{"id":"SUSE-SU-2022:0126-1","summary":"Security update for openstack-monasca-agent, spark, spark-kit, zookeeper","details":"This update for openstack-monasca-agent, spark, spark-kit, zookeeper fixes the following issues:\n\n- CVE-2021-4104: Remove JMSAppender from log4j jars (bsc#1193662)\n","modified":"2026-03-11T07:18:29.783908Z","published":"2022-01-19T08:23:30Z","related":["CVE-2021-4104"],"upstream":["CVE-2021-4104"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220126-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1193662"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-4104"}],"affected":[{"package":{"name":"openstack-monasca-agent","ecosystem":"SUSE:HPE Helion OpenStack 8","purl":"pkg:rpm/suse/openstack-monasca-agent&distro=HPE%20Helion%20OpenStack%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6~dev4-3.24.1"}]}],"ecosystem_specific":{"binaries":[{"python-monasca-agent":"2.2.6~dev4-3.24.1","spark":"1.6.3-8.9.2","venv-openstack-monasca-x86_64":"2.2.2~dev1-11.37.1","zookeeper-server":"3.4.10-3.12.1","openstack-monasca-agent":"2.2.6~dev4-3.24.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0126-1.json"}},{"package":{"name":"spark","ecosystem":"SUSE:HPE Helion OpenStack 8","purl":"pkg:rpm/suse/spark&distro=HPE%20Helion%20OpenStack%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-8.9.2"}]}],"ecosystem_specific":{"binaries":[{"openstack-monasca-agent":"2.2.6~dev4-3.24.1","python-monasca-agent":"2.2.6~dev4-3.24.1","spark":"1.6.3-8.9.2","venv-openstack-monasca-x86_64":"2.2.2~dev1-11.37.1","zookeeper-server":"3.4.10-3.12.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0126-1.json"}},{"package":{"name":"venv-openstack-monasca","ecosystem":"SUSE:HPE Helion OpenStack 8","purl":"pkg:rpm/suse/venv-openstack-monasca&distro=HPE%20Helion%20OpenStack%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2~dev1-11.37.1"}]}],"ecosystem_specific":{"binaries":[{"openstack-monasca-agent":"2.2.6~dev4-3.24.1","python-monasca-agent":"2.2.6~dev4-3.24.1","spark":"1.6.3-8.9.2","venv-openstack-monasca-x86_64":"2.2.2~dev1-11.37.1","zookeeper-server":"3.4.10-3.12.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0126-1.json"}},{"package":{"name":"zookeeper","ecosystem":"SUSE:HPE Helion OpenStack 8","purl":"pkg:rpm/suse/zookeeper&distro=HPE%20Helion%20OpenStack%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-3.12.1"}]}],"ecosystem_specific":{"binaries":[{"spark":"1.6.3-8.9.2","venv-openstack-monasca-x86_64":"2.2.2~dev1-11.37.1","zookeeper-server":"3.4.10-3.12.1","openstack-monasca-agent":"2.2.6~dev4-3.24.1","python-monasca-agent":"2.2.6~dev4-3.24.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0126-1.json"}},{"package":{"name":"openstack-monasca-agent","ecosystem":"SUSE:OpenStack Cloud 8","purl":"pkg:rpm/suse/openstack-monasca-agent&distro=SUSE%20OpenStack%20Cloud%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6~dev4-3.24.1"}]}],"ecosystem_specific":{"binaries":[{"openstack-monasca-agent":"2.2.6~dev4-3.24.1","python-monasca-agent":"2.2.6~dev4-3.24.1","spark":"1.6.3-8.9.2","venv-openstack-monasca-x86_64":"2.2.2~dev1-11.37.1","zookeeper-server":"3.4.10-3.12.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0126-1.json"}},{"package":{"name":"spark","ecosystem":"SUSE:OpenStack Cloud 8","purl":"pkg:rpm/suse/spark&distro=SUSE%20OpenStack%20Cloud%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-8.9.2"}]}],"ecosystem_specific":{"binaries":[{"openstack-monasca-agent":"2.2.6~dev4-3.24.1","python-monasca-agent":"2.2.6~dev4-3.24.1","spark":"1.6.3-8.9.2","venv-openstack-monasca-x86_64":"2.2.2~dev1-11.37.1","zookeeper-server":"3.4.10-3.12.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0126-1.json"}},{"package":{"name":"venv-openstack-monasca","ecosystem":"SUSE:OpenStack Cloud 8","purl":"pkg:rpm/suse/venv-openstack-monasca&distro=SUSE%20OpenStack%20Cloud%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2~dev1-11.37.1"}]}],"ecosystem_specific":{"binaries":[{"openstack-monasca-agent":"2.2.6~dev4-3.24.1","python-monasca-agent":"2.2.6~dev4-3.24.1","spark":"1.6.3-8.9.2","venv-openstack-monasca-x86_64":"2.2.2~dev1-11.37.1","zookeeper-server":"3.4.10-3.12.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0126-1.json"}},{"package":{"name":"zookeeper","ecosystem":"SUSE:OpenStack Cloud 8","purl":"pkg:rpm/suse/zookeeper&distro=SUSE%20OpenStack%20Cloud%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-3.12.1"}]}],"ecosystem_specific":{"binaries":[{"venv-openstack-monasca-x86_64":"2.2.2~dev1-11.37.1","zookeeper-server":"3.4.10-3.12.1","openstack-monasca-agent":"2.2.6~dev4-3.24.1","python-monasca-agent":"2.2.6~dev4-3.24.1","spark":"1.6.3-8.9.2"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0126-1.json"}},{"package":{"name":"openstack-monasca-agent","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","purl":"pkg:rpm/suse/openstack-monasca-agent&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.6~dev4-3.24.1"}]}],"ecosystem_specific":{"binaries":[{"openstack-monasca-agent":"2.2.6~dev4-3.24.1","python-monasca-agent":"2.2.6~dev4-3.24.1","spark":"1.6.3-8.9.2","zookeeper-server":"3.4.10-3.12.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0126-1.json"}},{"package":{"name":"spark","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","purl":"pkg:rpm/suse/spark&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-8.9.2"}]}],"ecosystem_specific":{"binaries":[{"openstack-monasca-agent":"2.2.6~dev4-3.24.1","python-monasca-agent":"2.2.6~dev4-3.24.1","spark":"1.6.3-8.9.2","zookeeper-server":"3.4.10-3.12.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0126-1.json"}},{"package":{"name":"zookeeper","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","purl":"pkg:rpm/suse/zookeeper&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-3.12.1"}]}],"ecosystem_specific":{"binaries":[{"openstack-monasca-agent":"2.2.6~dev4-3.24.1","python-monasca-agent":"2.2.6~dev4-3.24.1","spark":"1.6.3-8.9.2","zookeeper-server":"3.4.10-3.12.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0126-1.json"}}],"schema_version":"1.7.5"}