Summary
This update for ardana-horizon, ardana-logging, ardana-monasca, ardana-mq, ardana-osconfig, crowbar-ha, crowbar-openstack, kibana, openstack-neutron, openstack-nova, python-Django, release-notes-suse-openstack-cloud, sleshammer, spark fixes the following issues:
Security fix from this update:
python-Django1
- CVE-2021-3281: Fixed a potential directory traversal when extracting
archives (bsc#1181379).
Changes in ardana-horizon_Update:
- Update to version 8.0+git.1610733160.0f577f4:
* Add Fix for logfile permissions (bsc#1179189)
Changes in ardana-logging_Update:
- Update to version 8.0+git.1610573640.452aed1:
* Remove some files from upgrade.yml (bsc#1179189)
Changes in ardana-monasca_Update:
- Update to version 8.0+git.1610740501.5dca121:
* Add Fix for logfile permissions (bsc#1179189)
Changes in ardana-mq_Update:
- Update to version 8.0+git.1605176800.52cccfa:
* Re-enable mirroring of fanout and reply queues (bsc#1177611)
Changes in ardana-osconfig_Update:
- Update to version 8.0+git.1610643571.91b88d6:
* Remove SLES-12-SP3-LTSS repos (bsc#1180916)
Changes in crowbar-ha:
- Update to version 5.0+git.1610564036.b75ee1b:
* [5.0] crowbar-pacemaker: Cluster member SSH key improvements
Changes in crowbar-openstack:
- Update to version 5.0+git.1610402513.08dca931e:
* neutron: Fix handling of networks with non-ascii names (SOC-11429)
- Update to version 5.0+git.1610372799.621afb999:
* keystone: fix keystone node lookup (SOC-11333, bsc#1164838)
Changes in kibana:
- Add 0001-Configurable-custom-response-headers-for-server.patch
(bsc#1171909, CVE-2020-10743)
- Added kibana.yml symlink (bsc#1048688, FATE#323204)
Changes in openstack-nova_Update:
- Update to version nova-16.1.9.dev78:
* [stable-only] Cap bandit to 1.6.2
Changes in python-Django_Update:
- Add CVE-2021-3281.patch (bsc#1181379, CVE-2021-3281)
* Fixes a potential directory traversal when extracting archives
Changes in release-notes-suse-openstack-cloud:
- Fix incorrect issue number for bsc#1179955
- Update to version 8.20201214:
* Add workaround for secure boot issue when shim package is updated. (bsc#1179955)
Changes in spark_Update:
- Add _constraints to prevent build from running out of disk space.
Changes in sleshammer:
- Really drop etc/udev/rules.d/70-persistent-net.rules from the overlay
it was still present in the tarball. (SOC-9288)
- added ruby2.1-rubygem-crowbar-client providing crowbarctl
Fixed packages 43
| Release | Package | Fixed in |
|---|---|---|
| SUSE · HPE Helion OpenStack 8 | ardana-horizon | 8.0+git.1610733160.0f577f4-3.21.1 |
| SUSE · HPE Helion OpenStack 8 | ardana-logging | 8.0+git.1610573640.452aed1-3.27.1 |
| SUSE · HPE Helion OpenStack 8 | ardana-monasca | 8.0+git.1610740501.5dca121-3.27.1 |
| SUSE · HPE Helion OpenStack 8 | ardana-mq | 8.0+git.1605176800.52cccfa-3.29.1 |
| SUSE · HPE Helion OpenStack 8 | ardana-osconfig | 8.0+git.1610643571.91b88d6-3.52.1 |
| SUSE · HPE Helion OpenStack 8 | kibana | 4.6.3-3.6.1 |
| SUSE · HPE Helion OpenStack 8 | openstack-neutron | 11.0.9~dev69-3.40.1 |
| SUSE · HPE Helion OpenStack 8 | openstack-neutron-doc | 11.0.9~dev69-3.40.1 |
| SUSE · HPE Helion OpenStack 8 | openstack-nova | 16.1.9~dev78-3.45.1 |
| SUSE · HPE Helion OpenStack 8 | openstack-nova-doc | 16.1.9~dev78-3.45.1 |
| SUSE · HPE Helion OpenStack 8 | python-Django | 1.11.29-3.22.1 |
