openSUSE-SU-2022:0036-1
openSUSE-SU-2022:0036-1 · Security update for zabbix
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
This update for zabbix fixes the following issues: - Updated to latest realease 4.0.37. Security issues fixed: - CVE-2022-23134: Fixed possible view of the setup pages by unauthenticated users if config file already exists (boo#1194681). - CVE-2021-27927: Fixed CSRF protection mechanism inside CControllerAuthenticationUpdate controller (boo#1183014). - CVE-2020-15803: Fixed stored XSS in the URL Widget (boo#1174253). Bugfixes: - boo#1181400: Added hardening to systemd service(s) - boo#1144018: Restructured for easier maintenance because FATE#324346
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system · applications
Productos y versiones afectados
zabbix openSUSE:Leap 15.3
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.0.37-lp153.2.3.1
Actualiza a 4.0.37-lp153.2.3.1
Fuentes originales
- https://lists.opensuse.org/archives/list/[email protected]/thread/EDFZEEJCPRPPDEWV6JULRJZVSQCMYOEY/
- https://bugzilla.suse.com/1144018
- https://bugzilla.suse.com/1174253
- https://bugzilla.suse.com/1181400
- https://bugzilla.suse.com/1183014
- https://bugzilla.suse.com/1194681
- https://www.suse.com/security/cve/CVE-2020-15803
- https://www.suse.com/security/cve/CVE-2021-27927
- https://www.suse.com/security/cve/CVE-2022-23134
- https://osv.dev/vulnerability/openSUSE-SU-2022:0036-1