rpm package
suse/openstack-heat-templates&distro=SUSE OpenStack Cloud Crowbar 9
pkg:rpm/suse/openstack-heat-templates&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209
Vulnerabilities (43)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-13254 | — | < 0.0.0+git.1582270132.8a20477-3.6.2 | 0.0.0+git.1582270132.8a20477-3.6.2 | Jun 3, 2020 | An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collision, and potential data leakage. | ||
| CVE-2020-12052 | — | < 0.0.0+git.1582270132.8a20477-3.6.2 | 0.0.0+git.1582270132.8a20477-3.6.2 | Apr 27, 2020 | Grafana version < 6.7.3 is vulnerable for annotation popup XSS. | ||
| CVE-2020-9402 | — | < 0.0.0+git.1582270132.8a20477-3.6.2 | 0.0.0+git.1582270132.8a20477-3.6.2 | Mar 5, 2020 | Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a tolerance parameter in GIS functions and aggregates on Oracle. By passing a suitably crafted tolerance to GIS functions and aggregates on Oracle, it was possibl | ||
| CVE-2020-1734 | — | < 0.0.0+git.1654529662.75fa04a7-3.15.1 | 0.0.0+git.1654529662.75fa04a7-3.15.1 | Mar 3, 2020 | A flaw was found in the pipe lookup plugin of ansible. Arbitrary commands can be run, when the pipe lookup plugin uses subprocess.Popen() with shell=True, by overwriting ansible facts and the variable is not escaped by quote plugin. An attacker could take advantage and run arbitr | ||
| CVE-2020-7471 | — | < 0.0.0+git.1582270132.8a20477-3.6.2 | 0.0.0+git.1582270132.8a20477-3.6.2 | Feb 3, 2020 | Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter (e.g., in Django applications that offer downloads of data as a series of rows with a user-specified column delimiter). By passing a suitabl | ||
| CVE-2019-16792 | — | < 0.0.0+git.1582270132.8a20477-3.6.2 | 0.0.0+git.1582270132.8a20477-3.6.2 | Jan 22, 2020 | Waitress through version 1.3.1 allows request smuggling by sending the Content-Length header twice. Waitress would header fold a double Content-Length header and due to being unable to cast the now comma separated value to an integer would set the Content-Length to 0 internally. | ||
| CVE-2020-5390 | — | < 0.0.0+git.1605509190.64f020b6-3.9.3 | 0.0.0+git.1605509190.64f020b6-3.9.3 | Jan 13, 2020 | PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping (XSW). The signature information and the node/object that is signed can be in different places and thus | ||
| CVE-2019-19911 | — | < 0.0.0+git.1582270132.8a20477-3.6.2 | 0.0.0+git.1582270132.8a20477-3.6.2 | Jan 5, 2020 | There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows running 32-bit Python, this results in an OverflowError or MemoryError due to the 2 GB limit. Ho | ||
| CVE-2020-5311 | — | < 0.0.0+git.1582270132.8a20477-3.6.2 | 0.0.0+git.1582270132.8a20477-3.6.2 | Jan 3, 2020 | libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow. | ||
| CVE-2020-5312 | — | < 0.0.0+git.1582270132.8a20477-3.6.2 | 0.0.0+git.1582270132.8a20477-3.6.2 | Jan 3, 2020 | libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow. | ||
| CVE-2020-5313 | — | < 0.0.0+git.1582270132.8a20477-3.6.2 | 0.0.0+git.1582270132.8a20477-3.6.2 | Jan 3, 2020 | libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow. | ||
| CVE-2019-16789 | — | < 0.0.0+git.1582270132.8a20477-3.6.2 | 0.0.0+git.1582270132.8a20477-3.6.2 | Dec 26, 2019 | In Waitress through version 1.4.0, if a proxy server is used in front of waitress, an invalid request may be sent by an attacker that bypasses the front-end and is parsed differently by waitress leading to a potential for HTTP request smuggling. Specially crafted requests contain | ||
| CVE-2019-16785 | — | < 0.0.0+git.1582270132.8a20477-3.6.2 | 0.0.0+git.1582270132.8a20477-3.6.2 | Dec 20, 2019 | Waitress through version 1.3.1 implemented a "MAY" part of the RFC7230 which states: "Although the line terminator for the start-line and header fields is the sequence CRLF, a recipient MAY recognize a single LF as a line terminator and ignore any preceding CR." Unfortunately if | ||
