse.com/1188846"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-27962 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-27962/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-28146 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-28146/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-28147 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-28147/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-28148 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-28148/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-29622 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-29622/"
      }
    ],
    "title": "Security update for SUSE Manager Client Tools",
    "tracking": {
      "current_release_date": "2021-08-17T10:06:47Z",
      "generator": {
        "date": "2021-08-17T10:06:47Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2021:1162-1",
      "initial_release_date": "2021-08-17T10:06:47Z",
      "revision_history": [
        {
          "date": "2021-08-17T10:06:47Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ansible-2.9.21-lp152.2.7.1.noarch",
                "product": {
                  "name": "ansible-2.9.21-lp152.2.7.1.noarch",
                  "product_id": "ansible-2.9.21-lp152.2.7.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "ansible-doc-2.9.21-lp152.2.7.1.noarch",
                "product": {
                  "name": "ansible-doc-2.9.21-lp152.2.7.1.noarch",
                  "product_id": "ansible-doc-2.9.21-lp152.2.7.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "ansible-test-2.9.21-lp152.2.7.1.noarch",
                "product": {
                  "name": "ansible-test-2.9.21-lp152.2.7.1.noarch",
                  "product_id": "ansible-test-2.9.21-lp152.2.7.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "dracut-saltboot-0.1.1627546504.96a0b3e-lp152.2.26.1.noarch",
                "product": {
                  "name": "dracut-saltboot-0.1.1627546504.96a0b3e-lp152.2.26.1.noarch",
                  "product_id": "dracut-saltboot-0.1.1627546504.96a0b3e-lp152.2.26.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "golang-github-prometheus-prometheus-2.27.1-lp152.3.13.1.x86_64",
                "product": {
                  "name": "golang-github-prometheus-prometheus-2.27.1-lp152.3.13.1.x86_64",
                  "product_id": "golang-github-prometheus-prometheus-2.27.1-lp152.3.13.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.2",
                "product": {
                  "name": "openSUSE Leap 15.2",
                  "product_id": "openSUSE Leap 15.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-2.9.21-lp152.2.7.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:ansible-2.9.21-lp152.2.7.1.noarch"
        },
        "product_reference": "ansible-2.9.21-lp152.2.7.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-doc-2.9.21-lp152.2.7.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:ansible-doc-2.9.21-lp152.2.7.1.noarch"
        },
        "product_reference": "ansible-doc-2.9.21-lp152.2.7.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-test-2.9.21-lp152.2.7.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:ansible-test-2.9.21-lp152.2.7.1.noarch"
        },
        "product_reference": "ansible-test-2.9.21-lp152.2.7.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dracut-saltboot-0.1.1627546504.96a0b3e-lp152.2.26.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:dracut-saltboot-0.1.1627546504.96a0b3e-lp152.2.26.1.noarch"
        },
        "product_reference": "dracut-saltboot-0.1.1627546504.96a0b3e-lp152.2.26.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-prometheus-prometheus-2.27.1-lp152.3.13.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:golang-github-prometheus-prometheus-2.27.1-lp152.3.13.1.x86_64"
        },
        "product_reference": "golang-github-prometheus-prometheus-2.27.1-lp152.3.13.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-27962",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-27962"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:ansible-2.9.21-lp152.2.7.1.noarch",
          "openSUSE Leap 15.2:ansible-doc-2.9.21-lp152.2.7.1.noarch",
          "openSUSE Leap 15.2:ansible-test-2.9.21-lp152.2.7.1.noarch",
          "openSUSE Leap 15.2:dracut-saltboot-0.1.1627546504.96a0b3e-lp152.2.26.1.noarch",
          "openSUSE Leap 15.2:golang-github-prometheus-prometheus-2.27.1-lp152.3.13.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-27962",
          "url": "https://www.suse.com/security/cve/CVE-2021-27962"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1184371 for CVE-2021-27962",
          "url": "https://bugzilla.suse.com/1184371"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:ansible-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:ansible-doc-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:ansible-test-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:dracut-saltboot-0.1.1627546504.96a0b3e-lp152.2.26.1.noarch",
            "openSUSE Leap 15.2:golang-github-prometheus-prometheus-2.27.1-lp152.3.13.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:ansible-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:ansible-doc-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:ansible-test-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:dracut-saltboot-0.1.1627546504.96a0b3e-lp152.2.26.1.noarch",
            "openSUSE Leap 15.2:golang-github-prometheus-prometheus-2.27.1-lp152.3.13.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-08-17T10:06:47Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-27962"
    },
    {
      "cve": "CVE-2021-28146",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-28146"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The team sync HTTP API in Grafana Enterprise 7.4.x before 7.4.5 has an Incorrect Access Control issue. On Grafana instances using an external authentication service, this vulnerability allows any authenticated user to add external groups to existing teams. This can be used to grant a user team permissions that the user isn\u0027t supposed to have.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:ansible-2.9.21-lp152.2.7.1.noarch",
          "openSUSE Leap 15.2:ansible-doc-2.9.21-lp152.2.7.1.noarch",
          "openSUSE Leap 15.2:ansible-test-2.9.21-lp152.2.7.1.noarch",
          "openSUSE Leap 15.2:dracut-saltboot-0.1.1627546504.96a0b3e-lp152.2.26.1.noarch",
          "openSUSE Leap 15.2:golang-github-prometheus-prometheus-2.27.1-lp152.3.13.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-28146",
          "url": "https://www.suse.com/security/cve/CVE-2021-28146"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1183811 for CVE-2021-28146",
          "url": "https://bugzilla.suse.com/1183811"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:ansible-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:ansible-doc-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:ansible-test-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:dracut-saltboot-0.1.1627546504.96a0b3e-lp152.2.26.1.noarch",
            "openSUSE Leap 15.2:golang-github-prometheus-prometheus-2.27.1-lp152.3.13.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:ansible-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:ansible-doc-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:ansible-test-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:dracut-saltboot-0.1.1627546504.96a0b3e-lp152.2.26.1.noarch",
            "openSUSE Leap 15.2:golang-github-prometheus-prometheus-2.27.1-lp152.3.13.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-08-17T10:06:47Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-28146"
    },
    {
      "cve": "CVE-2021-28147",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-28147"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 has an Incorrect Access Control issue. On Grafana instances using an external authentication service and having the EditorsCanAdmin feature enabled, this vulnerability allows any authenticated user to add external groups to any existing team. This can be used to grant a user team permissions that the user isn\u0027t supposed to have.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:ansible-2.9.21-lp152.2.7.1.noarch",
          "openSUSE Leap 15.2:ansible-doc-2.9.21-lp152.2.7.1.noarch",
          "openSUSE Leap 15.2:ansible-test-2.9.21-lp152.2.7.1.noarch",
          "openSUSE Leap 15.2:dracut-saltboot-0.1.1627546504.96a0b3e-lp152.2.26.1.noarch",
          "openSUSE Leap 15.2:golang-github-prometheus-prometheus-2.27.1-lp152.3.13.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-28147",
          "url": "https://www.suse.com/security/cve/CVE-2021-28147"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1183809 for CVE-2021-28147",
          "url": "https://bugzilla.suse.com/1183809"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:ansible-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:ansible-doc-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:ansible-test-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:dracut-saltboot-0.1.1627546504.96a0b3e-lp152.2.26.1.noarch",
            "openSUSE Leap 15.2:golang-github-prometheus-prometheus-2.27.1-lp152.3.13.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:ansible-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:ansible-doc-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:ansible-test-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:dracut-saltboot-0.1.1627546504.96a0b3e-lp152.2.26.1.noarch",
            "openSUSE Leap 15.2:golang-github-prometheus-prometheus-2.27.1-lp152.3.13.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-08-17T10:06:47Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-28147"
    },
    {
      "cve": "CVE-2021-28148",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-28148"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 is accessible without any authentication. This allows any unauthenticated user to send an unlimited number of requests to the endpoint, leading to a denial of service (DoS) attack against a Grafana Enterprise instance.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:ansible-2.9.21-lp152.2.7.1.noarch",
          "openSUSE Leap 15.2:ansible-doc-2.9.21-lp152.2.7.1.noarch",
          "openSUSE Leap 15.2:ansible-test-2.9.21-lp152.2.7.1.noarch",
          "openSUSE Leap 15.2:dracut-saltboot-0.1.1627546504.96a0b3e-lp152.2.26.1.noarch",
          "openSUSE Leap 15.2:golang-github-prometheus-prometheus-2.27.1-lp152.3.13.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-28148",
          "url": "https://www.suse.com/security/cve/CVE-2021-28148"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1183813 for CVE-2021-28148",
          "url": "https://bugzilla.suse.com/1183813"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:ansible-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:ansible-doc-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:ansible-test-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:dracut-saltboot-0.1.1627546504.96a0b3e-lp152.2.26.1.noarch",
            "openSUSE Leap 15.2:golang-github-prometheus-prometheus-2.27.1-lp152.3.13.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:ansible-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:ansible-doc-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:ansible-test-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:dracut-saltboot-0.1.1627546504.96a0b3e-lp152.2.26.1.noarch",
            "openSUSE Leap 15.2:golang-github-prometheus-prometheus-2.27.1-lp152.3.13.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-08-17T10:06:47Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-28148"
    },
    {
      "cve": "CVE-2021-29622",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-29622"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Prometheus is an open-source monitoring system and time series database. In 2.23.0, Prometheus changed its default UI to the New ui. To ensure a seamless transition, the URL\u0027s prefixed by /new redirect to /. Due to a bug in the code, it is possible for an attacker to craft an URL that can redirect to any other URL, in the /new endpoint. If a user visits a prometheus server with a specially crafted address, they can be redirected to an arbitrary URL. The issue was patched in the 2.26.1 and 2.27.1 releases. In 2.28.0, the /new endpoint will be removed completely. The workaround is to disable access to /new via a reverse proxy in front of Prometheus.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:ansible-2.9.21-lp152.2.7.1.noarch",
          "openSUSE Leap 15.2:ansible-doc-2.9.21-lp152.2.7.1.noarch",
          "openSUSE Leap 15.2:ansible-test-2.9.21-lp152.2.7.1.noarch",
          "openSUSE Leap 15.2:dracut-saltboot-0.1.1627546504.96a0b3e-lp152.2.26.1.noarch",
          "openSUSE Leap 15.2:golang-github-prometheus-prometheus-2.27.1-lp152.3.13.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-29622",
          "url": "https://www.suse.com/security/cve/CVE-2021-29622"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1186242 for CVE-2021-29622",
          "url": "https://bugzilla.suse.com/1186242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:ansible-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:ansible-doc-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:ansible-test-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:dracut-saltboot-0.1.1627546504.96a0b3e-lp152.2.26.1.noarch",
            "openSUSE Leap 15.2:golang-github-prometheus-prometheus-2.27.1-lp152.3.13.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:ansible-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:ansible-doc-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:ansible-test-2.9.21-lp152.2.7.1.noarch",
            "openSUSE Leap 15.2:dracut-saltboot-0.1.1627546504.96a0b3e-lp152.2.26.1.noarch",
            "openSUSE Leap 15.2:golang-github-prometheus-prometheus-2.27.1-lp152.3.13.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-08-17T10:06:47Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-29622"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for golang-github-prometheus-prometheus",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for golang-github-prometheus-prometheus fixes the following issues:\n\n- Provide and reload firewalld configuration only for:\n  + openSUSE Leap 15.0, 15.1, 15.2\n  + SUSE SLE15, SLE15 SP1, SLE15 SP2\n- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)\n  + Bugfix:\n   * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)\n  + Features:\n    * Promtool: Retroactive rule evaluation functionality. #7675\n    * Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag. #8649\n    * TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks \n      for small Prometheus instances.\n    * UI: Add a dark theme. #8604\n    * AWS Lightsail Discovery: Add AWS Lightsail Discovery. #8693\n    * Docker Discovery: Add Docker Service Discovery. #8629\n    * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. #8761\n    * Remote Write: Send exemplars via remote write. Experimental and disabled by default. #8296\n  + Enhancements:\n    * Digital Ocean Discovery: Add __meta_digitalocean_vpc label. #8642\n    * Scaleway Discovery: Read Scaleway secret from a file. #8643\n    * Scrape: Add configurable limits for label size and count. #8777\n    * UI: Add 16w and 26w time range steps. #8656\n    * Templating: Enable parsing strings in humanize functions. #8682\n  + Bugfixes:\n    * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659\n    * TSDB: Do not panic when writing very large records to the WAL. #8790\n    * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723\n    * Scaleway Discovery: Fix nil pointer dereference. #8737\n    * Consul Discovery: Restart no longer required after config update with no targets. #8766\n- Add tarball with vendor modules and web assets\n- Uyuni: Read formula data from exporters map\n- Uyuni: Add support for TLS targets\n- Upgrade to upstream version 2.26.0\n  + Changes\n    * Alerting: Using Alertmanager v2 API by default. #8626\n    * Prometheus/Promtool: Binaries are now printing help and usage to stdout instead of stderr. #8542\n  + Features\n    * Remote: Add support for AWS SigV4 auth method for remote_write. #8509\n    * PromQL: Allow negative offsets. Behind --enable-feature=promql-negative-offset flag. #8487\n    * UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input. #8634\n  + Enhancements\n    * PromQL: Add last_over_time, sgn, clamp functions. #8457\n    * Scrape: Add support for specifying type of Authorization header credentials with Bearer by default. #8512\n    * Scrape: Add follow_redirects option to scrape configuration. #8546\n    * Remote: Allow retries on HTTP 429 response code for remote_write. #8237 #8477\n    * Remote: Allow configuring custom headers for remote_read. #8516\n    * UI: Hitting Enter now triggers new query. #8581\n    * UI: Better handling of long rule and names on the /rules and /targets pages. #8608 #8609\n    * UI: Add collapse/expand all button on the /targets page. #8486\n- Upgrade to upstream version 2.25.0\n  + Features\n    * Include a new `--enable-feature=` flag that enables experimental features.\n  + Enhancements\n    * Add optional name property to testgroup for better test failure output. #8440\n    * Add warnings into React Panel on the Graph page. #8427\n    * TSDB: Increase the number of buckets for the compaction duration metric. #8342\n    * Remote: Allow passing along custom remote_write HTTP headers. #8416\n    * Mixins: Scope grafana configuration. #8332\n    * Kubernetes SD: Add endpoint labels metadata. #8273\n    * UI: Expose total number of label pairs in head in TSDB stats page. #8343\n    * TSDB: Reload blocks every minute, to detect new blocks and enforce retention more often. #8343\n  + Bug fixes\n    * API: Fix global URL when external address has no port. #8359\n    * Deprecate unused flag --alertmanager.timeout. #8407\n- Upgrade to upstream version 2.24.1\n  + Enhancements\n    * Cache basic authentication results to significantly improve performance of HTTP endpoints.\n- Upgrade to upstream version 2.24.0\n  + Features\n    * Add TLS and basic authentication to HTTP endpoints. #8316\n    * promtool: Add check web-config subcommand to check web config files. #8319\n    * promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file.\n  + Enhancements\n    * HTTP API: Fast-fail queries with only empty matchers. #8288\n    * HTTP API: Support matchers for labels API. #8301\n    * promtool: Improve checking of URLs passed on the command line. #7956\n    * SD: Expose IPv6 as a label in EC2 SD. #7086\n    * SD: Reuse EC2 client, reducing frequency of requesting credentials. #8311\n    * TSDB: Add logging when compaction takes more than the block time range. #8151\n    * TSDB: Avoid unnecessary GC runs after compaction. #8276\n- Upgrade to upstream version 2.23.0\n  + Changes\n    * UI: Make the React UI default. #8142\n    * Remote write: The following metrics were removed/renamed in remote write. #6815\n      \u003e prometheus_remote_storage_succeeded_samples_total was removed and prometheus_remote_storage_samples_total \n      was introduced for all the samples attempted to send.\n      \u003e prometheus_remote_storage_sent_bytes_total was removed and replaced with \n      prometheus_remote_storage_samples_bytes_total and prometheus_remote_storage_metadata_bytes_total.\n      \u003e prometheus_remote_storage_failed_samples_total -\u003e prometheus_remote_storage_samples_failed_total .\n      \u003e prometheus_remote_storage_retried_samples_total -\u003e prometheus_remote_storage_samples_retried_total.\n      \u003e prometheus_remote_storage_dropped_samples_total -\u003e prometheus_remote_storage_samples_dropped_total.\n      \u003e prometheus_remote_storage_pending_samples -\u003e prometheus_remote_storage_samples_pending.\n    * Remote: Do not collect non-initialized timestamp metrics. #8060\n  + Enhancements\n    * Remote write: Added a metric prometheus_remote_storage_max_samples_per_send for remote write. #8102\n    * TSDB: Make the snapshot directory name always the same length. #8138\n    * TSDB: Create a checkpoint only once at the end of all head compactions. #8067\n    * TSDB: Avoid Series API from hitting the chunks. #8050\n    * TSDB: Cache label name and last value when adding series during compactions making compactions faster. #8192\n    * PromQL: Improved performance of Hash method making queries a bit faster. #8025\n    * promtool: tsdb list now prints block sizes. #7993\n    * promtool: Calculate mint and maxt per test avoiding unnecessary calculations. #8096\n    * SD: Add filtering of services to Docker Swarm SD. #8074\n- Uyuni: `hostname` label is now set to FQDN instead of IP\n- Update to upstream version 2.22.1\n- Update packaging\n  * Remove systemd and shadow hard requirements\n  * use systemd-sysusers to configure the user in a dedicated \u0027system-user-prometheus\u0027 subpackage\n  * add \u0027prometheus\u0027 package alias\n  + Add support for Prometheus exporters proxy\n- Remove prometheus.firewall.xml source file\n- Remove firewalld files. They are installed in the main firewalld\n  package.\n  ",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-SLE-15.3-2021-2664",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_2664-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2021:2664-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W3KPAMVZLF5BC7A6E5Z2QSNUUFHXGK6B/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2021:2664-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W3KPAMVZLF5BC7A6E5Z2QSNUUFHXGK6B/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1186242",
        "url": "https://bugzilla.suse.com/1186242"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-29622 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-29622/"
      }
    ],
    "title": "Security update for golang-github-prometheus-prometheus",
    "tracking": {
      "current_release_date": "2021-08-12T10:02:49Z",
      "generator": {
        "date": "2021-08-12T10:02:49Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2021:2664-1",
      "initial_release_date": "2021-08-12T10:02:49Z",
      "revision_history": [
        {
          "date": "2021-08-12T10:02:49Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "golang-github-prometheus-prometheus-2.27.1-3.8.1.aarch64",
                "product": {
                  "name": "golang-github-prometheus-prometheus-2.27.1-3.8.1.aarch64",
                  "product_id": "golang-github-prometheus-prometheus-2.27.1-3.8.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "golang-github-prometheus-prometheus-2.27.1-3.8.1.ppc64le",
                "product": {
                  "name": "golang-github-prometheus-prometheus-2.27.1-3.8.1.ppc64le",
                  "product_id": "golang-github-prometheus-prometheus-2.27.1-3.8.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "golang-github-prometheus-prometheus-2.27.1-3.8.1.s390x",
                "product": {
                  "name": "golang-github-prometheus-prometheus-2.27.1-3.8.1.s390x",
                  "product_id": "golang-github-prometheus-prometheus-2.27.1-3.8.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "golang-github-prometheus-prometheus-2.27.1-3.8.1.x86_64",
                "product": {
                  "name": "golang-github-prometheus-prometheus-2.27.1-3.8.1.x86_64",
                  "product_id": "golang-github-prometheus-prometheus-2.27.1-3.8.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.3",
                "product": {
                  "name": "openSUSE Leap 15.3",
                  "product_id": "openSUSE Leap 15.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-prometheus-prometheus-2.27.1-3.8.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:golang-github-prometheus-prometheus-2.27.1-3.8.1.aarch64"
        },
        "product_reference": "golang-github-prometheus-prometheus-2.27.1-3.8.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-prometheus-prometheus-2.27.1-3.8.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:golang-github-prometheus-prometheus-2.27.1-3.8.1.ppc64le"
        },
        "product_reference": "golang-github-prometheus-prometheus-2.27.1-3.8.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-prometheus-prometheus-2.27.1-3.8.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:golang-github-prometheus-prometheus-2.27.1-3.8.1.s390x"
        },
        "product_reference": "golang-github-prometheus-prometheus-2.27.1-3.8.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-prometheus-prometheus-2.27.1-3.8.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:golang-github-prometheus-prometheus-2.27.1-3.8.1.x86_64"
        },
        "product_reference": "golang-github-prometheus-prometheus-2.27.1-3.8.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-29622",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-29622"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Prometheus is an open-source monitoring system and time series database. In 2.23.0, Prometheus changed its default UI to the New ui. To ensure a seamless transition, the URL\u0027s prefixed by /new redirect to /. Due to a bug in the code, it is possible for an attacker to craft an URL that can redirect to any other URL, in the /new endpoint. If a user visits a prometheus server with a specially crafted address, they can be redirected to an arbitrary URL. The issue was patched in the 2.26.1 and 2.27.1 releases. In 2.28.0, the /new endpoint will be removed completely. The workaround is to disable access to /new via a reverse proxy in front of Prometheus.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:golang-github-prometheus-prometheus-2.27.1-3.8.1.aarch64",
          "openSUSE Leap 15.3:golang-github-prometheus-prometheus-2.27.1-3.8.1.ppc64le",
          "openSUSE Leap 15.3:golang-github-prometheus-prometheus-2.27.1-3.8.1.s390x",
          "openSUSE Leap 15.3:golang-github-prometheus-prometheus-2.27.1-3.8.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-29622",
          "url": "https://www.suse.com/security/cve/CVE-2021-29622"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1186242 for CVE-2021-29622",
          "url": "https://bugzilla.suse.com/1186242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:golang-github-prometheus-prometheus-2.27.1-3.8.1.aarch64",
            "openSUSE Leap 15.3:golang-github-prometheus-prometheus-2.27.1-3.8.1.ppc64le",
            "openSUSE Leap 15.3:golang-github-prometheus-prometheus-2.27.1-3.8.1.s390x",
            "openSUSE Leap 15.3:golang-github-prometheus-prometheus-2.27.1-3.8.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:golang-github-prometheus-prometheus-2.27.1-3.8.1.aarch64",
            "openSUSE Leap 15.3:golang-github-prometheus-prometheus-2.27.1-3.8.1.ppc64le",
            "openSUSE Leap 15.3:golang-github-prometheus-prometheus-2.27.1-3.8.1.s390x",
