opensuse-su-2024:10856-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
icinga2-2.13.1-1.3 on GA media
Notes
Title of the patch
icinga2-2.13.1-1.3 on GA media
Description of the patch
These are all security issues fixed in the icinga2-2.13.1-1.3 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-10856
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "icinga2-2.13.1-1.3 on GA media", "title": "Title of the patch" }, { "category": "description", "text": "These are all security issues fixed in the icinga2-2.13.1-1.3 package on the GA media of openSUSE Tumbleweed.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-Tumbleweed-2024-10856", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10856-1.json" }, { "category": "self", "summary": "SUSE CVE CVE-2017-16933 page", "url": "https://www.suse.com/security/cve/CVE-2017-16933/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-6534 page", "url": "https://www.suse.com/security/cve/CVE-2018-6534/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-14004 page", "url": "https://www.suse.com/security/cve/CVE-2020-14004/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-29663 page", "url": "https://www.suse.com/security/cve/CVE-2020-29663/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-32739 page", "url": "https://www.suse.com/security/cve/CVE-2021-32739/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-32743 page", "url": "https://www.suse.com/security/cve/CVE-2021-32743/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-37698 page", "url": "https://www.suse.com/security/cve/CVE-2021-37698/" } ], "title": "icinga2-2.13.1-1.3 on GA media", "tracking": { "current_release_date": "2024-06-15T00:00:00Z", "generator": { "date": "2024-06-15T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2024:10856-1", "initial_release_date": "2024-06-15T00:00:00Z", "revision_history": [ { "date": "2024-06-15T00:00:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "icinga2-2.13.1-1.3.aarch64", "product": { "name": "icinga2-2.13.1-1.3.aarch64", "product_id": "icinga2-2.13.1-1.3.aarch64" } }, { "category": "product_version", "name": "icinga2-bin-2.13.1-1.3.aarch64", "product": { "name": "icinga2-bin-2.13.1-1.3.aarch64", "product_id": "icinga2-bin-2.13.1-1.3.aarch64" } }, { "category": "product_version", "name": "icinga2-common-2.13.1-1.3.aarch64", "product": { "name": "icinga2-common-2.13.1-1.3.aarch64", "product_id": "icinga2-common-2.13.1-1.3.aarch64" } }, { "category": "product_version", "name": "icinga2-doc-2.13.1-1.3.aarch64", "product": { "name": "icinga2-doc-2.13.1-1.3.aarch64", "product_id": "icinga2-doc-2.13.1-1.3.aarch64" } }, { "category": "product_version", "name": "icinga2-ido-mysql-2.13.1-1.3.aarch64", "product": { "name": "icinga2-ido-mysql-2.13.1-1.3.aarch64", "product_id": "icinga2-ido-mysql-2.13.1-1.3.aarch64" } }, { "category": "product_version", "name": "icinga2-ido-pgsql-2.13.1-1.3.aarch64", "product": { "name": "icinga2-ido-pgsql-2.13.1-1.3.aarch64", "product_id": "icinga2-ido-pgsql-2.13.1-1.3.aarch64" } }, { "category": "product_version", "name": "nano-icinga2-2.13.1-1.3.aarch64", "product": { "name": "nano-icinga2-2.13.1-1.3.aarch64", "product_id": "nano-icinga2-2.13.1-1.3.aarch64" } }, { "category": "product_version", "name": "vim-icinga2-2.13.1-1.3.aarch64", "product": { "name": "vim-icinga2-2.13.1-1.3.aarch64", "product_id": "vim-icinga2-2.13.1-1.3.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "icinga2-2.13.1-1.3.ppc64le", "product": { "name": "icinga2-2.13.1-1.3.ppc64le", "product_id": "icinga2-2.13.1-1.3.ppc64le" } }, { "category": "product_version", "name": "icinga2-bin-2.13.1-1.3.ppc64le", "product": { "name": "icinga2-bin-2.13.1-1.3.ppc64le", "product_id": "icinga2-bin-2.13.1-1.3.ppc64le" } }, { "category": "product_version", "name": "icinga2-common-2.13.1-1.3.ppc64le", "product": { "name": "icinga2-common-2.13.1-1.3.ppc64le", "product_id": "icinga2-common-2.13.1-1.3.ppc64le" } }, { "category": "product_version", "name": "icinga2-doc-2.13.1-1.3.ppc64le", "product": { "name": "icinga2-doc-2.13.1-1.3.ppc64le", "product_id": "icinga2-doc-2.13.1-1.3.ppc64le" } }, { "category": "product_version", "name": "icinga2-ido-mysql-2.13.1-1.3.ppc64le", "product": { "name": "icinga2-ido-mysql-2.13.1-1.3.ppc64le", "product_id": "icinga2-ido-mysql-2.13.1-1.3.ppc64le" } }, { "category": "product_version", "name": "icinga2-ido-pgsql-2.13.1-1.3.ppc64le", "product": { "name": "icinga2-ido-pgsql-2.13.1-1.3.ppc64le", "product_id": "icinga2-ido-pgsql-2.13.1-1.3.ppc64le" } }, { "category": "product_version", "name": "nano-icinga2-2.13.1-1.3.ppc64le", "product": { "name": "nano-icinga2-2.13.1-1.3.ppc64le", "product_id": "nano-icinga2-2.13.1-1.3.ppc64le" } }, { "category": "product_version", "name": "vim-icinga2-2.13.1-1.3.ppc64le", "product": { "name": "vim-icinga2-2.13.1-1.3.ppc64le", "product_id": "vim-icinga2-2.13.1-1.3.