{"affected":[{"ecosystem_specific":{"binaries":[{"prometheus-blackbox_exporter":"0.24.0-150000.1.20.2","spacecmd":"4.3.22-150000.3.101.1","system-user-prometheus":"1.0.0-150000.10.1"}]},"package":{"ecosystem":"SUSE:Manager Client Tools 15","name":"prometheus-blackbox_exporter","purl":"pkg:rpm/suse/prometheus-blackbox_exporter&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.24.0-150000.1.20.2"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"prometheus-blackbox_exporter":"0.24.0-150000.1.20.2","spacecmd":"4.3.22-150000.3.101.1","system-user-prometheus":"1.0.0-150000.10.1"}]},"package":{"ecosystem":"SUSE:Manager Client Tools 15","name":"spacecmd","purl":"pkg:rpm/suse/spacecmd&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.3.22-150000.3.101.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"prometheus-blackbox_exporter":"0.24.0-150000.1.20.2","spacecmd":"4.3.22-150000.3.101.1","system-user-prometheus":"1.0.0-150000.10.1"}]},"package":{"ecosystem":"SUSE:Manager Client Tools 15","name":"system-user-prometheus","purl":"pkg:rpm/suse/system-user-prometheus&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.0.0-150000.10.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"prometheus-blackbox_exporter":"0.24.0-150000.1.20.2","system-user-prometheus":"1.0.0-150000.10.1"}]},"package":{"ecosystem":"SUSE:Manager Client Tools for SLE Micro 5","name":"prometheus-blackbox_exporter","purl":"pkg:rpm/suse/prometheus-blackbox_exporter&distro=SUSE%20Manager%20Client%20Tools%20for%20SLE%20Micro%205"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.24.0-150000.1.20.2"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"prometheus-blackbox_exporter":"0.24.0-150000.1.20.2","system-user-prometheus":"1.0.0-150000.10.1"}]},"package":{"ecosystem":"SUSE:Manager Client Tools for SLE Micro 5","name":"system-user-prometheus","purl":"pkg:rpm/suse/system-user-prometheus&distro=SUSE%20Manager%20Client%20Tools%20for%20SLE%20Micro%205"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.0.0-150000.10.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python3-tornado":"4.5.3-150000.3.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","name":"python-tornado","purl":"pkg:rpm/suse/python-tornado&distro=SUSE%20Linux%20Enterprise%20Micro%205.3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python3-tornado":"4.5.3-150000.3.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","name":"python-tornado","purl":"pkg:rpm/suse/python-tornado&distro=SUSE%20Linux%20Enterprise%20Micro%205.4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python3-tornado":"4.5.3-150000.3.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","name":"python-tornado","purl":"pkg:rpm/suse/python-tornado&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python3-tornado":"4.5.3-150000.3.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","name":"python-tornado","purl":"pkg:rpm/suse/python-tornado&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"prometheus-blackbox_exporter":"0.24.0-150000.1.20.2","system-user-prometheus":"1.0.0-150000.10.1"}]},"package":{"ecosystem":"SUSE:Manager Proxy Module 4.2","name":"prometheus-blackbox_exporter","purl":"pkg:rpm/suse/prometheus-blackbox_exporter&distro=SUSE%20Manager%20Proxy%20Module%204.2"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.24.0-150000.1.20.2"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"prometheus-blackbox_exporter":"0.24.0-150000.1.20.2","system-user-prometheus":"1.0.0-150000.10.1"}]},"package":{"ecosystem":"SUSE:Manager Proxy Module 4.2","name":"system-user-prometheus","purl":"pkg:rpm/suse/system-user-prometheus&distro=SUSE%20Manager%20Proxy%20Module%204.2"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.0.0-150000.10.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"prometheus-blackbox_exporter":"0.24.0-150000.1.20.2","system-user-prometheus":"1.0.0-150000.10.1"}]},"package":{"ecosystem":"SUSE:Manager Proxy Module 4.3","name":"prometheus-blackbox_exporter","purl":"pkg:rpm/suse/prometheus-blackbox_exporter&distro=SUSE%20Manager%20Proxy%20Module%204.3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.24.0-150000.1.20.2"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"prometheus-blackbox_exporter":"0.24.0-150000.1.20.2","system-user-prometheus":"1.0.0-150000.10.1"}]},"package":{"ecosystem":"SUSE:Manager Proxy Module 4.3","name":"system-user-prometheus","purl":"pkg:rpm/suse/system-user-prometheus&distro=SUSE%20Manager%20Proxy%20Module%204.3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.0.0-150000.10.