Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

SUSE: 2021:1963-1 Moderate: Crowbar and Grafana Security Fixes

suse
Calendar Grey June 11, 2021
Scroller Suse
SUSE OpenStack Cloud 7 update addresses vulnerabilities in crowbar-openstack, grafana, and additional components.
An update that fixes 10 vulnerabilities, contains one feature is now available

Summary

This update for crowbar-openstack, grafana, kibana, monasca-installer, python-Django, python-py, rubygem-activerecord-session_store contains the following fixes: Security fixes included in this update: crowbar-openstack: - CVE-2016-8611: Added rate limiting for the '/images' API POST method (bsc#1005886). grafana: - CVE-2021-27358: Fixed a denial of service via remote API call (bsc#1183803) kibana: - CVE-2017-11499: Fixed a vulnerability in nodejs, related to the HashTable implementation, which could cause a denial of service (bsc#1044849) - CVE-2017-11481: Fixed a cross site scripting vulnerability via via URL fields (bsc#1044849) python-Django: - CVE-2021-3281: Fixed a directory traversal via archive.extract() (bsc#1181379)

Topics%20covered

Topics Covered

security advisory denial of service cross site scripting moderate severity SUSE OpenStack

References

#1044849 #1179805 #1181379 #1183803 #1184148

#1185623 #1186608 #1186611 SOC-11435

Cross- CVE-2017-11481 CVE-2017-11499 CVE-2019-25025

CVE-2020-29651 CVE-2021-27358 CVE-2021-28658

CVE-2021-31542 CVE-2021-3281 CVE-2021-33203

CVE-2021-33571

CVSS scores:

CVE-2017-11481 (NVD) : 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVE-2017-11481 (SUSE): 5.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

CVE-2017-11499 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2017-11499 (SUSE): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2019-25025 (NVD) : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVE-2019-25025 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:1963-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory denial of service cross site scripting moderate severity SUSE OpenStack

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.