            "openSUSE Leap 15.3:golang-github-prometheus-prometheus-2.27.1-3.8.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-08-12T10:02:49Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-29622"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for SUSE Manager Client Tools",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThis update fixes the following issues:\n\nansible:\n\n- The support level for ansible is l2, not l3\n\ndracut-saltboot:\n\n- Force installation of libexpat.so.1 (bsc#1188846)\n- Use kernel parameters from PXE formula also for local boot\n\ngolang-github-prometheus-prometheus:\n\n- Provide and reload firewalld configuration only for:\n  + openSUSE Leap 15.0, 15.1, 15.2\n  + SUSE Linux Enterprise 15, 15 SP1, 15 SP2\n- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)\n  + Bugfix:\n   * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)\n   * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659\n    * TSDB: Do not panic when writing very large records to the WAL. #8790\n    * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723\n    * Scaleway Discovery: Fix nil pointer dereference. #8737\n    * Consul Discovery: Restart no longer required after config update with no targets. #8766\n  + Features:\n    * Promtool: Retroactive rule evaluation functionality.\n    * Configuration: Environment variable expansion for external labels. \n      Behind \u0027--enable-feature=expand-external-labels\u0027 flag.\n    * Add a flag \u0027--storage.tsdb.max-block-chunk-segment-size\u0027 to control the max chunks file size of the blocks for \n      small Prometheus instances.\n    * UI: Add a dark theme.\n    * AWS Lightsail Discovery: Add AWS Lightsail Discovery.\n    * Docker Discovery: Add Docker Service Discovery.\n    * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used.\n    * Remote Write: Send exemplars via remote write. Experimental and disabled by default.\n  + Enhancements:\n    * Digital Ocean Discovery: Add \u0027__meta_digitalocean_vpc\u0027 label.\n    * Scaleway Discovery: Read Scaleway secret from a file.\n    * Scrape: Add configurable limits for label size and count.\n    * UI: Add 16w and 26w time range steps.\n    * Templating: Enable parsing strings in humanize functions.\n- Update package with changes from `server:monitoring` (bsc#1175478)\n  Left out removal of \u0027firewalld\u0027 related configuration files as SUSE Linux Enterprise 15-SP1\u0027s\n  `firewalld` package does not contain \u0027prometheus\u0027 configuration yet.\n\nmgr-cfg:\n\n- No visible impact for the user\n\nmgr-custom-info:\n\n- No visible impact for the user\n\nmgr-osad:\n\n- No visible impact for the user\n\nmgr-push:\n\n- No visible impact for the user\n\nmgr-virtualization:\n\n- No visible impact for the user\n\nrhnlib:\n\n- No visible impact for the user\n\nspacecmd:\n\n- Make spacecmd aware of retracted patches/packages\n- Enhance help for installation types when creating distributions (bsc#1186581)\n- Parse empty argument when nothing in between the separator\n\nspacewalk-client-tools:\n\n- Update translation strings\n\nspacewalk-koan:\n\n- Fix for spacewalk-koan tests after switching to the new\n  Docker images\n\nspacewalk-oscap:\n\n- No visible impact for the user\n\nsuseRegisterInfo:\n\n- No visible impact for the user\n\nuyuni-common-libs:\n\n- Handle broken RPM packages to prevent exceptions\n  causing fails on repository synchronization (bsc#1186650)\n- Maintainer field in debian packages are only recommended (bsc#1186508)\n\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-SLE-15.3-2021-2675",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_2675-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2021:2675-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/X43KWNU2XMSBJQO437DI7TR5WXTEXGK5/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2021:2675-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/X43KWNU2XMSBJQO437DI7TR5WXTEXGK5/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175478",
        "url": "https://bugzilla.suse.com/1175478"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1186242",
        "url": "https://bugzilla.suse.com/1186242"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1186508",
        "url": "https://bugzilla.suse.com/1186508"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1186581",
        "url": "https://bugzilla.suse.com/1186581"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1186650",
        "url": "https://bugzilla.suse.com/1186650"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188846",
        "url": "https://bugzilla.suse.com/1188846"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-27962 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-27962/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-28146 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-28146/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-28147 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-28147/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-28148 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-28148/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-29622 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-29622/"
      }
    ],
    "title": "Security update for SUSE Manager Client Tools",
    "tracking": {
      "current_release_date": "2021-08-12T10:05:26Z",
      "generator": {
        "date": "2021-08-12T10:05:26Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2021:2675-1",
      "initial_release_date": "2021-08-12T10:05:26Z",
      "revision_history": [
        {
          "date": "2021-08-12T10:05:26Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python2-uyuni-common-libs-4.2.5-1.15.1.aarch64",
                "product": {
                  "name": "python2-uyuni-common-libs-4.2.5-1.15.1.aarch64",
                  "product_id": "python2-uyuni-common-libs-4.2.5-1.15.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "python3-uyuni-common-libs-4.2.5-1.15.1.aarch64",
                "product": {
                  "name": "python3-uyuni-common-libs-4.2.5-1.15.1.aarch64",
                  "product_id": "python3-uyuni-common-libs-4.2.5-1.15.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ansible-2.9.21-1.5.1.noarch",
                "product": {
                  "name": "ansible-2.9.21-1.5.1.noarch",
                  "product_id": "ansible-2.9.21-1.5.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "ansible-doc-2.9.21-1.5.1.noarch",
                "product": {
                  "name": "ansible-doc-2.9.21-1.5.1.noarch",
                  "product_id": "ansible-doc-2.9.21-1.5.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "ansible-test-2.9.21-1.5.1.noarch",
                "product": {
                  "name": "ansible-test-2.9.21-1.5.1.noarch",
                  "product_id": "ansible-test-2.9.21-1.5.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "dracut-saltboot-0.1.1627546504.96a0b3e-1.27.1.noarch",
                "product": {
                  "name": "dracut-saltboot-0.1.1627546504.96a0b3e-1.27.1.noarch",
                  "product_id": "dracut-saltboot-0.1.1627546504.96a0b3e-1.27.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "mgr-cfg-4.2.3-1.18.1.noarch",
                "product": {
                  "name": "mgr-cfg-4.2.3-1.18.1.noarch",
                  "product_id": "mgr-cfg-4.2.3-1.18.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "mgr-cfg-actions-4.2.3-1.18.1.noarch",
                "product": {
                  "name": "mgr-cfg-actions-4.2.3-1.18.1.noarch",
                  "product_id": "mgr-cfg-actions-4.2.3-1.18.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "mgr-cfg-client-4.2.3-1.18.1.noarch",
                "product": {
                  "name": "mgr-cfg-client-4.2.3-1.18.1.noarch",
                  "product_id": "mgr-cfg-client-4.2.3-1.18.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "mgr-cfg-management-4.2.3-1.18.1.noarch",
                "product": {
                  "name": "mgr-cfg-management-4.2.3-1.18.1.noarch",
                  "product_id": "mgr-cfg-management-4.2.3-1.18.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "mgr-custom-info-4.2.2-1.12.1.noarch",
                "product": {
                  "name": "mgr-custom-info-4.2.2-1.12.1.noarch",
                  "product_id": "mgr-custom-info-4.2.2-1.12.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
                "product": {
                  "name": "mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
                  "product_id": "mgr-osa-dispatcher-4.2.6-1.30.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "mgr-osad-4.2.6-1.30.1.noarch",
                "product": {
                  "name": "mgr-osad-4.2.6-1.30.1.noarch",
                  "product_id": "mgr-osad-4.2.6-1.30.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "mgr-push-4.2.3-1.12.1.noarch",
                "product": {
                  "name": "mgr-push-4.2.3-1.12.1.noarch",
                  "product_id": "mgr-push-4.2.3-1.12.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "mgr-virtualization-host-4.2.2-1.20.1.noarch",
                "product": {
                  "name": "mgr-virtualization-host-4.2.2-1.20.1.noarch",
                  "product_id": "mgr-virtualization-host-4.2.2-1.20.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python2-mgr-cfg-4.2.3-1.18.1.noarch",
                "product": {
                  "name": "python2-mgr-cfg-4.2.3-1.18.1.noarch",
                  "product_id": "python2-mgr-cfg-4.2.3-1.18.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python2-mgr-cfg-actions-4.2.3-1.18.1.noarch",
                "product": {
                  "name": "python2-mgr-cfg-actions-4.2.3-1.18.1.noarch",
                  "product_id": "python2-mgr-cfg-actions-4.2.3-1.18.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python2-mgr-cfg-client-4.2.3-1.18.1.noarch",
                "product": {
                  "name": "python2-mgr-cfg-client-4.2.3-1.18.1.noarch",
                  "product_id": "python2-mgr-cfg-client-4.2.3-1.18.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python2-mgr-cfg-management-4.2.3-1.18.1.noarch",
                "product": {
                  "name": "python2-mgr-cfg-management-4.2.3-1.18.1.noarch",
                  "product_id": "python2-mgr-cfg-management-4.2.3-1.18.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python2-mgr-osa-common-4.2.6-1.30.1.noarch",
                "product": {
                  "name": "python2-mgr-osa-common-4.2.6-1.30.1.noarch",
                  "product_id": "python2-mgr-osa-common-4.2.6-1.30.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python2-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
                "product": {
                  "name": "python2-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
                  "product_id": "python2-mgr-osa-dispatcher-4.2.6-1.30.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python2-mgr-osad-4.2.6-1.30.1.noarch",
                "product": {
                  "name": "python2-mgr-osad-4.2.6-1.30.1.noarch",
                  "product_id": "python2-mgr-osad-4.2.6-1.30.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python2-mgr-push-4.2.3-1.12.1.noarch",
                "product": {
                  "name": "python2-mgr-push-4.2.3-1.12.1.noarch",
                  "product_id": "python2-mgr-push-4.2.3-1.12.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python2-mgr-virtualization-common-4.2.2-1.20.1.noarch",
                "product": {
                  "name": "python2-mgr-virtualization-common-4.2.2-1.20.1.noarch",
                  "product_id": "python2-mgr-virtualization-common-4.2.2-1.20.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python2-mgr-virtualization-host-4.2.2-1.20.1.noarch",
                "product": {
                  "name": "python2-mgr-virtualization-host-4.2.2-1.20.1.noarch",
                  "product_id": "python2-mgr-virtualization-host-4.2.2-1.20.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python2-rhnlib-4.2.4-3.28.1.noarch",
                "product": {
                  "name": "python2-rhnlib-4.2.4-3.28.1.noarch",
                  "product_id": "python2-rhnlib-4.2.4-3.28.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python2-spacewalk-check-4.2.12-3.44.1.noarch",
                "product": {
                  "name": "python2-spacewalk-check-4.2.12-3.44.1.noarch",
                  "product_id": "python2-spacewalk-check-4.2.12-3.44.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python2-spacewalk-client-setup-4.2.12-3.44.1.noarch",
                "product": {
                  "name": "python2-spacewalk-client-setup-4.2.12-3.44.1.noarch",
                  "product_id": "python2-spacewalk-client-setup-4.2.12-3.44.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python2-spacewalk-client-tools-4.2.12-3.44.1.noarch",
                "product": {
                  "name": "python2-spacewalk-client-tools-4.2.12-3.44.1.noarch",
                  "product_id": "python2-spacewalk-client-tools-4.2.12-3.44.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python2-spacewalk-koan-4.2.4-3.21.1.noarch",
                "product": {
                  "name": "python2-spacewalk-koan-4.2.4-3.21.1.noarch",
                  "product_id": "python2-spacewalk-koan-4.2.4-3.21.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python2-spacewalk-oscap-4.2.2-3.12.1.noarch",
                "product": {
                  "name": "python2-spacewalk-oscap-4.2.2-3.12.1.noarch",
                  "product_id": "python2-spacewalk-oscap-4.2.2-3.12.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python2-suseRegisterInfo-4.2.4-3.15.1.noarch",
                "product": {
                  "name": "python2-suseRegisterInfo-4.2.4-3.15.1.noarch",
                  "product_id": "python2-suseRegisterInfo-4.2.4-3.15.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-mgr-cfg-4.2.3-1.18.1.noarch",
                "product": {
                  "name": "python3-mgr-cfg-4.2.3-1.18.1.noarch",
                  "product_id": "python3-mgr-cfg-4.2.3-1.18.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-mgr-cfg-actions-4.2.3-1.18.1.noarch",
                "product": {
                  "name": "python3-mgr-cfg-actions-4.2.3-1.18.1.noarch",
                  "product_id": "python3-mgr-cfg-actions-4.2.3-1.18.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-mgr-cfg-client-4.2.3-1.18.1.noarch",
                "product": {
                  "name": "python3-mgr-cfg-client-4.2.3-1.18.1.noarch",
                  "product_id": "python3-mgr-cfg-client-4.2.3-1.18.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-mgr-cfg-management-4.2.3-1.18.1.noarch",
                "product": {
                  "name": "python3-mgr-cfg-management-4.2.3-1.18.1.noarch",
                  "product_id": "python3-mgr-cfg-management-4.2.3-1.18.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-mgr-osa-common-4.2.6-1.30.1.noarch",
                "product": {
                  "name": "python3-mgr-osa-common-4.2.6-1.30.1.noarch",
                  "product_id": "python3-mgr-osa-common-4.2.6-1.30.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
                "product": {
