Security update for ardana-ansible, ardana-monasca, crowbar-openstack, influxdb, kibana, openstack-cinder, openstack-ec2-api, openstack-heat-gbp, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-keystone, openstack-neutron-gbp, openstack-nova, python-eventlet, rubygem-redcarpet, rubygem-puma SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:3729-1 Final 1 1 2021-11-19T12:39:54Z current 2021-11-19T12:39:54Z 2021-11-19T12:39:54Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for ardana-ansible, ardana-monasca, crowbar-openstack, influxdb, kibana, openstack-cinder, openstack-ec2-api, openstack-heat-gbp, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-keystone, openstack-neutron-gbp, openstack-nova, python-eventlet, rubygem-redcarpet, rubygem-puma This update for ardana-ansible, ardana-monasca, crowbar-openstack, influxdb, kibana, openstack-cinder, openstack-ec2-api, openstack-heat-gbp, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-keystone, openstack-neutron-gbp, openstack-nova, python-eventlet, rubygem-redcarpet, rubygem-puma contains the following fixes: Security fixes included in this update: kibana: CVE-2021-22141: Fixed URL redirection flaw (bsc#1186868). python-eventlet: CVE-2021-21419: Fixed improper handling of highly compressed data and memory allocation with excessive size value. (bsc#1185836) rubygem-redcarpet: CVE-2020-26298: Fixed XSS via HTML escaping when processing quotes. (bsc#1180837) rubygem-puma: CVE-2021-41136: Fixes build of the Java state machine for parsing HTTP. (bsc#1191681) Non-security fixes included in this update: Changes in ardana-ansible: * Patch service.py to skip blank lines. Changes in ardana-monasca: * Use specific TLS versions for monasca-thresh DB connections. (SOC-11543) Changes in crowbar-openstack: * keystone wakeup: get new session on any error. (bsc#1189052) Changes in influxdb: - Set GO111MODULE=auto to fix build with go1.16 and later where default is GO111MODULE=on Canges in kibana: - Fix an open redirect flaw. (CVE-2021-22141, bsc#1186868) Changes in openstack-cinder: * Fix typo in Dell EMC Unity driver documentation. * Drop lower-constraints job. * [stable-only] Cap bandit to v1.6.2 and fix constraints. Changes in openstack-ec2-api: * Remove jobs corresponds to obselete featuresets. * OpenDev Migration Patch. Changes in openstack-heat-gbp: * Add support for Wallaby. * Fix upstream gate. Changes in openstack-heat-templates: * [ussuri][goal] Update contributor documentation. * Fix zuul config for heat-templates-check. * Remove testr. Changes in openstack-horizon-plugin-gbp-ui: * Add support for Wallaby. * Fix upstream gate. Changes in openstack-keystone: * Retry update\_user when sqlalchemy raises StaleDataErrors. * Pin keystone-tempest-plugin for py27 compatibility. Changes in openstack-neutron-gbp: * Fix update router API. * Fix HA IP DB migration. * Revert 'Fix HA IP DB migration'. * Fix HA IP DB migration. * Add network\_id column to apic\_ml2\_ha\_ipaddress\_to\_port\_owner table. * Use custom converter for extra attributes. * Validate network before creating or updating router. * Fix Data Migration query for HA IP table. * System security grp:Add system sg in port sg list. * Add vrf column to apic\_ml2\_ha\_ipaddress\_to\_port\_owner table. * [apic\_aim]: Fix HA IP UTs. * Fixing the exception msg for IPAddressGenerationFailure. * Enhancement regarding router/instance attachment to an external network floating ip and snat subnets. * Setting legacy-group-based-policy-dsvm-aim to non-voting gate. * Add support for Wallaby. * Bug fixes for gbp-validate. * [apic\_aim]: Filter endpoint details. * Bugfix: Policy Enforcement Pref. * Fix unit-tests for tenant-scope validation. * [AIM] Add Policy Enforcement Pref to network extension. Changes in openstack-nova: * [neutron] Get only ID and name of the SGs from Neutron. * Remove allocations before setting vm\_status to SHELVED\_OFFLOADED. * libvirt:driver:Disallow AIO=native when 'O\_DIRECT' is not available. * Update pci stat pools based on PCI device changes. * Use subqueryload() instead of joinedload() for (system\_)metadata. Changes in python-eventlet: Websocket: Limit maximum uncompressed frame length to 8MiB. (bsc#1185836 CVE-2021-21419) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2021-3729,SUSE-OpenStack-Cloud-9-2021-3729,SUSE-OpenStack-Cloud-Crowbar-9-2021-3729 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20213729-1/ Link for SUSE-SU-2021:3729-1 https://lists.suse.com/pipermail/sle-security-updates/2021-November/009745.html E-Mail link for SUSE-SU-2021:3729-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1180837 SUSE Bug 1180837 https://bugzilla.suse.com/1185836 SUSE Bug 1185836 https://bugzilla.suse.com/1186868 SUSE Bug 1186868 https://bugzilla.suse.com/1189052 SUSE Bug 1189052 https://bugzilla.suse.com/1191681 SUSE Bug 1191681 https://www.suse.com/security/cve/CVE-2020-26298/ SUSE CVE CVE-2020-26298 page https://www.suse.com/security/cve/CVE-2021-21419/ SUSE CVE CVE-2021-21419 page https://www.suse.com/security/cve/CVE-2021-22141/ SUSE CVE CVE-2021-22141 page https://www.suse.com/security/cve/CVE-2021-41136/ SUSE CVE CVE-2021-41136 page SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 ardana-ansible-9.0+git.1628097238.f6cbb0e-3.29.1 ardana-monasca-9.0+git.1627995376.30bdf85-3.25.1 crowbar-openstack-6.0+git.1630614261.26948f746-3.37.2 influxdb-1.3.8-4.6.1 