{"id":"CVE-2019-10136","aliases":["EUVD-2019-2176","GHSA-w2m4-8m7f-6vwv","RHSA-2019:1661","SUSE-SU-2019:14163-1","SUSE-SU-2019:1789-1","SUSE-SU-2019:1790-1","SUSE-SU-2019:2312-1","SUSE-SU-2019:2317-1"],"status":"published","title":"It was found that Spacewalk, all versions through 2.8, did not safely compute client token...","description":"It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums. An attacker with a valid, but expired, authenticated set of headers could move some digits around, artificially extending the session validity without modifying the checksum.","severity":{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.00565,"percentile":0.47146,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-347"],"published":"2019-07-02T19:29:42Z","modified":"2026-06-17T02:10:19Z","fixes":[{"ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend","fixed_in":["0:2.5.3-177.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-app","fixed_in":["0:2.5.3-177.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-applet","fixed_in":["0:2.5.3-177.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-cdn","fixed_in":["0:2.5.3-177.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-config-files","fixed_in":["0:2.5.3-177.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-config-files-common","fixed_in":["0:2.5.3-177.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-config-files-tool","fixed_in":["0:2.5.3-177.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-iss","fixed_in":["0:2.5.3-177.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-iss-export","fixed_in":["0:2.5.3-177.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-libs","fixed_in":["0:2.5.3-177.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-package-push-server","fixed_in":["0:2.5.3-177.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-server","fixed_in":["0:2.5.3-177.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-sql","fixed_in":["0:2.5.3-177.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-sql-oracle","fixed_in":["0:2.5.3-177.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-sql-postgresql","fixed_in":["0:2.5.3-177.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-tools","fixed_in":["0:2.5.3-177.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-xml-export-libs","fixed_in":["0:2.5.3-177.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-xmlrpc","fixed_in":["0:2.5.3-177.el6sat"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"mgr-cfg","fixed_in":["4.0.9-5.6.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"mgr-daemon","fixed_in":["4.0.7-5.8.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"mgr-osad","fixed_in":["4.0.9-5.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"mgr-virtualization","fixed_in":["4.0.8-5.8.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"rhnlib","fixed_in":["4.0.11-12.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"spacecmd","fixed_in":["4.0.14-18.51.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"spacewalk-backend","fixed_in":["4.0.25-28.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"spacewalk-remote-utils","fixed_in":["4.0.5-6.12.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"mgr-cfg","fixed_in":["4.0.9-5.6.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"mgr-daemon","fixed_in":["4.0.7-5.8.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"mgr-osad","fixed_in":["4.0.9-5.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"mgr-virtualization","fixed_in":["4.0.8-5.8.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"rhnlib","fixed_in":["4.0.11-12.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"spacecmd","fixed_in":["4.0.14-18.51.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"spacewalk-backend","fixed_in":["4.0.25-28.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"spacewalk-remote-utils","fixed_in":["4.0.5-6.12.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 12","package":"golang-github-prometheus-prometheus","fixed_in":["2.11.1-1.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 12","package":"kiwi-desc-saltboot","fixed_in":["0.1.1564399963.cf19a13-1.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 12","package":"mgr-cfg","fixed_in":["4.0.9-1.6.4"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 12","package":"mgr-daemon","fixed_in":["4.0.7-1.8.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 12","package":"mgr-osad","fixed_in":["4.0.9-1.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 12","package":"mgr-virtualization","fixed_in":["4.0.8-1.8.3"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 12","package":"rhnlib","fixed_in":["4.0.11-21.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 12","package":"spacecmd","fixed_in":["4.0.14-38.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 12","package":"spacewalk-backend","fixed_in":["4.0.25-55.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 12","package":"spacewalk-remote-utils","fixed_in":["4.0.5-24.12.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 15","package":"golang-github-prometheus-alertmanager","fixed_in":["0.16.2-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 15","package":"golang-github-prometheus-prometheus","fixed_in":["2.11.1-3.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 15","package":"mgr-cfg","fixed_in":["4.0.9-1.6.5"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 15","package":"mgr-daemon","fixed_in":["4.0.7-1.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 15","package":"mgr-osad","fixed_in":["4.0.9-1.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 15","package":"mgr-virtualization","fixed_in":["4.0.8-1.8.4"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 15","package":"rhnlib","fixed_in":["4.0.11-3.