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"system-user-prometheus":"1.0.0-150000.10.1"}]},"package":{"ecosystem":"SUSE:Manager Server Module 4.2","name":"system-user-prometheus","purl":"pkg:rpm/suse/system-user-prometheus&distro=SUSE%20Manager%20Server%20Module%204.2"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.0.0-150000.10.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"system-user-prometheus":"1.0.0-150000.10.1"}]},"package":{"ecosystem":"SUSE:Manager Server Module 4.3","name":"system-user-prometheus","purl":"pkg:rpm/suse/system-user-prometheus&distro=SUSE%20Manager%20Server%20Module%204.3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.0.0-150000.10.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python2-tornado":"4.5.3-150000.3.6.1","python3-tornado":"4.5.3-150000.3.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","name":"python-tornado","purl":"pkg:rpm/suse/python-tornado&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python2-tornado":"4.5.3-150000.3.6.1","python3-tornado":"4.5.3-150000.3.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","name":"python-tornado","purl":"pkg:rpm/suse/python-tornado&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python3-tornado":"4.5.3-150000.3.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","name":"python-tornado","purl":"pkg:rpm/suse/python-tornado&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python3-tornado":"4.5.3-150000.3.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","name":"python-tornado","purl":"pkg:rpm/suse/python-tornado&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python3-tornado":"4.5.3-150000.3.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","name":"python-tornado","purl":"pkg:rpm/suse/python-tornado&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python2-tornado":"4.5.3-150000.3.6.1","python3-tornado":"4.5.3-150000.3.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","name":"python-tornado","purl":"pkg:rpm/suse/python-tornado&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python2-tornado":"4.5.3-150000.3.6.1","python3-tornado":"4.5.3-150000.3.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","name":"python-tornado","purl":"pkg:rpm/suse/python-tornado&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python3-tornado":"4.5.3-150000.3.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","name":"python-tornado","purl":"pkg:rpm/suse/python-tornado&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python2-tornado":"4.5.3-150000.3.6.1","python3-tornado":"4.5.3-150000.3.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","name":"python-tornado","purl":"pkg:rpm/suse/python-tornado&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python2-tornado":"4.5.3-150000.3.6.1","python3-tornado":"4.5.3-150000.3.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","name":"python-tornado","purl":"pkg:rpm/suse/python-tornado&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python3-tornado":"4.5.3-150000.3.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","name":"python-tornado","purl":"pkg:rpm/suse/python-tornado&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python3-tornado":"4.5.3-150000.3.6.1"}]},"package":{"ecosystem":"SUSE:Manager Proxy 4.2","name":"python-tornado","purl":"pkg:rpm/suse/python-tornado&distro=SUSE%20Manager%20Proxy%204.2"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python2-tornado":"4.5.3-150000.3.6.1","python3-tornado":"4.5.3-150000.3.6.1"}]},"package":{"ecosystem":"SUSE:Manager Server 4.2","name":"python-tornado","purl":"pkg:rpm/suse/python-tornado&distro=SUSE%20Manager%20Server%204.2"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python3-tornado":"4.5.3-150000.3.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","name":"python-tornado","purl":"pkg:rpm/suse/python-tornado&distro=SUSE%20Linux%20Enterprise%20Micro%205.2"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python2-tornado":"4.5.3-150000.3.6.1","python3-tornado":"4.5.3-150000.3.6.1"}]},"package":{"ecosystem":"SUSE:Enterprise Storage 7","name":"python-tornado","purl":"pkg:rpm/suse/python-tornado&distro=SUSE%20Enterprise%20Storage%207"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python3-tornado":"4.5.3-150000.3.6.1"}]},"package":{"ecosystem":"SUSE:Enterprise Storage 7.1","name":"python-tornado","purl":"pkg:rpm/suse/python-tornado&distro=SUSE%20Enterprise%20Storage%207.1"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python3-tornado":"4.5.3-150000.3.6.1"}]},"package":{"ecosystem":"openSUSE:Leap Micro 5.3","name":"python-tornado","purl":"pkg:rpm/opensuse/python-tornado&distro=openSUSE%20Leap%20Micro%205.3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python3-tornado":"4.5.3-150000.3.6.1"}]},"package":{"ecosystem":"openSUSE:Leap