Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2022:0126-1 Important Update For OpenStack, Spark, Zookeeper

suse
Calendar Grey January 19, 2022
Dist Suse Esm H88
SUSE has issued a critical security patch that resolves an issue found in openstack-monasca-agent as well as various other modules.
An update that fixes one vulnerability is now available

Summary

This update for openstack-monasca-agent, spark, spark-kit, zookeeper fixes the following issues: - CVE-2021-4104: Remove JMSAppender from log4j jars (bsc#1193662) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 8: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2022-126=1 - SUSE OpenStack Cloud 8: zypper in -t patch SUSE-OpenStack-Cloud-8-2022-126=1 - HPE Helion Openstack 8: zypper in -t patch HPE-Helion-OpenStack-8-2022-126=1 Package List: - SUSE OpenStack Cloud Crowbar 8 (noarch): openstack-monasca-agent-2.2.6~dev4-3.24.1 python-monasca-agent-2.2.6~dev4-3.24.1 spark-1.6.3-8.9.2

Topics%20covered

Topics Covered

security advisory update important openstack zookeeper log4j spark

References

#1193662

Cross- CVE-2021-4104

CVSS scores:

CVE-2021-4104 (SUSE): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected Products:

SUSE OpenStack Cloud Crowbar 8

SUSE OpenStack Cloud 8

HPE Helion Openstack 8

https://www.suse.com/security/cve/CVE-2021-4104.html

https://bugzilla.suse.com/1193662

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2022:0126-1
Rating: important

Topics%20covered

Topics Covered

security advisory update important openstack zookeeper log4j spark

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here