influxdb-devel-1.3.8-4.6.1 kibana-4.6.6-4.12.1 openstack-cinder-13.0.10~dev23-3.31.2 openstack-cinder-api-13.0.10~dev23-3.31.2 openstack-cinder-backup-13.0.10~dev23-3.31.2 openstack-cinder-scheduler-13.0.10~dev23-3.31.2 openstack-cinder-test-13.0.10~dev23-3.31.2 openstack-cinder-volume-13.0.10~dev23-3.31.2 openstack-ec2-api-7.1.1~dev6-3.3.2 openstack-ec2-api-api-7.1.1~dev6-3.3.2 openstack-ec2-api-metadata-7.1.1~dev6-3.3.2 openstack-ec2-api-s3-7.1.1~dev6-3.3.2 openstack-ec2-api-test-7.1.1~dev6-3.3.2 openstack-heat-gbp-12.0.1~dev4-3.6.1 openstack-heat-gbp-test-12.0.1~dev4-3.6.1 openstack-heat-templates-0.0.0+git.1628179051.7d761bff-3.12.1 openstack-horizon-plugin-gbp-ui-12.0.1~dev5-3.6.1 openstack-horizon-plugin-gbp-ui-test-12.0.1~dev5-3.6.1 openstack-keystone-14.2.1~dev7-3.25.2 openstack-keystone-test-14.2.1~dev7-3.25.2 openstack-neutron-gbp-14.0.1~dev19-3.28.1 openstack-neutron-gbp-test-14.0.1~dev19-3.28.1 openstack-nova-18.3.1~dev91-3.40.1 openstack-nova-api-18.3.1~dev91-3.40.1 openstack-nova-cells-18.3.1~dev91-3.40.1 openstack-nova-compute-18.3.1~dev91-3.40.1 openstack-nova-conductor-18.3.1~dev91-3.40.1 openstack-nova-console-18.3.1~dev91-3.40.1 openstack-nova-consoleauth-18.3.1~dev91-3.40.1 openstack-nova-network-18.3.1~dev91-3.40.1 openstack-nova-novncproxy-18.3.1~dev91-3.40.1 openstack-nova-placement-api-18.3.1~dev91-3.40.1 openstack-nova-scheduler-18.3.1~dev91-3.40.1 openstack-nova-serialproxy-18.3.1~dev91-3.40.1 openstack-nova-test-18.3.1~dev91-3.40.1 openstack-nova-vncproxy-18.3.1~dev91-3.40.1 python-cinder-13.0.10~dev23-3.31.2 python-ec2api-7.1.1~dev6-3.3.2 python-eventlet-0.20.0-8.3.1 python-eventlet-doc-0.20.0-8.3.1 python-heat-gbp-12.0.1~dev4-3.6.1 python-horizon-plugin-gbp-ui-12.0.1~dev5-3.6.1 python-keystone-14.2.1~dev7-3.25.2 python-neutron-gbp-14.0.1~dev19-3.28.1 python-nova-18.3.1~dev91-3.40.1 python3-eventlet-0.20.0-8.3.1 python3-eventlet-doc-0.20.0-8.3.1 ruby2.1-rubygem-puma-2.16.0-4.15.1 ruby2.1-rubygem-puma-doc-2.16.0-4.15.1 ruby2.1-rubygem-redcarpet-3.2.3-4.3.1 ruby2.1-rubygem-redcarpet-doc-3.2.3-4.3.1 ruby2.1-rubygem-redcarpet-testsuite-3.2.3-4.3.1 venv-openstack-barbican-x86_64-7.0.1~dev24-3.25.1 venv-openstack-cinder-x86_64-13.0.10~dev23-3.28.1 venv-openstack-designate-x86_64-7.0.2~dev2-3.25.1 venv-openstack-glance-x86_64-17.0.1~dev30-3.23.1 venv-openstack-heat-x86_64-11.0.4~dev4-3.25.1 venv-openstack-horizon-x86_64-14.1.1~dev11-4.29.1 venv-openstack-ironic-x86_64-11.1.5~dev17-4.23.1 venv-openstack-keystone-x86_64-14.2.1~dev7-3.26.1 venv-openstack-magnum-x86_64-7.2.1~dev1-4.25.1 venv-openstack-manila-x86_64-7.4.2~dev60-3.31.1 venv-openstack-monasca-ceilometer-x86_64-1.8.2~dev3-3.25.1 venv-openstack-monasca-x86_64-2.7.1~dev10-3.23.1 venv-openstack-neutron-x86_64-13.0.8~dev164-6.29.1 venv-openstack-nova-x86_64-18.3.1~dev91-3.29.1 venv-openstack-octavia-x86_64-3.2.3~dev7-4.25.1 venv-openstack-sahara-x86_64-9.0.2~dev15-3.25.1 venv-openstack-swift-x86_64-2.19.2~dev48-2.20.1 ardana-ansible-9.0+git.1628097238.f6cbb0e-3.29.1 as a component of SUSE OpenStack Cloud 9 ardana-monasca-9.0+git.1627995376.30bdf85-3.25.1 as a component of SUSE OpenStack Cloud 9 influxdb-1.3.8-4.6.1 as a component of SUSE OpenStack Cloud 9 kibana-4.6.6-4.12.1 as a component of SUSE OpenStack Cloud 9 openstack-cinder-13.0.10~dev23-3.31.2 as a component of SUSE OpenStack Cloud 9 openstack-cinder-api-13.0.10~dev23-3.31.2 as a component of SUSE OpenStack Cloud 9 openstack-cinder-backup-13.0.10~dev23-3.31.2 as a component of SUSE OpenStack Cloud 9 openstack-cinder-scheduler-13.0.10~dev23-3.31.2 as a component of SUSE OpenStack Cloud 9 openstack-cinder-volume-13.0.10~dev23-3.31.2 as a component of SUSE OpenStack Cloud 9 openstack-ec2-api-7.1.1~dev6-3.3.2 as a component of SUSE OpenStack Cloud 9 openstack-ec2-api-api-7.1.1~dev6-3.3.2 as a component of SUSE OpenStack Cloud 9 openstack-ec2-api-metadata-7.1.1~dev6-3.3.2 as a component of SUSE OpenStack Cloud 9 openstack-ec2-api-s3-7.1.1~dev6-3.3.2 as a component of SUSE OpenStack Cloud 9 openstack-heat-gbp-12.0.1~dev4-3.6.1 as a component of SUSE OpenStack Cloud 9 openstack-heat-templates-0.0.0+git.1628179051.7d761bff-3.12.1 as a component of SUSE OpenStack Cloud 9 openstack-horizon-plugin-gbp-ui-12.0.1~dev5-3.6.1 as a component of SUSE OpenStack Cloud 9 openstack-keystone-14.2.1~dev7-3.25.2 as a component of SUSE OpenStack Cloud 9 openstack-neutron-gbp-14.0.1~dev19-3.28.1 as a component of SUSE OpenStack Cloud 9 openstack-nova-18.3.1~dev91-3.40.1 as a component of SUSE OpenStack Cloud 9 openstack-nova-api-18.3.1~dev91-3.40.1 as a component of SUSE OpenStack Cloud 9 openstack-nova-cells-18.3.1~dev91-3.40.1 as a component of SUSE OpenStack Cloud 9 openstack-nova-compute-18.3.1~dev91-3.40.1 as a component of SUSE OpenStack Cloud 9 openstack-nova-conductor-18.3.1~dev91-3.40.1 as a component of SUSE OpenStack Cloud 9 openstack-nova-console-18.3.1~dev91-3.40.1 as a component of SUSE OpenStack Cloud 9 openstack-nova-novncproxy-18.3.1~dev91-3.40.1 as a component of SUSE OpenStack Cloud 9 openstack-nova-placement-api-18.3.1~dev91-3.40.1 as a component of SUSE OpenStack Cloud 9 openstack-nova-scheduler-18.3.1~dev91-3.40.1 as a component of SUSE OpenStack Cloud 9 openstack-nova-serialproxy-18.3.1~dev91-3.40.1 as a component of SUSE OpenStack Cloud 9 openstack-nova-vncproxy-18.3.1~dev91-3.40.1 as a component of SUSE OpenStack Cloud 9 python-cinder-13.0.10~dev23-3.31.2 as a component of SUSE OpenStack Cloud 9 python-ec2api-7.1.1~dev6-3.3.2 as a component of SUSE OpenStack Cloud 9 python-eventlet-0.20.0-8.3.1 as a component of SUSE OpenStack Cloud 9 python-heat-gbp-12.0.1~dev4-3.6.1 as a component of SUSE OpenStack Cloud 9 python-horizon-plugin-gbp-ui-12.0.1~dev5-3.6.1 as a component of SUSE OpenStack Cloud 9 python-keystone-14.2.1~dev7-3.25.2 as a component of SUSE OpenStack Cloud 9 python-neutron-gbp-14.0.1~dev19-3.28.1 as a component of SUSE OpenStack Cloud 9 python-nova-18.3.1~dev91-3.40.1 as a component of SUSE OpenStack Cloud 9 venv-openstack-barbican-x86_64-7.0.1~dev24-3.25.1 as a component of SUSE OpenStack Cloud 9 venv-openstack-cinder-x86_64-13.0.10~dev23-3.28.1 as a component of SUSE OpenStack Cloud 9 venv-openstack-designate-x86_64-7.0.2~dev2-3.25.1 as a component of SUSE OpenStack Cloud 9 venv-openstack-glance-x86_64-17.0.1~dev30-3.23.1 as a component of SUSE OpenStack Cloud 9 venv-openstack-heat-x86_64-11.0.4~dev4-3.25.1 as a component of SUSE OpenStack Cloud 9 venv-openstack-horizon-x86_64-14.1.1~dev11-4.29.1 as a component of SUSE OpenStack Cloud 9 venv-openstack-ironic-x86_64-11.1.5~dev17-4.23.1 as a component of SUSE OpenStack Cloud 9 venv-openstack-keystone-x86_64-14.2.1~dev7-3.26.1 as a component of SUSE OpenStack Cloud 9 venv-openstack-magnum-x86_64-7.2.1~dev1-4.25.1 as a component of SUSE OpenStack Cloud 9 venv-openstack-manila-x86_64-7.4.2~dev60-3.31.1 as a component of SUSE OpenStack Cloud 9 venv-openstack-monasca-ceilometer-x86_64-1.8.2~dev3-3.25.1 as a component of SUSE OpenStack Cloud 9 venv-openstack-monasca-x86_64-2.7.1~dev10-3.23.1 as a component of SUSE OpenStack Cloud 9 venv-openstack-neutron-x86_64-13.0.8~dev164-6.29.1 as a component of SUSE OpenStack Cloud 9 venv-openstack-nova-x86_64-18.3.1~dev91-3.29.1 as a component of SUSE OpenStack Cloud 9 venv-openstack-octavia-x86_64-3.2.3~dev7-4.25.1 as a component of SUSE OpenStack Cloud 9 venv-openstack-sahara-x86_64-9.0.2~dev15-3.25.1 as a component of SUSE OpenStack Cloud 9 venv-openstack-swift-x86_64-2.19.2~dev48-2.20.1 as a component of SUSE OpenStack Cloud 9 crowbar-openstack-6.0+git.1630614261.26948f746-3.37.2 as a component of SUSE OpenStack Cloud Crowbar 9 influxdb-1.3.8-4.6.1 as a component of SUSE OpenStack Cloud Crowbar 9 kibana-4.6.6-4.12.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-cinder-13.0.10~dev23-3.31.2 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-cinder-api-13.0.10~dev23-3.31.2 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-cinder-backup-13.0.10~dev23-3.31.2 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-cinder-scheduler-13.0.10~dev23-3.31.2 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-cinder-volume-13.0.10~dev23-3.31.2 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-ec2-api-7.1.1~dev6-3.3.2 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-ec2-api-api-7.1.1~dev6-3.3.2 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-ec2-api-metadata-7.1.1~dev6-3.3.2 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-ec2-api-s3-7.1.1~dev6-3.3.2 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-heat-gbp-12.0.1~dev4-3.6.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-heat-templates-0.0.0+git.1628179051.7d761bff-3.12.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-horizon-plugin-gbp-ui-12.0.1~dev5-3.6.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-keystone-14.2.1~dev7-3.25.2 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-neutron-gbp-14.0.1~dev19-3.28.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-nova-18.3.1~dev91-3.40.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-nova-api-18.3.1~dev91-3.40.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-nova-cells-18.3.1~dev91-3.40.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-nova-compute-18.3.1~dev91-3.40.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-nova-conductor-18.3.1~dev91-3.40.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-nova-console-18.3.1~dev91-3.40.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-nova-novncproxy-18.3.1~dev91-3.40.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-nova-placement-api-18.3.1~dev91-3.40.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-nova-scheduler-18.3.1~dev91-3.40.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-nova-serialproxy-18.3.1~dev91-3.40.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-nova-vncproxy-18.3.1~dev91-3.40.1 as a component of SUSE OpenStack Cloud Crowbar 9 python-cinder-13.0.10~dev23-3.31.2 as a component of SUSE OpenStack Cloud Crowbar 9 python-ec2api-7.1.1~dev6-3.3.2 as a component of SUSE OpenStack Cloud Crowbar 9 python-eventlet-0.20.0-8.3.1 as a component of SUSE OpenStack Cloud Crowbar 9 python-heat-gbp-12.0.1~dev4-3.6.1 as a component of SUSE OpenStack Cloud Crowbar 9 python-horizon-plugin-gbp-ui-12.0.1~dev5-3.6.1 as a component of SUSE OpenStack Cloud Crowbar 9 python-keystone-14.2.1~dev7-3.25.2 as a component of SUSE OpenStack Cloud Crowbar 9 python-neutron-gbp-14.0.1~dev19-3.28.1 as a component of SUSE OpenStack Cloud Crowbar 9 python-nova-18.3.1~dev91-3.40.1 as a component of SUSE OpenStack Cloud Crowbar 9 ruby2.1-rubygem-puma-2.16.0-4.15.1 as a component of SUSE OpenStack Cloud Crowbar 9 ruby2.1-rubygem-redcarpet-3.2.3-4.3.1 as a component of SUSE OpenStack Cloud Crowbar 9 Redcarpet is a Ruby library for Markdown