SUSE-SU-2022:3339-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2022/suse-su-20223339-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3339-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2022:3339-1
Upstream
CVE (6)
Related
CVE (6)
Published
2022-09-22T14:16:26Z
Modified
2026-02-04T03:36:53Z
Summary
Security update for ardana-ansible, ardana-cobbler, ardana-tempest, grafana, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-neutron-gbp, openstack-nova, python-Django1, rabbitmq-server, rubygem-puma
Details

This update for ardana-ansible, ardana-cobbler, ardana-tempest, grafana, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-neutron-gbp, openstack-nova, python-Django1, rabbitmq-server, rubygem-puma fixes the following issues:

Security fixes included in this update:

ardana-ansible:

  • CVE-2020-1734: Fixed vulnerability where shell was enabled by default in a pipe lookup plugin subprocess (SOC-11662, bnc#1164139). grafana:
  • CVE-2021-39226: Fixed snapshot authentication bypass (bsc#1191454). rabbitmq-server:
  • CVE-2019-11287: Fixed DoS via 'X-Reason' HTTP Header in malicious Erlang format string (bsc#1157665). rubygem-puma:
  • CVE-2022-24790: Fixed HTTP request smuggling (bsc#1197818). python-Django1:
  • CVE-2022-28346: Fixed vulnerability allowing SQL injection in QuerySet.annotate(),aggregate() and extra() (bsc#1198398).
  • CVE-2022-34265: Fixed vulnerability allowing SQL injection via Trunc(kind) and Extract(lookup_name) arguments (bsc#1201186). Bugfixes:
  • Disabled two barbican tests (SOC-8764).

Non-security fixes included on this update:

Changes in ardana-ansible:

  • Update to version 9.0+git.1660748476.c118d23:
    • Mitigate CVE-2020-1734 (SOC-11662)

Changes in ardana-cobbler:

  • Update to version 9.0+git.1660747489.119efcd:
    • Mitigate CVE-2020-1734 (SOC-11662)

Changes in ardana-tempest:

  • Update to version 9.0+git.1651855288.a2341ad:
    • Disable two barbican tests (SOC-8764)

Changes in grafana:

  • Add CVE-2021-39226 patch (bsc#1191454, CVE-2021-39226)
    • snapshot authentication bypass

Changes in openstack-heat-templates:

  • Update to version 0.0.0+git.1654529662.75fa04a7:
    • doc: Comment out language option

Changes in openstack-horizon-plugin-gbp-ui:

  • Update to version group-based-policy-ui-14.0.1.dev4:
    • remove legacy servicechain code

Changes in openstack-neutron-gbp:

  • Update to version group-based-policy-14.0.1.dev46:

    • Remove logs 2014.2.rc1

  • Update to version group-based-policy-14.0.1.dev45:

    • FIP Status active after dissociate

  • Update to version group-based-policy-14.0.1.dev43:

    • fixed apic synchronization state for multiple erspan session

  • Update to version group-based-policy-14.0.1.dev41:

    • Remove_legacy_service_chain_code(2)

  • Update to version group-based-policy-14.0.1.dev39:

    • data-migrations spelling fixes 2014.2rc1

  • Update to version group-based-policy-14.0.1.dev38:

    • Adding support for address group feature in upstream

  • Update to version group-based-policy-14.0.1.dev36:

    • Add support for yoga 2014.2.rc1

  • Update to version group-based-policy-14.0.1.dev35:

    • Removed_legacy_service_chain_code 2014.2rc1

Changes in openstack-nova:

  • Update to version nova-18.3.1.dev92:
    • [stable-only] Drop lower-constraints job

Changes in openstack-nova:

  • Update to version nova-18.3.1.dev92:
    • [stable-only] Drop lower-constraints job

Changes in python-Djanjo1:

  • Rename Django-1.11.29.tar.gz.asc to Django-1.11.29.tar.gz.checksums.txt to avoid source_validator incorrectly trying to use it as a detached signature file for the sources tarball.

  • Add CVE-2022-28346 patch (bsc#1198398, CVE-2022-28346)

    • Potential SQL injection in QuerySet.annotate(),aggregate() and extra()

  • Add CVE-2022-34265 patch (bsc#1201186, CVE-2022-34265)

    • SQL injection via Trunc(kind) and Extract(lookup_name) arguments

Changes in rabbitmq-server:

  • add explanation-format patch to fix CVE-2019-11287 (bsc#1157665)

Changes in rubygem-puma:

  • Add CVE-2022-24790 patch (bsc#1197818, CVE-2022-24790).
References

Affected packages

SUSE:OpenStack Cloud 9
ardana-ansible

Package

Name
ardana-ansible
Purl
pkg:rpm/suse/ardana-ansible&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.0+git.1660748476.c118d23-3.32.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ardana-ansible":  "9.0+git.1660748476.c118d23-3.32.1",
            "ardana-cobbler":  "9.0+git.1660747489.119efcd-3.19.1",
            "ardana-tempest":  "9.0+git.1651855288.a2341ad-3.22.1",
            "grafana":  "6.7.4-3.29.1",
            "openstack-heat-templates":  "0.0.0+git.1654529662.75fa04a7-3.15.1",
            "openstack-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "openstack-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "openstack-nova":  "18.3.1~dev92-3.43.1",
            "openstack-nova-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-cells":  "18.3.1~dev92-3.43.1",
            "openstack-nova-compute":  "18.3.1~dev92-3.43.1",
            "openstack-nova-conductor":  "18.3.1~dev92-3.43.1",
            "openstack-nova-console":  "18.3.1~dev92-3.43.1",
            "openstack-nova-novncproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-placement-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-scheduler":  "18.3.1~dev92-3.43.1",
            "openstack-nova-serialproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-vncproxy":  "18.3.1~dev92-3.43.1",
            "python-Django1":  "1.11.29-3.40.1",
            "python-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "python-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "python-nova":  "18.3.1~dev92-3.43.1",
            "rabbitmq-server":  "3.6.16-4.3.1",
            "rabbitmq-server-plugins":  "3.6.16-4.3.1",
            "venv-openstack-heat-x86_64":  "11.0.4~dev4-3.37.1",
            "venv-openstack-horizon-x86_64":  "14.1.1~dev11-4.41.1",
            "venv-openstack-neutron-x86_64":  "13.0.8~dev206-6.41.1",
            "venv-openstack-nova-x86_64":  "18.3.1~dev92-3.41.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3339-1.json"
ardana-cobbler

Package

Name
ardana-cobbler
Purl
pkg:rpm/suse/ardana-cobbler&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.0+git.1660747489.119efcd-3.19.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ardana-ansible":  "9.0+git.1660748476.c118d23-3.32.1",
            "ardana-cobbler":  "9.0+git.1660747489.119efcd-3.19.1",
            "ardana-tempest":  "9.0+git.1651855288.a2341ad-3.22.1",
            "grafana":  "6.7.4-3.29.1",
            "openstack-heat-templates":  "0.0.0+git.1654529662.75fa04a7-3.15.1",
            "openstack-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "openstack-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "openstack-nova":  "18.3.1~dev92-3.43.1",
            "openstack-nova-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-cells":  "18.3.1~dev92-3.43.1",
            "openstack-nova-compute":  "18.3.1~dev92-3.43.1",
            "openstack-nova-conductor":  "18.3.1~dev92-3.43.1",
            "openstack-nova-console":  "18.3.1~dev92-3.43.1",
            "openstack-nova-novncproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-placement-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-scheduler":  "18.3.1~dev92-3.43.1",
            "openstack-nova-serialproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-vncproxy":  "18.3.1~dev92-3.43.1",
            "python-Django1":  "1.11.29-3.40.1",
            "python-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "python-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "python-nova":  "18.3.1~dev92-3.43.1",
            "rabbitmq-server":  "3.6.16-4.3.1",
            "rabbitmq-server-plugins":  "3.6.16-4.3.1",
            "venv-openstack-heat-x86_64":  "11.0.4~dev4-3.37.1",
            "venv-openstack-horizon-x86_64":  "14.1.1~dev11-4.41.1",
            "venv-openstack-neutron-x86_64":  "13.0.8~dev206-6.41.1",
            "venv-openstack-nova-x86_64":  "18.3.1~dev92-3.41.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3339-1.json"
ardana-tempest

Package

Name
ardana-tempest
Purl
pkg:rpm/suse/ardana-tempest&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.0+git.1651855288.a2341ad-3.22.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ardana-ansible":  "9.0+git.1660748476.c118d23-3.32.1",
            "ardana-cobbler":  "9.0+git.1660747489.119efcd-3.19.1",
            "ardana-tempest":  "9.0+git.1651855288.a2341ad-3.22.1",
            "grafana":  "6.7.4-3.29.1",
            "openstack-heat-templates":  "0.0.0+git.1654529662.75fa04a7-3.15.1",
            "openstack-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "openstack-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "openstack-nova":  "18.3.1~dev92-3.43.1",
            "openstack-nova-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-cells":  "18.3.1~dev92-3.43.1",
            "openstack-nova-compute":  "18.3.1~dev92-3.43.1",
            "openstack-nova-conductor":  "18.3.1~dev92-3.43.1",
            "openstack-nova-console":  "18.3.1~dev92-3.43.1",
            "openstack-nova-novncproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-placement-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-scheduler":  "18.3.1~dev92-3.43.1",
            "openstack-nova-serialproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-vncproxy":  "18.3.1~dev92-3.43.1",
            "python-Django1":  "1.11.29-3.40.1",
            "python-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "python-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "python-nova":  "18.3.1~dev92-3.43.1",
            "rabbitmq-server":  "3.6.16-4.3.1",
            "rabbitmq-server-plugins":  "3.6.16-4.3.1",
            "venv-openstack-heat-x86_64":  "11.0.4~dev4-3.37.1",
            "venv-openstack-horizon-x86_64":  "14.1.1~dev11-4.41.1",
            "venv-openstack-neutron-x86_64":  "13.0.8~dev206-6.41.1",
            "venv-openstack-nova-x86_64":  "18.3.1~dev92-3.41.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3339-1.json"
grafana