Micro 5.4","name":"python-tornado","purl":"pkg:rpm/opensuse/python-tornado&distro=openSUSE%20Leap%20Micro%205.4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"prometheus-blackbox_exporter":"0.24.0-150000.1.20.2","python3-tornado":"4.5.3-150000.3.6.1","spacecmd":"4.3.22-150000.3.101.1","system-user-prometheus":"1.0.0-150000.10.1"}]},"package":{"ecosystem":"openSUSE:Leap 15.4","name":"prometheus-blackbox_exporter","purl":"pkg:rpm/opensuse/prometheus-blackbox_exporter&distro=openSUSE%20Leap%2015.4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.24.0-150000.1.20.2"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"prometheus-blackbox_exporter":"0.24.0-150000.1.20.2","python3-tornado":"4.5.3-150000.3.6.1","spacecmd":"4.3.22-150000.3.101.1","system-user-prometheus":"1.0.0-150000.10.1"}]},"package":{"ecosystem":"openSUSE:Leap 15.4","name":"python-tornado","purl":"pkg:rpm/opensuse/python-tornado&distro=openSUSE%20Leap%2015.4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"prometheus-blackbox_exporter":"0.24.0-150000.1.20.2","python3-tornado":"4.5.3-150000.3.6.1","spacecmd":"4.3.22-150000.3.101.1","system-user-prometheus":"1.0.0-150000.10.1"}]},"package":{"ecosystem":"openSUSE:Leap 15.4","name":"spacecmd","purl":"pkg:rpm/opensuse/spacecmd&distro=openSUSE%20Leap%2015.4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.3.22-150000.3.101.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"prometheus-blackbox_exporter":"0.24.0-150000.1.20.2","python3-tornado":"4.5.3-150000.3.6.1","spacecmd":"4.3.22-150000.3.101.1","system-user-prometheus":"1.0.0-150000.10.1"}]},"package":{"ecosystem":"openSUSE:Leap 15.4","name":"system-user-prometheus","purl":"pkg:rpm/opensuse/system-user-prometheus&distro=openSUSE%20Leap%2015.4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.0.0-150000.10.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"prometheus-blackbox_exporter":"0.24.0-150000.1.20.2","python3-tornado":"4.5.3-150000.3.6.1","spacecmd":"4.3.22-150000.3.101.1","system-user-prometheus":"1.0.0-150000.10.1"}]},"package":{"ecosystem":"openSUSE:Leap 15.5","name":"prometheus-blackbox_exporter","purl":"pkg:rpm/opensuse/prometheus-blackbox_exporter&distro=openSUSE%20Leap%2015.5"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.24.0-150000.1.20.2"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"prometheus-blackbox_exporter":"0.24.0-150000.1.20.2","python3-tornado":"4.5.3-150000.3.6.1","spacecmd":"4.3.22-150000.3.101.1","system-user-prometheus":"1.0.0-150000.10.1"}]},"package":{"ecosystem":"openSUSE:Leap 15.5","name":"python-tornado","purl":"pkg:rpm/opensuse/python-tornado&distro=openSUSE%20Leap%2015.5"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"prometheus-blackbox_exporter":"0.24.0-150000.1.20.2","python3-tornado":"4.5.3-150000.3.6.1","spacecmd":"4.3.22-150000.3.101.1","system-user-prometheus":"1.0.0-150000.10.1"}]},"package":{"ecosystem":"openSUSE:Leap 15.5","name":"spacecmd","purl":"pkg:rpm/opensuse/spacecmd&distro=openSUSE%20Leap%2015.5"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.3.22-150000.3.101.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"prometheus-blackbox_exporter":"0.24.0-150000.1.20.2","python3-tornado":"4.5.3-150000.3.6.1","spacecmd":"4.3.22-150000.3.101.1","system-user-prometheus":"1.0.0-150000.10.1"}]},"package":{"ecosystem":"openSUSE:Leap 15.5","name":"system-user-prometheus","purl":"pkg:rpm/opensuse/system-user-prometheus&distro=openSUSE%20Leap%2015.5"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.0.0-150000.10.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update fixes the following issues:\n\npython-tornado:\n    \n- Security fixes:\n  * CVE-2023-28370: Fixed an open redirect issue in the static file handler (bsc#1211741)\n\nprometheus-blackbox_exporter:\n\n- Use obscpio for go modules service\n- Set version number\n- Set build date from SOURCE_DATE_EPOCH\n- Update to 0.24.0 (bsc#1212279, jsc#PED-4556)\n  * Requires go1.19\n- Avoid empty validation script\n- Add rc symlink for backwards compatibility\n\nspacecmd:\n\n- Version 4.3.22-1\n  * Bypass traditional systems check on older SUMA instances (bsc#1208612)\n\n","id":"SUSE-SU-2023:3144-1","modified":"2023-08-02T07:29:16Z","published":"2023-08-02T07:29:16Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233144-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1208612"},{"type":"REPORT","url":"https://bugzilla.suse.com/1211741"},{"type":"REPORT","url":"https://bugzilla.suse.com/1212279"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-28370"}],"related":["CVE-2023-28370"],"summary":"Security update for SUSE Manager Client Tools","upstream":["CVE-2023-28370"]}