                  "name": "python3-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
                  "product_id": "python3-mgr-osa-dispatcher-4.2.6-1.30.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-mgr-osad-4.2.6-1.30.1.noarch",
                "product": {
                  "name": "python3-mgr-osad-4.2.6-1.30.1.noarch",
                  "product_id": "python3-mgr-osad-4.2.6-1.30.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-mgr-push-4.2.3-1.12.1.noarch",
                "product": {
                  "name": "python3-mgr-push-4.2.3-1.12.1.noarch",
                  "product_id": "python3-mgr-push-4.2.3-1.12.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-mgr-virtualization-common-4.2.2-1.20.1.noarch",
                "product": {
                  "name": "python3-mgr-virtualization-common-4.2.2-1.20.1.noarch",
                  "product_id": "python3-mgr-virtualization-common-4.2.2-1.20.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-mgr-virtualization-host-4.2.2-1.20.1.noarch",
                "product": {
                  "name": "python3-mgr-virtualization-host-4.2.2-1.20.1.noarch",
                  "product_id": "python3-mgr-virtualization-host-4.2.2-1.20.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-rhnlib-4.2.4-3.28.1.noarch",
                "product": {
                  "name": "python3-rhnlib-4.2.4-3.28.1.noarch",
                  "product_id": "python3-rhnlib-4.2.4-3.28.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-spacewalk-check-4.2.12-3.44.1.noarch",
                "product": {
                  "name": "python3-spacewalk-check-4.2.12-3.44.1.noarch",
                  "product_id": "python3-spacewalk-check-4.2.12-3.44.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-spacewalk-client-setup-4.2.12-3.44.1.noarch",
                "product": {
                  "name": "python3-spacewalk-client-setup-4.2.12-3.44.1.noarch",
                  "product_id": "python3-spacewalk-client-setup-4.2.12-3.44.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-spacewalk-client-tools-4.2.12-3.44.1.noarch",
                "product": {
                  "name": "python3-spacewalk-client-tools-4.2.12-3.44.1.noarch",
                  "product_id": "python3-spacewalk-client-tools-4.2.12-3.44.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-spacewalk-koan-4.2.4-3.21.1.noarch",
                "product": {
                  "name": "python3-spacewalk-koan-4.2.4-3.21.1.noarch",
                  "product_id": "python3-spacewalk-koan-4.2.4-3.21.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-spacewalk-oscap-4.2.2-3.12.1.noarch",
                "product": {
                  "name": "python3-spacewalk-oscap-4.2.2-3.12.1.noarch",
                  "product_id": "python3-spacewalk-oscap-4.2.2-3.12.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-suseRegisterInfo-4.2.4-3.15.1.noarch",
                "product": {
                  "name": "python3-suseRegisterInfo-4.2.4-3.15.1.noarch",
                  "product_id": "python3-suseRegisterInfo-4.2.4-3.15.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacecmd-4.2.11-3.62.1.noarch",
                "product": {
                  "name": "spacecmd-4.2.11-3.62.1.noarch",
                  "product_id": "spacecmd-4.2.11-3.62.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-check-4.2.12-3.44.1.noarch",
                "product": {
                  "name": "spacewalk-check-4.2.12-3.44.1.noarch",
                  "product_id": "spacewalk-check-4.2.12-3.44.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-client-setup-4.2.12-3.44.1.noarch",
                "product": {
                  "name": "spacewalk-client-setup-4.2.12-3.44.1.noarch",
                  "product_id": "spacewalk-client-setup-4.2.12-3.44.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-client-tools-4.2.12-3.44.1.noarch",
                "product": {
                  "name": "spacewalk-client-tools-4.2.12-3.44.1.noarch",
                  "product_id": "spacewalk-client-tools-4.2.12-3.44.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-koan-4.2.4-3.21.1.noarch",
                "product": {
                  "name": "spacewalk-koan-4.2.4-3.21.1.noarch",
                  "product_id": "spacewalk-koan-4.2.4-3.21.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "spacewalk-oscap-4.2.2-3.12.1.noarch",
                "product": {
                  "name": "spacewalk-oscap-4.2.2-3.12.1.noarch",
                  "product_id": "spacewalk-oscap-4.2.2-3.12.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "suseRegisterInfo-4.2.4-3.15.1.noarch",
                "product": {
                  "name": "suseRegisterInfo-4.2.4-3.15.1.noarch",
                  "product_id": "suseRegisterInfo-4.2.4-3.15.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python2-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
                "product": {
                  "name": "python2-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
                  "product_id": "python2-uyuni-common-libs-4.2.5-1.15.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "python3-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
                "product": {
                  "name": "python3-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
                  "product_id": "python3-uyuni-common-libs-4.2.5-1.15.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python2-uyuni-common-libs-4.2.5-1.15.1.s390x",
                "product": {
                  "name": "python2-uyuni-common-libs-4.2.5-1.15.1.s390x",
                  "product_id": "python2-uyuni-common-libs-4.2.5-1.15.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "python3-uyuni-common-libs-4.2.5-1.15.1.s390x",
                "product": {
                  "name": "python3-uyuni-common-libs-4.2.5-1.15.1.s390x",
                  "product_id": "python3-uyuni-common-libs-4.2.5-1.15.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python2-uyuni-common-libs-4.2.5-1.15.1.x86_64",
                "product": {
                  "name": "python2-uyuni-common-libs-4.2.5-1.15.1.x86_64",
                  "product_id": "python2-uyuni-common-libs-4.2.5-1.15.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "python3-uyuni-common-libs-4.2.5-1.15.1.x86_64",
                "product": {
                  "name": "python3-uyuni-common-libs-4.2.5-1.15.1.x86_64",
                  "product_id": "python3-uyuni-common-libs-4.2.5-1.15.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.3",
                "product": {
                  "name": "openSUSE Leap 15.3",
                  "product_id": "openSUSE Leap 15.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-2.9.21-1.5.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:ansible-2.9.21-1.5.1.noarch"
        },
        "product_reference": "ansible-2.9.21-1.5.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-doc-2.9.21-1.5.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:ansible-doc-2.9.21-1.5.1.noarch"
        },
        "product_reference": "ansible-doc-2.9.21-1.5.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-test-2.9.21-1.5.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:ansible-test-2.9.21-1.5.1.noarch"
        },
        "product_reference": "ansible-test-2.9.21-1.5.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dracut-saltboot-0.1.1627546504.96a0b3e-1.27.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:dracut-saltboot-0.1.1627546504.96a0b3e-1.27.1.noarch"
        },
        "product_reference": "dracut-saltboot-0.1.1627546504.96a0b3e-1.27.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mgr-cfg-4.2.3-1.18.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:mgr-cfg-4.2.3-1.18.1.noarch"
        },
        "product_reference": "mgr-cfg-4.2.3-1.18.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mgr-cfg-actions-4.2.3-1.18.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:mgr-cfg-actions-4.2.3-1.18.1.noarch"
        },
        "product_reference": "mgr-cfg-actions-4.2.3-1.18.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mgr-cfg-client-4.2.3-1.18.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:mgr-cfg-client-4.2.3-1.18.1.noarch"
        },
        "product_reference": "mgr-cfg-client-4.2.3-1.18.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mgr-cfg-management-4.2.3-1.18.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:mgr-cfg-management-4.2.3-1.18.1.noarch"
        },
        "product_reference": "mgr-cfg-management-4.2.3-1.18.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mgr-custom-info-4.2.2-1.12.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:mgr-custom-info-4.2.2-1.12.1.noarch"
        },
        "product_reference": "mgr-custom-info-4.2.2-1.12.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mgr-osa-dispatcher-4.2.6-1.30.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:mgr-osa-dispatcher-4.2.6-1.30.1.noarch"
        },
        "product_reference": "mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mgr-osad-4.2.6-1.30.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:mgr-osad-4.2.6-1.30.1.noarch"
        },
        "product_reference": "mgr-osad-4.2.6-1.30.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mgr-push-4.2.3-1.12.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:mgr-push-4.2.3-1.12.1.noarch"
        },
        "product_reference": "mgr-push-4.2.3-1.12.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mgr-virtualization-host-4.2.2-1.20.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:mgr-virtualization-host-4.2.2-1.20.1.noarch"
        },
        "product_reference": "mgr-virtualization-host-4.2.2-1.20.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-mgr-cfg-4.2.3-1.18.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python2-mgr-cfg-4.2.3-1.18.1.noarch"
        },
        "product_reference": "python2-mgr-cfg-4.2.3-1.18.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-mgr-cfg-actions-4.2.3-1.18.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python2-mgr-cfg-actions-4.2.3-1.18.1.noarch"
        },
        "product_reference": "python2-mgr-cfg-actions-4.2.3-1.18.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-mgr-cfg-client-4.2.3-1.18.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python2-mgr-cfg-client-4.2.3-1.18.1.noarch"
        },
        "product_reference": "python2-mgr-cfg-client-4.2.3-1.18.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-mgr-cfg-management-4.2.3-1.18.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python2-mgr-cfg-management-4.2.3-1.18.1.noarch"
        },
        "product_reference": "python2-mgr-cfg-management-4.2.3-1.18.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-mgr-osa-common-4.2.6-1.30.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python2-mgr-osa-common-4.2.6-1.30.1.noarch"
        },
        "product_reference": "python2-mgr-osa-common-4.2.6-1.30.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-mgr-osa-dispatcher-4.2.6-1.30.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python2-mgr-osa-dispatcher-4.2.6-1.30.1.noarch"
        },
        "product_reference": "python2-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-mgr-osad-4.2.6-1.30.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python2-mgr-osad-4.2.6-1.30.1.noarch"
        },
        "product_reference": "python2-mgr-osad-4.2.6-1.30.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-mgr-push-4.2.3-1.12.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python2-mgr-push-4.2.3-1.12.1.noarch"
        },
        "product_reference": "python2-mgr-push-4.2.3-1.12.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-mgr-virtualization-common-4.2.2-1.20.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python2-mgr-virtualization-common-4.2.2-1.20.1.noarch"
        },
        "product_reference": "python2-mgr-virtualization-common-4.2.2-1.20.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-mgr-virtualization-host-4.2.2-1.20.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python2-mgr-virtualization-host-4.2.2-1.20.1.noarch"
        },
        "product_reference": "python2-mgr-virtualization-host-4.2.2-1.20.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-rhnlib-4.2.4-3.28.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python2-rhnlib-4.2.4-3.28.1.noarch"
        },
        "product_reference": "python2-rhnlib-4.2.4-3.28.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-spacewalk-check-4.2.12-3.44.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python2-spacewalk-check-4.2.12-3.44.1.noarch"
        },
        "product_reference": "python2-spacewalk-check-4.2.12-3.44.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-spacewalk-client-setup-4.2.12-3.44.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python2-spacewalk-client-setup-4.2.12-3.44.1.noarch"
        },
        "product_reference": "python2-spacewalk-client-setup-4.2.12-3.44.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-spacewalk-client-tools-4.2.12-3.44.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python2-spacewalk-client-tools-4.2.12-3.44.1.noarch"
        },
        "product_reference": "python2-spacewalk-client-tools-4.2.12-3.44.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-spacewalk-koan-4.2.4-3.21.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python2-spacewalk-koan-4.2.4-3.21.1.noarch"
        },
        "product_reference": "python2-spacewalk-koan-4.2.4-3.21.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-spacewalk-oscap-4.2.2-3.12.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python2-spacewalk-oscap-4.2.2-3.12.1.noarch"
        },
        "product_reference": "python2-spacewalk-oscap-4.2.2-3.12.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-suseRegisterInfo-4.2.4-3.15.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python2-suseRegisterInfo-4.2.4-3.15.1.noarch"
        },
        "product_reference": "python2-suseRegisterInfo-4.2.4-3.15.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-uyuni-common-libs-4.2.5-1.15.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.aarch64"
        },
