Skip to content
OpenAdvisories
Medium SUSE-RU-2021:0497-1 1 CVE

Recommended update for ardana-db, ardana-horizon, ardana-logging, ardana-monasca, ardana-opsconsole-ui, ardana-osconfig, crowbar-core, crowbar-openstack, kibana, openstack-dashboard, openstack-manila, openstack-neutron, openstack-neutron-gbp, openstack-nova, python-Django1, release-notes-suse-openstack-cloud, sleshammer

Published Feb 17, 2021 · Updated Feb 4, 2026

Summary

This update for ardana-db, ardana-horizon, ardana-logging, ardana-monasca, ardana-opsconsole-ui, ardana-osconfig, crowbar-core, crowbar-openstack, kibana, openstack-dashboard, openstack-manila, openstack-neutron, openstack-neutron-gbp, openstack-nova, python-Django1, release-notes-suse-openstack-cloud, sleshammer fixes the following issues:

Security fix included in this update:
python-Django1
- CVE-2021-3281: Fixed a potential directory traversal when extracting
archives (bsc#1181379).

Non-security fixes included in this update

Changes in ardana-db:
- Update to version 9.0+git.1611600773.5f1de5f:
* Add tasks to check for the TLS certificate expiry (bsc#1181040)

Changes in ardana-horizon:
- Update to version 9.0+git.1610491814.38661c2:
* Add Fix for logfile permissions (bsc#1179189)

Changes in ardana-logging:
- Update to version 9.0+git.1610490922.d5f9813:
* Remove some files and fix mysql logs locations (bsc#1179189)

Changes in ardana-monasca:
- Update to version 9.0+git.1610547641.d79ecfd:
* Add Fix for logfile permissions (bsc#1179189)

Changes in ardana-opsconsole-ui:
- Update to version 9.0+git.1611867924.eb82818:
* Adjust period used to query monasca summary metrics (bsc#1181521)

Changes in ardana-osconfig:
- Update to version 9.0+git.1610634027.5934cf8:
* Fix logrotate code that needs to silence the grep (bsc#1179189)

Changes in crowbar-core:
- Update to version 6.0+git.1611320924.849e748ff:
* avoid v4.1.5 of delayed_job_active_record (noref)
* add CVE-2020-26247 to travis ignore list (bsc#1180507)

Changes in crowbar-openstack:
- Update to version 6.0+git.1610402342.21499240d:
* neutron: Fix handling of networks with non-ascii names (SOC-11429)

- Update to version 6.0+git.1610374680.e68ff27d2:
* Terminate ssl on haproxy for cinder (bsc#1149535)
* Terminate ssl on haproxy for nova (bsc#1149535)

Changes in kibana:
- Added kibana.yml symlink (bsc#1048688, FATE#323204)
Changes in openstack-dashboard:
- add 0001-Fix-network_topology-view-memory-and-file-leaks.patch

- Update to version horizon-14.1.1.dev10:
* Fix open redirect (OSSA-2020-008, CVE-2020-29565)

- Update to version horizon-14.1.1.dev8:
* Cap bandit for python 2.7 env

Changes in openstack-manila:
- Update to version manila-7.4.2.dev60:
* [stable/rocky] Adjust CI jobs
* [NetApp] Fix CIFS promote back issue

- Update to version manila-7.4.2.dev58:
* [stable/rocky] Adjust CI jobs

Changes in openstack-manila:
- Update to version manila-7.4.2.dev60:
* [stable/rocky] Adjust CI jobs
* [NetApp] Fix CIFS promote back issue

- Update to version manila-7.4.2.dev58:
* [stable/rocky] Adjust CI jobs

Changes in openstack-neutron:
- Update to version neutron-13.0.8.dev147:
* Improve DHCP agent's debug messages

- Update to version neutron-13.0.8.dev145:
* Use consistent filter API syntax

- Update to version neutron-13.0.8.dev144:
* Improve the CIDRs overlap check method for router add interface

- Update to version neutron-13.0.8.dev142:
* [GRE] Add possibility to create GRE tunnels over IPv6

- Update to version neutron-13.0.8.dev140:
* Fix migration from the HA to non-HA routers

- Update to version neutron-13.0.8.dev138:
* Dropping lower constraints testing (stable Rocky)
* Fix calling of add\_tunnel\_port method from sanity checks module

- Update to version neutron-13.0.8.dev136:
* Dropping lower constraints testing (stable Rocky)

Changes in openstack-neutron:
- Update to version neutron-13.0.8.dev147:
* Improve DHCP agent's debug messages

- Update to version neutron-13.0.8.dev145:
* Use consistent filter API syntax

- Update to version neutron-13.0.8.dev144:
* Improve the CIDRs overlap check method for router add interface

- Update to version neutron-13.0.8.dev142:
* [GRE] Add possibility to create GRE tunnels over IPv6

- Update to version neutron-13.0.8.dev140:
* Fix migration from the HA to non-HA routers

- Update to version neutron-13.0.8.dev138:
* Dropping lower constraints testing (stable Rocky)
* Fix calling of add\_tunnel\_port method from sanity checks module

- Update to version neutron-13.0.8.dev136:
* Dropping lower constraints testing (stable Rocky)

Changes in openstack-neutron-gbp:
- Update to version group-based-policy-12.0.1.dev16:
* [AIM] Add extension for ERSPAN
2014.2.rc1

- Update to version group-based-policy-12.0.1.dev15:
* Fix QoS unit tests
2014.2rc1