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "icinga2-2.13.1-1.3.s390x", "product": { "name": "icinga2-2.13.1-1.3.s390x", "product_id": "icinga2-2.13.1-1.3.s390x" } }, { "category": "product_version", "name": "icinga2-bin-2.13.1-1.3.s390x", "product": { "name": "icinga2-bin-2.13.1-1.3.s390x", "product_id": "icinga2-bin-2.13.1-1.3.s390x" } }, { "category": "product_version", "name": "icinga2-common-2.13.1-1.3.s390x", "product": { "name": "icinga2-common-2.13.1-1.3.s390x", "product_id": "icinga2-common-2.13.1-1.3.s390x" } }, { "category": "product_version", "name": "icinga2-doc-2.13.1-1.3.s390x", "product": { "name": "icinga2-doc-2.13.1-1.3.s390x", "product_id": "icinga2-doc-2.13.1-1.3.s390x" } }, { "category": "product_version", "name": "icinga2-ido-mysql-2.13.1-1.3.s390x", "product": { "name": "icinga2-ido-mysql-2.13.1-1.3.s390x", "product_id": "icinga2-ido-mysql-2.13.1-1.3.s390x" } }, { "category": "product_version", "name": "icinga2-ido-pgsql-2.13.1-1.3.s390x", "product": { "name": "icinga2-ido-pgsql-2.13.1-1.3.s390x", "product_id": "icinga2-ido-pgsql-2.13.1-1.3.s390x" } }, { "category": "product_version", "name": "nano-icinga2-2.13.1-1.3.s390x", "product": { "name": "nano-icinga2-2.13.1-1.3.s390x", "product_id": "nano-icinga2-2.13.1-1.3.s390x" } }, { "category": "product_version", "name": "vim-icinga2-2.13.1-1.3.s390x", "product": { "name": "vim-icinga2-2.13.1-1.3.s390x", "product_id": "vim-icinga2-2.13.1-1.3.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "icinga2-2.13.1-1.3.x86_64", "product": { "name": "icinga2-2.13.1-1.3.x86_64", "product_id": "icinga2-2.13.1-1.3.x86_64" } }, { "category": "product_version", "name": "icinga2-bin-2.13.1-1.3.x86_64", "product": { "name": "icinga2-bin-2.13.1-1.3.x86_64", "product_id": "icinga2-bin-2.13.1-1.3.x86_64" } }, { "category": "product_version", "name": "icinga2-common-2.13.1-1.3.x86_64", "product": { "name": "icinga2-common-2.13.1-1.3.x86_64", "product_id": "icinga2-common-2.13.1-1.3.x86_64" } }, { "category": "product_version", "name": "icinga2-doc-2.13.1-1.3.x86_64", "product": { "name": "icinga2-doc-2.13.1-1.3.x86_64", "product_id": "icinga2-doc-2.13.1-1.3.x86_64" } }, { "category": "product_version", "name": "icinga2-ido-mysql-2.13.1-1.3.x86_64", "product": { "name": "icinga2-ido-mysql-2.13.1-1.3.x86_64", "product_id": "icinga2-ido-mysql-2.13.1-1.3.x86_64" } }, { "category": "product_version", "name": "icinga2-ido-pgsql-2.13.1-1.3.x86_64", "product": { "name": "icinga2-ido-pgsql-2.13.1-1.3.x86_64", "product_id": "icinga2-ido-pgsql-2.13.1-1.3.x86_64" } }, { "category": "product_version", "name": "nano-icinga2-2.13.1-1.3.x86_64", "product": { "name": "nano-icinga2-2.13.1-1.3.x86_64", "product_id": "nano-icinga2-2.13.1-1.3.x86_64" } }, { "category": "product_version", "name": "vim-icinga2-2.13.1-1.3.x86_64", "product": { "name": "vim-icinga2-2.13.1-1.3.x86_64", "product_id": "vim-icinga2-2.13.1-1.3.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "icinga2-2.13.1-1.3.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:icinga2-2.13.1-1.3.aarch64" }, "product_reference": "icinga2-2.13.1-1.3.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "icinga2-2.13.1-1.3.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:icinga2-2.13.1-1.3.ppc64le" }, "product_reference": "icinga2-2.13.1-1.3.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "icinga2-2.13.1-1.3.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:icinga2-2.13.1-1.3.s390x" }, "product_reference": "icinga2-2.13.1-1.3.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "icinga2-2.13.1-1.3.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:icinga2-2.13.1-1.3.x86_64" }, "product_reference": "icinga2-2.13.1-1.3.