| SUSE · HPE Helion OpenStack 8 | release-notes-hpe-helion-openstack | 8.20201214-3.29.1 |
| SUSE · HPE Helion OpenStack 8 | spark | 1.6.3-8.6.1 |
| SUSE · HPE Helion OpenStack 8 | venv-openstack-horizon-hpe | 12.0.5~dev6-14.34.1 |
| SUSE · HPE Helion OpenStack 8 | venv-openstack-neutron | 11.0.9~dev69-13.36.1 |
| SUSE · HPE Helion OpenStack 8 | venv-openstack-nova | 16.1.9~dev78-11.34.1 |
| SUSE · OpenStack Cloud 8 | ardana-horizon | 8.0+git.1610733160.0f577f4-3.21.1 |
| SUSE · OpenStack Cloud 8 | ardana-logging | 8.0+git.1610573640.452aed1-3.27.1 |
| SUSE · OpenStack Cloud 8 | ardana-monasca | 8.0+git.1610740501.5dca121-3.27.1 |
| SUSE · OpenStack Cloud 8 | ardana-mq | 8.0+git.1605176800.52cccfa-3.29.1 |
| SUSE · OpenStack Cloud 8 | ardana-osconfig | 8.0+git.1610643571.91b88d6-3.52.1 |
| SUSE · OpenStack Cloud 8 | kibana | 4.6.3-3.6.1 |
| SUSE · OpenStack Cloud 8 | openstack-neutron | 11.0.9~dev69-3.40.1 |
| SUSE · OpenStack Cloud 8 | openstack-neutron-doc | 11.0.9~dev69-3.40.1 |
| SUSE · OpenStack Cloud 8 | openstack-nova | 16.1.9~dev78-3.45.1 |
| SUSE · OpenStack Cloud 8 | openstack-nova-doc | 16.1.9~dev78-3.45.1 |
| SUSE · OpenStack Cloud 8 | python-Django | 1.11.29-3.22.1 |
| SUSE · OpenStack Cloud 8 | release-notes-suse-openstack-cloud | 8.20201214-3.29.1 |
| SUSE · OpenStack Cloud 8 | spark | 1.6.3-8.6.1 |
| SUSE · OpenStack Cloud 8 | venv-openstack-horizon | 12.0.5~dev6-14.34.3 |
| SUSE · OpenStack Cloud 8 | venv-openstack-neutron | 11.0.9~dev69-13.36.1 |
| SUSE · OpenStack Cloud 8 | venv-openstack-nova | 16.1.9~dev78-11.34.1 |
| SUSE · OpenStack Cloud Crowbar 8 | crowbar-ha | 5.0+git.1610564036.b75ee1b-3.35.1 |
| SUSE · OpenStack Cloud Crowbar 8 | crowbar-openstack | 5.0+git.1610402513.08dca931e-4.49.1 |
| SUSE · OpenStack Cloud Crowbar 8 | kibana | 4.6.3-3.6.1 |
| SUSE · OpenStack Cloud Crowbar 8 | openstack-neutron | 11.0.9~dev69-3.40.1 |
| SUSE · OpenStack Cloud Crowbar 8 | openstack-neutron-doc | 11.0.9~dev69-3.40.1 |
| SUSE · OpenStack Cloud Crowbar 8 | openstack-nova | 16.1.9~dev78-3.45.1 |
| SUSE · OpenStack Cloud Crowbar 8 | openstack-nova-doc | 16.1.9~dev78-3.45.1 |
| SUSE · OpenStack Cloud Crowbar 8 | python-Django | 1.11.29-3.22.1 |
| SUSE · OpenStack Cloud Crowbar 8 | release-notes-suse-openstack-cloud | 8.20201214-3.29.1 |
| SUSE · OpenStack Cloud Crowbar 8 | sleshammer | 0.8.0-0.20.2 |
| SUSE · OpenStack Cloud Crowbar 8 | spark | 1.6.3-8.6.1 |
Vulnerabilities 3
-
Medium 5.3CVE-2021-3281 Public exploit
Django Directory Traversal via archive.extract
In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by "startapp --template" and "startproject --template") allows directory traversal via an archive with absolute paths or relative paths with do…
-
Medium 4.3
A vulnerability was found in Openstack Glance. No limits are enforced within the Glance image service for both v1 and v…
-
Unscored —
It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in an iframe, which made …
References
-
report
https://bugzilla.suse.com/1048688
-
report
https://bugzilla.suse.com/1164838
-
report
https://bugzilla.suse.com/1177611
-
report
https://bugzilla.suse.com/1179189
-
report
https://bugzilla.suse.com/1179955
-
report
https://bugzilla.suse.com/1180916
-
report
https://bugzilla.suse.com/1181379
-
web
https://www.suse.com/security/cve/CVE-2016-8611
-
web
https://www.suse.com/security/cve/CVE-2020-10743
-
web
https://www.suse.com/security/cve/CVE-2021-3281