Security update for several openstack-components SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:1443-1 Final 1 1 2017-05-30T11:22:13Z current 2017-05-30T11:22:13Z 2017-05-30T11:22:13Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for several openstack-components This update for openstack-ceilometer, -cinder, -dashboard, -glance, -heat, -keystone, -manila, -magnum and -novaopenstack-keystone provides the latest code from OpenStack Newton. - nova: Add release note that legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens. (bsc#1030406, CVE-2017-7214) - nova: Remove PrivTmp from openstack-nova-compute service. (bsc#1024328) - dashboard: Remove dangerous safestring declaration. (bsc#1032322, CVE-2017-7400) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-OpenStack-Cloud-7-2017-882 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20171443-1/ Link for SUSE-SU-2017:1443-1 https://lists.opensuse.org/opensuse-security-announce/2017-05/msg00074.html E-Mail link for SUSE-SU-2017:1443-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1024328 SUSE Bug 1024328 https://bugzilla.suse.com/1030406 SUSE Bug 1030406 https://bugzilla.suse.com/1032322 SUSE Bug 1032322 https://www.suse.com/security/cve/CVE-2017-7214/ SUSE CVE CVE-2017-7214 page https://www.suse.com/security/cve/CVE-2017-7400/ SUSE CVE CVE-2017-7400 page SUSE OpenStack Cloud 7 openstack-ceilometer-7.0.4~a0~dev7-3.1 openstack-ceilometer-agent-central-7.0.4~a0~dev7-3.1 openstack-ceilometer-agent-compute-7.0.4~a0~dev7-3.1 openstack-ceilometer-agent-ipmi-7.0.4~a0~dev7-3.1 openstack-ceilometer-agent-notification-7.0.4~a0~dev7-3.1 openstack-ceilometer-api-7.0.4~a0~dev7-3.1 openstack-ceilometer-collector-7.0.4~a0~dev7-3.1 openstack-ceilometer-doc-7.0.4~a0~dev7-3.2 openstack-ceilometer-polling-7.0.4~a0~dev7-3.1 openstack-cinder-9.1.5~a0~dev1-3.1 openstack-cinder-api-9.1.5~a0~dev1-3.1 openstack-cinder-backup-9.1.5~a0~dev1-3.1 openstack-cinder-doc-9.1.5~a0~dev1-3.1 openstack-cinder-scheduler-9.1.5~a0~dev1-3.1 openstack-cinder-volume-9.1.5~a0~dev1-3.1 openstack-dashboard-10.0.4~a0~dev2-3.1 openstack-glance-13.0.1~a0~dev6-3.1 openstack-glance-api-13.0.1~a0~dev6-3.1 openstack-glance-doc-13.0.1~a0~dev6-3.3 openstack-glance-glare-13.0.1~a0~dev6-3.1 openstack-glance-registry-13.0.1~a0~dev6-3.1 openstack-heat-7.0.4~a0~dev4-4.1 openstack-heat-api-7.0.4~a0~dev4-4.1 openstack-heat-api-cfn-7.0.4~a0~dev4-4.1 openstack-heat-api-cloudwatch-7.0.4~a0~dev4-4.1 openstack-heat-doc-7.0.4~a0~dev4-4.2 openstack-heat-engine-7.0.4~a0~dev4-4.1 openstack-heat-plugin-heat_docker-7.0.4~a0~dev4-4.1 openstack-heat-test-7.0.4~a0~dev4-4.1 openstack-keystone-10.0.2~a0~dev2-6.1 openstack-keystone-doc-10.0.2~a0~dev2-6.2 openstack-magnum-3.1.2~a0~dev22-13.1 openstack-magnum-api-3.1.2~a0~dev22-13.1 openstack-magnum-conductor-3.1.2~a0~dev22-13.1 openstack-magnum-doc-3.1.2~a0~dev22-13.1 openstack-manila-3.0.1~a0~dev27-3.1 openstack-manila-api-3.0.1~a0~dev27-3.1 openstack-manila-data-3.0.1~a0~dev27-3.1 openstack-manila-doc-3.0.1~a0~dev27-3.1 openstack-manila-scheduler-3.0.1~a0~dev27-3.1 openstack-manila-share-3.0.1~a0~dev27-3.1 openstack-nova-14.0.6~a0~dev16-3.1 openstack-nova-api-14.0.6~a0~dev16-3.1 openstack-nova-cells-14.0.6~a0~dev16-3.1 openstack-nova-cert-14.0.6~a0~dev16-3.1 openstack-nova-compute-14.0.6~a0~dev16-3.1 openstack-nova-conductor-14.0.6~a0~dev16-3.1 openstack-nova-console-14.0.6~a0~dev16-3.1 openstack-nova-consoleauth-14.0.6~a0~dev16-3.1 openstack-nova-doc-14.0.6~a0~dev16-3.3 openstack-nova-novncproxy-14.0.6~a0~dev16-3.1 openstack-nova-placement-api-14.0.6~a0~dev16-3.1 openstack-nova-scheduler-14.0.6~a0~dev16-3.1 openstack-nova-serialproxy-14.0.6~a0~dev16-3.1 openstack-nova-vncproxy-14.0.6~a0~dev16-3.1 python-ceilometer-7.0.4~a0~dev7-3.1 python-cinder-9.1.5~a0~dev1-3.1 python-glance-13.0.1~a0~dev6-3.1 python-heat-7.0.4~a0~dev4-4.1 python-horizon-10.0.4~a0~dev2-3.1 python-keystone-10.0.2~a0~dev2-6.1 python-magnum-3.1.2~a0~dev22-13.1 python-manila-3.0.1~a0~dev27-3.1 python-nova-14.0.6~a0~dev16-3.1 