- Update to version group-based-policy-12.0.1.dev14:
* Fix session handling
* Fix DB query call
2014.2.0rc1

- Update to version group-based-policy-12.0.1.dev11:
* Fix bug where security-group rule config doesn't reflect new VMs addition
* Fix DB performance with sessions
2014.2rc1

- Update to version group-based-policy-12.0.1.dev8:
2014.2.0rc1

- Update to version group-based-policy-12.0.1.dev11:
* Fix bug where security-group rule config doesn't reflect new VMs addition
* Fix DB performance with sessions
2014.2rc1

- Update to version group-based-policy-12.0.1.dev8:
* Fix upstream gate
2014.2.0rc1

- Update to version group-based-policy-12.0.1.dev7:
* Block qos config in floating ip
* Fix upstream gate
2014.2rc1

Changes in openstack-nova:
- Update to version nova-18.3.1.dev78:
* [stable-only] Cap bandit and make lower-constraints job non-voting

Changes in openstack-nova:
- Update to version nova-18.3.1.dev78:
* [stable-only] Cap bandit and make lower-constraints job non-voting

Changes in python-Django1:
- Add CVE-2021-3281.patch (bsc#1181379, CVE-2021-3281)
* Fixes a potential directory traversal when extracting archives

Changes in release-notes-suse-openstack-cloud:
- Update to version 9.20201214:
* Add workaround for secure boot issue when shim package is updated. Removed deprecated note about Crowbar Octavia plugin. (bsc#1179955)

Fixed packages 29

ReleasePackageFixed in
SUSE · OpenStack Cloud 9 ardana-db 9.0+git.1611600773.5f1de5f-3.22.1
SUSE · OpenStack Cloud 9 ardana-horizon 9.0+git.1610491814.38661c2-3.16.1
SUSE · OpenStack Cloud 9 ardana-logging 9.0+git.1610490922.d5f9813-3.16.1
SUSE · OpenStack Cloud 9 ardana-monasca 9.0+git.1610547641.d79ecfd-3.22.1
SUSE · OpenStack Cloud 9 ardana-opsconsole-ui 9.0+git.1611867924.eb82818-4.16.1
SUSE · OpenStack Cloud 9 ardana-osconfig 9.0+git.1610634027.5934cf8-3.25.1
SUSE · OpenStack Cloud 9 kibana 4.6.3-4.6.1
SUSE · OpenStack Cloud 9 openstack-dashboard 14.1.1~dev10-3.21.3
SUSE · OpenStack Cloud 9 openstack-manila 7.4.2~dev60-4.33.2
SUSE · OpenStack Cloud 9 openstack-neutron 13.0.8~dev147-3.34.2
SUSE · OpenStack Cloud 9 openstack-neutron-gbp 12.0.1~dev16-3.22.2
SUSE · OpenStack Cloud 9 openstack-nova 18.3.1~dev78-3.34.2
SUSE · OpenStack Cloud 9 python-Django1 1.11.29-3.18.2
SUSE · OpenStack Cloud 9 release-notes-suse-openstack-cloud 9.20201214-3.27.2
SUSE · OpenStack Cloud 9 venv-openstack-horizon 14.1.1~dev10-4.25.2
SUSE · OpenStack Cloud 9 venv-openstack-manila 7.4.2~dev60-3.27.2
SUSE · OpenStack Cloud 9 venv-openstack-neutron 13.0.8~dev147-6.25.2
SUSE · OpenStack Cloud 9 venv-openstack-nova 18.3.1~dev78-3.25.2
SUSE · OpenStack Cloud Crowbar 9 crowbar-core 6.0+git.1611320924.849e748ff-3.34.1
SUSE · OpenStack Cloud Crowbar 9 crowbar-openstack 6.0+git.1610402342.21499240d-3.31.1
SUSE · OpenStack Cloud Crowbar 9 kibana 4.6.3-4.6.1
SUSE · OpenStack Cloud Crowbar 9 openstack-dashboard 14.1.1~dev10-3.21.3
SUSE · OpenStack Cloud Crowbar 9 openstack-manila 7.4.2~dev60-4.33.2
SUSE · OpenStack Cloud Crowbar 9 openstack-neutron 13.0.8~dev147-3.34.2
SUSE · OpenStack Cloud Crowbar 9 openstack-neutron-gbp 12.0.1~dev16-3.22.2
SUSE · OpenStack Cloud Crowbar 9 openstack-nova 18.3.1~dev78-3.34.2
SUSE · OpenStack Cloud Crowbar 9 python-Django1 1.11.29-3.18.2
SUSE · OpenStack Cloud Crowbar 9 release-notes-suse-openstack-cloud 9.20201214-3.27.2
SUSE · OpenStack Cloud Crowbar 9 sleshammer 0.9.0-7.6.1

Vulnerabilities 1

  • Medium 5.3
    CVE-2021-3281 Public exploit

    Django Directory Traversal via archive.extract

    In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by "startapp --template" and "startproject --template") allows directory traversal via an archive with absolute paths or relative paths with do…

References

  • report
    https://bugzilla.suse.com/1048688
  • report
    https://bugzilla.suse.com/1149535
  • report
    https://bugzilla.suse.com/1179189
  • report
    https://bugzilla.suse.com/1179955
  • report
    https://bugzilla.suse.com/1180507
  • report
    https://bugzilla.suse.com/1181040
  • report
    https://bugzilla.suse.com/1181379
  • report
    https://bugzilla.suse.com/1181521
  • web
    https://www.suse.com/security/cve/CVE-2021-3281