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 15","package":"spacecmd","fixed_in":["4.0.14-3.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 15","package":"spacewalk-backend","fixed_in":["4.0.25-3.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Client Tools 15","package":"spacewalk-remote-utils","fixed_in":["4.0.5-3.9.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.3-177.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.3-177.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-applet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.3-177.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-cdn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.3-177.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-config-files","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.3-177.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-config-files-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.3-177.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-config-files-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.3-177.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-iss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.3-177.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-iss-export","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.3-177.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.3-177.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-package-push-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.3-177.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.3-177.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.3-177.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-sql-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.3-177.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-sql-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.3-177.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.3-177.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-xml-export-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.3-177.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"spacewalk-backend-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.3-177.el6sat"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"mgr-cfg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-5.6.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"mgr-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.7-5.8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"mgr-osad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-5.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"mgr-virtualization","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.8-5.8.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.11-12.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.14-18.51.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.25-28.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-CLIENT-TOOLS","package":"spacewalk-remote-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.5-6.12.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"mgr-cfg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-5.6.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"mgr-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.7-5.8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"mgr-osad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-5.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"mgr-virtualization","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.8-5.8.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.11-12.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.14-18.51.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.25-28.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-CLIENT-TOOLS","package":"spacewalk-remote-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.5-6.12.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.0","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.22-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.0","package":"spacewalk-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.12-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.0","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.14-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.0","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.22-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.0","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.14-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.0","package":"susemanager-doc-indexes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0-10.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.0","package":"susemanager-docs_en","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0-10.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.0","package":"susemanager-sync-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.12-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.2","package":"release-notes-susemanager-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.9-0.16.27.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.2","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.57.17-3.33.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.2","package":"spacewalk-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.5.6-3.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.2","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.7.17-3.30.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"release-notes-susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.9-6.35.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.57.17-3.33.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 3.2","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.7.17-3.30.