processing. In Redcarpet before version 3.5.1, there is an injection vulnerability which can enable a cross-site scripting attack. In affected versions no HTML escaping was being performed when processing quotes. This applies even when the `:escape_html` option was being used. This is fixed in version 3.5.1 by the referenced commit. CVE-2020-26298 SUSE OpenStack Cloud 9:ardana-ansible-9.0+git.1628097238.f6cbb0e-3.29.1 SUSE OpenStack Cloud 9:ardana-monasca-9.0+git.1627995376.30bdf85-3.25.1 SUSE OpenStack Cloud 9:influxdb-1.3.8-4.6.1 SUSE OpenStack Cloud 9:kibana-4.6.6-4.12.1 SUSE OpenStack Cloud 9:openstack-cinder-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud 9:openstack-cinder-api-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud 9:openstack-cinder-backup-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud 9:openstack-cinder-scheduler-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud 9:openstack-cinder-volume-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud 9:openstack-ec2-api-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud 9:openstack-ec2-api-api-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud 9:openstack-ec2-api-metadata-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud 9:openstack-ec2-api-s3-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud 9:openstack-heat-gbp-12.0.1~dev4-3.6.1 SUSE OpenStack Cloud 9:openstack-heat-templates-0.0.0+git.1628179051.7d761bff-3.12.1 SUSE OpenStack Cloud 9:openstack-horizon-plugin-gbp-ui-12.0.1~dev5-3.6.1 SUSE OpenStack Cloud 9:openstack-keystone-14.2.1~dev7-3.25.2 SUSE OpenStack Cloud 9:openstack-neutron-gbp-14.0.1~dev19-3.28.1 SUSE OpenStack Cloud 9:openstack-nova-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-api-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-cells-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-compute-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-conductor-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-console-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-novncproxy-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-placement-api-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-scheduler-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-serialproxy-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-vncproxy-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:python-cinder-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud 9:python-ec2api-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud 9:python-eventlet-0.20.0-8.3.1 SUSE OpenStack Cloud 9:python-heat-gbp-12.0.1~dev4-3.6.1 SUSE OpenStack Cloud 9:python-horizon-plugin-gbp-ui-12.0.1~dev5-3.6.1 SUSE OpenStack Cloud 9:python-keystone-14.2.1~dev7-3.25.2 SUSE OpenStack Cloud 9:python-neutron-gbp-14.0.1~dev19-3.28.1 SUSE OpenStack Cloud 9:python-nova-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:venv-openstack-barbican-x86_64-7.0.1~dev24-3.25.1 SUSE OpenStack Cloud 9:venv-openstack-cinder-x86_64-13.0.10~dev23-3.28.1 SUSE OpenStack Cloud 9:venv-openstack-designate-x86_64-7.0.2~dev2-3.25.1 SUSE OpenStack Cloud 9:venv-openstack-glance-x86_64-17.0.1~dev30-3.23.1 SUSE OpenStack Cloud 9:venv-openstack-heat-x86_64-11.0.4~dev4-3.25.1 SUSE OpenStack Cloud 9:venv-openstack-horizon-x86_64-14.1.1~dev11-4.29.1 SUSE OpenStack Cloud 9:venv-openstack-ironic-x86_64-11.1.5~dev17-4.23.1 SUSE OpenStack Cloud 9:venv-openstack-keystone-x86_64-14.2.1~dev7-3.26.1 SUSE OpenStack Cloud 9:venv-openstack-magnum-x86_64-7.2.1~dev1-4.25.1 SUSE OpenStack Cloud 9:venv-openstack-manila-x86_64-7.4.2~dev60-3.31.1 SUSE OpenStack Cloud 9:venv-openstack-monasca-ceilometer-x86_64-1.8.2~dev3-3.25.1 SUSE OpenStack Cloud 9:venv-openstack-monasca-x86_64-2.7.1~dev10-3.23.1 SUSE OpenStack Cloud 9:venv-openstack-neutron-x86_64-13.0.8~dev164-6.29.1 SUSE OpenStack Cloud 9:venv-openstack-nova-x86_64-18.3.1~dev91-3.29.1 SUSE OpenStack Cloud 9:venv-openstack-octavia-x86_64-3.2.3~dev7-4.25.1 SUSE OpenStack Cloud 9:venv-openstack-sahara-x86_64-9.0.2~dev15-3.25.1 SUSE OpenStack Cloud 9:venv-openstack-swift-x86_64-2.19.2~dev48-2.20.1 SUSE OpenStack Cloud Crowbar 9:crowbar-openstack-6.0+git.1630614261.26948f746-3.37.2 SUSE OpenStack Cloud Crowbar 9:influxdb-1.3.8-4.6.1 SUSE OpenStack Cloud Crowbar 9:kibana-4.6.6-4.12.1 SUSE OpenStack Cloud Crowbar 9:openstack-cinder-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud Crowbar 9:openstack-cinder-api-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud Crowbar 9:openstack-cinder-backup-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud Crowbar 9:openstack-cinder-scheduler-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud Crowbar 9:openstack-cinder-volume-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud Crowbar 9:openstack-ec2-api-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud Crowbar 9:openstack-ec2-api-api-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud Crowbar 9:openstack-ec2-api-metadata-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud Crowbar 9:openstack-ec2-api-s3-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud Crowbar 9:openstack-heat-gbp-12.0.1~dev4-3.6.1 SUSE OpenStack Cloud Crowbar 9:openstack-heat-templates-0.0.0+git.1628179051.7d761bff-3.12.1 SUSE OpenStack Cloud Crowbar 9:openstack-horizon-plugin-gbp-ui-12.0.1~dev5-3.6.1 SUSE OpenStack Cloud Crowbar 9:openstack-keystone-14.2.1~dev7-3.25.2 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-gbp-14.0.1~dev19-3.28.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-api-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-cells-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-compute-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-conductor-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-console-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-novncproxy-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-placement-api-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-scheduler-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-serialproxy-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-vncproxy-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:python-cinder-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud Crowbar 9:python-ec2api-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud Crowbar 9:python-eventlet-0.20.0-8.3.1 SUSE OpenStack Cloud Crowbar 9:python-heat-gbp-12.0.1~dev4-3.6.1 SUSE OpenStack Cloud Crowbar 9:python-horizon-plugin-gbp-ui-12.0.1~dev5-3.6.1 SUSE OpenStack Cloud Crowbar 9:python-keystone-14.2.1~dev7-3.25.2 SUSE OpenStack Cloud Crowbar 9:python-neutron-gbp-14.0.1~dev19-3.28.1 SUSE OpenStack Cloud Crowbar 9:python-nova-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:ruby2.1-rubygem-puma-2.16.0-4.15.1 SUSE OpenStack Cloud Crowbar 9:ruby2.1-rubygem-redcarpet-3.2.3-4.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20213729-1/ https://www.suse.com/security/cve/CVE-2020-26298.html CVE-2020-26298 https://bugzilla.suse.com/1180837 SUSE Bug 1180837 Eventlet is a concurrent networking library for Python. A websocket peer may exhaust memory on Eventlet side by sending very large websocket frames. Malicious peer may exhaust memory on Eventlet side by sending highly compressed data frame. A patch in version 0.31.0 restricts websocket frame to reasonable limits. As a workaround, restricting memory usage via OS limits would help against overall machine exhaustion, but there is no workaround to protect Eventlet process. CVE-2021-21419 SUSE OpenStack Cloud 9:ardana-ansible-9.0+git.1628097238.f6cbb0e-3.29.1 SUSE OpenStack Cloud 9:ardana-monasca-9.0+git.1627995376.30bdf85-3.25.1 SUSE OpenStack Cloud 9:influxdb-1.3.8-4.6.1 SUSE OpenStack Cloud 9:kibana-4.6.6-4.12.1 SUSE OpenStack Cloud 9:openstack-cinder-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud 9:openstack-cinder-api-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud 9:openstack-cinder-backup-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud 9:openstack-cinder-scheduler-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud 9:openstack-cinder-volume-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud 9:openstack-ec2-api-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud 9:openstack-ec2-api-api-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud 9:openstack-ec2-api-metadata-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud 9:openstack-ec2-api-s3-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud 9:openstack-heat-gbp-12.0.1~dev4-3.6.1 SUSE OpenStack Cloud 9:openstack-heat-templates-0.0.0+git.1628179051.7d761bff-3.12.1 SUSE OpenStack Cloud 9:openstack-horizon-plugin-gbp-ui-12.0.1~dev5-3.6.1 SUSE OpenStack Cloud 9:openstack-keystone-14.2.1~dev7-3.25.2 SUSE OpenStack Cloud 9:openstack-neutron-gbp-14.0.1~dev19-3.28.1 SUSE OpenStack Cloud 9:openstack-nova-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-api-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-cells-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-compute-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-conductor-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-console-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-novncproxy-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-placement-api-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-scheduler-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-serialproxy-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-vncproxy-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:python-cinder-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud 9:python-ec2api-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud 9:python-eventlet-0.20.0-8.3.1 SUSE OpenStack Cloud 9:python-heat-gbp-12.0.1~dev4-3.6.1 SUSE OpenStack Cloud 9:python-horizon-plugin-gbp-ui-12.0.1~dev5-3.6.1 SUSE OpenStack Cloud 9:python-keystone-14.2.1~dev7-3.25.2 SUSE OpenStack Cloud 9:python-neutron-gbp-14.0.1~dev19-3.28.1 SUSE OpenStack Cloud 9:python-nova-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:venv-openstack-barbican-x86_64-7.0.1~dev24-3.25.1 SUSE OpenStack Cloud 9:venv-openstack-cinder-x86_64-13.0.10~dev23-3.28.1 SUSE OpenStack Cloud 9:venv-openstack-designate-x86_64-7.0.2~dev2-3.25.1 SUSE OpenStack Cloud 9:venv-openstack-glance-x86_64-17.0.1~dev30-3.23.1 SUSE OpenStack Cloud 9:venv-openstack-heat-x86_64-11.0.4~dev4-3.25.1 SUSE OpenStack Cloud 9:venv-openstack-horizon-x86_64-14.1.1~dev11-4.29.1 SUSE OpenStack Cloud 9:venv-openstack-ironic-x86_64-11.1.5~dev17-4.23.1 SUSE OpenStack Cloud 9:venv-openstack-keystone-x86_64-14.2.1~dev7-3.26.1 SUSE OpenStack Cloud 9:venv-openstack-magnum-x86_64-7.2.1~dev1-4.25.1 SUSE OpenStack Cloud 9:venv-openstack-manila-x86_64-7.4.2~dev60-3.31.1 SUSE OpenStack Cloud 9:venv-openstack-monasca-ceilometer-x86_64-1.8.2~dev3-3.25.1 