FlawAtlas
Search the atlas
SUSE-RU-2021:0351-1 Not scored

Recommended update for ardana-horizon, ardana-logging, ardana-monasca, ardana-mq, ardana-osconfig, crowbar-ha, crowbar-openstack, kibana, openstack-neutron, openstack-nova, python-Django, release-notes-suse-openstack-cloud, sleshammer, spark

This update for ardana-horizon, ardana-logging, ardana-monasca, ardana-mq, ardana-osconfig, crowbar-ha, crowbar-openstack, kibana, openstack-neutron, openstack-nova, python-Django, release-notes-suse-openstack-cloud, sleshammer, spark fixes the following issues: Security fix from this update: python-Django1 - CVE-2021-3281: Fixed a potential directory traversal when extracting archives (bsc#1181379). Changes in ardana-horizon_Update: - Update to version 8.0+git.1610733160.0f577f4: * Add Fix for logfile permissions (bsc#1179189) Changes in ardana-logging_Update: - Update to version 8.0+git.1610573640.452aed1: * Remove some files from upgrade.yml (bsc#1179189) Changes in ardana-monasca_Update: - Update to version 8.0+git.1610740501.5dca121: * Add Fix for logfile permissions (bsc#1179189) Changes in ardana-mq_Update: - Update to version 8.0+git.1605176800.52cccfa: * Re-enable mirroring of fanout and reply queues (bsc#1177611) Changes in ardana-osconfig_Update: - Update to version 8.0+git.1610643571.91b88d6: * Remove SLES-12-SP3-LTSS repos (bsc#1180916) Changes in crowbar-ha: - Update to version 5.0+git.1610564036.b75ee1b: * [5.0] crowbar-pacemaker: Cluster member SSH key improvements Changes in crowbar-openstack: - Update to version 5.0+git.1610402513.08dca931e: * neutron: Fix handling of networks with non-ascii names (SOC-11429) - Update to version 5.0+git.1610372799.621afb999: * keystone: fix keystone node lookup (SOC-11333, bsc#1164838) Changes in kibana: - Add 0001-Configurable-custom-response-headers-for-server.patch (bsc#1171909, CVE-2020-10743) - Added kibana.yml symlink (bsc#1048688, FATE#323204) Changes in openstack-nova_Update: - Update to version nova-16.1.9.dev78: * [stable-only] Cap bandit to 1.6.2 Changes in python-Django_Update: - Add CVE-2021-3281.patch (bsc#1181379, CVE-2021-3281) * Fixes a potential directory traversal when extracting archives Changes in release-notes-suse-openstack-cloud: - Fix incorrect issue number for bsc#1179955 - Update to version 8.20201214: * Add workaround for secure boot issue when shim package is updated. (bsc#1179955) Changes in spark_Update: - Add _constraints to prevent build from running out of disk space. Changes in sleshammer: - Really drop etc/udev/rules.d/70-persistent-net.rules from the overlay it was still present in the tarball. (SOC-9288) - added ruby2.1-rubygem-crowbar-client providing crowbarctl