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"golang-github-prometheus-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1-1.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"kiwi-desc-saltboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.1564399963.cf19a13-1.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"mgr-cfg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-1.6.4"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"mgr-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.7-1.8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"mgr-osad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-1.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"mgr-virtualization","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.8-1.8.3"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.11-21.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.14-38.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.25-55.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"spacewalk-remote-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.5-24.12.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 15","package":"golang-github-prometheus-alertmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.16.2-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 15","package":"golang-github-prometheus-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1-3.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 15","package":"mgr-cfg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-1.6.5"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 15","package":"mgr-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.7-1.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 15","package":"mgr-osad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-1.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 15","package":"mgr-virtualization","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.8-1.8.4"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 15","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.11-3.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 15","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.14-3.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 15","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.25-3.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 15","package":"spacewalk-remote-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.5-3.9.2"}]}]}],"products":[{"vendor":"red hat","product":"spacewalk"},{"vendor":"redhat","product":"satellite"},{"vendor":"redhat","product":"spacewalk"},{"vendor":"spacewalkproject","product":"spacewalk"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10136","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/109029","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10136","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1661","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1708696","tags":["report"]},{"url":"https://github.com/advisories/GHSA-w2m4-8m7f-6vwv"},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1661.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10136","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201914163-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1103696","tags":["report"]},{"url":"https://bugzilla.suse.com/1104034","tags":["report"]},{"url":"https://bugzilla.suse.com/1130040","tags":["report"]},{"url":"https://bugzilla.suse.com/1135881","tags":["report"]},{"url":"https://bugzilla.suse.com/1136029","tags":["report"]},{"url":"https://bugzilla.suse.com/1136480","tags":["report"]},{"url":"https://bugzilla.suse.com/1137715","tags":["report"]},{"url":"https://bugzilla.suse.com/1137940","tags":["report"]},{"url":"https://bugzilla.suse.com/1138313","tags":["report"]},{"url":"https://bugzilla.suse.com/1138358","tags":["report"]},{"url":"https://bugzilla.suse.com/1138494","tags":["report"]},{"url":"https://bugzilla.suse.com/1138822","tags":["report"]},{"url":"https://bugzilla.suse.com/1139453","tags":["report"]},{"url":"https://bugzilla.suse.com/1142038","tags":["report"]},{"url":"https://bugzilla.suse.com/1143856","tags":["report"]},{"url":"https://bugzilla.suse.com/1144155","tags":["report"]},{"url":"https://bugzilla.suse.com/1144889","tags":["report"]},{"url":"https://bugzilla.suse.com/1148125","tags":["report"]},{"url":"https://bugzilla.suse.com/1148177","tags":["report"]},{"url":"https://bugzilla.suse.com/1148311","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10136","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191789-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1136476","tags":["report"]},{"url":"https://bugzilla.suse.com/1136561","tags":["report"]},{"url":"https://bugzilla.suse.com/1136857","tags":["report"]},{"url":"https://bugzilla.suse.com/1137955","tags":["report"]},{"url":"https://bugzilla.suse.com/1138364","tags":["report"]},{"url":"https://bugzilla.suse.com/1139693","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10137","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191790-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1102770","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192312-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1136667","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192317-1/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-10136","description":"It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums. An attacker with a valid, but expired, authenticated set of headers could move some digits around, artificially extending the session validity without modifying the