SUSE OpenStack Cloud 9:venv-openstack-monasca-x86_64-2.7.1~dev10-3.23.1 SUSE OpenStack Cloud 9:venv-openstack-neutron-x86_64-13.0.8~dev164-6.29.1 SUSE OpenStack Cloud 9:venv-openstack-nova-x86_64-18.3.1~dev91-3.29.1 SUSE OpenStack Cloud 9:venv-openstack-octavia-x86_64-3.2.3~dev7-4.25.1 SUSE OpenStack Cloud 9:venv-openstack-sahara-x86_64-9.0.2~dev15-3.25.1 SUSE OpenStack Cloud 9:venv-openstack-swift-x86_64-2.19.2~dev48-2.20.1 SUSE OpenStack Cloud Crowbar 9:crowbar-openstack-6.0+git.1630614261.26948f746-3.37.2 SUSE OpenStack Cloud Crowbar 9:influxdb-1.3.8-4.6.1 SUSE OpenStack Cloud Crowbar 9:kibana-4.6.6-4.12.1 SUSE OpenStack Cloud Crowbar 9:openstack-cinder-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud Crowbar 9:openstack-cinder-api-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud Crowbar 9:openstack-cinder-backup-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud Crowbar 9:openstack-cinder-scheduler-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud Crowbar 9:openstack-cinder-volume-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud Crowbar 9:openstack-ec2-api-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud Crowbar 9:openstack-ec2-api-api-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud Crowbar 9:openstack-ec2-api-metadata-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud Crowbar 9:openstack-ec2-api-s3-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud Crowbar 9:openstack-heat-gbp-12.0.1~dev4-3.6.1 SUSE OpenStack Cloud Crowbar 9:openstack-heat-templates-0.0.0+git.1628179051.7d761bff-3.12.1 SUSE OpenStack Cloud Crowbar 9:openstack-horizon-plugin-gbp-ui-12.0.1~dev5-3.6.1 SUSE OpenStack Cloud Crowbar 9:openstack-keystone-14.2.1~dev7-3.25.2 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-gbp-14.0.1~dev19-3.28.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-api-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-cells-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-compute-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-conductor-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-console-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-novncproxy-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-placement-api-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-scheduler-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-serialproxy-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-vncproxy-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:python-cinder-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud Crowbar 9:python-ec2api-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud Crowbar 9:python-eventlet-0.20.0-8.3.1 SUSE OpenStack Cloud Crowbar 9:python-heat-gbp-12.0.1~dev4-3.6.1 SUSE OpenStack Cloud Crowbar 9:python-horizon-plugin-gbp-ui-12.0.1~dev5-3.6.1 SUSE OpenStack Cloud Crowbar 9:python-keystone-14.2.1~dev7-3.25.2 SUSE OpenStack Cloud Crowbar 9:python-neutron-gbp-14.0.1~dev19-3.28.1 SUSE OpenStack Cloud Crowbar 9:python-nova-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:ruby2.1-rubygem-puma-2.16.0-4.15.1 SUSE OpenStack Cloud Crowbar 9:ruby2.1-rubygem-redcarpet-3.2.3-4.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20213729-1/ https://www.suse.com/security/cve/CVE-2021-21419.html CVE-2021-21419 https://bugzilla.suse.com/1185836 SUSE Bug 1185836 An open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user visits a maliciously crafted URL, it could result in Kibana redirecting the user to an arbitrary website. CVE-2021-22141 SUSE OpenStack Cloud 9:ardana-ansible-9.0+git.1628097238.f6cbb0e-3.29.1 SUSE OpenStack Cloud 9:ardana-monasca-9.0+git.1627995376.30bdf85-3.25.1 SUSE OpenStack Cloud 9:influxdb-1.3.8-4.6.1 SUSE OpenStack Cloud 9:kibana-4.6.6-4.12.1 SUSE OpenStack Cloud 9:openstack-cinder-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud 9:openstack-cinder-api-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud 9:openstack-cinder-backup-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud 9:openstack-cinder-scheduler-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud 9:openstack-cinder-volume-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud 9:openstack-ec2-api-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud 9:openstack-ec2-api-api-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud 9:openstack-ec2-api-metadata-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud 9:openstack-ec2-api-s3-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud 9:openstack-heat-gbp-12.0.1~dev4-3.6.1 SUSE OpenStack Cloud 9:openstack-heat-templates-0.0.0+git.1628179051.7d761bff-3.12.1 SUSE OpenStack Cloud 9:openstack-horizon-plugin-gbp-ui-12.0.1~dev5-3.6.1 SUSE OpenStack Cloud 9:openstack-keystone-14.2.1~dev7-3.25.2 SUSE OpenStack Cloud 9:openstack-neutron-gbp-14.0.1~dev19-3.28.1 SUSE OpenStack Cloud 9:openstack-nova-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-api-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-cells-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-compute-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-conductor-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-console-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-novncproxy-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-placement-api-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-scheduler-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-serialproxy-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-vncproxy-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:python-cinder-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud 9:python-ec2api-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud 9:python-eventlet-0.20.0-8.3.1 SUSE OpenStack Cloud 9:python-heat-gbp-12.0.1~dev4-3.6.1 SUSE OpenStack Cloud 9:python-horizon-plugin-gbp-ui-12.0.1~dev5-3.6.1 SUSE OpenStack Cloud 9:python-keystone-14.2.1~dev7-3.25.2 SUSE OpenStack Cloud 9:python-neutron-gbp-14.0.1~dev19-3.28.1 SUSE OpenStack Cloud 9:python-nova-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:venv-openstack-barbican-x86_64-7.0.1~dev24-3.25.1 SUSE OpenStack Cloud 9:venv-openstack-cinder-x86_64-13.0.10~dev23-3.28.1 SUSE OpenStack Cloud 9:venv-openstack-designate-x86_64-7.0.2~dev2-3.25.1 SUSE OpenStack Cloud 9:venv-openstack-glance-x86_64-17.0.1~dev30-3.23.1 SUSE OpenStack Cloud 9:venv-openstack-heat-x86_64-11.0.4~dev4-3.25.1 SUSE OpenStack Cloud 9:venv-openstack-horizon-x86_64-14.1.1~dev11-4.29.1 SUSE OpenStack Cloud 9:venv-openstack-ironic-x86_64-11.1.5~dev17-4.23.1 SUSE OpenStack Cloud 9:venv-openstack-keystone-x86_64-14.2.1~dev7-3.26.1 SUSE OpenStack Cloud 9:venv-openstack-magnum-x86_64-7.2.1~dev1-4.25.1 SUSE OpenStack Cloud 9:venv-openstack-manila-x86_64-7.4.2~dev60-3.31.1 SUSE OpenStack Cloud 9:venv-openstack-monasca-ceilometer-x86_64-1.8.2~dev3-3.25.1 SUSE OpenStack Cloud 9:venv-openstack-monasca-x86_64-2.7.1~dev10-3.23.1 SUSE OpenStack Cloud 9:venv-openstack-neutron-x86_64-13.0.8~dev164-6.29.1 SUSE OpenStack Cloud 9:venv-openstack-nova-x86_64-18.3.1~dev91-3.29.1 SUSE OpenStack Cloud 9:venv-openstack-octavia-x86_64-3.2.3~dev7-4.25.1 SUSE OpenStack Cloud 9:venv-openstack-sahara-x86_64-9.0.2~dev15-3.25.1 SUSE OpenStack Cloud 9:venv-openstack-swift-x86_64-2.19.2~dev48-2.20.1 SUSE OpenStack Cloud Crowbar 9:crowbar-openstack-6.0+git.1630614261.26948f746-3.37.2 SUSE OpenStack Cloud Crowbar 9:influxdb-1.3.8-4.6.1 SUSE OpenStack Cloud Crowbar 9:kibana-4.6.6-4.12.1 SUSE OpenStack Cloud Crowbar 9:openstack-cinder-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud Crowbar 9:openstack-cinder-api-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud Crowbar 9:openstack-cinder-backup-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud Crowbar 9:openstack-cinder-scheduler-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud Crowbar 9:openstack-cinder-volume-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud Crowbar 9:openstack-ec2-api-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud Crowbar 9:openstack-ec2-api-api-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud Crowbar 9:openstack-ec2-api-metadata-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud Crowbar 9:openstack-ec2-api-s3-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud Crowbar 9:openstack-heat-gbp-12.0.1~dev4-3.6.1 SUSE OpenStack Cloud Crowbar 9:openstack-heat-templates-0.0.0+git.1628179051.7d761bff-3.12.1 SUSE OpenStack Cloud Crowbar 9:openstack-horizon-plugin-gbp-ui-12.0.1~dev5-3.6.1 SUSE OpenStack Cloud Crowbar 9:openstack-keystone-14.2.1~dev7-3.25.2 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-gbp-14.0.1~dev19-3.28.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-api-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-cells-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-compute-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-conductor-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-console-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-novncproxy-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-placement-api-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-scheduler-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-serialproxy-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-vncproxy-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:python-cinder-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud Crowbar 9:python-ec2api-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud Crowbar 9:python-eventlet-0.20.0-8.3.1 SUSE OpenStack Cloud Crowbar 9:python-heat-gbp-12.0.1~dev4-3.6.1 SUSE OpenStack Cloud Crowbar 9:python-horizon-plugin-gbp-ui-12.0.1~dev5-3.6.1 SUSE OpenStack Cloud Crowbar 9:python-keystone-14.2.1~dev7-3.25.2 SUSE OpenStack Cloud Crowbar 9:python-neutron-gbp-14.0.1~dev19-3.28.1 SUSE OpenStack Cloud Crowbar 9:python-nova-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:ruby2.1-rubygem-puma-2.16.0-4.15.1 SUSE OpenStack Cloud Crowbar 9:ruby2.1-rubygem-redcarpet-3.2.3-4.