Oval Definition:	oval:org.opensuse.security:def:60588
Revision Date: 2020-12-01 Version: 1 Title: Security update for grafana, kafka, logstash, openstack-monasca-installer (Moderate) Description: This update for grafana, kafka, logstash, openstack-monasca-installer fixes the following issues: Security issues fixed: - CVE-2018-12099: grafana: Fix XSS vulnerabilities in dashboard links (bsc#1096985). - CVE-2018-3817: logstash: Fix inadvertently logging of sensitive information (bsc#1090849). Bug fixes: - bsc#1095603: Disable jmxremote debugging. - bsc#1097847: Make time series database schema setup conditional. - bsc#1094448: Set log rotation options. - bsc#1090336: Add complete set of elasticsearch performance tunables. - bsc#1101366: Fix build issues with s390x, ppc64le and aarch64. - Fix various spec errors affecting Leap 15 and Tumbleweed Family: unix Class: patch Status: Reference(s): 1009254 1043353 1043354 1047908 1050037 1050072 1050098 1050100 1050635 1051442 1052470 1052708 1052717 1052721 1052768 1052777 1052781 1054600 1055068 1055374 1055455 1055456 1057000 1060162 1062752 1071853 1072362 1072901 1074120 1074125 1074185 1074309 1075939 1076021 1076051 1090336 1090849 1093414 1093536 1094448 1094462 1095603 1096985 1097847 1101366 1107874 1109845 1115375 1135170 1140738 1141329 1141332 1141780 1141782 1141783 1141784 1141785 1141786 1141787 1141789 1150734 1154328 1154824 1156146 1157198 1160305 1160498 1161951 1164871 1169025 1169625 1170383 1170618 1170620 1171098 1171195 1171202 1171218 1171219 1171477 1171689 1171698 1171930 1172032 1172221 1172317 1174543 1175070 1175071 1175072 1175534 1176343 1176344 1176345 1176346 1176347 1176348 1176349 1176350 1176410 1176496 1176764 1177143 1177914 CVE-2013-7490 CVE-2017-10995 CVE-2017-11505 CVE-2017-11525 CVE-2017-11526 CVE-2017-11539 CVE-2017-11639 CVE-2017-11750 CVE-2017-12565 CVE-2017-12640 CVE-2017-12641 CVE-2017-12643 CVE-2017-12671 CVE-2017-12673 CVE-2017-12676 CVE-2017-12935 CVE-2017-13059 CVE-2017-13141 CVE-2017-13142 CVE-2017-13147 CVE-2017-14103 CVE-2017-14649 CVE-2017-15218 CVE-2017-17504 CVE-2017-17681 CVE-2017-17879 CVE-2017-17884 CVE-2017-17914 CVE-2017-18008 CVE-2017-18027 CVE-2017-18029 CVE-2017-9261 CVE-2017-9262 CVE-2018-10811 CVE-2018-12099 CVE-2018-16151 CVE-2018-16152 CVE-2018-17540 CVE-2018-3817 CVE-2018-5246 CVE-2018-5388 CVE-2018-5685 CVE-2019-12525 CVE-2019-12529 CVE-2019-13345 CVE-2019-14818 CVE-2019-17015 CVE-2019-17016 CVE-2019-17017 CVE-2019-17021 CVE-2019-17022 CVE-2019-17024 CVE-2019-17026 CVE-2019-20919 CVE-2019-2745 CVE-2019-2762 CVE-2019-2766 CVE-2019-2769 CVE-2019-2786 CVE-2019-2816 CVE-2019-2842 CVE-2019-3688 CVE-2019-3690 CVE-2019-3693 CVE-2019-5436 CVE-2019-7317 CVE-2020-0543 CVE-2020-10722 CVE-2020-10757 CVE-2020-11985 CVE-2020-11993 CVE-2020-12114 CVE-2020-12652 CVE-2020-12653 CVE-2020-12654 CVE-2020-12656 CVE-2020-14364 CVE-2020-15999 CVE-2020-25219 CVE-2020-25595 CVE-2020-25596 CVE-2020-25597 CVE-2020-25599 CVE-2020-25600 CVE-2020-25601 CVE-2020-25603 CVE-2020-25604 CVE-2020-26154 CVE-2020-9490 SUSE-SU-2018:0349-1 SUSE-SU-2018:2317-1 SUSE-SU-2019:1363-1 SUSE-SU-2019:2089-1 SUSE-SU-2019:3076-1 SUSE-SU-2019:3180-1 SUSE-SU-2019:3266-1 SUSE-SU-2020:0068-1 SUSE-SU-2020:1596-1 SUSE-SU-2020:2194-1 SUSE-SU-2020:2900-1 SUSE-SU-2020:2998-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.1 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information apache2-mod_php7-7.2.5-lp150.2.6 is installed OR php7-7.2.5-lp150.2.6 is installed OR php7-bcmath-7.2.5-lp150.2.6 is installed OR php7-bz2-7.2.5-lp150.2.6 is installed OR php7-calendar-7.2.5-lp150.2.6 is installed OR php7-ctype-7.2.5-lp150.2.6 is installed OR php7-curl-7.2.5-lp150.2.6 is installed OR php7-dba-7.2.5-lp150.2.6 is installed OR php7-devel-7.2.5-lp150.2.6 is installed OR php7-dom-7.2.5-lp150.2.6 is installed OR php7-embed-7.2.5-lp150.2.6 is installed OR php7-enchant-7.2.5-lp150.2.6 is installed OR php7-exif-7.2.5-lp150.2.6 is installed OR php7-fastcgi-7.2.5-lp150.2.6 is installed OR php7-fileinfo-7.2.5-lp150.2.6 is installed OR php7-firebird-7.2.5-lp150.2.6 is installed OR php7-fpm-7.2.5-lp150.2.6 is installed OR php7-ftp-7.2.5-lp150.2.6 