checksum.","status":"published","published":"2019-07-02T19:29:42Z","modified":"2024-08-04T22:10:09.975Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-347"],"updated_at":"2026-11-02T14:20:19.399352Z"}],"euvd":[{"id":"EUVD-2019-2176","description":"It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums. An attacker with a valid, but expired, authenticated set of headers could move some digits around, artificially extending the session validity without modifying the checksum.","status":"published","published":"2019-07-02T19:29:42Z","modified":"2024-08-04T22:10:09Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T02:40:54.154728Z"}],"ghsa":[{"id":"GHSA-w2m4-8m7f-6vwv","title":"It was found that Spacewalk, all versions through 2.8, did not safely compute client token...","description":"It was found that Spacewalk, all versions through 2.8, did not safely compute client token checksums. An attacker with a valid, but expired, authenticated set of headers could move some digits around, artificially extending the session validity without modifying the checksum.","status":"published","published":"2022-05-24T16:49:15Z","modified":"2023-02-10T05:06:58Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-347"],"updated_at":"2026-11-02T14:54:03.327923Z"}],"nvd":[{"id":"CVE-2019-10136","description":"It was found that Spacewalk, all versions through 2.9, did not safely compute client token checksums. An attacker with a valid, but expired, authenticated set of headers could move some digits around, artificially extending the session validity without modifying the checksum.","status":"published","published":"2019-07-02T20:15:11.37Z","modified":"2026-06-17T02:10:19.9Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-347"],"updated_at":"2026-11-02T14:05:17.695191Z"}],"osv":[{"id":"RHSA-2019:1661","title":"Red Hat Security Advisory: spacewalk-backend security update","status":"published","published":"2024-09-16T02:40:17Z","modified":"2025-11-22T11:43:52Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"SUSE-SU-2019:14163-1","title":"Security update for SUSE Manager Client Tools","description":"\nThis update fixes the following issues:\n\nmgr-cfg:\n\n- Ensure bytes type when using hashlib to avoid traceback (bsc#1138822)\n\nmgr-daemon:\n\n- Fix systemd timer configuration on SLE12 (bsc#1142038)\n\nmgr-osad:\n\n- Fix obsolete for old osad packages, to allow installing mgr-osad\n  even by using osad at yum/zyppper install (bsc#1139453)\n- Ensure bytes type when using hashlib to avoid traceback (bsc#1138822)\n\nmgr-virtualization:\n\n- Fix missing python 3 ugettext (bsc#1138494)\n- Fix package dependencies to prevent file conflict (bsc#1143856)\n\nrhnlib:\n\n- Add SNI support for clients\n- Fix initialize ssl connection (bsc#1144155)\n- Fix bootstrapping SLE11SP4 trad client with SSL enabled (bsc#1148177)\n    \npython-gzipstream:\n\n- SPEC cleanup\n- add makefile and pylint configuration\n- Add Uyuni URL to package\n- Bump version to 4.0.0 (bsc#1104034)\n- Fix copyright for the package specfile (bsc#1103696)\n\nspacecmd:\n\n- Bugfix: referenced variable before assignment.\n- Bugfix: 'dict' object has no attribute 'iteritems' (bsc#1135881)\n- Add unit tests for custominfo, snippet, scap, ssm, cryptokey and distribution\n- Fix missing runtime dependencies that made spacecmd return old versions of\n  packages in some cases, even if newer ones were available (bsc#1148311)\n\n\nspacewalk-backend:\n\n- Do not overwrite comps and module data with older versions\n- Fix issue with 'dists' keyword in url hostname\n- Import packages from all collections of a patch not just first one\n- Ensure bytes type when using hashlib to avoid traceback\n  on XMLRPC call to 'registration.register_osad' (bsc#1138822)\n- Do not duplicate 'http://' protocol when using proxies with 'deb'\n  repositories (bsc#1138313)\n- Fix reposync when dealing with RedHat CDN (bsc#1138358)\n- Fix for CVE-2019-10136. An attacker with a valid, but expired,\n  authenticated set of headers could move some digits around,\n  artificially extending the session validity without modifying\n  the checksum. (bsc#1136480)\n- Prevent FileNotFoundError: repomd.xml.key traceback (bsc#1137940)\n- Add journalctl output to spacewalk-debug tarballs\n- Prevent unnecessary triggering of channel-repodata tasks when GPG\n  signing is disabled (bsc#1137715)\n- Fix spacewalk-repo-sync for Ubuntu repositories in mirror case (bsc#1136029)\n- Add support for ULN repositories on new Zypper based reposync.\n- Don't skip Deb package tags on package import (bsc#1130040)\n- For backend-libs subpackages, exclude files for the server\n  (already part of spacewalk-backend) to avoid conflicts (bsc#1148125)\n- prevent duplicate key violates on repo-sync with long changelog\n  entries (bsc#1144889)\n\nspacewalk-remote-utils:\n\n- Add RHEL8\n\n","status":"published","published":"2019-09-05T15:32:15Z","modified":"2026-02-04T02:30:43.083583Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:1789-1","title":"Security update for SUSE Manager Server 4.0","description":"\nThis update fixes the following issues:\n\nspacewalk-backend:\n\n- Do not duplicate 'http://' protocol when using proxies with 'deb'\n  repositories (bsc#1138313)\n- Fix reposync when dealing with RedHat CDN (bsc#1138358)\n- Fix for CVE-2019-10136. An attacker with a valid, but expired,\n  authenticated set of headers could move some digits around,\n  artificially extending the session validity without modifying\n  the checksum. (bsc#1136480)\n\nspacewalk-web:\n\n- Change WebUI version 4.0.1\n\nsusemanager-doc-indexes:\n\n- Updated wording for prometheus section\n- Jeos VM update\n- Port 8050 for graphical console display\n- Content life-cycle docs are not enough for customer to understand (bsc#1137955)\n- Salt boot formula fails