        "product_reference": "python2-uyuni-common-libs-4.2.5-1.15.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-uyuni-common-libs-4.2.5-1.15.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.ppc64le"
        },
        "product_reference": "python2-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-uyuni-common-libs-4.2.5-1.15.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.s390x"
        },
        "product_reference": "python2-uyuni-common-libs-4.2.5-1.15.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python2-uyuni-common-libs-4.2.5-1.15.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.x86_64"
        },
        "product_reference": "python2-uyuni-common-libs-4.2.5-1.15.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-mgr-cfg-4.2.3-1.18.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python3-mgr-cfg-4.2.3-1.18.1.noarch"
        },
        "product_reference": "python3-mgr-cfg-4.2.3-1.18.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-mgr-cfg-actions-4.2.3-1.18.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python3-mgr-cfg-actions-4.2.3-1.18.1.noarch"
        },
        "product_reference": "python3-mgr-cfg-actions-4.2.3-1.18.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-mgr-cfg-client-4.2.3-1.18.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python3-mgr-cfg-client-4.2.3-1.18.1.noarch"
        },
        "product_reference": "python3-mgr-cfg-client-4.2.3-1.18.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-mgr-cfg-management-4.2.3-1.18.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python3-mgr-cfg-management-4.2.3-1.18.1.noarch"
        },
        "product_reference": "python3-mgr-cfg-management-4.2.3-1.18.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-mgr-osa-common-4.2.6-1.30.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python3-mgr-osa-common-4.2.6-1.30.1.noarch"
        },
        "product_reference": "python3-mgr-osa-common-4.2.6-1.30.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-mgr-osa-dispatcher-4.2.6-1.30.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python3-mgr-osa-dispatcher-4.2.6-1.30.1.noarch"
        },
        "product_reference": "python3-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-mgr-osad-4.2.6-1.30.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python3-mgr-osad-4.2.6-1.30.1.noarch"
        },
        "product_reference": "python3-mgr-osad-4.2.6-1.30.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-mgr-push-4.2.3-1.12.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python3-mgr-push-4.2.3-1.12.1.noarch"
        },
        "product_reference": "python3-mgr-push-4.2.3-1.12.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-mgr-virtualization-common-4.2.2-1.20.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python3-mgr-virtualization-common-4.2.2-1.20.1.noarch"
        },
        "product_reference": "python3-mgr-virtualization-common-4.2.2-1.20.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-mgr-virtualization-host-4.2.2-1.20.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python3-mgr-virtualization-host-4.2.2-1.20.1.noarch"
        },
        "product_reference": "python3-mgr-virtualization-host-4.2.2-1.20.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-rhnlib-4.2.4-3.28.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python3-rhnlib-4.2.4-3.28.1.noarch"
        },
        "product_reference": "python3-rhnlib-4.2.4-3.28.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-spacewalk-check-4.2.12-3.44.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python3-spacewalk-check-4.2.12-3.44.1.noarch"
        },
        "product_reference": "python3-spacewalk-check-4.2.12-3.44.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-spacewalk-client-setup-4.2.12-3.44.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python3-spacewalk-client-setup-4.2.12-3.44.1.noarch"
        },
        "product_reference": "python3-spacewalk-client-setup-4.2.12-3.44.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-spacewalk-client-tools-4.2.12-3.44.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python3-spacewalk-client-tools-4.2.12-3.44.1.noarch"
        },
        "product_reference": "python3-spacewalk-client-tools-4.2.12-3.44.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-spacewalk-koan-4.2.4-3.21.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python3-spacewalk-koan-4.2.4-3.21.1.noarch"
        },
        "product_reference": "python3-spacewalk-koan-4.2.4-3.21.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-spacewalk-oscap-4.2.2-3.12.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python3-spacewalk-oscap-4.2.2-3.12.1.noarch"
        },
        "product_reference": "python3-spacewalk-oscap-4.2.2-3.12.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-suseRegisterInfo-4.2.4-3.15.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python3-suseRegisterInfo-4.2.4-3.15.1.noarch"
        },
        "product_reference": "python3-suseRegisterInfo-4.2.4-3.15.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-uyuni-common-libs-4.2.5-1.15.1.aarch64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.aarch64"
        },
        "product_reference": "python3-uyuni-common-libs-4.2.5-1.15.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-uyuni-common-libs-4.2.5-1.15.1.ppc64le as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.ppc64le"
        },
        "product_reference": "python3-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-uyuni-common-libs-4.2.5-1.15.1.s390x as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.s390x"
        },
        "product_reference": "python3-uyuni-common-libs-4.2.5-1.15.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-uyuni-common-libs-4.2.5-1.15.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.x86_64"
        },
        "product_reference": "python3-uyuni-common-libs-4.2.5-1.15.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacecmd-4.2.11-3.62.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:spacecmd-4.2.11-3.62.1.noarch"
        },
        "product_reference": "spacecmd-4.2.11-3.62.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-check-4.2.12-3.44.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:spacewalk-check-4.2.12-3.44.1.noarch"
        },
        "product_reference": "spacewalk-check-4.2.12-3.44.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-client-setup-4.2.12-3.44.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:spacewalk-client-setup-4.2.12-3.44.1.noarch"
        },
        "product_reference": "spacewalk-client-setup-4.2.12-3.44.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-client-tools-4.2.12-3.44.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:spacewalk-client-tools-4.2.12-3.44.1.noarch"
        },
        "product_reference": "spacewalk-client-tools-4.2.12-3.44.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-koan-4.2.4-3.21.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:spacewalk-koan-4.2.4-3.21.1.noarch"
        },
        "product_reference": "spacewalk-koan-4.2.4-3.21.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "spacewalk-oscap-4.2.2-3.12.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:spacewalk-oscap-4.2.2-3.12.1.noarch"
        },
        "product_reference": "spacewalk-oscap-4.2.2-3.12.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "suseRegisterInfo-4.2.4-3.15.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:suseRegisterInfo-4.2.4-3.15.1.noarch"
        },
        "product_reference": "suseRegisterInfo-4.2.4-3.15.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-27962",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-27962"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:ansible-2.9.21-1.5.1.noarch",
          "openSUSE Leap 15.3:ansible-doc-2.9.21-1.5.1.noarch",
          "openSUSE Leap 15.3:ansible-test-2.9.21-1.5.1.noarch",
          "openSUSE Leap 15.3:dracut-saltboot-0.1.1627546504.96a0b3e-1.27.1.noarch",
          "openSUSE Leap 15.3:mgr-cfg-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:mgr-cfg-actions-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:mgr-cfg-client-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:mgr-cfg-management-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:mgr-custom-info-4.2.2-1.12.1.noarch",
          "openSUSE Leap 15.3:mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:mgr-osad-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:mgr-push-4.2.3-1.12.1.noarch",
          "openSUSE Leap 15.3:mgr-virtualization-host-4.2.2-1.20.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-cfg-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-cfg-actions-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-cfg-client-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-cfg-management-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-osa-common-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-osad-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-push-4.2.3-1.12.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-virtualization-common-4.2.2-1.20.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-virtualization-host-4.2.2-1.20.1.noarch",
          "openSUSE Leap 15.3:python2-rhnlib-4.2.4-3.28.1.noarch",
          "openSUSE Leap 15.3:python2-spacewalk-check-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python2-spacewalk-client-setup-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python2-spacewalk-client-tools-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python2-spacewalk-koan-4.2.4-3.21.1.noarch",
          "openSUSE Leap 15.3:python2-spacewalk-oscap-4.2.2-3.12.1.noarch",
          "openSUSE Leap 15.3:python2-suseRegisterInfo-4.2.4-3.15.1.noarch",
          "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.aarch64",
          "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
          "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.s390x",
          "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.x86_64",
          "openSUSE Leap 15.3:python3-mgr-cfg-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-cfg-actions-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-cfg-client-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-cfg-management-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-osa-common-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-osad-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-push-4.2.3-1.12.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-virtualization-common-4.2.2-1.20.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-virtualization-host-4.2.2-1.20.1.noarch",
          "openSUSE Leap 15.3:python3-rhnlib-4.2.4-3.28.1.noarch",
          "openSUSE Leap 15.3:python3-spacewalk-check-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python3-spacewalk-client-setup-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python3-spacewalk-client-tools-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python3-spacewalk-koan-4.2.4-3.21.1.noarch",
          "openSUSE Leap 15.3:python3-spacewalk-oscap-4.2.2-3.12.1.noarch",
          "openSUSE Leap 15.3:python3-suseRegisterInfo-4.2.4-3.15.1.noarch",
          "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.aarch64",
          "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
          "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.s390x",
          "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.x86_64",
          "openSUSE Leap 15.3:spacecmd-4.2.11-3.62.1.noarch",
          "openSUSE Leap 15.3:spacewalk-check-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:spacewalk-client-setup-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:spacewalk-client-tools-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:spacewalk-koan-4.2.4-3.21.1.noarch",
          "openSUSE Leap 15.3:spacewalk-oscap-4.2.2-3.12.1.noarch",
          "openSUSE Leap 15.3:suseRegisterInfo-4.2.4-3.15.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-27962",
          "url": "https://www.suse.com/security/cve/CVE-2021-27962"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1184371 for CVE-2021-27962",
          "url": "https://bugzilla.suse.com/1184371"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:ansible-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:ansible-doc-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:ansible-test-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:dracut-saltboot-0.1.1627546504.96a0b3e-1.27.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-custom-info-4.2.2-1.12.1.noarch",
            "openSUSE Leap 15.3:mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osa-common-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-virtualization-common-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-rhnlib-4.2.4-3.28.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:python2-suseRegisterInfo-4.2.4-3.15.1.noarch",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.aarch64",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.s390x",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.x86_64",
            "openSUSE Leap 15.3:python3-mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osa-common-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-virtualization-common-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python3-rhnlib-4.2.4-3.28.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:python3-suseRegisterInfo-4.2.4-3.15.1.noarch",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.aarch64",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.s390x",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.x86_64",
            "openSUSE Leap 15.3:spacecmd-4.2.11-3.62.1.noarch",
            "openSUSE Leap 15.3:spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:suseRegisterInfo-4.2.4-3.15.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:ansible-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:ansible-doc-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:ansible-test-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:dracut-saltboot-0.1.1627546504.96a0b3e-1.27.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-custom-info-4.2.2-1.12.1.noarch",