is installed OR php7-gd-7.2.5-lp150.2.6 is installed OR php7-gettext-7.2.5-lp150.2.6 is installed OR php7-gmp-7.2.5-lp150.2.6 is installed OR php7-iconv-7.2.5-lp150.2.6 is installed OR php7-intl-7.2.5-lp150.2.6 is installed OR php7-json-7.2.5-lp150.2.6 is installed OR php7-ldap-7.2.5-lp150.2.6 is installed OR php7-mbstring-7.2.5-lp150.2.6 is installed OR php7-mysql-7.2.5-lp150.2.6 is installed OR php7-odbc-7.2.5-lp150.2.6 is installed OR php7-opcache-7.2.5-lp150.2.6 is installed OR php7-openssl-7.2.5-lp150.2.6 is installed OR php7-pcntl-7.2.5-lp150.2.6 is installed OR php7-pdo-7.2.5-lp150.2.6 is installed OR php7-pear-7.2.5-lp150.2.6 is installed OR php7-pear-Archive_Tar-7.2.5-lp150.2.6 is installed OR php7-pgsql-7.2.5-lp150.2.6 is installed OR php7-phar-7.2.5-lp150.2.6 is installed OR php7-posix-7.2.5-lp150.2.6 is installed OR php7-readline-7.2.5-lp150.2.6 is installed OR php7-shmop-7.2.5-lp150.2.6 is installed OR php7-snmp-7.2.5-lp150.2.6 is installed OR php7-soap-7.2.5-lp150.2.6 is installed OR php7-sockets-7.2.5-lp150.2.6 is installed OR php7-sodium-7.2.5-lp150.2.6 is installed OR php7-sqlite-7.2.5-lp150.2.6 is installed OR php7-sysvmsg-7.2.5-lp150.2.6 is installed OR php7-sysvsem-7.2.5-lp150.2.6 is installed OR php7-sysvshm-7.2.5-lp150.2.6 is installed OR php7-tidy-7.2.5-lp150.2.6 is installed OR php7-tokenizer-7.2.5-lp150.2.6 is installed OR php7-wddx-7.2.5-lp150.2.6 is installed OR php7-xmlreader-7.2.5-lp150.2.6 is installed OR php7-xmlrpc-7.2.5-lp150.2.6 is installed OR php7-xmlwriter-7.2.5-lp150.2.6 is installed OR php7-xsl-7.2.5-lp150.2.6 is installed OR php7-zip-7.2.5-lp150.2.6 is installed OR php7-zlib-7.2.5-lp150.2.6 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information aubio-0.4.6-lp151.6.3 is installed OR aubio-tools-0.4.6-lp151.6.3 is installed OR libaubio-devel-0.4.6-lp151.6.3 is installed OR libaubio5-0.4.6-lp151.6.3 is installed OR libaubio5-32bit-0.4.6-lp151.6.3 is installed OR python-aubio-0.4.6-lp151.6.3 is installed OR python2-aubio-0.4.6-lp151.6.3 is installed OR python3-aubio-0.4.6-lp151.6.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information ImageMagick-6.8.8.1-71.33 is installed OR libMagickCore-6_Q16-1-6.8.8.1-71.33 is installed OR libMagickWand-6_Q16-1-6.8.8.1-71.33 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information java-1_8_0-openjdk-1.8.0.222-27.35 is installed OR java-1_8_0-openjdk-demo-1.8.0.222-27.35 is installed OR java-1_8_0-openjdk-devel-1.8.0.222-27.35 is installed OR java-1_8_0-openjdk-headless-1.8.0.222-27.35 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND mailman-2.1.17-3.11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information libjavascriptcoregtk-4_0-18-2.24.0-2.38 is installed OR libwebkit2gtk-4_0-37-2.24.0-2.38 is installed OR typelib-1_0-JavaScriptCore-4_0-2.24.0-2.38 is installed OR typelib-1_0-WebKit2-4_0-2.24.0-2.38 is installed OR webkit2gtk-4_0-injected-bundles-2.24.0-2.38 is installed OR webkit2gtk3-2.24.0-2.38 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND axis-1.4-290.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4-ESPOS is installed AND Package Information java-1_8_0-ibm-1.8.0_sr6.15-30.72 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr6.15-30.72 is installed OR java-1_8_0-ibm-devel-1.8.0_sr6.15-30.72 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr6.15-30.72 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information grafana-4.5.1-4.3 is installed OR kafka-0.9.0.1-5.3 is installed OR logstash-2.4.1-5.4 is installed OR openstack-monasca-installer-20180622_15.06-3.6 is installed Definition Synopsis SUSE OpenStack Cloud 9 is installed AND Package Information xen-4.11.4_06-2.33 is installed OR xen-doc-html-4.11.4_06-2.33 is installed OR xen-libs-4.11.4_06-2.33 is installed OR xen-libs-32bit-4.11.4_06-2.33 is installed OR xen-tools-4.11.4_06-2.33 is installed OR xen-tools-domU-4.11.4_06-2.33 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND permissions-2015.09.28.1626-17.20 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 9 is installed AND Package Information mariadb-10.2.32-3.28 is installed OR mariadb-galera-10.2.32-3.28 is installed
BACK