FlawAtlas
Search the atlas
SUSE-SU-2021:3728-1 Not scored

Security update for ardana-ansible, ardana-monasca, documentation-suse-openstack-cloud, openstack-ec2-api, openstack-heat-templates, python-Django, python-monasca-common, rubygem-redcarpet, rubygem-puma

This update for ardana-ansible, ardana-monasca, documentation-suse-openstack-cloud, openstack-ec2-api, openstack-heat-templates, python-Django, python-monasca-common, rubygem-redcarpet, rubygem-puma contains the following fixes: Security fixes included in this update: rubygem-redcarpet: CVE-2020-26298: Fixed XSS via HTML escaping when processing quotes. (bsc#1180837) rubygem-puma: CVE-2021-41136: Fixed build of the Java state machine for parsing HTTP. (bsc#1191681) Non-security fixes included in this update: Changes in ardana-ansible: * Patch service.py to skip blank lines. Changes in ardana-monasca: * Use specific TLS versions for monasca-thresh DB connections. (SOC-11543) Changes in documentation-suse-openstack-cloud: * CI: only run on DocBook/AsciiDoc paths, make upload fails nonfatal * DC files: Update to 2021 stylesheets (#1327) * CI: Use GitHub Actions Changes in openstack-ec2-api: * Remove jobs corresponds to obselete featuresets * OpenDev Migration Patch Changes in openstack-heat-templates: * [ussuri][goal] Update contributor documentation Changes in python-Django: - Add missing dependency for CVE-2021-31542 Changes in python-monasca-common: - Remove renderspec source service. - Retry publish once on failures. (SOC-11543)

Exploit probability Not scored
Published November 19, 2021
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:OpenStack Cloud Crowbar 8 openstack-ec2-api
SUSE:OpenStack Cloud Crowbar 8 documentation-suse-openstack-cloud-deployment
SUSE:HPE Helion OpenStack 8 documentation-hpe-helion-openstack-installation
SUSE:HPE Helion OpenStack 8 documentation-hpe-helion-openstack-security
SUSE:OpenStack Cloud Crowbar 8 python-monasca-common
SUSE:OpenStack Cloud Crowbar 8 documentation-suse-openstack-cloud-upstream-user
SUSE:OpenStack Cloud Crowbar 8 documentation-suse-openstack-cloud-supplement
SUSE:OpenStack Cloud Crowbar 8 rubygem-puma
SUSE:HPE Helion OpenStack 8 ardana-monasca
SUSE:OpenStack Cloud Crowbar 8 python-Django
SUSE:OpenStack Cloud 8 documentation-suse-openstack-cloud-planning
SUSE:OpenStack Cloud Crowbar 8 openstack-heat-templates
SUSE:OpenStack Cloud 8 documentation-suse-openstack-cloud-installation
SUSE:OpenStack Cloud 8 documentation-suse-openstack-cloud-upstream-admin
SUSE:OpenStack Cloud 8 openstack-ec2-api
SUSE:OpenStack Cloud 8 documentation-suse-openstack-cloud-supplement
SUSE:OpenStack Cloud 8 python-monasca-common
SUSE:OpenStack Cloud Crowbar 8 rubygem-redcarpet
SUSE:HPE Helion OpenStack 8 documentation-hpe-helion-openstack-opsconsole
SUSE:HPE Helion OpenStack 8 openstack-ec2-api
SUSE:HPE Helion OpenStack 8 documentation-hpe-helion-openstack-planning
SUSE:OpenStack Cloud 8 documentation-suse-openstack-cloud-upstream-user
SUSE:HPE Helion OpenStack 8 venv-openstack-horizon-hpe
SUSE:OpenStack Cloud 8 ardana-ansible
SUSE:OpenStack Cloud Crowbar 8 documentation-suse-openstack-cloud-upstream-admin
SUSE:HPE Helion OpenStack 8 python-Django
SUSE:OpenStack Cloud 8 documentation-suse-openstack-cloud-security
SUSE:HPE Helion OpenStack 8 venv-openstack-heat
SUSE:OpenStack Cloud 8 documentation-suse-openstack-cloud-opsconsole
SUSE:OpenStack Cloud 8 venv-openstack-heat
SUSE:HPE Helion OpenStack 8 venv-openstack-monasca
SUSE:HPE Helion OpenStack 8 documentation-hpe-helion-openstack-operations
SUSE:HPE Helion OpenStack 8 python-monasca-common
SUSE:HPE Helion OpenStack 8 openstack-heat-templates
SUSE:HPE Helion OpenStack 8 documentation-hpe-helion-openstack-user
SUSE:OpenStack Cloud 8 venv-openstack-horizon
SUSE:OpenStack Cloud 8 documentation-suse-openstack-cloud-user
SUSE:OpenStack Cloud 8 openstack-heat-templates
SUSE:OpenStack Cloud 8 ardana-monasca
SUSE:OpenStack Cloud 8 venv-openstack-monasca
SUSE:OpenStack Cloud 8 python-Django
SUSE:HPE Helion OpenStack 8 ardana-ansible
SUSE:OpenStack Cloud 8 documentation-suse-openstack-cloud-operations

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2021:3728-1

This update for ardana-ansible, ardana-monasca, documentation-suse-openstack-cloud, openstack-ec2-api, openstack-heat-templates, python-Django, python-monasca-common, rubygem-redcarpet, rubygem-puma contains the following fixes: Security fixes included in this update: rubygem-redcarpet: CVE-2020-26298: Fixed XSS via HTML escaping when processing quotes. (bsc#1180837) rubygem-puma: CVE-2021-41136: Fixed build of the Java state machine for parsing HTTP. (bsc#1191681) Non-security fixes included in this update: Changes in ardana-ansible: * Patch service.py to skip blank lines. Changes in ardana-monasca: * Use specific TLS versions for monasca-thresh DB connections. (SOC-11543) Changes in documentation-suse-openstack-cloud: * CI: only run on DocBook/AsciiDoc paths, make upload fails nonfatal * DC files: Update to 2021 stylesheets (#1327) * CI: Use GitHub Actions Changes in openstack-ec2-api: * Remove jobs corresponds to obselete featuresets * OpenDev Migration Patch Changes in openstack-heat-templates: * [ussuri][goal] Update contributor documentation Changes in python-Django: - Add missing dependency for CVE-2021-31542 Changes in python-monasca-common: - Remove renderspec source service. - Retry publish once on failures. (SOC-11543)

View original source

05 / REFERENCES

Further evidence