            "openSUSE Leap 15.3:mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osa-common-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-virtualization-common-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-rhnlib-4.2.4-3.28.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:python2-suseRegisterInfo-4.2.4-3.15.1.noarch",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.aarch64",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.s390x",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.x86_64",
            "openSUSE Leap 15.3:python3-mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osa-common-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-virtualization-common-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python3-rhnlib-4.2.4-3.28.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:python3-suseRegisterInfo-4.2.4-3.15.1.noarch",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.aarch64",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.s390x",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.x86_64",
            "openSUSE Leap 15.3:spacecmd-4.2.11-3.62.1.noarch",
            "openSUSE Leap 15.3:spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:suseRegisterInfo-4.2.4-3.15.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-08-12T10:05:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-27962"
    },
    {
      "cve": "CVE-2021-28146",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-28146"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The team sync HTTP API in Grafana Enterprise 7.4.x before 7.4.5 has an Incorrect Access Control issue. On Grafana instances using an external authentication service, this vulnerability allows any authenticated user to add external groups to existing teams. This can be used to grant a user team permissions that the user isn\u0027t supposed to have.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:ansible-2.9.21-1.5.1.noarch",
          "openSUSE Leap 15.3:ansible-doc-2.9.21-1.5.1.noarch",
          "openSUSE Leap 15.3:ansible-test-2.9.21-1.5.1.noarch",
          "openSUSE Leap 15.3:dracut-saltboot-0.1.1627546504.96a0b3e-1.27.1.noarch",
          "openSUSE Leap 15.3:mgr-cfg-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:mgr-cfg-actions-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:mgr-cfg-client-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:mgr-cfg-management-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:mgr-custom-info-4.2.2-1.12.1.noarch",
          "openSUSE Leap 15.3:mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:mgr-osad-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:mgr-push-4.2.3-1.12.1.noarch",
          "openSUSE Leap 15.3:mgr-virtualization-host-4.2.2-1.20.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-cfg-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-cfg-actions-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-cfg-client-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-cfg-management-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-osa-common-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-osad-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-push-4.2.3-1.12.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-virtualization-common-4.2.2-1.20.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-virtualization-host-4.2.2-1.20.1.noarch",
          "openSUSE Leap 15.3:python2-rhnlib-4.2.4-3.28.1.noarch",
          "openSUSE Leap 15.3:python2-spacewalk-check-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python2-spacewalk-client-setup-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python2-spacewalk-client-tools-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python2-spacewalk-koan-4.2.4-3.21.1.noarch",
          "openSUSE Leap 15.3:python2-spacewalk-oscap-4.2.2-3.12.1.noarch",
          "openSUSE Leap 15.3:python2-suseRegisterInfo-4.2.4-3.15.1.noarch",
          "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.aarch64",
          "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
          "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.s390x",
          "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.x86_64",
          "openSUSE Leap 15.3:python3-mgr-cfg-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-cfg-actions-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-cfg-client-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-cfg-management-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-osa-common-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-osad-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-push-4.2.3-1.12.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-virtualization-common-4.2.2-1.20.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-virtualization-host-4.2.2-1.20.1.noarch",
          "openSUSE Leap 15.3:python3-rhnlib-4.2.4-3.28.1.noarch",
          "openSUSE Leap 15.3:python3-spacewalk-check-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python3-spacewalk-client-setup-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python3-spacewalk-client-tools-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python3-spacewalk-koan-4.2.4-3.21.1.noarch",
          "openSUSE Leap 15.3:python3-spacewalk-oscap-4.2.2-3.12.1.noarch",
          "openSUSE Leap 15.3:python3-suseRegisterInfo-4.2.4-3.15.1.noarch",
          "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.aarch64",
          "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
          "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.s390x",
          "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.x86_64",
          "openSUSE Leap 15.3:spacecmd-4.2.11-3.62.1.noarch",
          "openSUSE Leap 15.3:spacewalk-check-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:spacewalk-client-setup-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:spacewalk-client-tools-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:spacewalk-koan-4.2.4-3.21.1.noarch",
          "openSUSE Leap 15.3:spacewalk-oscap-4.2.2-3.12.1.noarch",
          "openSUSE Leap 15.3:suseRegisterInfo-4.2.4-3.15.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-28146",
          "url": "https://www.suse.com/security/cve/CVE-2021-28146"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1183811 for CVE-2021-28146",
          "url": "https://bugzilla.suse.com/1183811"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:ansible-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:ansible-doc-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:ansible-test-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:dracut-saltboot-0.1.1627546504.96a0b3e-1.27.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-custom-info-4.2.2-1.12.1.noarch",
            "openSUSE Leap 15.3:mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osa-common-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-virtualization-common-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-rhnlib-4.2.4-3.28.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:python2-suseRegisterInfo-4.2.4-3.15.1.noarch",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.aarch64",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.s390x",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.x86_64",
            "openSUSE Leap 15.3:python3-mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osa-common-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-virtualization-common-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python3-rhnlib-4.2.4-3.28.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:python3-suseRegisterInfo-4.2.4-3.15.1.noarch",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.aarch64",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.s390x",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.x86_64",
            "openSUSE Leap 15.3:spacecmd-4.2.11-3.62.1.noarch",
            "openSUSE Leap 15.3:spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:suseRegisterInfo-4.2.4-3.15.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:ansible-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:ansible-doc-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:ansible-test-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:dracut-saltboot-0.1.1627546504.96a0b3e-1.27.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-custom-info-4.2.2-1.12.1.noarch",
            "openSUSE Leap 15.3:mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osa-common-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-virtualization-common-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-rhnlib-4.2.4-3.28.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:python2-suseRegisterInfo-4.2.4-3.15.1.noarch",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.aarch64",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.s390x",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.x86_64",
            "openSUSE Leap 15.3:python3-mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osa-common-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-virtualization-common-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python3-rhnlib-4.2.4-3.28.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:python3-suseRegisterInfo-4.2.4-3.15.1.noarch",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.aarch64",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.s390x",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.x86_64",
            "openSUSE Leap 15.3:spacecmd-4.2.11-3.62.1.noarch",
            "openSUSE Leap 15.3:spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:suseRegisterInfo-4.2.4-3.15.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-08-12T10:05:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-28146"
    },
    {
      "cve": "CVE-2021-28147",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-28147"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 has an Incorrect Access Control issue. On Grafana instances using an external authentication service and having the EditorsCanAdmin feature enabled, this vulnerability allows any authenticated user to add external groups to any existing team. This can be used to grant a user team permissions that the user isn\u0027t supposed to have.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:ansible-2.9.21-1.5.1.noarch",
          "openSUSE Leap 15.3:ansible-doc-2.9.21-1.5.1.noarch",
          "openSUSE Leap 15.3:ansible-test-2.9.21-1.5.1.noarch",
          "openSUSE Leap 15.3:dracut-saltboot-0.1.1627546504.96a0b3e-1.27.1.noarch",
          "openSUSE Leap 15.3:mgr-cfg-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:mgr-cfg-actions-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:mgr-cfg-client-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:mgr-cfg-management-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:mgr-custom-info-4.2.2-1.12.1.noarch",
          "openSUSE Leap 15.3:mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:mgr-osad-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:mgr-push-4.2.3-1.12.1.noarch",
          "openSUSE Leap 15.3:mgr-virtualization-host-4.2.2-1.20.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-cfg-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-cfg-actions-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-cfg-client-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-cfg-management-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-osa-common-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-osad-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-push-4.2.3-1.12.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-virtualization-common-4.2.2-1.20.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-virtualization-host-4.2.2-1.20.1.noarch",
          "openSUSE Leap 15.3:python2-rhnlib-4.2.4-3.28.1.noarch",
          "openSUSE Leap 15.3:python2-spacewalk-check-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python2-spacewalk-client-setup-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python2-spacewalk-client-tools-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python2-spacewalk-koan-4.2.4-3.21.1.noarch",
          "openSUSE Leap 15.3:python2-spacewalk-oscap-4.2.2-3.12.1.noarch",
          "openSUSE Leap 15.3:python2-suseRegisterInfo-4.2.4-3.15.1.noarch",
          "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.aarch64",
          "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
          "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.s390x",
          "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.x86_64",
          "openSUSE Leap 15.3:python3-mgr-cfg-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-cfg-actions-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-cfg-client-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-cfg-management-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-osa-common-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-osad-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-push-4.2.3-1.12.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-virtualization-common-4.2.2-1.20.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-virtualization-host-4.2.2-1.20.1.noarch",
          "openSUSE Leap 15.3:python3-rhnlib-4.2.4-3.28.1.noarch",
          "openSUSE Leap 15.3:python3-spacewalk-check-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python3-spacewalk-client-setup-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python3-spacewalk-client-tools-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python3-spacewalk-koan-4.2.4-3.21.1.noarch",
          "openSUSE Leap 15.3:python3-spacewalk-oscap-4.2.2-3.12.1.noarch",
          "openSUSE Leap 15.3:python3-suseRegisterInfo-4.2.4-3.15.1.noarch",
          "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.aarch64",
          "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
          "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.s390x",