| CVE-2019-16786 | — | < 0.0.0+git.1582270132.8a20477-3.6.2 | 0.0.0+git.1582270132.8a20477-3.6.2 | Dec 20, 2019 | Waitress through version 1.3.1 would parse the Transfer-Encoding header and only look for a single string value, if that value was not chunked it would fall through and use the Content-Length header instead. According to the HTTP standard Transfer-Encoding should be a comma separ | ||
| CVE-2019-19844 | — | < 0.0.0+git.1582270132.8a20477-3.6.2 | 0.0.0+git.1582270132.8a20477-3.6.2 | Dec 18, 2019 | Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address (that is equal to an existing user's email address after case transformation of Unicode characters) would allow an attacker to be sent a password reset token fo | ||
| CVE-2019-11287 | — | < 0.0.0+git.1654529662.75fa04a7-3.15.1 | 0.0.0+git.1654529662.75fa04a7-3.15.1 | Nov 22, 2019 | Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is vulnerable to a denial of service attack. The "X-Reason" HTTP | ||
| CVE-2019-18874 | — | < 0.0.0+git.1553459627.948e8cc-3.3.1 | 0.0.0+git.1553459627.948e8cc-3.3.1 | Nov 12, 2019 | psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object. | ||
| CVE-2019-17134 | — | < 0.0.0+git.1553459627.948e8cc-3.3.1 | 0.0.0+git.1553459627.948e8cc-3.3.1 | Oct 8, 2019 | Amphora Images in OpenStack Octavia >=0.10.0 <2.1.2, >=3.0.0 <3.2.0, >=4.0.0 <4.1.0 allows anyone with access to the management network to bypass client-certificate based authentication and retrieve information or issue configuration commands via simple HTTP requests to the Agent | ||
| CVE-2019-16865 | — | < 0.0.0+git.1582270132.8a20477-3.6.2 | 0.0.0+git.1582270132.8a20477-3.6.2 | Oct 4, 2019 | An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very large amounts of memory or take an extremely long period of time to process the image. | ||
| CVE-2016-10745 | — | < 0.0.0+git.1605509190.64f020b6-3.9.3 | 0.0.0+git.1605509190.64f020b6-3.9.3 | Apr 8, 2019 | In Pallets Jinja before 2.8.1, str.format allows a sandbox escape. |
- CVE-2020-13254Jun 3, 2020affected < 0.0.0+git.1582270132.8a20477-3.6.2fixed 0.0.0+git.1582270132.8a20477-3.6.2
An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collision, and potential data leakage.
- CVE-2020-12052Apr 27, 2020affected < 0.0.0+git.1582270132.8a20477-3.6.2fixed 0.0.0+git.1582270132.8a20477-3.6.2
Grafana version < 6.7.3 is vulnerable for annotation popup XSS.
- CVE-2020-9402Mar 5, 2020affected < 0.0.0+git.1582270132.8a20477-3.6.2fixed 0.0.0+git.1582270132.8a20477-3.6.2
Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a tolerance parameter in GIS functions and aggregates on Oracle. By passing a suitably crafted tolerance to GIS functions and aggregates on Oracle, it was possibl
- CVE-2020-1734Mar 3, 2020affected < 0.0.0+git.1654529662.75fa04a7-3.15.1fixed 0.0.0+git.1654529662.75fa04a7-3.15.1
A flaw was found in the pipe lookup plugin of ansible. Arbitrary commands can be run, when the pipe lookup plugin uses subprocess.Popen() with shell=True, by overwriting ansible facts and the variable is not escaped by quote plugin. An attacker could take advantage and run arbitr
- CVE-2020-7471Feb 3, 2020affected < 0.0.0+git.1582270132.8a20477-3.6.2fixed 0.0.0+git.1582270132.8a20477-3.6.2
Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter (e.g., in Django applications that offer downloads of data as a series of rows with a user-specified column delimiter). By passing a suitabl
- CVE-2019-16792Jan 22, 2020affected < 0.0.0+git.1582270132.8a20477-3.6.2fixed 0.0.0+git.1582270132.8a20477-3.6.2
Waitress through version 1.3.1 allows request smuggling by sending the Content-Length header twice. Waitress would header fold a double Content-Length header and due to being unable to cast the now comma separated value to an integer would set the Content-Length to 0 internally.
