openSUSE-SU-2023:0191-1

    Dashboard / Vulnerabilities / openSUSE-SU-2023:0191-1

    openSUSE-SU-2023:0191-1

    Published: 24 Jul 2023Last Modified: 4 Feb 2026
    Upstream:
    CVE-2023-29454

    Summary: Security update for zabbix

    Details: This update for zabbix fixes the following issues: Updated to latest release 4.0.47, this version fixes CVE-2023-29454 (boo#1213338): - New Features and Improvements + ZBXNEXT-7694 Added 'utf8mb3' character set support for MySQL database + ZBX-20946 Enabled Bulgarian, Chinese (zh_TW), German, Greek, Indonesian, Romanian, Spanish and Vietnamese languages in frontend - Bug Fixes + ZBX-22987 Fixed inefficient URL schema validation + ZBX-22688 Fixed AlertScriptPath not allowing links + ZBX-22386 Fixed encoding of HTML entities in the user interface + ZBX-22858 Fixed xss vulnerability in graph item properties + ZBX-22859 Fixed validation of input parameters in action configuration form + ZBX-22622 Fixed alert script path validation + ZBX-22520 Fixed versions of integrations + ZBX-22026 Fixed SNMP agent item going to unsupported state on NULL result + ZBX-22050 Fixed spoofing X-Forwarded-For request header allowing to access Zabbix frontend in maintenance mode + ZBX-21416 Fixed check now not working on calculated items, aggregate checks and some internal items + ZBX-21449 Fixed accessibility attributes + ZBX-21306 Fixed xss in discovery rules + ZBX-21305 Fixed xss in graph + ZBX-20600 Fixed vmware hv.datastore.latency item when multiple datastores with duplicate name + ZBX-20844 Fixed external check becoming unsupported when Zabbix server or Zabbix proxy is stopped + ZBX-19789 Added SourceIP support to ldap simple checks + ZBX-20680 Fixed reflected XSS issues + ZBX-20387 Fixed default language of the setup routine for logged in superadmin users + ZBX-19652 Fixed JavaScript syntax for Internet Explorer 11 compatibility

    References: https://lists.opensuse.org/archives/list/[email protected]/thread/KRA5YTSUD2DHLEZ2TCYBAPAMLWIIAZ3X/, https://bugzilla.suse.com/1213338, https://www.suse.com/security/cve/CVE-2023-29454

    Affected packages

    Package

    Name: zabbix

    Purl: pkg:rpm/suse/zabbix&distro=SUSE%20Package%20Hub%2015%20SP4

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -4.0.47-bp155.3.3.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    openSUSE-SU-2023:0191-1 | CVE-DB