          "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.x86_64",
          "openSUSE Leap 15.3:spacecmd-4.2.11-3.62.1.noarch",
          "openSUSE Leap 15.3:spacewalk-check-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:spacewalk-client-setup-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:spacewalk-client-tools-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:spacewalk-koan-4.2.4-3.21.1.noarch",
          "openSUSE Leap 15.3:spacewalk-oscap-4.2.2-3.12.1.noarch",
          "openSUSE Leap 15.3:suseRegisterInfo-4.2.4-3.15.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-28147",
          "url": "https://www.suse.com/security/cve/CVE-2021-28147"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1183809 for CVE-2021-28147",
          "url": "https://bugzilla.suse.com/1183809"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:ansible-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:ansible-doc-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:ansible-test-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:dracut-saltboot-0.1.1627546504.96a0b3e-1.27.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-custom-info-4.2.2-1.12.1.noarch",
            "openSUSE Leap 15.3:mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osa-common-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-virtualization-common-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-rhnlib-4.2.4-3.28.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:python2-suseRegisterInfo-4.2.4-3.15.1.noarch",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.aarch64",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.s390x",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.x86_64",
            "openSUSE Leap 15.3:python3-mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osa-common-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-virtualization-common-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python3-rhnlib-4.2.4-3.28.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:python3-suseRegisterInfo-4.2.4-3.15.1.noarch",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.aarch64",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.s390x",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.x86_64",
            "openSUSE Leap 15.3:spacecmd-4.2.11-3.62.1.noarch",
            "openSUSE Leap 15.3:spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:suseRegisterInfo-4.2.4-3.15.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:ansible-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:ansible-doc-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:ansible-test-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:dracut-saltboot-0.1.1627546504.96a0b3e-1.27.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-custom-info-4.2.2-1.12.1.noarch",
            "openSUSE Leap 15.3:mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osa-common-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-virtualization-common-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-rhnlib-4.2.4-3.28.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:python2-suseRegisterInfo-4.2.4-3.15.1.noarch",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.aarch64",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.s390x",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.x86_64",
            "openSUSE Leap 15.3:python3-mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osa-common-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-virtualization-common-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python3-rhnlib-4.2.4-3.28.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:python3-suseRegisterInfo-4.2.4-3.15.1.noarch",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.aarch64",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.s390x",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.x86_64",
            "openSUSE Leap 15.3:spacecmd-4.2.11-3.62.1.noarch",
            "openSUSE Leap 15.3:spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:suseRegisterInfo-4.2.4-3.15.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-08-12T10:05:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-28147"
    },
    {
      "cve": "CVE-2021-28148",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-28148"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 is accessible without any authentication. This allows any unauthenticated user to send an unlimited number of requests to the endpoint, leading to a denial of service (DoS) attack against a Grafana Enterprise instance.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:ansible-2.9.21-1.5.1.noarch",
          "openSUSE Leap 15.3:ansible-doc-2.9.21-1.5.1.noarch",
          "openSUSE Leap 15.3:ansible-test-2.9.21-1.5.1.noarch",
          "openSUSE Leap 15.3:dracut-saltboot-0.1.1627546504.96a0b3e-1.27.1.noarch",
          "openSUSE Leap 15.3:mgr-cfg-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:mgr-cfg-actions-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:mgr-cfg-client-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:mgr-cfg-management-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:mgr-custom-info-4.2.2-1.12.1.noarch",
          "openSUSE Leap 15.3:mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:mgr-osad-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:mgr-push-4.2.3-1.12.1.noarch",
          "openSUSE Leap 15.3:mgr-virtualization-host-4.2.2-1.20.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-cfg-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-cfg-actions-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-cfg-client-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-cfg-management-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-osa-common-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-osad-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-push-4.2.3-1.12.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-virtualization-common-4.2.2-1.20.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-virtualization-host-4.2.2-1.20.1.noarch",
          "openSUSE Leap 15.3:python2-rhnlib-4.2.4-3.28.1.noarch",
          "openSUSE Leap 15.3:python2-spacewalk-check-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python2-spacewalk-client-setup-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python2-spacewalk-client-tools-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python2-spacewalk-koan-4.2.4-3.21.1.noarch",
          "openSUSE Leap 15.3:python2-spacewalk-oscap-4.2.2-3.12.1.noarch",
          "openSUSE Leap 15.3:python2-suseRegisterInfo-4.2.4-3.15.1.noarch",
          "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.aarch64",
          "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
          "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.s390x",
          "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.x86_64",
          "openSUSE Leap 15.3:python3-mgr-cfg-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-cfg-actions-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-cfg-client-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-cfg-management-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-osa-common-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-osad-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-push-4.2.3-1.12.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-virtualization-common-4.2.2-1.20.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-virtualization-host-4.2.2-1.20.1.noarch",
          "openSUSE Leap 15.3:python3-rhnlib-4.2.4-3.28.1.noarch",
          "openSUSE Leap 15.3:python3-spacewalk-check-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python3-spacewalk-client-setup-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python3-spacewalk-client-tools-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python3-spacewalk-koan-4.2.4-3.21.1.noarch",
          "openSUSE Leap 15.3:python3-spacewalk-oscap-4.2.2-3.12.1.noarch",
          "openSUSE Leap 15.3:python3-suseRegisterInfo-4.2.4-3.15.1.noarch",
          "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.aarch64",
          "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
          "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.s390x",
          "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.x86_64",
          "openSUSE Leap 15.3:spacecmd-4.2.11-3.62.1.noarch",
          "openSUSE Leap 15.3:spacewalk-check-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:spacewalk-client-setup-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:spacewalk-client-tools-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:spacewalk-koan-4.2.4-3.21.1.noarch",
          "openSUSE Leap 15.3:spacewalk-oscap-4.2.2-3.12.1.noarch",
          "openSUSE Leap 15.3:suseRegisterInfo-4.2.4-3.15.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-28148",
          "url": "https://www.suse.com/security/cve/CVE-2021-28148"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1183813 for CVE-2021-28148",
          "url": "https://bugzilla.suse.com/1183813"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:ansible-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:ansible-doc-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:ansible-test-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:dracut-saltboot-0.1.1627546504.96a0b3e-1.27.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-custom-info-4.2.2-1.12.1.noarch",
            "openSUSE Leap 15.3:mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osa-common-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-virtualization-common-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-rhnlib-4.2.4-3.28.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:python2-suseRegisterInfo-4.2.4-3.15.1.noarch",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.aarch64",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.s390x",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.x86_64",
            "openSUSE Leap 15.3:python3-mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osa-common-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-virtualization-common-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python3-rhnlib-4.2.4-3.28.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:python3-suseRegisterInfo-4.2.4-3.15.1.noarch",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.aarch64",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.s390x",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.x86_64",
            "openSUSE Leap 15.3:spacecmd-4.2.11-3.62.1.noarch",
            "openSUSE Leap 15.3:spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:suseRegisterInfo-4.2.4-3.15.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:ansible-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:ansible-doc-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:ansible-test-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:dracut-saltboot-0.1.1627546504.96a0b3e-1.27.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-custom-info-4.2.2-1.12.1.noarch",
            "openSUSE Leap 15.3:mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osa-common-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-virtualization-common-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-rhnlib-4.2.4-3.28.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:python2-suseRegisterInfo-4.2.4-3.15.1.noarch",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.aarch64",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.s390x",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.x86_64",
            "openSUSE Leap 15.3:python3-mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osa-common-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-virtualization-common-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python3-rhnlib-4.2.4-3.28.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:python3-suseRegisterInfo-4.2.4-3.15.1.noarch",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.aarch64",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.s390x",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.x86_64",
            "openSUSE Leap 15.3:spacecmd-4.2.11-3.62.1.noarch",
            "openSUSE Leap 15.3:spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:suseRegisterInfo-4.2.4-3.15.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-08-12T10:05:26Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-28148"
    },
    {
      "cve": "CVE-2021-29622",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-29622"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Prometheus is an open-source monitoring system and time series database. In 2.23.0, Prometheus changed its default UI to the New ui. To ensure a seamless transition, the URL\u0027s prefixed by /new redirect to /. Due to a bug in the code, it is possible for an attacker to craft an URL that can redirect to any other URL, in the /new endpoint. If a user visits a prometheus server with a specially crafted address, they can be redirected to an arbitrary URL. The issue was patched in the 2.26.1 and 2.27.1 releases. In 2.28.0, the /new endpoint will be removed completely. The workaround is to disable access to /new via a reverse proxy in front of Prometheus.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:ansible-2.9.21-1.5.1.noarch",
          "openSUSE Leap 15.3:ansible-doc-2.9.21-1.5.1.noarch",
          "openSUSE Leap 15.3:ansible-test-2.9.21-1.5.1.noarch",
          "openSUSE Leap 15.3:dracut-saltboot-0.1.1627546504.96a0b3e-1.27.1.noarch",
          "openSUSE Leap 15.3:mgr-cfg-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:mgr-cfg-actions-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:mgr-cfg-client-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:mgr-cfg-management-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:mgr-custom-info-4.2.2-1.12.1.noarch",
          "openSUSE Leap 15.3:mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:mgr-osad-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:mgr-push-4.2.3-1.12.1.noarch",