- CVE-2020-5390Jan 13, 2020affected < 0.0.0+git.1605509190.64f020b6-3.9.3fixed 0.0.0+git.1605509190.64f020b6-3.9.3
PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping (XSW). The signature information and the node/object that is signed can be in different places and thus
- CVE-2019-19911Jan 5, 2020affected < 0.0.0+git.1582270132.8a20477-3.6.2fixed 0.0.0+git.1582270132.8a20477-3.6.2
There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows running 32-bit Python, this results in an OverflowError or MemoryError due to the 2 GB limit. Ho
- CVE-2020-5311Jan 3, 2020affected < 0.0.0+git.1582270132.8a20477-3.6.2fixed 0.0.0+git.1582270132.8a20477-3.6.2
libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow.
- CVE-2020-5312Jan 3, 2020affected < 0.0.0+git.1582270132.8a20477-3.6.2fixed 0.0.0+git.1582270132.8a20477-3.6.2
libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow.
- CVE-2020-5313Jan 3, 2020affected < 0.0.0+git.1582270132.8a20477-3.6.2fixed 0.0.0+git.1582270132.8a20477-3.6.2
libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow.
- CVE-2019-16789Dec 26, 2019affected < 0.0.0+git.1582270132.8a20477-3.6.2fixed 0.0.0+git.1582270132.8a20477-3.6.2
In Waitress through version 1.4.0, if a proxy server is used in front of waitress, an invalid request may be sent by an attacker that bypasses the front-end and is parsed differently by waitress leading to a potential for HTTP request smuggling. Specially crafted requests contain
- CVE-2019-16785Dec 20, 2019affected < 0.0.0+git.1582270132.8a20477-3.6.2fixed 0.0.0+git.1582270132.8a20477-3.6.2
Waitress through version 1.3.1 implemented a "MAY" part of the RFC7230 which states: "Although the line terminator for the start-line and header fields is the sequence CRLF, a recipient MAY recognize a single LF as a line terminator and ignore any preceding CR." Unfortunately if
- CVE-2019-16786Dec 20, 2019affected < 0.0.0+git.1582270132.8a20477-3.6.2fixed 0.0.0+git.1582270132.8a20477-3.6.2
Waitress through version 1.3.1 would parse the Transfer-Encoding header and only look for a single string value, if that value was not chunked it would fall through and use the Content-Length header instead. According to the HTTP standard Transfer-Encoding should be a comma separ
- CVE-2019-19844Dec 18, 2019affected < 0.0.0+git.1582270132.8a20477-3.6.2fixed 0.0.0+git.1582270132.8a20477-3.6.2
Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address (that is equal to an existing user's email address after case transformation of Unicode characters) would allow an attacker to be sent a password reset token fo
- CVE-2019-11287Nov 22, 2019affected < 0.0.0+git.1654529662.75fa04a7-3.15.1fixed 0.0.0+git.1654529662.75fa04a7-3.15.1
Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is vulnerable to a denial of service attack. The "X-Reason" HTTP
- CVE-2019-18874Nov 12, 2019affected < 0.0.0+git.1553459627.948e8cc-3.3.1fixed 0.0.0+git.1553459627.948e8cc-3.3.1
psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object.
- CVE-2019-17134Oct 8, 2019affected < 0.0.0+git.1553459627.948e8cc-3.3.1fixed 0.0.0+git.1553459627.948e8cc-3.3.1
Amphora Images in OpenStack Octavia >=0.10.0 <2.1.2, >=3.0.0 <3.2.0, >=4.0.0 <4.1.0 allows anyone with access to the management network to bypass client-certificate based authentication and retrieve information or issue configuration commands via simple HTTP requests to the Agent
- CVE-2019-16865Oct 4, 2019affected < 0.0.0+git.1582270132.8a20477-3.6.2fixed 0.0.0+git.1582270132.8a20477-3.6.2
An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very large amounts of memory or take an extremely long period of time to process the image.
- CVE-2016-10745Apr 8, 2019affected < 0.0.0+git.1605509190.64f020b6-3.9.3fixed 0.0.0+git.1605509190.64f020b6-3.9.3
In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.
Page 2 of 3