Package

Name
grafana
Purl
pkg:rpm/suse/grafana&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.7.4-3.29.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ardana-ansible":  "9.0+git.1660748476.c118d23-3.32.1",
            "ardana-cobbler":  "9.0+git.1660747489.119efcd-3.19.1",
            "ardana-tempest":  "9.0+git.1651855288.a2341ad-3.22.1",
            "grafana":  "6.7.4-3.29.1",
            "openstack-heat-templates":  "0.0.0+git.1654529662.75fa04a7-3.15.1",
            "openstack-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "openstack-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "openstack-nova":  "18.3.1~dev92-3.43.1",
            "openstack-nova-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-cells":  "18.3.1~dev92-3.43.1",
            "openstack-nova-compute":  "18.3.1~dev92-3.43.1",
            "openstack-nova-conductor":  "18.3.1~dev92-3.43.1",
            "openstack-nova-console":  "18.3.1~dev92-3.43.1",
            "openstack-nova-novncproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-placement-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-scheduler":  "18.3.1~dev92-3.43.1",
            "openstack-nova-serialproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-vncproxy":  "18.3.1~dev92-3.43.1",
            "python-Django1":  "1.11.29-3.40.1",
            "python-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "python-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "python-nova":  "18.3.1~dev92-3.43.1",
            "rabbitmq-server":  "3.6.16-4.3.1",
            "rabbitmq-server-plugins":  "3.6.16-4.3.1",
            "venv-openstack-heat-x86_64":  "11.0.4~dev4-3.37.1",
            "venv-openstack-horizon-x86_64":  "14.1.1~dev11-4.41.1",
            "venv-openstack-neutron-x86_64":  "13.0.8~dev206-6.41.1",
            "venv-openstack-nova-x86_64":  "18.3.1~dev92-3.41.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3339-1.json"
openstack-heat-templates

Package

Name
openstack-heat-templates
Purl
pkg:rpm/suse/openstack-heat-templates&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.0.0+git.1654529662.75fa04a7-3.15.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ardana-ansible":  "9.0+git.1660748476.c118d23-3.32.1",
            "ardana-cobbler":  "9.0+git.1660747489.119efcd-3.19.1",
            "ardana-tempest":  "9.0+git.1651855288.a2341ad-3.22.1",
            "grafana":  "6.7.4-3.29.1",
            "openstack-heat-templates":  "0.0.0+git.1654529662.75fa04a7-3.15.1",
            "openstack-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "openstack-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "openstack-nova":  "18.3.1~dev92-3.43.1",
            "openstack-nova-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-cells":  "18.3.1~dev92-3.43.1",
            "openstack-nova-compute":  "18.3.1~dev92-3.43.1",
            "openstack-nova-conductor":  "18.3.1~dev92-3.43.1",
            "openstack-nova-console":  "18.3.1~dev92-3.43.1",
            "openstack-nova-novncproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-placement-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-scheduler":  "18.3.1~dev92-3.43.1",
            "openstack-nova-serialproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-vncproxy":  "18.3.1~dev92-3.43.1",
            "python-Django1":  "1.11.29-3.40.1",
            "python-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "python-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "python-nova":  "18.3.1~dev92-3.43.1",
            "rabbitmq-server":  "3.6.16-4.3.1",
            "rabbitmq-server-plugins":  "3.6.16-4.3.1",
            "venv-openstack-heat-x86_64":  "11.0.4~dev4-3.37.1",
            "venv-openstack-horizon-x86_64":  "14.1.1~dev11-4.41.1",
            "venv-openstack-neutron-x86_64":  "13.0.8~dev206-6.41.1",
            "venv-openstack-nova-x86_64":  "18.3.1~dev92-3.41.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3339-1.json"
openstack-horizon-plugin-gbp-ui

Package

Name
openstack-horizon-plugin-gbp-ui
Purl
pkg:rpm/suse/openstack-horizon-plugin-gbp-ui&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
14.0.1~dev4-3.12.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ardana-ansible":  "9.0+git.1660748476.c118d23-3.32.1",
            "ardana-cobbler":  "9.0+git.1660747489.119efcd-3.19.1",
            "ardana-tempest":  "9.0+git.1651855288.a2341ad-3.22.1",
            "grafana":  "6.7.4-3.29.1",
            "openstack-heat-templates":  "0.0.0+git.1654529662.75fa04a7-3.15.1",
            "openstack-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "openstack-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "openstack-nova":  "18.3.1~dev92-3.43.1",
            "openstack-nova-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-cells":  "18.3.1~dev92-3.43.1",
            "openstack-nova-compute":  "18.3.1~dev92-3.43.1",
            "openstack-nova-conductor":  "18.3.1~dev92-3.43.1",
            "openstack-nova-console":  "18.3.1~dev92-3.43.1",
            "openstack-nova-novncproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-placement-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-scheduler":  "18.3.1~dev92-3.43.1",
            "openstack-nova-serialproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-vncproxy":  "18.3.1~dev92-3.43.1",
            "python-Django1":  "1.11.29-3.40.1",
            "python-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "python-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "python-nova":  "18.3.1~dev92-3.43.1",
            "rabbitmq-server":  "3.6.16-4.3.1",
            "rabbitmq-server-plugins":  "3.6.16-4.3.1",
            "venv-openstack-heat-x86_64":  "11.0.4~dev4-3.37.1",
            "venv-openstack-horizon-x86_64":  "14.1.1~dev11-4.41.1",
            "venv-openstack-neutron-x86_64":  "13.0.8~dev206-6.41.1",
            "venv-openstack-nova-x86_64":  "18.3.1~dev92-3.41.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3339-1.json"
openstack-neutron-gbp