openstack-ceilometer-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 openstack-ceilometer-agent-central-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 openstack-ceilometer-agent-compute-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 openstack-ceilometer-agent-ipmi-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 openstack-ceilometer-agent-notification-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 openstack-ceilometer-api-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 openstack-ceilometer-collector-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 openstack-ceilometer-doc-7.0.4~a0~dev7-3.2 as a component of SUSE OpenStack Cloud 7 openstack-ceilometer-polling-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 openstack-cinder-9.1.5~a0~dev1-3.1 as a component of SUSE OpenStack Cloud 7 openstack-cinder-api-9.1.5~a0~dev1-3.1 as a component of SUSE OpenStack Cloud 7 openstack-cinder-backup-9.1.5~a0~dev1-3.1 as a component of SUSE OpenStack Cloud 7 openstack-cinder-doc-9.1.5~a0~dev1-3.1 as a component of SUSE OpenStack Cloud 7 openstack-cinder-scheduler-9.1.5~a0~dev1-3.1 as a component of SUSE OpenStack Cloud 7 openstack-cinder-volume-9.1.5~a0~dev1-3.1 as a component of SUSE OpenStack Cloud 7 openstack-dashboard-10.0.4~a0~dev2-3.1 as a component of SUSE OpenStack Cloud 7 openstack-glance-13.0.1~a0~dev6-3.1 as a component of SUSE OpenStack Cloud 7 openstack-glance-api-13.0.1~a0~dev6-3.1 as a component of SUSE OpenStack Cloud 7 openstack-glance-doc-13.0.1~a0~dev6-3.3 as a component of SUSE OpenStack Cloud 7 openstack-glance-glare-13.0.1~a0~dev6-3.1 as a component of SUSE OpenStack Cloud 7 openstack-glance-registry-13.0.1~a0~dev6-3.1 as a component of SUSE OpenStack Cloud 7 openstack-heat-7.0.4~a0~dev4-4.1 as a component of SUSE OpenStack Cloud 7 openstack-heat-api-7.0.4~a0~dev4-4.1 as a component of SUSE OpenStack Cloud 7 openstack-heat-api-cfn-7.0.4~a0~dev4-4.1 as a component of SUSE OpenStack Cloud 7 openstack-heat-api-cloudwatch-7.0.4~a0~dev4-4.1 as a component of SUSE OpenStack Cloud 7 openstack-heat-doc-7.0.4~a0~dev4-4.2 as a component of SUSE OpenStack Cloud 7 openstack-heat-engine-7.0.4~a0~dev4-4.1 as a component of SUSE OpenStack Cloud 7 openstack-heat-plugin-heat_docker-7.0.4~a0~dev4-4.1 as a component of SUSE OpenStack Cloud 7 openstack-heat-test-7.0.4~a0~dev4-4.1 as a component of SUSE OpenStack Cloud 7 openstack-keystone-10.0.2~a0~dev2-6.1 as a component of SUSE OpenStack Cloud 7 openstack-keystone-doc-10.0.2~a0~dev2-6.2 as a component of SUSE OpenStack Cloud 7 openstack-magnum-3.1.2~a0~dev22-13.1 as a component of SUSE OpenStack Cloud 7 openstack-magnum-api-3.1.2~a0~dev22-13.1 as a component of SUSE OpenStack Cloud 7 openstack-magnum-conductor-3.1.2~a0~dev22-13.1 as a component of SUSE OpenStack Cloud 7 openstack-magnum-doc-3.1.2~a0~dev22-13.1 as a component of SUSE OpenStack Cloud 7 openstack-manila-3.0.1~a0~dev27-3.1 as a component of SUSE OpenStack Cloud 7 openstack-manila-api-3.0.1~a0~dev27-3.1 as a component of SUSE OpenStack Cloud 7 openstack-manila-data-3.0.1~a0~dev27-3.1 as a component of SUSE OpenStack Cloud 7 openstack-manila-doc-3.0.1~a0~dev27-3.1 as a component of SUSE OpenStack Cloud 7 openstack-manila-scheduler-3.0.1~a0~dev27-3.1 as a component of SUSE OpenStack Cloud 7 openstack-manila-share-3.0.1~a0~dev27-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-api-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-cells-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-cert-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-compute-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-conductor-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-console-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-consoleauth-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-doc-14.0.6~a0~dev16-3.3 as a component of SUSE OpenStack Cloud 7 openstack-nova-novncproxy-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-placement-api-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-scheduler-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-serialproxy-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 openstack-nova-vncproxy-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 python-ceilometer-7.0.4~a0~dev7-3.1 as a component of SUSE OpenStack Cloud 7 python-cinder-9.1.5~a0~dev1-3.1 as a component of SUSE OpenStack Cloud 7 python-glance-13.0.1~a0~dev6-3.1 as a component of SUSE OpenStack Cloud 7 python-heat-7.0.4~a0~dev4-4.1 as a component of SUSE OpenStack Cloud 7 python-horizon-10.0.4~a0~dev2-3.1 as a component of SUSE OpenStack Cloud 7 python-keystone-10.0.2~a0~dev2-6.1 as a component of SUSE OpenStack Cloud 7 python-magnum-3.1.2~a0~dev22-13.1 as a component of SUSE OpenStack Cloud 7 python-manila-3.0.1~a0~dev27-3.1 as a component of SUSE OpenStack Cloud 7 python-nova-14.0.6~a0~dev16-3.1 as a component of SUSE OpenStack Cloud 7 An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwords and authorization tokens. CVE-2017-7214 SUSE OpenStack Cloud 7:openstack-ceilometer-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-agent-central-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-agent-compute-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-agent-ipmi-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-agent-notification-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-api-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-collector-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-doc-7.0.4~a0~dev7-3.2 SUSE OpenStack Cloud 7:openstack-ceilometer-polling-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-cinder-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:openstack-cinder-api-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:openstack-cinder-backup-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:openstack-cinder-doc-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:openstack-cinder-scheduler-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:openstack-cinder-volume-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:openstack-dashboard-10.0.4~a0~dev2-3.1 SUSE OpenStack Cloud 7:openstack-glance-13.0.1~a0~dev6-3.1 SUSE OpenStack Cloud 7:openstack-glance-api-13.0.1~a0~dev6-3.1 SUSE OpenStack Cloud 7:openstack-glance-doc-13.0.1~a0~dev6-3.3 SUSE OpenStack Cloud 7:openstack-glance-glare-13.0.1~a0~dev6-3.1 SUSE OpenStack Cloud 7:openstack-glance-registry-13.0.1~a0~dev6-3.1 SUSE OpenStack Cloud 7:openstack-heat-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-heat-api-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-heat-api-cfn-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-heat-api-cloudwatch-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-heat-doc-7.0.4~a0~dev4-4.2 SUSE OpenStack Cloud 7:openstack-heat-engine-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-heat-plugin-heat_docker-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-heat-test-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-keystone-10.0.2~a0~dev2-6.1 SUSE OpenStack Cloud 7:openstack-keystone-doc-10.0.2~a0~dev2-6.2 SUSE OpenStack Cloud 7:openstack-magnum-3.1.2~a0~dev22-13.1 SUSE OpenStack Cloud 7:openstack-magnum-api-3.1.2~a0~dev22-13.1 SUSE OpenStack Cloud 7:openstack-magnum-conductor-3.1.2~a0~dev22-13.1 SUSE OpenStack Cloud 7:openstack-magnum-doc-3.1.2~a0~dev22-13.1 SUSE OpenStack Cloud 7:openstack-manila-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:openstack-nova-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-api-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-console-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.6~a0~dev16-3.3 SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:python-ceilometer-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:python-cinder-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:python-glance-13.0.1~a0~dev6-3.1 SUSE OpenStack Cloud 7:python-heat-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:python-horizon-10.0.4~a0~dev2-3.1 SUSE OpenStack Cloud 7:python-keystone-10.0.2~a0~dev2-6.1 SUSE OpenStack Cloud 7:python-magnum-3.1.2~a0~dev22-13.1 SUSE OpenStack Cloud 7:python-manila-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:python-nova-14.0.6~a0~dev16-3.1 important 3.5 AV:N/AC:M/Au:S/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171443-1/ https://www.suse.com/security/cve/CVE-2017-7214.html CVE-2017-7214 https://bugzilla.suse.com/1030406 SUSE Bug 1030406 OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping. CVE-2017-7400 SUSE OpenStack Cloud 7:openstack-ceilometer-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-agent-central-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-agent-compute-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-agent-ipmi-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-agent-notification-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-api-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-collector-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-ceilometer-doc-7.0.4~a0~dev7-3.2 SUSE OpenStack Cloud 7:openstack-ceilometer-polling-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:openstack-cinder-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:openstack-cinder-api-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:openstack-cinder-backup-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:openstack-cinder-doc-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:openstack-cinder-scheduler-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:openstack-cinder-volume-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:openstack-dashboard-10.0.4~a0~dev2-3.1 SUSE OpenStack Cloud 7:openstack-glance-13.0.1~a0~dev6-3.1 SUSE OpenStack Cloud 7:openstack-glance-api-13.0.1~a0~dev6-3.1 SUSE OpenStack Cloud 7:openstack-glance-doc-13.0.1~a0~dev6-3.3 SUSE OpenStack Cloud 7:openstack-glance-glare-13.0.1~a0~dev6-3.1 SUSE OpenStack Cloud 7:openstack-glance-registry-13.0.1~a0~dev6-3.1 SUSE OpenStack Cloud 7:openstack-heat-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-heat-api-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-heat-api-cfn-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-heat-api-cloudwatch-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-heat-doc-7.0.4~a0~dev4-4.2 SUSE OpenStack Cloud 7:openstack-heat-engine-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-heat-plugin-heat_docker-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-heat-test-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:openstack-keystone-10.0.2~a0~dev2-6.1 SUSE OpenStack Cloud 7:openstack-keystone-doc-10.0.2~a0~dev2-6.2 SUSE OpenStack Cloud 7:openstack-magnum-3.1.2~a0~dev22-13.1 SUSE OpenStack Cloud 7:openstack-magnum-api-3.1.2~a0~dev22-13.1 SUSE OpenStack Cloud 7:openstack-magnum-conductor-3.1.2~a0~dev22-13.1 SUSE OpenStack Cloud 7:openstack-magnum-doc-3.1.2~a0~dev22-13.1 SUSE OpenStack Cloud 7:openstack-manila-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:openstack-nova-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-api-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-console-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.6~a0~dev16-3.3 SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.6~a0~dev16-3.1 SUSE OpenStack Cloud 7:python-ceilometer-7.0.4~a0~dev7-3.1 SUSE OpenStack Cloud 7:python-cinder-9.1.5~a0~dev1-3.1 SUSE OpenStack Cloud 7:python-glance-13.0.1~a0~dev6-3.1 SUSE OpenStack Cloud 7:python-heat-7.0.4~a0~dev4-4.1 SUSE OpenStack Cloud 7:python-horizon-10.0.4~a0~dev2-3.1 SUSE OpenStack Cloud 7:python-keystone-10.0.2~a0~dev2-6.1 SUSE OpenStack Cloud 7:python-magnum-3.1.2~a0~dev22-13.1 SUSE OpenStack Cloud 7:python-manila-3.0.1~a0~dev27-3.1 SUSE OpenStack Cloud 7:python-nova-14.0.6~a0~dev16-3.1 important 6 AV:N/AC:M/Au:S/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171443-1/ https://www.suse.com/security/cve/CVE-2017-7400.html CVE-2017-7400 https://bugzilla.suse.com/1032322 SUSE Bug 1032322