CVE-2019-13117

In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any other character.

In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any other character.

In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any other character.

In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any other character.

In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any other character.

Updated libxslt package fixes security vulnerabilities:

• In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any other character (CVE-2019-13117).

• In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal, leading to a read of uninitialized stack data (CVE-2019-13118).

• In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be disclosed (CVE-2019-18197).

This update for libxslt fixes the following issues:

Security issues fixed:

• CVE-2019-13118: Fixed a read of uninitialized stack data (bsc#1140101).
• CVE-2019-13117: Fixed a uninitialized read which allowed to discern whether a byte on the stack contains certain special characters (bsc#1140095).
• CVE-2019-18197: Fixed a dangling pointer in xsltCopyText which may have led to information disclosure (bsc#1154609).

This update was imported from the SUSE:SLE-15:Update update project.

These are all security issues fixed in the libxslt-devel-1.1.34-3.2 package on the GA media of openSUSE Tumbleweed.

This update for libxslt fixes the following issues:

Security issues fixed:

• CVE-2019-13118: Fixed a read of uninitialized stack data (bsc#1140101).
• CVE-2019-13117: Fixed a uninitialized read which allowed to discern whether a byte on the stack contains certain special characters (bsc#1140095).

This update for crowbar-core, crowbar-openstack, openstack-horizon-plugin-monasca-ui, openstack-monasca-api, openstack-monasca-log-api, openstack-neutron, rubygem-puma, rubygem-rest-client contains the following fixes:

Security issue fixed for rubygem-puma:

• CVE-2019-16770: Fixed a potential denial of service in Puma's reactor (bsc#1158675, jsc#SOC-10999)

Security issue fixed for rubygem-rest-client:

• CVE-2015-3448: Fixed a plain text local password disclosure. (bsc#917802)

Updates for crowbar-core:

• Update to version 4.0+git.1574788924.e4a6aeb0c:

  • Allow pacemaker remotes for upgrade (SOC-10133)

• Update to version 4.0+git.1574713660.972029d1a:

  • Ignore CVE-2019-13117 in CI builds (bsc#1157028)

Updates for crowbar-openstack:

• Update to version 4.0+git.1574869671.9c7bade2d:

  • tempest: configure Kibana version (SOC-10131)

• Update to version 4.0+git.1574764112.c260c70e5:

  • horizon: install lbaas horizon dashboard (SOC-10883)

Updates for openstack-horizon-plugin-monasca-ui:

• Refresh allow-raw-grafana-links.patch
• update to version 1.5.5~dev3
  • Replace openstack.org git:// URLs with https://
  • Fix the partial missing metrics in Create Alarm Definition flow
  • import zuul job settings from project-config
  • Fix incorrect splitting of dimension in ProxyView
  • Fix Alarm status Panel on Overview page
  • Change IntegerField to ChoiceField for notification period
  • Imported Translations from Zanata
  • Display unique metric names for alarm
  • Fix Alarm Details section in Alarm History view
  • Fix validators for creating and editing notifications
  • Center the text for the button Deterministic
  • Adding title to Filter Alarms pop-up
  • Fix misleading validation error
  • Fix nit found in monasca-ui
  • Fix Breadcrumbs
  • Fix description for name field
  • Fixing 'Create Alarm Definition' for IE11
  • Imported Translations from Zanata

Updates to openstack-monasca-api:

• added fix-metric-name-offset.patch (SOC-10131)
• removed 0001-Fix-InfluxDB-repository-list_dimension_values-to-sup.patch (merged upstream)
• update to version 1.7.1~dev18
  • Replace openstack.org git:// URLs with https://
  • import zuul job settings from project-config
  • Upgrade Apache Storm to 1.0.6
  • Zuul: Remove project name

Updates to openstack-monasca-log-api:

• added fix-tempest-region.patch (SOC-10131)
• update to version 1.4.3~dev3
  • Replace openstack.org git:// URLs with https://
  • import zuul job settings from project-config
  • Avoid tox_install.sh for constraints support

Updates to openstack-neutron:

• neutron: Remove stop action from ovs-cleanup (bsc#1157482) backport of https://review.opendev.org/#/c/695867/

