Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE OpenStack: 2022:3338-1 Moderate: Ardana and Grafana Security Fix

suse
Calendar Grey September 22, 2022
Dist Suse Esm H88
SUSE Security Patch resolves various vulnerabilities in ardana, grafana, and openstack modules with moderate-risk corrections.
An update that fixes 7 vulnerabilities, contains one feature is now available

Summary

This update for ardana-ansible, ardana-cobbler, grafana, openstack-heat-templates, openstack-murano, python-Django, rabbitmq-server, rubygem-puma fixes the following issues: Security updates included on this update: ardana-ansible, ardana-cobbler, grafana, openstack-heat-templates, openstack-murano, rabbitmq-server: - CVE-2020-1734: Fixed vulnerability where shell was enabled by default in a pipe lookup plugin subprocess. (SOC-11662, bnc#1164139) - CVE-2021-44716: Fixed uncontrolled memory consumption in go's net/http. (bsc#1193597) - CVE-2019-11287: Fixed DoS via "X-Reason" HTTP Header in malicious Erlang format string. (bsc#1157665) grafana: - CVE-2021-39226: Fixed snapshot authentication bypass (bsc#1191454).

Topics%20covered

Topics Covered

security advisory moderate severity SQL injection patch update performance issue SUSE OpenStack

References

#1157665 #1191454 #1193597 #1197818 #1198398

#1201186 SOC-11662

Cross- CVE-2019-11287 CVE-2020-1734 CVE-2021-39226

CVE-2021-44716 CVE-2022-24790 CVE-2022-28346

CVE-2022-34265

CVSS scores:

CVE-2019-11287 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2019-11287 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2020-1734 (NVD) : 7.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L

CVE-2020-1734 (SUSE): 7.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L

CVE-2021-39226 (NVD) : 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CVE-2021-39226 (SUSE): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CVE-2021-44716 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Announcement ID: SUSE-SU-2022:3338-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate severity SQL injection patch update performance issue SUSE OpenStack

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here