Login
Newsletter
Werbung

Sicherheit: Mangelnde Rechteprüfung in openstack-manila
Aktuelle Meldungen Distributionen
Name: Mangelnde Rechteprüfung in openstack-manila
ID: SUSE-SU-2020:0660-1
Distribution: SUSE
Plattformen: SUSE OpenStack Cloud Crowbar 8, SUSE HPE Helion Openstack 8, SUSE OpenStack Cloud 8
Datum: Do, 12. März 2020, 23:52
Referenzen: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9543
Applikationen: OpenStack

Originalnachricht


SUSE Security Update: Security update for openstack-manila
______________________________________________________________________________

Announcement ID: SUSE-SU-2020:0660-1
Rating: important
References: #1165643
Cross-References: CVE-2020-9543
Affected Products:
SUSE OpenStack Cloud Crowbar 8
SUSE OpenStack Cloud 8
HPE Helion Openstack 8
______________________________________________________________________________

An update that fixes one vulnerability is now available.

Description:

This update for openstack-manila fixes the following issues:

- CVE-2020-9543: Fixed an issue where other project users to view, update,
delete, or share resources that do not belong to them, due to a
context-free lookup of a UUID (bsc#1165643)


Patch Instructions:

To install this SUSE Security Update use the SUSE recommended installation
methods
like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- SUSE OpenStack Cloud Crowbar 8:

zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2020-660=1

- SUSE OpenStack Cloud 8:

zypper in -t patch SUSE-OpenStack-Cloud-8-2020-660=1

- HPE Helion Openstack 8:

zypper in -t patch HPE-Helion-OpenStack-8-2020-660=1



Package List:

- SUSE OpenStack Cloud Crowbar 8 (noarch):

openstack-manila-5.1.1~dev2-3.23.1
openstack-manila-api-5.1.1~dev2-3.23.1
openstack-manila-data-5.1.1~dev2-3.23.1
openstack-manila-doc-5.1.1~dev2-3.23.1
openstack-manila-scheduler-5.1.1~dev2-3.23.1
openstack-manila-share-5.1.1~dev2-3.23.1
python-manila-5.1.1~dev2-3.23.1

- SUSE OpenStack Cloud 8 (noarch):

openstack-manila-5.1.1~dev2-3.23.1
openstack-manila-api-5.1.1~dev2-3.23.1
openstack-manila-data-5.1.1~dev2-3.23.1
openstack-manila-doc-5.1.1~dev2-3.23.1
openstack-manila-scheduler-5.1.1~dev2-3.23.1
openstack-manila-share-5.1.1~dev2-3.23.1
python-manila-5.1.1~dev2-3.23.1
venv-openstack-manila-x86_64-5.1.1~dev2-12.27.1

- HPE Helion Openstack 8 (noarch):

openstack-manila-5.1.1~dev2-3.23.1
openstack-manila-api-5.1.1~dev2-3.23.1
openstack-manila-data-5.1.1~dev2-3.23.1
openstack-manila-doc-5.1.1~dev2-3.23.1
openstack-manila-scheduler-5.1.1~dev2-3.23.1
openstack-manila-share-5.1.1~dev2-3.23.1
python-manila-5.1.1~dev2-3.23.1
venv-openstack-manila-x86_64-5.1.1~dev2-12.27.1


References:

https://www.suse.com/security/cve/CVE-2020-9543.html
https://bugzilla.suse.com/1165643

_______________________________________________
sle-security-updates mailing list
sle-security-updates@lists.suse.com
http://lists.suse.com/mailman/listinfo/sle-security-updates
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung