SUSE-SU-2020:0311-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2020/suse-su-20200311-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0311-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2020:0311-1
Upstream
  • CVE-2018-17954
Related
Published
2020-02-03T17:18:32Z
Modified
2025-05-02T04:08:01.336932Z
Summary
Security update for crowbar-core, crowbar-openstack, openstack-neutron-fwaas, rubygem-crowbar-client
Details

This update for crowbar-core, crowbar-openstack, openstack-neutron-fwaas, rubygem-crowbar-client contains the following fixes:

Security fixes for rubygem-crowbar-client:

  • CVE-2018-17954: Fixed an issue where crowbar was leaking the secret admin passwords to all nodes (bsc#1117080)

Changes in crowbar-core: - Update to version 4.0+git.1578392992.fabfd186c: * Avoid nil crash when provisioner attributes are not set (bsc#1160048)

  • Update to version 4.0+git.1578294389.acc7385d5:
    • Adding CVE-2019-16770 to the ignore list, regarding SOC-10999.

Changes in crowbar-openstack: - Update to version 4.0+git.1579171175.d53ab6363: * tempest: tempest run filters as templates (SOC-11052) * Add tempest filters based on services (SOC-9801)

Changes in openstack-neutron-fwaas: - Remove the patch that was deleting the tempest entry point and enable tempest tests.

References

Affected packages

SUSE:OpenStack Cloud 7

crowbar-core

Package

Name
crowbar-core
Purl
pkg:rpm/suse/crowbar-core&distro=SUSE%20OpenStack%20Cloud%207

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.0+git.1578392992.fabfd186c-9.63.1

Ecosystem specific 

{
    "binaries": [
        {
            "openstack-neutron-fwaas-doc": "9.0.2~dev5-4.6.1",
            "openstack-neutron-fwaas": "9.0.2~dev5-4.6.1",
            "crowbar-core-branding-upstream": "4.0+git.1578392992.fabfd186c-9.63.1",
            "python-neutron-fwaas": "9.0.2~dev5-4.6.1",
            "ruby2.1-rubygem-crowbar-client": "3.9.1-7.17.1",
            "crowbar-openstack": "4.0+git.1579171175.d53ab6363-9.68.1",
            "crowbar-core": "4.0+git.1578392992.fabfd186c-9.63.1"
        }
    ]
}

crowbar-openstack

Package

Name
crowbar-openstack
Purl
pkg:rpm/suse/crowbar-openstack&distro=SUSE%20OpenStack%20Cloud%207

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.0+git.1579171175.d53ab6363-9.68.1

Ecosystem specific 

{
    "binaries": [
        {
            "openstack-neutron-fwaas-doc": "9.0.2~dev5-4.6.1",
            "openstack-neutron-fwaas": "9.0.2~dev5-4.6.1",
            "crowbar-core-branding-upstream": "4.0+git.1578392992.fabfd186c-9.63.1",
            "python-neutron-fwaas": "9.0.2~dev5-4.6.1",
            "ruby2.1-rubygem-crowbar-client": "3.9.1-7.17.1",
            "crowbar-openstack": "4.0+git.1579171175.d53ab6363-9.68.1",
            "crowbar-core": "4.0+git.1578392992.fabfd186c-9.63.1"
        }
    ]
}

openstack-neutron-fwaas

Package

Name
openstack-neutron-fwaas
Purl
pkg:rpm/suse/openstack-neutron-fwaas&distro=SUSE%20OpenStack%20Cloud%207

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0.2~dev5-4.6.1

Ecosystem specific 

{
    "binaries": [
        {
            "openstack-neutron-fwaas-doc": "9.0.2~dev5-4.6.1",
            "openstack-neutron-fwaas": "9.0.2~dev5-4.6.1",
            "crowbar-core-branding-upstream": "4.0+git.1578392992.fabfd186c-9.63.1",
            "python-neutron-fwaas": "9.0.2~dev5-4.6.1",
            "ruby2.1-rubygem-crowbar-client": "3.9.1-7.17.1",
            "crowbar-openstack": "4.0+git.1579171175.d53ab6363-9.68.1",
            "crowbar-core": "4.0+git.1578392992.fabfd186c-9.63.1"
        }
    ]
}

openstack-neutron-fwaas-doc

Package

Name
openstack-neutron-fwaas-doc
Purl
pkg:rpm/suse/openstack-neutron-fwaas-doc&distro=SUSE%20OpenStack%20Cloud%207

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0.2~dev5-4.6.1

Ecosystem specific 

{
    "binaries": [
        {
            "openstack-neutron-fwaas-doc": "9.0.2~dev5-4.6.1",
            "openstack-neutron-fwaas": "9.0.2~dev5-4.6.1",
            "crowbar-core-branding-upstream": "4.0+git.1578392992.fabfd186c-9.63.1",
            "python-neutron-fwaas": "9.0.2~dev5-4.6.1",
            "ruby2.1-rubygem-crowbar-client": "3.9.1-7.17.1",
            "crowbar-openstack": "4.0+git.1579171175.d53ab6363-9.68.1",
            "crowbar-core": "4.0+git.1578392992.fabfd186c-9.63.1"
        }
    ]
}

rubygem-crowbar-client

Package

Name
rubygem-crowbar-client
Purl
pkg:rpm/suse/rubygem-crowbar-client&distro=SUSE%20OpenStack%20Cloud%207

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.9.1-7.17.1

Ecosystem specific 

{
    "binaries": [
        {
            "openstack-neutron-fwaas-doc": "9.0.2~dev5-4.6.1",
            "openstack-neutron-fwaas": "9.0.2~dev5-4.6.1",
            "crowbar-core-branding-upstream": "4.0+git.1578392992.fabfd186c-9.63.1",
            "python-neutron-fwaas": "9.0.2~dev5-4.6.1",
            "ruby2.1-rubygem-crowbar-client": "3.9.1-7.17.1",
            "crowbar-openstack": "4.0+git.1579171175.d53ab6363-9.68.1",
            "crowbar-core": "4.0+git.1578392992.fabfd186c-9.63.1"
        }
    ]
}