Package

Name
openstack-neutron-gbp
Purl
pkg:rpm/suse/openstack-neutron-gbp&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
14.0.1~dev46-3.34.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ardana-ansible":  "9.0+git.1660748476.c118d23-3.32.1",
            "ardana-cobbler":  "9.0+git.1660747489.119efcd-3.19.1",
            "ardana-tempest":  "9.0+git.1651855288.a2341ad-3.22.1",
            "grafana":  "6.7.4-3.29.1",
            "openstack-heat-templates":  "0.0.0+git.1654529662.75fa04a7-3.15.1",
            "openstack-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "openstack-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "openstack-nova":  "18.3.1~dev92-3.43.1",
            "openstack-nova-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-cells":  "18.3.1~dev92-3.43.1",
            "openstack-nova-compute":  "18.3.1~dev92-3.43.1",
            "openstack-nova-conductor":  "18.3.1~dev92-3.43.1",
            "openstack-nova-console":  "18.3.1~dev92-3.43.1",
            "openstack-nova-novncproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-placement-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-scheduler":  "18.3.1~dev92-3.43.1",
            "openstack-nova-serialproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-vncproxy":  "18.3.1~dev92-3.43.1",
            "python-Django1":  "1.11.29-3.40.1",
            "python-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "python-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "python-nova":  "18.3.1~dev92-3.43.1",
            "rabbitmq-server":  "3.6.16-4.3.1",
            "rabbitmq-server-plugins":  "3.6.16-4.3.1",
            "venv-openstack-heat-x86_64":  "11.0.4~dev4-3.37.1",
            "venv-openstack-horizon-x86_64":  "14.1.1~dev11-4.41.1",
            "venv-openstack-neutron-x86_64":  "13.0.8~dev206-6.41.1",
            "venv-openstack-nova-x86_64":  "18.3.1~dev92-3.41.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3339-1.json"
openstack-nova

Package

Name
openstack-nova
Purl
pkg:rpm/suse/openstack-nova&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
18.3.1~dev92-3.43.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ardana-ansible":  "9.0+git.1660748476.c118d23-3.32.1",
            "ardana-cobbler":  "9.0+git.1660747489.119efcd-3.19.1",
            "ardana-tempest":  "9.0+git.1651855288.a2341ad-3.22.1",
            "grafana":  "6.7.4-3.29.1",
            "openstack-heat-templates":  "0.0.0+git.1654529662.75fa04a7-3.15.1",
            "openstack-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "openstack-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "openstack-nova":  "18.3.1~dev92-3.43.1",
            "openstack-nova-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-cells":  "18.3.1~dev92-3.43.1",
            "openstack-nova-compute":  "18.3.1~dev92-3.43.1",
            "openstack-nova-conductor":  "18.3.1~dev92-3.43.1",
            "openstack-nova-console":  "18.3.1~dev92-3.43.1",
            "openstack-nova-novncproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-placement-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-scheduler":  "18.3.1~dev92-3.43.1",
            "openstack-nova-serialproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-vncproxy":  "18.3.1~dev92-3.43.1",
            "python-Django1":  "1.11.29-3.40.1",
            "python-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "python-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "python-nova":  "18.3.1~dev92-3.43.1",
            "rabbitmq-server":  "3.6.16-4.3.1",
            "rabbitmq-server-plugins":  "3.6.16-4.3.1",
            "venv-openstack-heat-x86_64":  "11.0.4~dev4-3.37.1",
            "venv-openstack-horizon-x86_64":  "14.1.1~dev11-4.41.1",
            "venv-openstack-neutron-x86_64":  "13.0.8~dev206-6.41.1",
            "venv-openstack-nova-x86_64":  "18.3.1~dev92-3.41.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3339-1.json"
python-Django1

Package

Name
python-Django1
Purl
pkg:rpm/suse/python-Django1&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.11.29-3.40.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ardana-ansible":  "9.0+git.1660748476.c118d23-3.32.1",
            "ardana-cobbler":  "9.0+git.1660747489.119efcd-3.19.1",
            "ardana-tempest":  "9.0+git.1651855288.a2341ad-3.22.1",
            "grafana":  "6.7.4-3.29.1",
            "openstack-heat-templates":  "0.0.0+git.1654529662.75fa04a7-3.15.1",
            "openstack-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "openstack-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "openstack-nova":  "18.3.1~dev92-3.43.1",
            "openstack-nova-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-cells":  "18.3.1~dev92-3.43.1",
            "openstack-nova-compute":  "18.3.1~dev92-3.43.1",
            "openstack-nova-conductor":  "18.3.1~dev92-3.43.1",
            "openstack-nova-console":  "18.3.1~dev92-3.43.1",
            "openstack-nova-novncproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-placement-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-scheduler":  "18.3.1~dev92-3.43.1",
            "openstack-nova-serialproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-vncproxy":  "18.3.1~dev92-3.43.1",
            "python-Django1":  "1.11.29-3.40.1",
            "python-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "python-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "python-nova":  "18.3.1~dev92-3.43.1",
            "rabbitmq-server":  "3.6.16-4.3.1",
            "rabbitmq-server-plugins":  "3.6.16-4.3.1",
            "venv-openstack-heat-x86_64":  "11.0.4~dev4-3.37.1",
            "venv-openstack-horizon-x86_64":  "14.1.1~dev11-4.41.1",
            "venv-openstack-neutron-x86_64":  "13.0.8~dev206-6.41.1",
            "venv-openstack-nova-x86_64":  "18.3.1~dev92-3.41.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3339-1.json"
rabbitmq-server