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "icinga2-bin-2.13.1-1.3.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.aarch64" }, "product_reference": "icinga2-bin-2.13.1-1.3.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "icinga2-bin-2.13.1-1.3.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.ppc64le" }, "product_reference": "icinga2-bin-2.13.1-1.3.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "icinga2-bin-2.13.1-1.3.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.s390x" }, "product_reference": "icinga2-bin-2.13.1-1.3.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "icinga2-bin-2.13.1-1.3.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.x86_64" }, "product_reference": "icinga2-bin-2.13.1-1.3.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "icinga2-common-2.13.1-1.3.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.aarch64" }, "product_reference": "icinga2-common-2.13.1-1.3.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "icinga2-common-2.13.1-1.3.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.ppc64le" }, "product_reference": "icinga2-common-2.13.1-1.3.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "icinga2-common-2.13.1-1.3.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.s390x" }, "product_reference": "icinga2-common-2.13.1-1.3.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "icinga2-common-2.13.1-1.3.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.x86_64" }, "product_reference": "icinga2-common-2.13.1-1.3.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "icinga2-doc-2.13.1-1.3.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.aarch64" }, "product_reference": "icinga2-doc-2.13.1-1.3.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "icinga2-doc-2.13.1-1.3.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.ppc64le" }, "product_reference": "icinga2-doc-2.13.1-1.3.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "icinga2-doc-2.13.1-1.3.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.s390x" }, "product_reference": "icinga2-doc-2.13.1-1.3.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "icinga2-doc-2.13.1-1.3.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.x86_64" }, "product_reference": "icinga2-doc-2.13.1-1.3.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "icinga2-ido-mysql-2.13.1-1.3.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.aarch64" }, "product_reference": "icinga2-ido-mysql-2.13.1-1.3.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "icinga2-ido-mysql-2.13.1-1.3.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.ppc64le" }, "product_reference": "icinga2-ido-mysql-2.13.1-1.3.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "icinga2-ido-mysql-2.13.1-1.3.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.s390x" }, "product_reference": "icinga2-ido-mysql-2.13.1-1.3.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "icinga2-ido-mysql-2.13.1-1.3.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.x86_64" }, "product_reference": "icinga2-ido-mysql-2.13.1-1.3.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "icinga2-ido-pgsql-2.13.1-1.3.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.aarch64" }, "product_reference": "icinga2-ido-pgsql-2.13.1-1.3.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "icinga2-ido-pgsql-2.13.1-1.3.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.ppc64le" }, "product_reference": "icinga2-ido-pgsql-2.13.1-1.3.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "icinga2-ido-pgsql-2.13.1-1.3.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.s390x" }, "product_reference": "icinga2-ido-pgsql-2.13.1-1.3.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "icinga2-ido-pgsql-2.13.1-1.3.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.x86_64" }, "product_reference": "icinga2-ido-pgsql-2.13.1-1.3.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nano-icinga2-2.13.1-1.3.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.aarch64" }, "product_reference": "nano-icinga2-2.13.1-1.3.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nano-icinga2-2.13.1-1.3.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.ppc64le" }, "product_reference": "nano-icinga2-2.13.1-1.3.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nano-icinga2-2.13.1-1.3.