for SLES11 SP3 terminal (bsc#1136857)\n- Certificate verify failed when using vmware esxi virtual host gatherer (bsc#1136561)\n\nsusemanager-docs_en:\n\n- Updated wording for prometheus section\n- Jeos VM update\n- Port 8050 for graphical console display\n- Content life-cycle docs are not enough for customer to understand (bsc#1137955)\n- Salt boot formula fails for SLES11 SP3 terminal (bsc#1136857)\n- Certificate verify failed when using vmware esxi virtual host gatherer (bsc#1136561)\n\nsusemanager-sync-data:\n\n- Add channel family definitions for SLES12 SP3 LTSS (bsc#1139693)\n- Add OPENSUSE to allowed channel_families to make\n  openSUSE Leap product visible in the product list (bsc#1138364)\n\n","status":"published","published":"2019-07-09T13:21:45Z","modified":"2026-02-04T02:42:00.576876Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:1790-1","title":"Security update for SUSE Manager Server 3.2","description":"\nThis update fixes the following issues:\n\nrelease-notes-susemanager:\n\n- Fix invalid characters in ncurses mode (bsc#1102770)\n\nspacewalk-backend:\n\n- Fix for CVE-2019-10136. An attacker with a valid, but expired,\n  authenticated set of headers could move some digits around,\n  artificially extending the session validity without modifying\n  the checksum. (bsc#1136480)\n\nspacewalk-web:\n\n- Change WebUI string version to 3.2.9\n\n","status":"published","published":"2019-07-09T13:22:02Z","modified":"2026-02-04T04:10:59.604867Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2312-1","title":"Security update for SUSE Manager Client Tools","description":"\nThis update fixes the following issues:\n\ngolang-github-prometheus-prometheus:\n\n- Add support for Uyuni/SUSE Manager service discovery\n  + Added 0003-Add-Uyuni-service-discovery \n- Readded _service file removed in error. \n- Update to 2.11.1 \n  + Bug Fix:\n    * Fix potential panic when prometheus is watching multiple zookeeper paths.\n- Update to 2.11.0\n  + Bug Fix:\n    * resolve race condition in maxGauge. \n    * Fix ZooKeeper connection leak. \n    * Improved atomicity of .tmp block replacement during compaction for usual case. \n    * Fix 'unknown series references' after clean shutdown. \n    * Re-calculate block size when calling block.Delete. \n    * Fix unsafe snapshots with head block. \n    * prometheus_tsdb_compactions_failed_total is now incremented on any compaction failure. \n  + Changes:\n    * Remove max_retries from queue_config (it has been unused since rewriting remote-write to utilize the write-ahead-log)\n    * The meta file BlockStats no longer holds size information. This is now dynamically calculated and kept in memory. It also includes the meta file size which was not included before\n    * Renamed metric from prometheus_tsdb_wal_reader_corruption_errors to prometheus_tsdb_wal_reader_corruption_errors_total\n  + Features:\n    * Add option to use Alertmanager API v2. \n    * Added humanizePercentage function for templates. \n    * Include InitContainers in Kubernetes Service Discovery. \n    * Provide option to compress WAL records using Snappy. \n  + Enhancements:\n    * Create new clean segment when starting the WAL. \n    * Reduce allocations in PromQL aggregations. \n    * Add storage warnings to LabelValues and LabelNames API results. \n    * Add prometheus_http_requests_total metric. \n    * Enable openbsd/arm build. \n    * Remote-write allocation improvements. \n    * Query performance improvement: Efficient iteration and search in HashForLabels and HashWithoutLabels. \n    * Allow injection of arbitrary headers in promtool. \n    * Allow passing external_labels in alert unit tests groups. \n    * Allows globs for rules when unit testing.\n    * Improved postings intersection matching. \n    * Reduced disk usage for WAL for small setups. \n    * Optimize queries using regexp for set lookups. \n- Rebase patch002-Default-settings.patch \n- Update to 2.10.0:\n  + Bug Fixes:\n    * TSDB: Don't panic when running out of disk space and recover nicely from the condition\n    * TSDB: Correctly handle empty labels.\n    * TSDB: Don't crash on an unknown tombstone reference. \n    * Storage/remote: Remove queue-manager specific metrics if queue no longer exists. \n    * PromQL: Correctly display {__name__='a'}. \n    * Discovery/kubernetes: Use service rather than ingress as the name for the service workqueue. \n    * Discovery/azure: Don't panic on a VM with a public IP. \n    * Web: Fixed Content-Type for js and css instead of using /etc/mime.types.\n    * API: Encode alert values as string to correctly represent Inf/NaN. \n  + Features:\n    * Template expansion: Make external labels available as $externalLabels in alert and console template expansion. \n    * TSDB: Add prometheus_tsdb_wal_segment_current metric for the WAL segment index that TSDB is currently writing to. tsdb\n    * Scrape: Add scrape_series_added per-scrape metric. #5546\n  + Enhancements\n    * Discovery/kubernetes: Add labels __meta_kubernetes_endpoint_node_name and __meta_kubernetes_endpoint_hostname. \n    * Discovery/azure: Add label __meta_azure_machine_public_ip. \n    * TSDB: Simplify mergedPostings.Seek, resulting in better performance if there are many posting lists. tsdb\n    * Log filesystem type on startup. \n    * Cmd/promtool: Use POST requests for Query and QueryRange. client_golang\n    * Web: Sort alerts by group name. \n    * Console templates: Add convenience variables $rawParams, $params, $path.