SUSE-SU-2020:0311-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2020/suse-su-20200311-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0311-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2020:0311-1
Upstream
CVE (2)
Related
CVE (2)
Published
2020-02-03T17:18:32Z
Modified
2026-02-04T03:38:17Z
Summary
Security update for crowbar-core, crowbar-openstack, openstack-neutron-fwaas, rubygem-crowbar-client
Details

This update for crowbar-core, crowbar-openstack, openstack-neutron-fwaas, rubygem-crowbar-client contains the following fixes:

Security fixes for rubygem-crowbar-client:

  • CVE-2018-17954: Fixed an issue where crowbar was leaking the secret admin passwords to all nodes (bsc#1117080)

Changes in crowbar-core:

  • Update to version 4.0+git.1578392992.fabfd186c:

    • Avoid nil crash when provisioner attributes are not set (bsc#1160048)

  • Update to version 4.0+git.1578294389.acc7385d5:

    • Adding CVE-2019-16770 to the ignore list, regarding SOC-10999.

Changes in crowbar-openstack:

  • Update to version 4.0+git.1579171175.d53ab6363:
    • tempest: tempest run filters as templates (SOC-11052)
    • Add tempest filters based on services (SOC-9801)

Changes in openstack-neutron-fwaas:

  • Remove the patch that was deleting the tempest entry point and enable tempest tests.
References

Affected packages

SUSE:OpenStack Cloud 7
crowbar-core

Package

Name
crowbar-core
Purl
pkg:rpm/suse/crowbar-core&distro=SUSE%20OpenStack%20Cloud%207

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.0+git.1578392992.fabfd186c-9.63.1

Ecosystem specific 

{
    "binaries":  [
        {
            "crowbar-core":  "4.0+git.1578392992.fabfd186c-9.63.1",
            "crowbar-core-branding-upstream":  "4.0+git.1578392992.fabfd186c-9.63.1",
            "crowbar-openstack":  "4.0+git.1579171175.d53ab6363-9.68.1",
            "openstack-neutron-fwaas":  "9.0.2~dev5-4.6.1",
            "openstack-neutron-fwaas-doc":  "9.0.2~dev5-4.6.1",
            "python-neutron-fwaas":  "9.0.2~dev5-4.6.1",
            "ruby2.1-rubygem-crowbar-client":  "3.9.1-7.17.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0311-1.json"
crowbar-openstack

Package

Name
crowbar-openstack
Purl
pkg:rpm/suse/crowbar-openstack&distro=SUSE%20OpenStack%20Cloud%207

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.0+git.1579171175.d53ab6363-9.68.1

Ecosystem specific 

{
    "binaries":  [
        {
            "crowbar-core":  "4.0+git.1578392992.fabfd186c-9.63.1",
            "crowbar-core-branding-upstream":  "4.0+git.1578392992.fabfd186c-9.63.1",
            "crowbar-openstack":  "4.0+git.1579171175.d53ab6363-9.68.1",
            "openstack-neutron-fwaas":  "9.0.2~dev5-4.6.1",
            "openstack-neutron-fwaas-doc":  "9.0.2~dev5-4.6.1",
            "python-neutron-fwaas":  "9.0.2~dev5-4.6.1",
            "ruby2.1-rubygem-crowbar-client":  "3.9.1-7.17.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0311-1.json"
openstack-neutron-fwaas

Package

Name
openstack-neutron-fwaas
Purl
pkg:rpm/suse/openstack-neutron-fwaas&distro=SUSE%20OpenStack%20Cloud%207

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.0.2~dev5-4.6.1

Ecosystem specific 

{
    "binaries":  [
        {
            "crowbar-core":  "4.0+git.1578392992.fabfd186c-9.63.1",
            "crowbar-core-branding-upstream":  "4.0+git.1578392992.fabfd186c-9.63.1",
            "crowbar-openstack":  "4.0+git.1579171175.d53ab6363-9.68.1",
            "openstack-neutron-fwaas":  "9.0.2~dev5-4.6.1",
            "openstack-neutron-fwaas-doc":  "9.0.2~dev5-4.6.1",
            "python-neutron-fwaas":  "9.0.2~dev5-4.6.1",
            "ruby2.1-rubygem-crowbar-client":  "3.9.1-7.17.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0311-1.json"
openstack-neutron-fwaas-doc

Package

Name
openstack-neutron-fwaas-doc
Purl
pkg:rpm/suse/openstack-neutron-fwaas-doc&distro=SUSE%20OpenStack%20Cloud%207

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.0.2~dev5-4.6.1

Ecosystem specific 

{
    "binaries":  [
        {
            "crowbar-core":  "4.0+git.1578392992.fabfd186c-9.63.1",
            "crowbar-core-branding-upstream":  "4.0+git.1578392992.fabfd186c-9.63.1",
            "crowbar-openstack":  "4.0+git.1579171175.d53ab6363-9.68.1",
            "openstack-neutron-fwaas":  "9.0.2~dev5-4.6.1",
            "openstack-neutron-fwaas-doc":  "9.0.2~dev5-4.6.1",
            "python-neutron-fwaas":  "9.0.2~dev5-4.6.1",
            "ruby2.1-rubygem-crowbar-client":  "3.9.1-7.17.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0311-1.json"
rubygem-crowbar-client

Package

Name
rubygem-crowbar-client
Purl
pkg:rpm/suse/rubygem-crowbar-client&distro=SUSE%20OpenStack%20Cloud%207

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.9.1-7.17.1

Ecosystem specific 

{
    "binaries":  [
        {
            "crowbar-core":  "4.0+git.1578392992.fabfd186c-9.63.1",
            "crowbar-core-branding-upstream":  "4.0+git.1578392992.fabfd186c-9.63.1",
            "crowbar-openstack":  "4.0+git.1579171175.d53ab6363-9.68.1",
            "openstack-neutron-fwaas":  "9.0.2~dev5-4.6.1",
            "openstack-neutron-fwaas-doc":  "9.0.2~dev5-4.6.1",
            "python-neutron-fwaas":  "9.0.2~dev5-4.6.1",
            "ruby2.1-rubygem-crowbar-client":  "3.9.1-7.17.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0311-1.json"