          "openSUSE Leap 15.3:mgr-virtualization-host-4.2.2-1.20.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-cfg-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-cfg-actions-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-cfg-client-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-cfg-management-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-osa-common-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-osad-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-push-4.2.3-1.12.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-virtualization-common-4.2.2-1.20.1.noarch",
          "openSUSE Leap 15.3:python2-mgr-virtualization-host-4.2.2-1.20.1.noarch",
          "openSUSE Leap 15.3:python2-rhnlib-4.2.4-3.28.1.noarch",
          "openSUSE Leap 15.3:python2-spacewalk-check-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python2-spacewalk-client-setup-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python2-spacewalk-client-tools-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python2-spacewalk-koan-4.2.4-3.21.1.noarch",
          "openSUSE Leap 15.3:python2-spacewalk-oscap-4.2.2-3.12.1.noarch",
          "openSUSE Leap 15.3:python2-suseRegisterInfo-4.2.4-3.15.1.noarch",
          "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.aarch64",
          "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
          "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.s390x",
          "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.x86_64",
          "openSUSE Leap 15.3:python3-mgr-cfg-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-cfg-actions-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-cfg-client-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-cfg-management-4.2.3-1.18.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-osa-common-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-osad-4.2.6-1.30.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-push-4.2.3-1.12.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-virtualization-common-4.2.2-1.20.1.noarch",
          "openSUSE Leap 15.3:python3-mgr-virtualization-host-4.2.2-1.20.1.noarch",
          "openSUSE Leap 15.3:python3-rhnlib-4.2.4-3.28.1.noarch",
          "openSUSE Leap 15.3:python3-spacewalk-check-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python3-spacewalk-client-setup-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python3-spacewalk-client-tools-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:python3-spacewalk-koan-4.2.4-3.21.1.noarch",
          "openSUSE Leap 15.3:python3-spacewalk-oscap-4.2.2-3.12.1.noarch",
          "openSUSE Leap 15.3:python3-suseRegisterInfo-4.2.4-3.15.1.noarch",
          "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.aarch64",
          "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
          "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.s390x",
          "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.x86_64",
          "openSUSE Leap 15.3:spacecmd-4.2.11-3.62.1.noarch",
          "openSUSE Leap 15.3:spacewalk-check-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:spacewalk-client-setup-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:spacewalk-client-tools-4.2.12-3.44.1.noarch",
          "openSUSE Leap 15.3:spacewalk-koan-4.2.4-3.21.1.noarch",
          "openSUSE Leap 15.3:spacewalk-oscap-4.2.2-3.12.1.noarch",
          "openSUSE Leap 15.3:suseRegisterInfo-4.2.4-3.15.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-29622",
          "url": "https://www.suse.com/security/cve/CVE-2021-29622"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1186242 for CVE-2021-29622",
          "url": "https://bugzilla.suse.com/1186242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:ansible-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:ansible-doc-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:ansible-test-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:dracut-saltboot-0.1.1627546504.96a0b3e-1.27.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-custom-info-4.2.2-1.12.1.noarch",
            "openSUSE Leap 15.3:mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osa-common-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-virtualization-common-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-rhnlib-4.2.4-3.28.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:python2-suseRegisterInfo-4.2.4-3.15.1.noarch",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.aarch64",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.s390x",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.x86_64",
            "openSUSE Leap 15.3:python3-mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osa-common-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-virtualization-common-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python3-rhnlib-4.2.4-3.28.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:python3-suseRegisterInfo-4.2.4-3.15.1.noarch",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.aarch64",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.s390x",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.x86_64",
            "openSUSE Leap 15.3:spacecmd-4.2.11-3.62.1.noarch",
            "openSUSE Leap 15.3:spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:suseRegisterInfo-4.2.4-3.15.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:ansible-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:ansible-doc-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:ansible-test-2.9.21-1.5.1.noarch",
            "openSUSE Leap 15.3:dracut-saltboot-0.1.1627546504.96a0b3e-1.27.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:mgr-custom-info-4.2.2-1.12.1.noarch",
            "openSUSE Leap 15.3:mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osa-common-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-virtualization-common-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python2-rhnlib-4.2.4-3.28.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:python2-spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:python2-suseRegisterInfo-4.2.4-3.15.1.noarch",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.aarch64",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.s390x",
            "openSUSE Leap 15.3:python2-uyuni-common-libs-4.2.5-1.15.1.x86_64",
            "openSUSE Leap 15.3:python3-mgr-cfg-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-actions-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-client-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-cfg-management-4.2.3-1.18.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osa-common-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osa-dispatcher-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-osad-4.2.6-1.30.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-push-4.2.3-1.12.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-virtualization-common-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python3-mgr-virtualization-host-4.2.2-1.20.1.noarch",
            "openSUSE Leap 15.3:python3-rhnlib-4.2.4-3.28.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:python3-spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:python3-suseRegisterInfo-4.2.4-3.15.1.noarch",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.aarch64",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.ppc64le",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.s390x",
            "openSUSE Leap 15.3:python3-uyuni-common-libs-4.2.5-1.15.1.x86_64",
            "openSUSE Leap 15.3:spacecmd-4.2.11-3.62.1.noarch",
            "openSUSE Leap 15.3:spacewalk-check-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-client-setup-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-client-tools-4.2.12-3.44.1.noarch",
            "openSUSE Leap 15.3:spacewalk-koan-4.2.4-3.21.1.noarch",
            "openSUSE Leap 15.3:spacewalk-oscap-4.2.2-3.12.1.noarch",
            "openSUSE Leap 15.3:suseRegisterInfo-4.2.4-3.15.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-08-12T10:05:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-29622"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "golang-github-prometheus-prometheus-2.27.1-4.2 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the golang-github-prometheus-prometheus-2.27.1-4.2 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-10814",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10814-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-10215 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-10215/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-29622 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-29622/"
      }
    ],
    "title": "golang-github-prometheus-prometheus-2.27.1-4.2 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:10814-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "golang-github-prometheus-prometheus-2.27.1-4.2.aarch64",
                "product": {
                  "name": "golang-github-prometheus-prometheus-2.27.1-4.2.aarch64",
                  "product_id": "golang-github-prometheus-prometheus-2.27.1-4.2.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "golang-github-prometheus-prometheus-2.27.1-4.2.ppc64le",
                "product": {
                  "name": "golang-github-prometheus-prometheus-2.27.1-4.2.ppc64le",
                  "product_id": "golang-github-prometheus-prometheus-2.27.1-4.2.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "golang-github-prometheus-prometheus-2.27.1-4.2.s390x",
                "product": {
                  "name": "golang-github-prometheus-prometheus-2.27.1-4.2.s390x",
                  "product_id": "golang-github-prometheus-prometheus-2.27.1-4.2.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "golang-github-prometheus-prometheus-2.27.1-4.2.x86_64",
                "product": {
                  "name": "golang-github-prometheus-prometheus-2.27.1-4.2.x86_64",
                  "product_id": "golang-github-prometheus-prometheus-2.27.1-4.2.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-prometheus-prometheus-2.27.1-4.2.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.aarch64"
        },
        "product_reference": "golang-github-prometheus-prometheus-2.27.1-4.2.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-prometheus-prometheus-2.27.1-4.2.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.ppc64le"
        },
        "product_reference": "golang-github-prometheus-prometheus-2.27.1-4.2.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-prometheus-prometheus-2.27.1-4.2.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.s390x"
        },
        "product_reference": "golang-github-prometheus-prometheus-2.27.1-4.2.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "golang-github-prometheus-prometheus-2.27.1-4.2.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.x86_64"
        },
        "product_reference": "golang-github-prometheus-prometheus-2.27.1-4.2.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-10215",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-10215"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Bootstrap-3-Typeahead after version 4.0.2 is vulnerable to a cross-site scripting flaw in the highlighter() function. An attacker could exploit this via user interaction to execute code in the user\u0027s browser.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.aarch64",
          "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.ppc64le",
          "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.s390x",
          "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-10215",
          "url": "https://www.suse.com/security/cve/CVE-2019-10215"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.aarch64",
            "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.ppc64le",
            "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.s390x",
            "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.aarch64",
            "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.ppc64le",
            "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.s390x",
            "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-10215"
    },
    {
      "cve": "CVE-2021-29622",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-29622"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Prometheus is an open-source monitoring system and time series database. In 2.23.0, Prometheus changed its default UI to the New ui. To ensure a seamless transition, the URL\u0027s prefixed by /new redirect to /. Due to a bug in the code, it is possible for an attacker to craft an URL that can redirect to any other URL, in the /new endpoint. If a user visits a prometheus server with a specially crafted address, they can be redirected to an arbitrary URL. The issue was patched in the 2.26.1 and 2.27.1 releases. In 2.28.0, the /new endpoint will be removed completely. The workaround is to disable access to /new via a reverse proxy in front of Prometheus.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.aarch64",
          "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.ppc64le",
          "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.s390x",
          "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-29622",
          "url": "https://www.suse.com/security/cve/CVE-2021-29622"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1186242 for CVE-2021-29622",
          "url": "https://bugzilla.suse.com/1186242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.aarch64",
            "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.ppc64le",
            "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.s390x",
            "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.aarch64",
            "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.ppc64le",
            "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.s390x",
            "openSUSE Tumbleweed:golang-github-prometheus-prometheus-2.27.1-4.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-29622"
    }
  ]
}