\n- Upadte to 2.9.2\n  + Bug Fixes:\n    * Make sure subquery range is taken into account for selection \n    * Exhaust every request body before closing it \n    * Cmd/promtool: return errors from rule evaluations \n    * Remote Storage: string interner should not panic in release \n    * Fix memory allocation regression in mergedPostings.Seek tsdb\n- Update to 2.9.1\n  + Bug Fixes:\n    * Discovery/kubernetes: fix missing label sanitization \n    * Remote_write: Prevent reshard concurrent with calling stop \n- Update to 2.9.0 \n  + Feature: \n    * Add honor_timestamps scrape option.\n  + Enhancements:\t\n    * Update Consul to support catalog.ServiceMultipleTags.\n    * Discovery/kubernetes: add present labels for labels/annotations.\n    * OpenStack SD: Add ProjectID and UserID meta labels.\n    * Add GODEBUG and retention to the runtime page. \n    * Add support for POSTing to /series endpoint. \n    * Support PUT methods for Lifecycle and Admin APIs.\n    * Scrape: Add global jitter for HA server.\n    * Check for cancellation on every step of a range evaluation. \n    * String interning for labels \u0026 values in the remote_write path.\n    * Don't lose the scrape cache on a failed scrape.\n    * Reload cert files from disk automatically. common\n    * Use fixed length millisecond timestamp format for logs. common\n    * Performance improvements for postings. \n  Bug Fixes:\n    * Remote Write: fix checkpoint reading. \n    * Check if label value is valid when unmarshaling external labels from YAML. \n    * Promparse: sort all labels when parsing. \n    * Reload rules: copy state on both name and labels. \n    * Exponentation operator to drop metric name in result of operation. \n    * Config: resolve more file paths. \n    * Promtool: resolve relative paths in alert test files. \n    * Set TLSHandshakeTimeout in HTTP transport. common\n    * Use fsync to be more resilient to machine crashes. \n    * Keep series that are still in WAL in checkpoints.\n- Update to 2.8.1\n  + Bug Fixes\n    *  Display the job labels in /targets which was removed accidentally\n- Update to 2.8.0 \n  + Change:\n    * This release uses Write-Ahead Logging (WAL) for the remote_write API. This currently causes a slight increase in memory usage, which will be addressed in future releases.\n    * Default time retention is used only when no size based retention is specified. These are flags where time retention is specified by the flag --storage.tsdb.retention and size retention by --storage.tsdb.retention.size. \n    * prometheus_tsdb_storage_blocks_bytes_total is now prometheus_tsdb_storage_blocks_bytes. \n  + Feature:\n    * (EXPERIMENTAL) Time overlapping blocks are now allowed; vertical compaction and vertical query merge. It is an optional feature which is controlled by the --storage.tsdb.allow-overlapping-blocks flag, disabled by default.\n  + Enhancements:  \n\t* Use the WAL for remote_write API.\n    * Query performance improvements. \n    * UI enhancements with upgrade to Bootstrap 4. \n    * Reduce time that Alertmanagers are in flux when reloaded. \n    * Limit number of metrics displayed on UI to 10000. \n    * (1) Remember All/Unhealthy choice on target-overview when reloading page. (2) Resize text-input area on Graph page on mouseclick. \n    * In histogram_quantile merge buckets with equivalent le values. \n    * Show list of offending labels in the error message in many-to-many scenarios. \n    * Show Storage Retention criteria in effect on /status page. \n  + Bug Fixes: \n    + Fix sorting of rule groups. \n    + Fix support for password_file and bearer_token_file in Kubernetes SD. \n    + Scrape: catch errors when creating HTTP clients  \n    + Adds new metrics:\n        prometheus_target_scrape_pools_total\n        prometheus_target_scrape_pools_failed_total\n        prometheus_target_scrape_pool_reloads_total\n        prometheus_target_scrape_pool_reloads_failed_total\n    + Fix panic when aggregator param is not a literal.\n\nkiwi-desc-saltboot:\n\n- Update to version 0.1.1564399963.cf19a13\n- Fix incompatibility with Microsoft DNS (bsc#1136667)\n- Updated copyrights and bug reporting link\n- Update to version 0.1.1558613789.64ba093\n- Update to version 0.1.1556553492.2bfae0b\n\nmgr-cfg:\n\n- Ensure bytes type when using hashlib to avoid traceback (bsc#1138822)\n\nmgr-daemon:\n\n- Fix systemd timer configuration on SLE12 (bsc#1142038)\n\nmgr-osad:\n\n- Fix obsolete for old osad packages, to allow installing mgr-osad\n  even by using osad at yum/zyppper install (bsc#1139453)\n- Ensure bytes type when using hashlib to avoid traceback (bsc#1138822)\n\nmgr-virtualization:\n\n- Fix missing python 3 ugettext (bsc#1138494)\n- Fix package dependencies to prevent file conflict (bsc#1143856)\n    \nrhnlib:\n\n- Add SNI support for clients\n- Fix initialize ssl connection (bsc#1144155)\n- Fix bootstrapping SLE11SP4 trad client with SSL enabled (bsc#1148177)\n\nspacecmd:\n\n- Bugfix: referenced variable before assignment.\n- Bugfix: 'dict' object has no attribute 'iteritems' (bsc#1135881)\n- Add unit tests for custominfo, snippet, scap, ssm, cryptokey and distribution\n- Fix missing runtime dependencies that made spacecmd return old versions of\n  packages in some cases, even if newer ones were available (bsc#1148311)\n\nspacewalk-backend:\n\n- Do not overwrite comps and module data with older versions\n- Fix issue with 'dists' keyword in url hostname\n- Import packages from all collections of a patch not just first one\n- Ensure bytes type when using hashlib to avoid traceback\n  on XMLRPC call to 'registration.register_osad' (bsc#1138822)\n- Do not duplicate 'http://' protocol when using proxies with 'deb'\n  repositories (bsc#1138313)\n- Fix reposync when dealing with RedHat CDN (bsc#1138358)\n- Fix for CVE-2019-10136. An attacker with a valid, but expired,\n  authenticated set of headers could move some digits around,\n  artificially extending the session validity without modifying\n  the checksum. (bsc#1136480)\n- Prevent FileNotFoundError: repomd.xml.key traceback (bsc#1137940)\n- Add journalctl output to spacewalk-debug tarballs\n- Prevent unnecessary triggering of channel-repodata tasks when GPG\n  signing is disabled (bsc#1137715)\n- Fix spacewalk-repo-sync for Ubuntu repositories in mirror case (bsc#1136029)\n- Add support for ULN repositories on new Zypper based reposync.