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.s390x" }, "product_reference": "nano-icinga2-2.13.1-1.3.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "nano-icinga2-2.13.1-1.3.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.x86_64" }, "product_reference": "nano-icinga2-2.13.1-1.3.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "vim-icinga2-2.13.1-1.3.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.aarch64" }, "product_reference": "vim-icinga2-2.13.1-1.3.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "vim-icinga2-2.13.1-1.3.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.ppc64le" }, "product_reference": "vim-icinga2-2.13.1-1.3.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "vim-icinga2-2.13.1-1.3.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.s390x" }, "product_reference": "vim-icinga2-2.13.1-1.3.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "vim-icinga2-2.13.1-1.3.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.x86_64" }, "product_reference": "vim-icinga2-2.13.1-1.3.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" } ] }, "vulnerabilities": [ { "cve": "CVE-2017-16933", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2017-16933" } ], "notes": [ { "category": "general", "text": "etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, which allows local users to gain privileges by leveraging access to the $ICINGA2_USER account for creation of a link.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2017-16933", "url": "https://www.suse.com/security/cve/CVE-2017-16933" }, { "category": "external", "summary": "SUSE Bug 1086673 for CVE-2017-16933", "url": "https://bugzilla.suse.com/1086673" }, { "category": "external", "summary": "SUSE Bug 1086676 for CVE-2017-16933", "url": "https://bugzilla.suse.com/1086676" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2017-16933" }, { "cve": "CVE-2018-6534", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-6534" } ], "notes": [ { "category": "general", "text": "An issue was discovered in Icinga 2.x through 2.8.1. By sending specially crafted messages, an attacker can cause a NULL pointer dereference, which can cause the product to crash.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-6534", "url": "https://www.suse.com/security/cve/CVE-2018-6534" }, { "category": "external", "summary": "SUSE Bug 1086674 for CVE-2018-6534", "url": "https://bugzilla.suse.com/1086674" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2018-6534" }, { "cve": "CVE-2020-14004", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-14004" } ], "notes": [ { "category": "general", "text": "An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script (run as part of the icinga2 systemd service) executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an unprivileged user by default. If /run/icinga2/cmd is a symlink, then it will by followed and arbitrary files can be changed to mode 2750 by the unprivileged icinga2 user.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-14004", "url": "https://www.suse.com/security/cve/CVE-2020-14004" }, { "category": "external", "summary": "SUSE Bug 1172171 for CVE-2020-14004", "url": "https://bugzilla.suse.com/1172171" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2020-14004" }, { "cve": "CVE-2020-29663", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-29663" } ], "notes": [ { "category": "general", "text": "Icinga 2 v2.8.0 through v2.11.7 and v2.12.2 has an issue where revoked certificates due for renewal will automatically be renewed, ignoring the CRL. This issue is fixed in Icinga 2 v2.11.8 and v2.12.3.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-29663", "url": "https://www.suse.com/security/cve/CVE-2020-29663" }, { "category": "external", "summary": "SUSE Bug 1180147 for CVE-2020-29663", "url": "https://bugzilla.suse.com/1180147" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2020-29663" }, { "cve": "CVE-2021-32739", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-32739" } ], "notes": [ { "category": "general", "text": "Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. From version 2.4.0 through version 2.12.4, a vulnerability exists that may allow privilege escalation for authenticated API users. With a read-ony user\u0027s credentials, an attacker can view most attributes of all config objects including `ticket_salt` of `ApiListener`. This salt is enough to compute a ticket for every possible common name (CN). A ticket, the master node\u0027s certificate, and a self-signed certificate are enough to successfully request the desired certificate from Icinga. That certificate may in turn be used to steal an endpoint or API user\u0027s identity. Versions 2.12.5 and 2.11.10 both contain a fix the vulnerability. As a workaround, one may either specify queryable types explicitly or filter out ApiListener objects.