{"affected":[{"ecosystem_specific":{"binaries":[{"grafana":"4.5.1-4.3.1","kafka":"0.9.0.1-5.3.1","logstash":"2.4.1-5.4.1","openstack-monasca-installer":"20180622_15.06-3.6.1"}]},"package":{"ecosystem":"SUSE:HPE Helion OpenStack 8","name":"grafana","purl":"pkg:rpm/suse/grafana&distro=HPE%20Helion%20OpenStack%208"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.1-4.3.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"grafana":"4.5.1-4.3.1","kafka":"0.9.0.1-5.3.1","logstash":"2.4.1-5.4.1","openstack-monasca-installer":"20180622_15.06-3.6.1"}]},"package":{"ecosystem":"SUSE:HPE Helion OpenStack 8","name":"kafka","purl":"pkg:rpm/suse/kafka&distro=HPE%20Helion%20OpenStack%208"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.9.0.1-5.3.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"grafana":"4.5.1-4.3.1","kafka":"0.9.0.1-5.3.1","logstash":"2.4.1-5.4.1","openstack-monasca-installer":"20180622_15.06-3.6.1"}]},"package":{"ecosystem":"SUSE:HPE Helion OpenStack 8","name":"logstash","purl":"pkg:rpm/suse/logstash&distro=HPE%20Helion%20OpenStack%208"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.4.1-5.4.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"grafana":"4.5.1-4.3.1","kafka":"0.9.0.1-5.3.1","logstash":"2.4.1-5.4.1","openstack-monasca-installer":"20180622_15.06-3.6.1"}]},"package":{"ecosystem":"SUSE:HPE Helion OpenStack 8","name":"openstack-monasca-installer","purl":"pkg:rpm/suse/openstack-monasca-installer&distro=HPE%20Helion%20OpenStack%208"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"20180622_15.06-3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"grafana":"4.5.1-4.3.1","kafka":"0.9.0.1-5.3.1","logstash":"2.4.1-5.4.1","openstack-monasca-installer":"20180622_15.06-3.6.1"}]},"package":{"ecosystem":"SUSE:OpenStack Cloud 8","name":"grafana","purl":"pkg:rpm/suse/grafana&distro=SUSE%20OpenStack%20Cloud%208"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.1-4.3.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"grafana":"4.5.1-4.3.1","kafka":"0.9.0.1-5.3.1","logstash":"2.4.1-5.4.1","openstack-monasca-installer":"20180622_15.06-3.6.1"}]},"package":{"ecosystem":"SUSE:OpenStack Cloud 8","name":"kafka","purl":"pkg:rpm/suse/kafka&distro=SUSE%20OpenStack%20Cloud%208"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.9.0.1-5.3.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"grafana":"4.5.1-4.3.1","kafka":"0.9.0.1-5.3.1","logstash":"2.4.1-5.4.1","openstack-monasca-installer":"20180622_15.06-3.6.1"}]},"package":{"ecosystem":"SUSE:OpenStack Cloud 8","name":"logstash","purl":"pkg:rpm/suse/logstash&distro=SUSE%20OpenStack%20Cloud%208"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.4.1-5.4.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"grafana":"4.5.1-4.3.1","kafka":"0.9.0.1-5.3.1","logstash":"2.4.1-5.4.1","openstack-monasca-installer":"20180622_15.06-3.6.1"}]},"package":{"ecosystem":"SUSE:OpenStack Cloud 8","name":"openstack-monasca-installer","purl":"pkg:rpm/suse/openstack-monasca-installer&distro=SUSE%20OpenStack%20Cloud%208"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"20180622_15.06-3.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"grafana":"4.5.1-4.3.1","kafka":"0.9.0.1-5.3.1","logstash":"2.4.1-5.4.1","openstack-monasca-installer":"20180622_15.06-3.6.1"}]},"package":{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","name":"grafana","purl":"pkg:rpm/suse/grafana&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.5.1-4.3.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"grafana":"4.5.1-4.3.1","kafka":"0.9.0.1-5.3.1","logstash":"2.4.1-5.4.1","openstack-monasca-installer":"20180622_15.06-3.6.1"}]},"package":{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","name":"kafka","purl":"pkg:rpm/suse/kafka&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.9.0.1-5.3.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"grafana":"4.5.1-4.3.1","kafka":"0.9.0.1-5.3.1","logstash":"2.4.1-5.4.1","openstack-monasca-installer":"20180622_15.06-3.6.1"}]},"package":{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","name":"logstash","purl":"pkg:rpm/suse/logstash&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.4.1-5.4.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"grafana":"4.5.1-4.3.1","kafka":"0.9.0.1-5.3.1","logstash":"2.4.1-5.4.1","openstack-monasca-installer":"20180622_15.06-3.6.1"}]},"package":{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","name":"openstack-monasca-installer","purl":"pkg:rpm/suse/openstack-monasca-installer&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"20180622_15.06-3.6.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for grafana, kafka, logstash, openstack-monasca-installer fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-12099: grafana: Fix XSS vulnerabilities in dashboard links (bsc#1096985).\n- CVE-2018-3817: logstash: Fix inadvertently logging of sensitive information (bsc#1090849).\n\nBug fixes:\n\n- bsc#1095603: Disable jmxremote debugging.\n- bsc#1097847: Make time series database schema setup conditional.\n- bsc#1094448: Set log rotation options.\n- bsc#1090336: Add complete set of elasticsearch performance tunables.\n- bsc#1101366: Fix build issues with s390x, ppc64le and aarch64.\n- Fix various spec errors affecting Leap 15 and Tumbleweed \n","id":"SUSE-SU-2018:2317-1","modified":"2018-08-14T06:03:57Z","published":"2018-08-14T06:03:57Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182317-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1090336"},{"type":"REPORT","url":"https://bugzilla.suse.com/1090849"},{"type":"REPORT","url":"https://bugzilla.suse.com/1094448"},{"type":"REPORT","url":"https://bugzilla.suse.com/1095603"},{"type":"REPORT","url":"https://bugzilla.suse.com/1096985"},{"type":"REPORT","url":"https://bugzilla.suse.com/1097847"},{"type":"REPORT","url":"https://bugzilla.suse.com/1101366"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-12099"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-3817"}],"related":["CVE-2018-12099","CVE-2018-3817"],"summary":"Security update for grafana, kafka, logstash, openstack-monasca-installer","upstream":["CVE-2018-12099","CVE-2018-3817"]}