\n- Don't skip Deb package tags on package import (bsc#1130040)\n- For backend-libs subpackages, exclude files for the server\n  (already part of spacewalk-backend) to avoid conflicts (bsc#1148125)\n- prevent duplicate key violates on repo-sync with long changelog\n  entries (bsc#1144889)\n\nspacewalk-remote-utils:\n\n- Add RHEL8\n\n","status":"published","published":"2019-09-05T15:32:27Z","modified":"2026-02-04T03:59:19.668999Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2317-1","title":"Security update for SUSE Manager Client Tools","description":"\nThis update fixes the following issues:\n\ngolang-github-prometheus-prometheus:\n\n- Add support for Uyuni/SUSE Manager service discovery\n  + Added 0003-Add-Uyuni-service-discovery \n- Readded _service file removed in error. \n- Update to 2.11.1 \n  + Bug Fix:\n    * Fix potential panic when prometheus is watching multiple zookeeper paths.\n- Update to 2.11.0\n  + Bug Fix:\n    * resolve race condition in maxGauge. \n    * Fix ZooKeeper connection leak. \n    * Improved atomicity of .tmp block replacement during compaction for usual case. \n    * Fix 'unknown series references' after clean shutdown. \n    * Re-calculate block size when calling block.Delete. \n    * Fix unsafe snapshots with head block. \n    * prometheus_tsdb_compactions_failed_total is now incremented on any compaction failure. \n  + Changes:\n    * Remove max_retries from queue_config (it has been unused since rewriting remote-write to utilize the write-ahead-log)\n    * The meta file BlockStats no longer holds size information. This is now dynamically calculated and kept in memory. It also includes the meta file size which was not included before\n    * Renamed metric from prometheus_tsdb_wal_reader_corruption_errors to prometheus_tsdb_wal_reader_corruption_errors_total\n  + Features:\n    * Add option to use Alertmanager API v2. \n    * Added humanizePercentage function for templates. \n    * Include InitContainers in Kubernetes Service Discovery. \n    * Provide option to compress WAL records using Snappy. \n  + Enhancements:\n    * Create new clean segment when starting the WAL. \n    * Reduce allocations in PromQL aggregations. \n    * Add storage warnings to LabelValues and LabelNames API results. \n    * Add prometheus_http_requests_total metric. \n    * Enable openbsd/arm build. \n    * Remote-write allocation improvements. \n    * Query performance improvement: Efficient iteration and search in HashForLabels and HashWithoutLabels. \n    * Allow injection of arbitrary headers in promtool. \n    * Allow passing external_labels in alert unit tests groups. \n    * Allows globs for rules when unit testing.\n    * Improved postings intersection matching. \n    * Reduced disk usage for WAL for small setups. \n    * Optimize queries using regexp for set lookups. \n- Rebase patch002-Default-settings.patch \n- Update to 2.10.0:\n  + Bug Fixes:\n    * TSDB: Don't panic when running out of disk space and recover nicely from the condition\n    * TSDB: Correctly handle empty labels.\n    * TSDB: Don't crash on an unknown tombstone reference. \n    * Storage/remote: Remove queue-manager specific metrics if queue no longer exists. \n    * PromQL: Correctly display {__name__='a'}. \n    * Discovery/kubernetes: Use service rather than ingress as the name for the service workqueue. \n    * Discovery/azure: Don't panic on a VM with a public IP. \n    * Web: Fixed Content-Type for js and css instead of using /etc/mime.types.\n    * API: Encode alert values as string to correctly represent Inf/NaN. \n  + Features:\n    * Template expansion: Make external labels available as $externalLabels in alert and console template expansion. \n    * TSDB: Add prometheus_tsdb_wal_segment_current metric for the WAL segment index that TSDB is currently writing to. tsdb\n    * Scrape: Add scrape_series_added per-scrape metric. #5546\n  + Enhancements\n    * Discovery/kubernetes: Add labels __meta_kubernetes_endpoint_node_name and __meta_kubernetes_endpoint_hostname. \n    * Discovery/azure: Add label __meta_azure_machine_public_ip. \n    * TSDB: Simplify mergedPostings.Seek, resulting in better performance if there are many posting lists. tsdb\n    * Log filesystem type on startup. \n    * Cmd/promtool: Use POST requests for Query and QueryRange. client_golang\n    * Web: Sort alerts by group name. \n    * Console templates: Add convenience variables $rawParams, $params, $path.\n- Upadte to 2.9.2\n  + Bug Fixes:\n    * Make sure subquery range is taken into account for selection \n    * Exhaust every request body before closing it \n    * Cmd/promtool: return errors from rule evaluations \n    * Remote Storage: string interner should not panic in release \n    * Fix memory allocation regression in mergedPostings.Seek tsdb\n- Update to 2.9.1\n  + Bug Fixes:\n    * Discovery/kubernetes: fix missing label sanitization \n    * Remote_write: Prevent reshard concurrent with calling stop \n- Update to 2.9.0 \n  + Feature: \n    * Add honor_timestamps scrape option.\n  + Enhancements:\t\n    * Update Consul to support catalog.ServiceMultipleTags.\n    * Discovery/kubernetes: add present labels for labels/annotations.\n    * OpenStack SD: Add ProjectID and UserID meta labels.