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-32739", "url": "https://www.suse.com/security/cve/CVE-2021-32739" }, { "category": "external", "summary": "SUSE Bug 1188372 for CVE-2021-32739", "url": "https://bugzilla.suse.com/1188372" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2021-32739" }, { "cve": "CVE-2021-32743", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-32743" } ], "notes": [ { "category": "general", "text": "Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. In versions prior to 2.11.10 and from version 2.12.0 through version 2.12.4, some of the Icinga 2 features that require credentials for external services expose those credentials through the API to authenticated API users with read permissions for the corresponding object types. IdoMysqlConnection and IdoPgsqlConnection (every released version) exposes the password of the user used to connect to the database. IcingaDB (added in 2.12.0) exposes the password used to connect to the Redis server. ElasticsearchWriter (added in 2.8.0)exposes the password used to connect to the Elasticsearch server. An attacker who obtains these credentials can impersonate Icinga to these services and add, modify and delete information there. If credentials with more permissions are in use, this increases the impact accordingly. Starting with the 2.11.10 and 2.12.5 releases, these passwords are no longer exposed via the API. As a workaround, API user permissions can be restricted to not allow querying of any affected objects, either by explicitly listing only the required object types for object query permissions, or by applying a filter rule.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-32743", "url": "https://www.suse.com/security/cve/CVE-2021-32743" }, { "category": "external", "summary": "SUSE Bug 1188370 for CVE-2021-32743", "url": "https://bugzilla.suse.com/1188370" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2021-32743" }, { "cve": "CVE-2021-37698", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-37698" } ], "notes": [ { "category": "general", "text": "Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. In versions 2.5.0 through 2.13.0, ElasticsearchWriter, GelfWriter, InfluxdbWriter and Influxdb2Writer do not verify the server\u0027s certificate despite a certificate authority being specified. Icinga 2 instances which connect to any of the mentioned time series databases (TSDBs) using TLS over a spoofable infrastructure should immediately upgrade to version 2.13.1, 2.12.6, or 2.11.11 to patch the issue. Such instances should also change the credentials (if any) used by the TSDB writer feature to authenticate against the TSDB. There are no workarounds aside from upgrading.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-37698", "url": "https://www.suse.com/security/cve/CVE-2021-37698" }, { "category": "external", "summary": "SUSE Bug 1189653 for CVE-2021-37698", "url": "https://bugzilla.suse.com/1189653" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-bin-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-common-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-doc-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-mysql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.s390x", "openSUSE Tumbleweed:icinga2-ido-pgsql-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:nano-icinga2-2.13.1-1.3.x86_64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.aarch64", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.ppc64le", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.s390x", "openSUSE Tumbleweed:vim-icinga2-2.13.1-1.3.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2021-37698" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…