Package

Name
rabbitmq-server
Purl
pkg:rpm/suse/rabbitmq-server&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.6.16-4.3.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ardana-ansible":  "9.0+git.1660748476.c118d23-3.32.1",
            "ardana-cobbler":  "9.0+git.1660747489.119efcd-3.19.1",
            "ardana-tempest":  "9.0+git.1651855288.a2341ad-3.22.1",
            "grafana":  "6.7.4-3.29.1",
            "openstack-heat-templates":  "0.0.0+git.1654529662.75fa04a7-3.15.1",
            "openstack-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "openstack-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "openstack-nova":  "18.3.1~dev92-3.43.1",
            "openstack-nova-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-cells":  "18.3.1~dev92-3.43.1",
            "openstack-nova-compute":  "18.3.1~dev92-3.43.1",
            "openstack-nova-conductor":  "18.3.1~dev92-3.43.1",
            "openstack-nova-console":  "18.3.1~dev92-3.43.1",
            "openstack-nova-novncproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-placement-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-scheduler":  "18.3.1~dev92-3.43.1",
            "openstack-nova-serialproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-vncproxy":  "18.3.1~dev92-3.43.1",
            "python-Django1":  "1.11.29-3.40.1",
            "python-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "python-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "python-nova":  "18.3.1~dev92-3.43.1",
            "rabbitmq-server":  "3.6.16-4.3.1",
            "rabbitmq-server-plugins":  "3.6.16-4.3.1",
            "venv-openstack-heat-x86_64":  "11.0.4~dev4-3.37.1",
            "venv-openstack-horizon-x86_64":  "14.1.1~dev11-4.41.1",
            "venv-openstack-neutron-x86_64":  "13.0.8~dev206-6.41.1",
            "venv-openstack-nova-x86_64":  "18.3.1~dev92-3.41.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3339-1.json"
venv-openstack-heat

Package

Name
venv-openstack-heat
Purl
pkg:rpm/suse/venv-openstack-heat&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
11.0.4~dev4-3.37.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ardana-ansible":  "9.0+git.1660748476.c118d23-3.32.1",
            "ardana-cobbler":  "9.0+git.1660747489.119efcd-3.19.1",
            "ardana-tempest":  "9.0+git.1651855288.a2341ad-3.22.1",
            "grafana":  "6.7.4-3.29.1",
            "openstack-heat-templates":  "0.0.0+git.1654529662.75fa04a7-3.15.1",
            "openstack-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "openstack-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "openstack-nova":  "18.3.1~dev92-3.43.1",
            "openstack-nova-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-cells":  "18.3.1~dev92-3.43.1",
            "openstack-nova-compute":  "18.3.1~dev92-3.43.1",
            "openstack-nova-conductor":  "18.3.1~dev92-3.43.1",
            "openstack-nova-console":  "18.3.1~dev92-3.43.1",
            "openstack-nova-novncproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-placement-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-scheduler":  "18.3.1~dev92-3.43.1",
            "openstack-nova-serialproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-vncproxy":  "18.3.1~dev92-3.43.1",
            "python-Django1":  "1.11.29-3.40.1",
            "python-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "python-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "python-nova":  "18.3.1~dev92-3.43.1",
            "rabbitmq-server":  "3.6.16-4.3.1",
            "rabbitmq-server-plugins":  "3.6.16-4.3.1",
            "venv-openstack-heat-x86_64":  "11.0.4~dev4-3.37.1",
            "venv-openstack-horizon-x86_64":  "14.1.1~dev11-4.41.1",
            "venv-openstack-neutron-x86_64":  "13.0.8~dev206-6.41.1",
            "venv-openstack-nova-x86_64":  "18.3.1~dev92-3.41.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3339-1.json"
venv-openstack-horizon

Package

Name
venv-openstack-horizon
Purl
pkg:rpm/suse/venv-openstack-horizon&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
14.1.1~dev11-4.41.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ardana-ansible":  "9.0+git.1660748476.c118d23-3.32.1",
            "ardana-cobbler":  "9.0+git.1660747489.119efcd-3.19.1",
            "ardana-tempest":  "9.0+git.1651855288.a2341ad-3.22.1",
            "grafana":  "6.7.4-3.29.1",
            "openstack-heat-templates":  "0.0.0+git.1654529662.75fa04a7-3.15.1",
            "openstack-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "openstack-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "openstack-nova":  "18.3.1~dev92-3.43.1",
            "openstack-nova-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-cells":  "18.3.1~dev92-3.43.1",
            "openstack-nova-compute":  "18.3.1~dev92-3.43.1",
            "openstack-nova-conductor":  "18.3.1~dev92-3.43.1",
            "openstack-nova-console":  "18.3.1~dev92-3.43.1",
            "openstack-nova-novncproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-placement-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-scheduler":  "18.3.1~dev92-3.43.1",
            "openstack-nova-serialproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-vncproxy":  "18.3.1~dev92-3.43.1",
            "python-Django1":  "1.11.29-3.40.1",
            "python-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "python-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "python-nova":  "18.3.1~dev92-3.43.1",
            "rabbitmq-server":  "3.6.16-4.3.1",
            "rabbitmq-server-plugins":  "3.6.16-4.3.1",
            "venv-openstack-heat-x86_64":  "11.0.4~dev4-3.37.1",
            "venv-openstack-horizon-x86_64":  "14.1.1~dev11-4.41.1",
            "venv-openstack-neutron-x86_64":  "13.0.8~dev206-6.41.1",
            "venv-openstack-nova-x86_64":  "18.3.1~dev92-3.41.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3339-1.json"
venv-openstack-neutron