\n    * Add GODEBUG and retention to the runtime page. \n    * Add support for POSTing to /series endpoint. \n    * Support PUT methods for Lifecycle and Admin APIs.\n    * Scrape: Add global jitter for HA server.\n    * Check for cancellation on every step of a range evaluation. \n    * String interning for labels \u0026 values in the remote_write path.\n    * Don't lose the scrape cache on a failed scrape.\n    * Reload cert files from disk automatically. common\n    * Use fixed length millisecond timestamp format for logs. common\n    * Performance improvements for postings. \n  Bug Fixes:\n    * Remote Write: fix checkpoint reading. \n    * Check if label value is valid when unmarshaling external labels from YAML. \n    * Promparse: sort all labels when parsing. \n    * Reload rules: copy state on both name and labels. \n    * Exponentation operator to drop metric name in result of operation. \n    * Config: resolve more file paths. \n    * Promtool: resolve relative paths in alert test files. \n    * Set TLSHandshakeTimeout in HTTP transport. common\n    * Use fsync to be more resilient to machine crashes. \n    * Keep series that are still in WAL in checkpoints.\n- Update to 2.8.1\n  + Bug Fixes\n    *  Display the job labels in /targets which was removed accidentally\n- Update to 2.8.0 \n  + Change:\n    * This release uses Write-Ahead Logging (WAL) for the remote_write API. This currently causes a slight increase in memory usage, which will be addressed in future releases.\n    * Default time retention is used only when no size based retention is specified. These are flags where time retention is specified by the flag --storage.tsdb.retention and size retention by --storage.tsdb.retention.size. \n    * prometheus_tsdb_storage_blocks_bytes_total is now prometheus_tsdb_storage_blocks_bytes. \n  + Feature:\n    * (EXPERIMENTAL) Time overlapping blocks are now allowed; vertical compaction and vertical query merge. It is an optional feature which is controlled by the --storage.tsdb.allow-overlapping-blocks flag, disabled by default.\n  + Enhancements:  \n\t* Use the WAL for remote_write API.\n    * Query performance improvements. \n    * UI enhancements with upgrade to Bootstrap 4. \n    * Reduce time that Alertmanagers are in flux when reloaded. \n    * Limit number of metrics displayed on UI to 10000. \n    * (1) Remember All/Unhealthy choice on target-overview when reloading page. (2) Resize text-input area on Graph page on mouseclick. \n    * In histogram_quantile merge buckets with equivalent le values. \n    * Show list of offending labels in the error message in many-to-many scenarios. \n    * Show Storage Retention criteria in effect on /status page. \n  + Bug Fixes: \n    + Fix sorting of rule groups. \n    + Fix support for password_file and bearer_token_file in Kubernetes SD. \n    + Scrape: catch errors when creating HTTP clients  \n    + Adds new metrics:\n        prometheus_target_scrape_pools_total\n        prometheus_target_scrape_pools_failed_total\n        prometheus_target_scrape_pool_reloads_total\n        prometheus_target_scrape_pool_reloads_failed_total\n    + Fix panic when aggregator param is not a literal.\n\nmgr-cfg:\n\n- Ensure bytes type when using hashlib to avoid traceback (bsc#1138822)\n\nmgr-daemon:\n\n- Fix systemd timer configuration on SLE12 (bsc#1142038)\n\nmgr-osad:\n\n- Fix obsolete for old osad packages, to allow installing mgr-osad\n  even by using osad at yum/zyppper install (bsc#1139453)\n- Ensure bytes type when using hashlib to avoid traceback (bsc#1138822)\n\nmgr-virtualization:\n\n- Fix missing python 3 ugettext (bsc#1138494)\n- Fix package dependencies to prevent file conflict (bsc#1143856)\n\nrhnlib:\n\n- Add SNI support for clients\n- Fix initialize ssl connection (bsc#1144155)\n- Fix bootstrapping SLE11SP4 trad client with SSL enabled (bsc#1148177)\n\nspacecmd:\n\n- Bugfix: referenced variable before assignment.\n- Bugfix: 'dict' object has no attribute 'iteritems' (bsc#1135881)\n- Add unit tests for custominfo, snippet, scap, ssm, cryptokey and distribution\n- Fix missing runtime dependencies that made spacecmd return old versions of\n  packages in some cases, even if newer ones were available (bsc#1148311)\n\n\nspacewalk-backend:\n\n- Do not overwrite comps and module data with older versions\n- Fix issue with 'dists' keyword in url hostname\n- Import packages from all collections of a patch not just first one\n- Ensure bytes type when using hashlib to avoid traceback\n  on XMLRPC call to 'registration.register_osad' (bsc#1138822)\n- Do not duplicate 'http://' protocol when using proxies with 'deb'\n  repositories (bsc#1138313)\n- Fix reposync when dealing with RedHat CDN (bsc#1138358)\n- Fix for CVE-2019-10136. An attacker with a valid, but expired,\n  authenticated set of headers could move some digits around,\n  artificially extending the session validity without modifying\n  the checksum. (bsc#1136480)\n- Prevent FileNotFoundError: repomd.xml.key traceback (bsc#1137940)\n- Add journalctl output to spacewalk-debug tarballs\n- Prevent unnecessary triggering of channel-repodata tasks when GPG\n  signing is disabled (bsc#1137715)\n- Fix spacewalk-repo-sync for Ubuntu repositories in mirror case (bsc#1136029)\n- Add support for ULN repositories on new Zypper based reposync.\n- Don't skip Deb package tags on package import (bsc#1130040)\n- For backend-libs subpackages, exclude files for the server\n  (already part of spacewalk-backend) to avoid conflicts (bsc#1148125)\n- prevent duplicate key violates on repo-sync with long changelog\n  entries (bsc#1144889)\n\nspacewalk-remote-utils:\n\n- Add RHEL8\n\n","status":"published","published":"2019-09-06T07:15:46Z","modified":"2026-02-04T03:15:53.685802Z","updated_at":"2026-11-02T15:53:46.44301Z"}]}}