{"schema_version":"1.7.3","id":"SUSE-SU-2018:2317-1","published":"2018-08-14T06:03:57Z","modified":"2026-02-04T03:13:39.555169Z","related":["CVE-2018-12099","CVE-2018-3817"],"upstream":["CVE-2018-12099","CVE-2018-3817"],"summary":"Security update for grafana, kafka, logstash, openstack-monasca-installer","details":"This update for grafana, kafka, logstash, openstack-monasca-installer fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-12099: grafana: Fix XSS vulnerabilities in dashboard links (bsc#1096985).\n- CVE-2018-3817: logstash: Fix inadvertently logging of sensitive information (bsc#1090849).\n\nBug fixes:\n\n- bsc#1095603: Disable jmxremote debugging.\n- bsc#1097847: Make time series database schema setup conditional.\n- bsc#1094448: Set log rotation options.\n- bsc#1090336: Add complete set of elasticsearch performance tunables.\n- bsc#1101366: Fix build issues with s390x, ppc64le and aarch64.\n- Fix various spec errors affecting Leap 15 and Tumbleweed \n","affected":[{"package":{"name":"grafana","ecosystem":"SUSE:HPE Helion OpenStack 8","purl":"pkg:rpm/suse/grafana&distro=HPE%20Helion%20OpenStack%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.1-4.3.1"}]}],"ecosystem_specific":{"binaries":[{"grafana":"4.5.1-4.3.1","kafka":"0.9.0.1-5.3.1","logstash":"2.4.1-5.4.1","openstack-monasca-installer":"20180622_15.06-3.6.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:2317-1.json"}},{"package":{"name":"kafka","ecosystem":"SUSE:HPE Helion OpenStack 8","purl":"pkg:rpm/suse/kafka&distro=HPE%20Helion%20OpenStack%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0.1-5.3.1"}]}],"ecosystem_specific":{"binaries":[{"grafana":"4.5.1-4.3.1","kafka":"0.9.0.1-5.3.1","logstash":"2.4.1-5.4.1","openstack-monasca-installer":"20180622_15.06-3.6.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:2317-1.json"}},{"package":{"name":"logstash","ecosystem":"SUSE:HPE Helion OpenStack 8","purl":"pkg:rpm/suse/logstash&distro=HPE%20Helion%20OpenStack%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-5.4.1"}]}],"ecosystem_specific":{"binaries":[{"grafana":"4.5.1-4.3.1","kafka":"0.9.0.1-5.3.1","logstash":"2.4.1-5.4.1","openstack-monasca-installer":"20180622_15.06-3.6.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:2317-1.json"}},{"package":{"name":"openstack-monasca-installer","ecosystem":"SUSE:HPE Helion OpenStack 8","purl":"pkg:rpm/suse/openstack-monasca-installer&distro=HPE%20Helion%20OpenStack%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180622_15.06-3.6.1"}]}],"ecosystem_specific":{"binaries":[{"grafana":"4.5.1-4.3.1","kafka":"0.9.0.1-5.3.1","logstash":"2.4.1-5.4.1","openstack-monasca-installer":"20180622_15.06-3.6.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:2317-1.json"}},{"package":{"name":"grafana","ecosystem":"SUSE:OpenStack Cloud 8","purl":"pkg:rpm/suse/grafana&distro=SUSE%20OpenStack%20Cloud%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.1-4.3.1"}]}],"ecosystem_specific":{"binaries":[{"grafana":"4.5.1-4.3.1","kafka":"0.9.0.1-5.3.1","logstash":"2.4.1-5.4.1","openstack-monasca-installer":"20180622_15.06-3.6.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:2317-1.json"}},{"package":{"name":"kafka","ecosystem":"SUSE:OpenStack Cloud 8","purl":"pkg:rpm/suse/kafka&distro=SUSE%20OpenStack%20Cloud%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0.1-5.3.1"}]}],"ecosystem_specific":{"binaries":[{"grafana":"4.5.1-4.3.1","kafka":"0.9.0.1-5.3.1","logstash":"2.4.1-5.4.1","openstack-monasca-installer":"20180622_15.06-3.6.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:2317-1.json"}},{"package":{"name":"logstash","ecosystem":"SUSE:OpenStack Cloud 8","purl":"pkg:rpm/suse/logstash&distro=SUSE%20OpenStack%20Cloud%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-5.4.1"}]}],"ecosystem_specific":{"binaries":[{"grafana":"4.5.1-4.3.1","kafka":"0.9.0.1-5.3.1","logstash":"2.4.1-5.4.1","openstack-monasca-installer":"20180622_15.06-3.6.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:2317-1.json"}},{"package":{"name":"openstack-monasca-installer","ecosystem":"SUSE:OpenStack Cloud 8","purl":"pkg:rpm/suse/openstack-monasca-installer&distro=SUSE%20OpenStack%20Cloud%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180622_15.06-3.6.1"}]}],"ecosystem_specific":{"binaries":[{"grafana":"4.5.1-4.3.1","kafka":"0.9.0.1-5.3.1","logstash":"2.4.1-5.4.1","openstack-monasca-installer":"20180622_15.06-3.6.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:2317-1.json"}},{"package":{"name":"grafana","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","purl":"pkg:rpm/suse/grafana&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.1-4.3.1"}]}],"ecosystem_specific":{"binaries":[{"grafana":"4.5.1-4.3.1","kafka":"0.9.0.1-5.3.1","logstash":"2.4.1-5.4.1","openstack-monasca-installer":"20180622_15.06-3.6.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:2317-1.json"}},{"package":{"name":"kafka","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","purl":"pkg:rpm/suse/kafka&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0.1-5.3.1"}]}],"ecosystem_specific":{"binaries":[{"grafana":"4.5.1-4.3.1","kafka":"0.9.0.1-5.3.1","logstash":"2.4.1-5.4.1","openstack-monasca-installer":"20180622_15.06-3.6.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:2317-1.json"}},{"package":{"name":"logstash","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","purl":"pkg:rpm/suse/logstash&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-5.4.1"}]}],"ecosystem_specific":{"binaries":[{"grafana":"4.5.1-4.3.1","kafka":"0.9.0.1-5.3.1","logstash":"2.4.1-5.4.1","openstack-monasca-installer":"20180622_15.06-3.6.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:2317-1.json"}},{"package":{"name":"openstack-monasca-installer","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","purl":"pkg:rpm/suse/openstack-monasca-installer&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180622_15.06-3.6.1"}]}],"ecosystem_specific":{"binaries":[{"grafana":"4.5.1-4.3.1","kafka":"0.9.0.1-5.3.1","logstash":"2.4.1-5.4.1","openstack-monasca-installer":"20180622_15.06-3.6.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:2317-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182317-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1090336"},{"type":"REPORT","url":"https://bugzilla.suse.com/1090849"},{"type":"REPORT","url":"https://bugzilla.suse.com/1094448"},{"type":"REPORT","url":"https://bugzilla.suse.com/1095603"},{"type":"REPORT","url":"https://bugzilla.suse.com/1096985"},{"type":"REPORT","url":"https://bugzilla.suse.com/1097847"},{"type":"REPORT","url":"https://bugzilla.suse.com/1101366"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-12099"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-3817"}]}