Package

Name
venv-openstack-neutron
Purl
pkg:rpm/suse/venv-openstack-neutron&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
13.0.8~dev206-6.41.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ardana-ansible":  "9.0+git.1660748476.c118d23-3.32.1",
            "ardana-cobbler":  "9.0+git.1660747489.119efcd-3.19.1",
            "ardana-tempest":  "9.0+git.1651855288.a2341ad-3.22.1",
            "grafana":  "6.7.4-3.29.1",
            "openstack-heat-templates":  "0.0.0+git.1654529662.75fa04a7-3.15.1",
            "openstack-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "openstack-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "openstack-nova":  "18.3.1~dev92-3.43.1",
            "openstack-nova-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-cells":  "18.3.1~dev92-3.43.1",
            "openstack-nova-compute":  "18.3.1~dev92-3.43.1",
            "openstack-nova-conductor":  "18.3.1~dev92-3.43.1",
            "openstack-nova-console":  "18.3.1~dev92-3.43.1",
            "openstack-nova-novncproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-placement-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-scheduler":  "18.3.1~dev92-3.43.1",
            "openstack-nova-serialproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-vncproxy":  "18.3.1~dev92-3.43.1",
            "python-Django1":  "1.11.29-3.40.1",
            "python-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "python-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "python-nova":  "18.3.1~dev92-3.43.1",
            "rabbitmq-server":  "3.6.16-4.3.1",
            "rabbitmq-server-plugins":  "3.6.16-4.3.1",
            "venv-openstack-heat-x86_64":  "11.0.4~dev4-3.37.1",
            "venv-openstack-horizon-x86_64":  "14.1.1~dev11-4.41.1",
            "venv-openstack-neutron-x86_64":  "13.0.8~dev206-6.41.1",
            "venv-openstack-nova-x86_64":  "18.3.1~dev92-3.41.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3339-1.json"
venv-openstack-nova

Package

Name
venv-openstack-nova
Purl
pkg:rpm/suse/venv-openstack-nova&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
18.3.1~dev92-3.41.1

Ecosystem specific 

{
    "binaries":  [
        {
            "ardana-ansible":  "9.0+git.1660748476.c118d23-3.32.1",
            "ardana-cobbler":  "9.0+git.1660747489.119efcd-3.19.1",
            "ardana-tempest":  "9.0+git.1651855288.a2341ad-3.22.1",
            "grafana":  "6.7.4-3.29.1",
            "openstack-heat-templates":  "0.0.0+git.1654529662.75fa04a7-3.15.1",
            "openstack-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "openstack-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "openstack-nova":  "18.3.1~dev92-3.43.1",
            "openstack-nova-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-cells":  "18.3.1~dev92-3.43.1",
            "openstack-nova-compute":  "18.3.1~dev92-3.43.1",
            "openstack-nova-conductor":  "18.3.1~dev92-3.43.1",
            "openstack-nova-console":  "18.3.1~dev92-3.43.1",
            "openstack-nova-novncproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-placement-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-scheduler":  "18.3.1~dev92-3.43.1",
            "openstack-nova-serialproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-vncproxy":  "18.3.1~dev92-3.43.1",
            "python-Django1":  "1.11.29-3.40.1",
            "python-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "python-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "python-nova":  "18.3.1~dev92-3.43.1",
            "rabbitmq-server":  "3.6.16-4.3.1",
            "rabbitmq-server-plugins":  "3.6.16-4.3.1",
            "venv-openstack-heat-x86_64":  "11.0.4~dev4-3.37.1",
            "venv-openstack-horizon-x86_64":  "14.1.1~dev11-4.41.1",
            "venv-openstack-neutron-x86_64":  "13.0.8~dev206-6.41.1",
            "venv-openstack-nova-x86_64":  "18.3.1~dev92-3.41.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3339-1.json"
SUSE:OpenStack Cloud Crowbar 9
grafana

Package

Name
grafana
Purl
pkg:rpm/suse/grafana&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.7.4-3.29.1

Ecosystem specific 

{
    "binaries":  [
        {
            "grafana":  "6.7.4-3.29.1",
            "openstack-heat-templates":  "0.0.0+git.1654529662.75fa04a7-3.15.1",
            "openstack-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "openstack-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "openstack-nova":  "18.3.1~dev92-3.43.1",
            "openstack-nova-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-cells":  "18.3.1~dev92-3.43.1",
            "openstack-nova-compute":  "18.3.1~dev92-3.43.1",
            "openstack-nova-conductor":  "18.3.1~dev92-3.43.1",
            "openstack-nova-console":  "18.3.1~dev92-3.43.1",
            "openstack-nova-novncproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-placement-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-scheduler":  "18.3.1~dev92-3.43.1",
            "openstack-nova-serialproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-vncproxy":  "18.3.1~dev92-3.43.1",
            "python-Django1":  "1.11.29-3.40.1",
            "python-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "python-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "python-nova":  "18.3.1~dev92-3.43.1",
            "rabbitmq-server":  "3.6.16-4.3.1",
            "rabbitmq-server-plugins":  "3.6.16-4.3.1",
            "ruby2.1-rubygem-puma":  "2.16.0-4.18.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3339-1.json"
openstack-heat-templates