This update for ardana-cinder, ardana-cobbler, ardana-designate, ardana-extensions-example, ardana-extensions-nsx, ardana-glance, ardana-heat, ardana-input-model, ardana-ironic, ardana-keystone, ardana-logging, ardana-monasca, ardana-monasca-transform, ardana-mq, ardana-neutron, ardana-nova, ardana-octavia, ardana-osconfig, ardana-tempest, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, keepalived, mariadb, openstack-cinder, openstack-dashboard, openstack-dashboard-theme-SUSE, openstack-heat, openstack-heat-templates, openstack-horizon-plugin-designate-ui, openstack-horizon-plugin-neutron-lbaas-ui, openstack-ironic, openstack-keystone, openstack-monasca-agent, openstack-neutron, openstack-neutron-gbp, openstack-neutron-vsphere, openstack-nova, openstack-octavia, openstack-octavia-amphora-image, openstack-resource-agents, openstack-sahara, openstack-trove, python-cinderlm, python-congressclient, python-designateclient, python-ironic-lib, python-networking-cisco, python-osc-lib, python-oslo.context, python-oslo.rootwrap, python-oslo.serialization, python-oslo.service, python-stevedore, python-taskflow, rubygem-crowbar-client, rubygem-puma, venv-openstack-swift fixes the following issues: Security issues fixed:

The update of rubygem-crowbar-client, rubygem-puma fixes the following security issues:

• CVE-2018-17954: Fixed an issue where crowbar was leaking the secret admin passwords to all nodes (bsc#1117080).
• CVE-2019-16770: Fixed a denial-of-service vulnerability that was exploitable by clients sending extraneous keepalive requests (bsc#1158675).

The update of mariadb to 10.2.29 fixes several security issues:

• CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client (bsc#1162388).
• CVE-2019-18901: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client (bsc#1162388).
• CVE-2017-1002201: Fixed an issue where special characters did not escpae properly (bsc#1155089)
• CVE-2019-2737, CVE-2019-2739, CVE-2019-2740, CVE-2019-2758, CVE-2019-2805, CVE-2019-2938, CVE-2019-2974: Fixed an issue where could lead a remote attacker to cause denial of service (bsc#1156669)

Non-security issues fixed:

Changes in ardana-cinder:

• Update to version 8.0+git.1579279939.ee7da88:

  • Add option to flatten snapshots when using SES (SOC-11054)

• Update to version 8.0+git.1571846011.1a2f62b:

  • SCRD-4764 move v2.0 endpoints to v3 (SOC-9753)

Changes in ardana-cobbler:

• Update to version 8.0+git.1575037115.0326803:
  • Set root device on SLES autoyast templates (SOC-7365)

Changes in ardana-designate:

• Update to version 8.0+git.1573597788.15b7984:
  • Update gerrit location (SOC-9140)

Changes in ardana-extensions-example:

• Switch to new Gerrit Server

• Update to version 8.0+git.1534266307.db1ec28:

  • SCPL-409 Fix .gitreview for stable/pike

Changes in ardana-extensions-nsx:

• Update to version 8.0+git.1567529036.a41a037:

  • Update policy json templates for vmware-nsx (SOC-10254)

• Switch to new Gerrit Server

Changes in ardana-glance:

• Update to version 8.0+git.1571846045.ab9e3ea:
  • SCRD-4764 move v2.0 endpoints to v3 (SOC-9753)

Changes in ardana-heat:

• Update to version 8.0+git.1571777596.14dce6a:
  • SCRD-4764 remove V2.0 auth end points (SOC-9753)

Changes in ardana-input-model:

• Update to version 8.0+git.1582147997.b9ed134:

  • Enable port security extension neutron (SOC-11027)

• Update to version 8.0+git.1573658751.38e822a:

  • Move manila share to controller (SOC-10938)

Changes in ardana-ironic:

• Update to version 8.0+git.1571845225.006843d:
  • SCRD-4764 remove V2.0 auth end points (SOC-9753)

Changes in ardana-keystone:

• Update to version 8.0+git.1573147067.09e3ea0:
  • enable debug and insecure_debug on demand (SOC-10934)

Changes in ardana-logging:

• Update to version 8.0+git.1572452293.e65d714:
  • use correct Keystone v3 params bsc#1117840 (SOC-9753)

Changes in ardana-monasca:

• Update to version 8.0+git.1572527728.9b34bdf: *…

This update for ardana-ansible, ardana-cinder, ardana-cobbler, ardana-db, ardana-horizon, ardana-input-model, ardana-monasca, ardana-mq, ardana-nova, ardana-octavia, ardana-osconfig, ardana-tempest, ardana-tls, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, keepalived, openstack-barbican, openstack-ceilometer, openstack-cinder, openstack-dashboard, openstack-dashboard-theme-SUSE, openstack-designate, openstack-heat, openstack-horizon-plugin-designate-ui, openstack-horizon-plugin-ironic-ui, openstack-horizon-plugin-neutron-lbaas-ui, openstack-horizon-plugin-octavia-ui, openstack-ironic, openstack-ironic-python-agent, openstack-keystone, openstack-magnum, openstack-monasca-agent, openstack-neutron, openstack-neutron-fwaas, openstack-neutron-gbp, openstack-neutron-vpnaas, openstack-nova, openstack-octavia, openstack-octavia-amphora-image, openstack-sahara, openstack-swift, python-amqp, python-ironic-lib, python-keystoneauth1, python-keystoneclient, python-keystonemiddleware, python-ovs, supportutils-plugin-suse-openstack-cloud, rubygem-crowbar-client, rubygem-puma, venv-openstack-horizon fixes the following issues:

Security issues fixed:

• CVE-2018-17954: Enabled restricted commands for Cloud 8 (bsc#1117080).
• CVE-2019-16770: Fixed a DoS vulnerability a malicious client could use to block a large amount of threads (bsc#1158675).

Non-security issues fixed:

Changes in ardana-ansible:

• Update to version 9.0+git.1581611758.f694f7d:

  • Don't run deprecated-vhost-removal on localhost (SOC-11098)

• Update to version 9.0+git.1580906085.40eb430:

  • simplify glance image upload (SOC-11089)

• Update to version 9.0+git.1580220034.3236aa5:

  • Ensure rabbitmq-server started after packages updated (SOC-11070)

• Update to version 9.0+git.1576060554.bdd84e6:

  • Fix grep for image details on service-guest-image (SOC-11012)

Changes in ardana-cinder:

• Update to version 9.0+git.1579256229.c8b4b38:

  • Add option to flatten snapshots when using SES (SOC-11054)

• Update to version 9.0+git.1574694613.04a8b74:

  • Ensure nfs-client installed for NetApp support (SOC-9005)

• Update to version 9.0+git.1574359983.c198cc9:

  • Add option for nfs_share configuration (SOC-9005)

Changes in ardana-cobbler:

• Update to version 9.0+git.1574950066.a3c4be4:

  • Set root device on SLES autoyast templates (SOC-7365)

• Update to version 9.0+git.1573845154.3545efd:

  • Change install_recommended to true (SOC-9005)

Changes in ardana-db:

• Update to version 9.0+git.1578936438.b9a9b95:

  • Switch to using override file in my.cnf.d (SOC-11043)

• Update to version 9.0+git.1578595169.57c5911:

  • account for pre-update nodes (SOC-11037)

Changes in ardana-horizon:

• Update to version 9.0+git.1575562864.8ed5e10:

  • Generate policy for Octavia dashboard (SOC-10883)

• Update to version 9.0+git.1575562860.2ce2851:

  • Fix policy configuration generation (SOC-10883)

Changes in ardana-input-model:

• Update to version 9.0+git.1580403439.d425462:

  • Enable port security extension neutron (SOC-11027)

• Update to version 9.0+git.1574953363.60cf58f:

  • octavia: use lbaasv2-proxy service plugin (SOC-10987)

Changes in ardana-monasca:

• Update to version 9.0+git.1579273481.4b8c46f:

  • Leverage schema conversion script for upgrade (SOC-10277)

• Update to version 9.0+git.1575919721.5c42222:

  • align Monasca DB schema with upstream prior to upgrade (SOC-10277)

Changes in ardana-mq:

• Update to version 9.0+git.1581024903.8e74867:

  • Ensure HA queue sync wait fails (SOC-11083)

• Update to version 9.0+git.1580934283.230ff8b:

  • Fix HA policy setting comments (SOC-10317, SOC-11082)

• Update to version 9.0+git.1580746285.da922ce:

  • Set HA policy accordingly (SOC-10317, SOC-11082)

• Update to version 9.0+git.1575405552.d84f662:

  • Change the HA policy mirror (SOC-10317)

Changes in ardana-nova:

• Update to version 9.0+git.1580304673.6c668eb:

  • Set notification_format to unversioned in nova.conf (bsc#1161721)

• Update to version…

This update for libxslt fixes the following issues:

Security issues fixed:

• CVE-2019-13118: Fixed a read of uninitialized stack data (bsc#1140101).
• CVE-2019-13117: Fixed a uninitialized read which allowed to discern whether a byte on the stack contains certain special characters (bsc#1140095).
• CVE-2019-18197: Fixed a dangling pointer in xsltCopyText which may have led to information disclosure (bsc#1154609).

It was discovered that Libxslt incorrectly handled certain documents. An attacker could possibly use this issue to access sensitive information. This issue not affected Ubuntu 19.10. (CVE-2019-13117, CVE-2019-13118)

It was discovered that Libxslt incorrectly handled certain documents. An attacker could possibly use this issue to execute arbitrary code. (CVE-2019-18197)