CVE-2017-1002201

In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like < > " ' must be escaped properly. In this case, the ' character was missed. An attacker can manipulate the input to introduce additional attributes, potentially executing code.

In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like < > " ' must be escaped properly. In this case, the ' character was missed. An attacker can manipulate the input to introduce additional attributes, potentially executing code.

This update for rubygem-haml fixes the following issue:

• CVE-2017-1002201: Fixed an insufficient character escape that could have led to arbitrary code execution (bsc#1155089).

This update for caasp-openstack-heat-templates, crowbar-core, crowbar-openstack, crowbar-ui, etcd, flannel, galera-3, mariadb, mariadb-connector-c, openstack-dashboard-theme-SUSE, openstack-heat-templates, openstack-neutron, openstack-nova, openstack-quickstart, patterns-cloud, python-oslo.messaging, python-oslo.utils, python-pysaml2 fixes the following issues:

Security fix for mariadb:

• MariaDB was update to version 10.2.25 (bsc#1136035)

• CVE-2019-2628: Fixed a remote denial of service by an privileged attacker (bsc#1136035).

• CVE-2019-2627: Fixed another remote denial of service by an privileged attacker (bsc#1136035).

• CVE-2019-2614: Fixed a potential remote denial of service by an privileged attacker (bsc#1136035).

• adjust mysql-systemd-helper ('shutdown protected MySQL' section) so it checks both ping response and the pid in a process list as it can take some time till the process is terminated. Otherwise it can lead to 'found left-over process' situation when regular mariadb is started [bsc#1143215]

• update suse_skipped_tests.list

• remove client_ed25519.so plugin because it's shipped in mariadb-connector-c package (libmariadb_plugins)

• update suse_skipped_tests.list

• update to 10.2.25 GA

  • Fixes for the following security vulnerabilities:
    • 10.2.23: none
    • 10.2.24: CVE-2019-2628, CVE-2019-2627, CVE-2019-2614
    • 10.2.25: none
  • release notes and changelog: https://mariadb.com/kb/en/library/mariadb-10223-release-notes https://mariadb.com/kb/en/library/mariadb-10223-changelog https://mariadb.com/kb/en/library/mariadb-10224-release-notes https://mariadb.com/kb/en/library/mariadb-10224-changelog https://mariadb.com/kb/en/library/mariadb-10225-release-notes https://mariadb.com/kb/en/library/mariadb-10225-changelog

• remove mariadb-10.2.22-fix_path.patch that was applied upstream in mariadb 10.2.23

• remove caching_sha2_password.so because it's shipped in mariadb-connector-c package (libmariadb_plugins)

• remove xtrabackup scripts as it was replaced by mariabackup (we already removed xtrabackup requires in the first phase)

• fix reading options for multiple instances if my${INSTANCE}.cnf is used. Also remove 'umask 077' from mysql-systemd-helper that causes that new datadirs are created with wrong permissions. Set correct permissions for files created by us (mysql_upgrade_info, .run-mysql_upgrade) [bsc#1132666]

• fix build comment to not refer to openSUSE

• tracker bug [bsc#1136035]

• Update to version 1.0+git.1560518045.ad7dc6d:

  • Patching node before bootstraping

• Update to version 4.0+git.1573109906.0f62e9503:

  • Ignore CVE-2017-1002201 in CI builds (bsc#1155089)

• Update to version 4.0+git.1573038068.1e32b3205:

  • Make sure the input file with ssh key exists (SOC-10133)
  • mysql: fix WSREP sync race (SOC-10717)
  • mysql: stop service for mysql_install_db (SOC-10717)

• Update to version 4.0+git.1571404877.8edf9dd5c:

  • Do not use obsoleted --endpoint-type option with CLI
  • [4.0] Configurable timeout for Galera pre-sync

• Switch to stable/7-8 branch

• Update to 25.3.25:

  • A new Galera configuration parameter cert.optimistic_pa was added. If the parameter value is set to true, full parallelization in applying write sets is allowed as determined by certification algorithm. If set to false, no more parallelism is allowed in applying than seen on the master.
  • Support for ECDH OpenSSL engines on CentOS 6 (galera#520)
  • Fixed compilation on Debian testing and unstable (galera#516, galera#528)

• Add unescape_IPv6_bind_ip.patch

  • https://github.com/dciabrin/galera-1/commit/0f6f8aeeb09809280c956514cfd5844b8acad4f9

• remove galera-3-25.3.23-scons_fixes.patch (merged upstream)

• update to 25.3.24:

  • A support for new certification key type was added to allow more relaxed certification rules for foreign key references (galera#491).
  • New status variables were added to display the number of open transactions …

This update for ardana-cinder, ardana-cobbler, ardana-designate, ardana-extensions-example, ardana-extensions-nsx, ardana-glance, ardana-heat, ardana-input-model, ardana-ironic, ardana-keystone, ardana-logging, ardana-monasca, ardana-monasca-transform, ardana-mq, ardana-neutron, ardana-nova, ardana-octavia, ardana-osconfig, ardana-tempest, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, keepalived, mariadb, openstack-cinder, openstack-dashboard, openstack-dashboard-theme-SUSE, openstack-heat, openstack-heat-templates, openstack-horizon-plugin-designate-ui, openstack-horizon-plugin-neutron-lbaas-ui, openstack-ironic, openstack-keystone, openstack-monasca-agent, openstack-neutron, openstack-neutron-gbp, openstack-neutron-vsphere, openstack-nova, openstack-octavia, openstack-octavia-amphora-image, openstack-resource-agents, openstack-sahara, openstack-trove, python-cinderlm, python-congressclient, python-designateclient, python-ironic-lib, python-networking-cisco, python-osc-lib, python-oslo.context, python-oslo.rootwrap, python-oslo.serialization, python-oslo.service, python-stevedore, python-taskflow, rubygem-crowbar-client, rubygem-puma, venv-openstack-swift fixes the following issues: Security issues fixed:

The update of rubygem-crowbar-client, rubygem-puma fixes the following security issues:

• CVE-2018-17954: Fixed an issue where crowbar was leaking the secret admin passwords to all nodes (bsc#1117080).
• CVE-2019-16770: Fixed a denial-of-service vulnerability that was exploitable by clients sending extraneous keepalive requests (bsc#1158675).

The update of mariadb to 10.2.29 fixes several security issues:

• CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client (bsc#1162388).
• CVE-2019-18901: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client (bsc#1162388).
• CVE-2017-1002201: Fixed an issue where special characters did not escpae properly (bsc#1155089)
• CVE-2019-2737, CVE-2019-2739, CVE-2019-2740, CVE-2019-2758, CVE-2019-2805, CVE-2019-2938, CVE-2019-2974: Fixed an issue where could lead a remote attacker to cause denial of service (bsc#1156669)

Non-security issues fixed:

Changes in ardana-cinder:

• Update to version 8.0+git.1579279939.ee7da88:

  • Add option to flatten snapshots when using SES (SOC-11054)

• Update to version 8.0+git.1571846011.1a2f62b:

  • SCRD-4764 move v2.0 endpoints to v3 (SOC-9753)

Changes in ardana-cobbler:

• Update to version 8.0+git.1575037115.0326803:
  • Set root device on SLES autoyast templates (SOC-7365)

Changes in ardana-designate:

• Update to version 8.0+git.1573597788.15b7984:
  • Update gerrit location (SOC-9140)

Changes in ardana-extensions-example:

• Switch to new Gerrit Server

• Update to version 8.0+git.1534266307.db1ec28:

  • SCPL-409 Fix .gitreview for stable/pike

Changes in ardana-extensions-nsx:

• Update to version 8.0+git.1567529036.a41a037:

  • Update policy json templates for vmware-nsx (SOC-10254)

• Switch to new Gerrit Server

Changes in ardana-glance:

• Update to version 8.0+git.1571846045.ab9e3ea:
  • SCRD-4764 move v2.0 endpoints to v3 (SOC-9753)

Changes in ardana-heat:

• Update to version 8.0+git.1571777596.14dce6a:
  • SCRD-4764 remove V2.0 auth end points (SOC-9753)

Changes in ardana-input-model:

• Update to version 8.0+git.1582147997.b9ed134:

  • Enable port security extension neutron (SOC-11027)

• Update to version 8.0+git.1573658751.38e822a:

  • Move manila share to controller (SOC-10938)

Changes in ardana-ironic:

• Update to version 8.0+git.1571845225.006843d:
  • SCRD-4764 remove V2.0 auth end points (SOC-9753)

Changes in ardana-keystone:

• Update to version 8.0+git.1573147067.09e3ea0:
  • enable debug and insecure_debug on demand (SOC-10934)

Changes in ardana-logging:

• Update to version 8.0+git.1572452293.e65d714:
  • use correct Keystone v3 params bsc#1117840 (SOC-9753)

Changes in ardana-monasca:

• Update to version 8.0+git.1572527728.9b34bdf: *…