Package

Name
openstack-heat-templates
Purl
pkg:rpm/suse/openstack-heat-templates&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.0.0+git.1654529662.75fa04a7-3.15.1

Ecosystem specific 

{
    "binaries":  [
        {
            "grafana":  "6.7.4-3.29.1",
            "openstack-heat-templates":  "0.0.0+git.1654529662.75fa04a7-3.15.1",
            "openstack-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "openstack-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "openstack-nova":  "18.3.1~dev92-3.43.1",
            "openstack-nova-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-cells":  "18.3.1~dev92-3.43.1",
            "openstack-nova-compute":  "18.3.1~dev92-3.43.1",
            "openstack-nova-conductor":  "18.3.1~dev92-3.43.1",
            "openstack-nova-console":  "18.3.1~dev92-3.43.1",
            "openstack-nova-novncproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-placement-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-scheduler":  "18.3.1~dev92-3.43.1",
            "openstack-nova-serialproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-vncproxy":  "18.3.1~dev92-3.43.1",
            "python-Django1":  "1.11.29-3.40.1",
            "python-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "python-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "python-nova":  "18.3.1~dev92-3.43.1",
            "rabbitmq-server":  "3.6.16-4.3.1",
            "rabbitmq-server-plugins":  "3.6.16-4.3.1",
            "ruby2.1-rubygem-puma":  "2.16.0-4.18.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3339-1.json"
openstack-horizon-plugin-gbp-ui

Package

Name
openstack-horizon-plugin-gbp-ui
Purl
pkg:rpm/suse/openstack-horizon-plugin-gbp-ui&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
14.0.1~dev4-3.12.1

Ecosystem specific 

{
    "binaries":  [
        {
            "grafana":  "6.7.4-3.29.1",
            "openstack-heat-templates":  "0.0.0+git.1654529662.75fa04a7-3.15.1",
            "openstack-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "openstack-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "openstack-nova":  "18.3.1~dev92-3.43.1",
            "openstack-nova-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-cells":  "18.3.1~dev92-3.43.1",
            "openstack-nova-compute":  "18.3.1~dev92-3.43.1",
            "openstack-nova-conductor":  "18.3.1~dev92-3.43.1",
            "openstack-nova-console":  "18.3.1~dev92-3.43.1",
            "openstack-nova-novncproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-placement-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-scheduler":  "18.3.1~dev92-3.43.1",
            "openstack-nova-serialproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-vncproxy":  "18.3.1~dev92-3.43.1",
            "python-Django1":  "1.11.29-3.40.1",
            "python-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "python-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "python-nova":  "18.3.1~dev92-3.43.1",
            "rabbitmq-server":  "3.6.16-4.3.1",
            "rabbitmq-server-plugins":  "3.6.16-4.3.1",
            "ruby2.1-rubygem-puma":  "2.16.0-4.18.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3339-1.json"
openstack-neutron-gbp

Package

Name
openstack-neutron-gbp
Purl
pkg:rpm/suse/openstack-neutron-gbp&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
14.0.1~dev46-3.34.1

Ecosystem specific 

{
    "binaries":  [
        {
            "grafana":  "6.7.4-3.29.1",
            "openstack-heat-templates":  "0.0.0+git.1654529662.75fa04a7-3.15.1",
            "openstack-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "openstack-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "openstack-nova":  "18.3.1~dev92-3.43.1",
            "openstack-nova-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-cells":  "18.3.1~dev92-3.43.1",
            "openstack-nova-compute":  "18.3.1~dev92-3.43.1",
            "openstack-nova-conductor":  "18.3.1~dev92-3.43.1",
            "openstack-nova-console":  "18.3.1~dev92-3.43.1",
            "openstack-nova-novncproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-placement-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-scheduler":  "18.3.1~dev92-3.43.1",
            "openstack-nova-serialproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-vncproxy":  "18.3.1~dev92-3.43.1",
            "python-Django1":  "1.11.29-3.40.1",
            "python-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "python-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "python-nova":  "18.3.1~dev92-3.43.1",
            "rabbitmq-server":  "3.6.16-4.3.1",
            "rabbitmq-server-plugins":  "3.6.16-4.3.1",
            "ruby2.1-rubygem-puma":  "2.16.0-4.18.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3339-1.json"
openstack-nova

Package

Name
openstack-nova
Purl
pkg:rpm/suse/openstack-nova&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
18.3.1~dev92-3.43.1

Ecosystem specific 

{
    "binaries":  [
        {
            "grafana":  "6.7.4-3.29.1",
            "openstack-heat-templates":  "0.0.0+git.1654529662.75fa04a7-3.15.1",
            "openstack-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "openstack-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "openstack-nova":  "18.3.1~dev92-3.43.1",
            "openstack-nova-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-cells":  "18.3.1~dev92-3.43.1",
            "openstack-nova-compute":  "18.3.1~dev92-3.43.1",
            "openstack-nova-conductor":  "18.3.1~dev92-3.43.1",
            "openstack-nova-console":  "18.3.1~dev92-3.43.1",
            "openstack-nova-novncproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-placement-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-scheduler":  "18.3.1~dev92-3.43.1",
            "openstack-nova-serialproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-vncproxy":  "18.3.1~dev92-3.43.1",
            "python-Django1":  "1.11.29-3.40.1",
            "python-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "python-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "python-nova":  "18.3.1~dev92-3.43.1",
            "rabbitmq-server":  "3.6.16-4.3.1",
            "rabbitmq-server-plugins":  "3.6.16-4.3.1",
            "ruby2.1-rubygem-puma":  "2.16.0-4.18.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3339-1.json"
python-Django1

Package

Name
python-Django1
Purl
pkg:rpm/suse/python-Django1&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.11.29-3.40.1

Ecosystem specific 

{
    "binaries":  [
        {
            "grafana":  "6.7.4-3.29.1",
            "openstack-heat-templates":  "0.0.0+git.1654529662.75fa04a7-3.15.1",
            "openstack-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "openstack-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "openstack-nova":  "18.3.1~dev92-3.43.1",
            "openstack-nova-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-cells":  "18.3.1~dev92-3.43.1",
            "openstack-nova-compute":  "18.3.1~dev92-3.43.1",
            "openstack-nova-conductor":  "18.3.1~dev92-3.43.1",
            "openstack-nova-console":  "18.3.1~dev92-3.43.1",
            "openstack-nova-novncproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-placement-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-scheduler":  "18.3.1~dev92-3.43.1",
            "openstack-nova-serialproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-vncproxy":  "18.3.1~dev92-3.43.1",
            "python-Django1":  "1.11.29-3.40.1",
            "python-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "python-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "python-nova":  "18.3.1~dev92-3.43.1",
            "rabbitmq-server":  "3.6.16-4.3.1",
            "rabbitmq-server-plugins":  "3.6.16-4.3.1",
            "ruby2.1-rubygem-puma":  "2.16.0-4.18.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3339-1.json"
rabbitmq-server

Package

Name
rabbitmq-server
Purl
pkg:rpm/suse/rabbitmq-server&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.6.16-4.3.1

Ecosystem specific 

{
    "binaries":  [
        {
            "grafana":  "6.7.4-3.29.1",
            "openstack-heat-templates":  "0.0.0+git.1654529662.75fa04a7-3.15.1",
            "openstack-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "openstack-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "openstack-nova":  "18.3.1~dev92-3.43.1",
            "openstack-nova-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-cells":  "18.3.1~dev92-3.43.1",
            "openstack-nova-compute":  "18.3.1~dev92-3.43.1",
            "openstack-nova-conductor":  "18.3.1~dev92-3.43.1",
            "openstack-nova-console":  "18.3.1~dev92-3.43.1",
            "openstack-nova-novncproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-placement-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-scheduler":  "18.3.1~dev92-3.43.1",
            "openstack-nova-serialproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-vncproxy":  "18.3.1~dev92-3.43.1",
            "python-Django1":  "1.11.29-3.40.1",
            "python-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "python-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "python-nova":  "18.3.1~dev92-3.43.1",
            "rabbitmq-server":  "3.6.16-4.3.1",
            "rabbitmq-server-plugins":  "3.6.16-4.3.1",
            "ruby2.1-rubygem-puma":  "2.16.0-4.18.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3339-1.json"
rubygem-puma

Package

Name
rubygem-puma
Purl
pkg:rpm/suse/rubygem-puma&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.16.0-4.18.1

Ecosystem specific 

{
    "binaries":  [
        {
            "grafana":  "6.7.4-3.29.1",
            "openstack-heat-templates":  "0.0.0+git.1654529662.75fa04a7-3.15.1",
            "openstack-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "openstack-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "openstack-nova":  "18.3.1~dev92-3.43.1",
            "openstack-nova-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-cells":  "18.3.1~dev92-3.43.1",
            "openstack-nova-compute":  "18.3.1~dev92-3.43.1",
            "openstack-nova-conductor":  "18.3.1~dev92-3.43.1",
            "openstack-nova-console":  "18.3.1~dev92-3.43.1",
            "openstack-nova-novncproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-placement-api":  "18.3.1~dev92-3.43.1",
            "openstack-nova-scheduler":  "18.3.1~dev92-3.43.1",
            "openstack-nova-serialproxy":  "18.3.1~dev92-3.43.1",
            "openstack-nova-vncproxy":  "18.3.1~dev92-3.43.1",
            "python-Django1":  "1.11.29-3.40.1",
            "python-horizon-plugin-gbp-ui":  "14.0.1~dev4-3.12.1",
            "python-neutron-gbp":  "14.0.1~dev46-3.34.1",
            "python-nova":  "18.3.1~dev92-3.43.1",
            "rabbitmq-server":  "3.6.16-4.3.1",
            "rabbitmq-server-plugins":  "3.6.16-4.3.1",
            "ruby2.1-rubygem-puma":  "2.16.0-4.18.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:3339-1.json"