Exploit probability Not scored
Published February 9, 2021
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:OpenStack Cloud Crowbar 8 crowbar-openstack
SUSE:HPE Helion OpenStack 8 kibana
SUSE:HPE Helion OpenStack 8 venv-openstack-nova
SUSE:OpenStack Cloud 8 ardana-osconfig
SUSE:OpenStack Cloud 8 venv-openstack-neutron
SUSE:HPE Helion OpenStack 8 spark
SUSE:OpenStack Cloud Crowbar 8 openstack-neutron-doc
SUSE:HPE Helion OpenStack 8 openstack-neutron
SUSE:OpenStack Cloud 8 venv-openstack-nova
SUSE:HPE Helion OpenStack 8 ardana-logging
SUSE:HPE Helion OpenStack 8 ardana-monasca
SUSE:OpenStack Cloud Crowbar 8 python-Django
SUSE:HPE Helion OpenStack 8 ardana-mq
SUSE:OpenStack Cloud 8 ardana-logging
SUSE:OpenStack Cloud 8 release-notes-suse-openstack-cloud
SUSE:HPE Helion OpenStack 8 release-notes-hpe-helion-openstack
SUSE:HPE Helion OpenStack 8 ardana-horizon
SUSE:OpenStack Cloud 8 openstack-neutron
SUSE:OpenStack Cloud 8 kibana
SUSE:HPE Helion OpenStack 8 openstack-neutron-doc
SUSE:OpenStack Cloud Crowbar 8 release-notes-suse-openstack-cloud
SUSE:HPE Helion OpenStack 8 venv-openstack-neutron
SUSE:OpenStack Cloud Crowbar 8 sleshammer
SUSE:OpenStack Cloud Crowbar 8 openstack-nova-doc
SUSE:OpenStack Cloud 8 openstack-neutron-doc
SUSE:HPE Helion OpenStack 8 openstack-nova-doc
SUSE:OpenStack Cloud Crowbar 8 spark
SUSE:OpenStack Cloud Crowbar 8 crowbar-ha
SUSE:OpenStack Cloud 8 openstack-nova-doc
SUSE:HPE Helion OpenStack 8 venv-openstack-horizon-hpe
SUSE:OpenStack Cloud 8 ardana-mq
SUSE:OpenStack Cloud 8 ardana-horizon
SUSE:HPE Helion OpenStack 8 python-Django
SUSE:OpenStack Cloud 8 spark
SUSE:OpenStack Cloud 8 openstack-nova
SUSE:OpenStack Cloud Crowbar 8 openstack-neutron
SUSE:OpenStack Cloud 8 venv-openstack-horizon
SUSE:OpenStack Cloud Crowbar 8 kibana
SUSE:OpenStack Cloud Crowbar 8 openstack-nova
SUSE:HPE Helion OpenStack 8 openstack-nova
SUSE:OpenStack Cloud 8 ardana-monasca
SUSE:OpenStack Cloud 8 python-Django
SUSE:HPE Helion OpenStack 8 ardana-osconfig

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-RU-2021:0351-1

This update for ardana-horizon, ardana-logging, ardana-monasca, ardana-mq, ardana-osconfig, crowbar-ha, crowbar-openstack, kibana, openstack-neutron, openstack-nova, python-Django, release-notes-suse-openstack-cloud, sleshammer, spark fixes the following issues: Security fix from this update: python-Django1 - CVE-2021-3281: Fixed a potential directory traversal when extracting archives (bsc#1181379). Changes in ardana-horizon_Update: - Update to version 8.0+git.1610733160.0f577f4: * Add Fix for logfile permissions (bsc#1179189) Changes in ardana-logging_Update: - Update to version 8.0+git.1610573640.452aed1: * Remove some files from upgrade.yml (bsc#1179189) Changes in ardana-monasca_Update: - Update to version 8.0+git.1610740501.5dca121: * Add Fix for logfile permissions (bsc#1179189) Changes in ardana-mq_Update: - Update to version 8.0+git.1605176800.52cccfa: * Re-enable mirroring of fanout and reply queues (bsc#1177611) Changes in ardana-osconfig_Update: - Update to version 8.0+git.1610643571.91b88d6: * Remove SLES-12-SP3-LTSS repos (bsc#1180916) Changes in crowbar-ha: - Update to version 5.0+git.1610564036.b75ee1b: * [5.0] crowbar-pacemaker: Cluster member SSH key improvements Changes in crowbar-openstack: - Update to version 5.0+git.1610402513.08dca931e: * neutron: Fix handling of networks with non-ascii names (SOC-11429) - Update to version 5.0+git.1610372799.621afb999: * keystone: fix keystone node lookup (SOC-11333, bsc#1164838) Changes in kibana: - Add 0001-Configurable-custom-response-headers-for-server.patch (bsc#1171909, CVE-2020-10743) - Added kibana.yml symlink (bsc#1048688, FATE#323204) Changes in openstack-nova_Update: - Update to version nova-16.1.9.dev78: * [stable-only] Cap bandit to 1.6.2 Changes in python-Django_Update: - Add CVE-2021-3281.patch (bsc#1181379, CVE-2021-3281) * Fixes a potential directory traversal when extracting archives Changes in release-notes-suse-openstack-cloud: - Fix incorrect issue number for bsc#1179955 - Update to version 8.20201214: * Add workaround for secure boot issue when shim package is updated. (bsc#1179955) Changes in spark_Update: - Add _constraints to prevent build from running out of disk space. Changes in sleshammer: - Really drop etc/udev/rules.d/70-persistent-net.rules from the overlay it was still present in the tarball. (SOC-9288) - added ruby2.1-rubygem-crowbar-client providing crowbarctl

View original source

05 / REFERENCES

Further evidence