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20213729-1/ https://www.suse.com/security/cve/CVE-2021-22141.html CVE-2021-22141 https://bugzilla.suse.com/1186868 SUSE Bug 1186868 Puma is a HTTP 1.1 server for Ruby/Rack applications. Prior to versions 5.5.1 and 4.3.9, using `puma` with a proxy which forwards HTTP header values which contain the LF character could allow HTTP request smugggling. A client could smuggle a request through a proxy, causing the proxy to send a response back to another unknown client. The only proxy which has this behavior, as far as the Puma team is aware of, is Apache Traffic Server. If the proxy uses persistent connections and the client adds another request in via HTTP pipelining, the proxy may mistake it as the first request's body. Puma, however, would see it as two requests, and when processing the second request, send back a response that the proxy does not expect. If the proxy has reused the persistent connection to Puma to send another request for a different client, the second response from the first client will be sent to the second client. This vulnerability was patched in Puma 5.5.1 and 4.3.9. As a workaround, do not use Apache Traffic Server with `puma`. CVE-2021-41136 SUSE OpenStack Cloud 9:ardana-ansible-9.0+git.1628097238.f6cbb0e-3.29.1 SUSE OpenStack Cloud 9:ardana-monasca-9.0+git.1627995376.30bdf85-3.25.1 SUSE OpenStack Cloud 9:influxdb-1.3.8-4.6.1 SUSE OpenStack Cloud 9:kibana-4.6.6-4.12.1 SUSE OpenStack Cloud 9:openstack-cinder-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud 9:openstack-cinder-api-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud 9:openstack-cinder-backup-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud 9:openstack-cinder-scheduler-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud 9:openstack-cinder-volume-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud 9:openstack-ec2-api-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud 9:openstack-ec2-api-api-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud 9:openstack-ec2-api-metadata-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud 9:openstack-ec2-api-s3-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud 9:openstack-heat-gbp-12.0.1~dev4-3.6.1 SUSE OpenStack Cloud 9:openstack-heat-templates-0.0.0+git.1628179051.7d761bff-3.12.1 SUSE OpenStack Cloud 9:openstack-horizon-plugin-gbp-ui-12.0.1~dev5-3.6.1 SUSE OpenStack Cloud 9:openstack-keystone-14.2.1~dev7-3.25.2 SUSE OpenStack Cloud 9:openstack-neutron-gbp-14.0.1~dev19-3.28.1 SUSE OpenStack Cloud 9:openstack-nova-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-api-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-cells-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-compute-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-conductor-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-console-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-novncproxy-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-placement-api-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-scheduler-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-serialproxy-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:openstack-nova-vncproxy-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:python-cinder-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud 9:python-ec2api-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud 9:python-eventlet-0.20.0-8.3.1 SUSE OpenStack Cloud 9:python-heat-gbp-12.0.1~dev4-3.6.1 SUSE OpenStack Cloud 9:python-horizon-plugin-gbp-ui-12.0.1~dev5-3.6.1 SUSE OpenStack Cloud 9:python-keystone-14.2.1~dev7-3.25.2 SUSE OpenStack Cloud 9:python-neutron-gbp-14.0.1~dev19-3.28.1 SUSE OpenStack Cloud 9:python-nova-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud 9:venv-openstack-barbican-x86_64-7.0.1~dev24-3.25.1 SUSE OpenStack Cloud 9:venv-openstack-cinder-x86_64-13.0.10~dev23-3.28.1 SUSE OpenStack Cloud 9:venv-openstack-designate-x86_64-7.0.2~dev2-3.25.1 SUSE OpenStack Cloud 9:venv-openstack-glance-x86_64-17.0.1~dev30-3.23.1 SUSE OpenStack Cloud 9:venv-openstack-heat-x86_64-11.0.4~dev4-3.25.1 SUSE OpenStack Cloud 9:venv-openstack-horizon-x86_64-14.1.1~dev11-4.29.1 SUSE OpenStack Cloud 9:venv-openstack-ironic-x86_64-11.1.5~dev17-4.23.1 SUSE OpenStack Cloud 9:venv-openstack-keystone-x86_64-14.2.1~dev7-3.26.1 SUSE OpenStack Cloud 9:venv-openstack-magnum-x86_64-7.2.1~dev1-4.25.1 SUSE OpenStack Cloud 9:venv-openstack-manila-x86_64-7.4.2~dev60-3.31.1 SUSE OpenStack Cloud 9:venv-openstack-monasca-ceilometer-x86_64-1.8.2~dev3-3.25.1 SUSE OpenStack Cloud 9:venv-openstack-monasca-x86_64-2.7.1~dev10-3.23.1 SUSE OpenStack Cloud 9:venv-openstack-neutron-x86_64-13.0.8~dev164-6.29.1 SUSE OpenStack Cloud 9:venv-openstack-nova-x86_64-18.3.1~dev91-3.29.1 SUSE OpenStack Cloud 9:venv-openstack-octavia-x86_64-3.2.3~dev7-4.25.1 SUSE OpenStack Cloud 9:venv-openstack-sahara-x86_64-9.0.2~dev15-3.25.1 SUSE OpenStack Cloud 9:venv-openstack-swift-x86_64-2.19.2~dev48-2.20.1 SUSE OpenStack Cloud Crowbar 9:crowbar-openstack-6.0+git.1630614261.26948f746-3.37.2 SUSE OpenStack Cloud Crowbar 9:influxdb-1.3.8-4.6.1 SUSE OpenStack Cloud Crowbar 9:kibana-4.6.6-4.12.1 SUSE OpenStack Cloud Crowbar 9:openstack-cinder-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud Crowbar 9:openstack-cinder-api-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud Crowbar 9:openstack-cinder-backup-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud Crowbar 9:openstack-cinder-scheduler-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud Crowbar 9:openstack-cinder-volume-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud Crowbar 9:openstack-ec2-api-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud Crowbar 9:openstack-ec2-api-api-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud Crowbar 9:openstack-ec2-api-metadata-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud Crowbar 9:openstack-ec2-api-s3-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud Crowbar 9:openstack-heat-gbp-12.0.1~dev4-3.6.1 SUSE OpenStack Cloud Crowbar 9:openstack-heat-templates-0.0.0+git.1628179051.7d761bff-3.12.1 SUSE OpenStack Cloud Crowbar 9:openstack-horizon-plugin-gbp-ui-12.0.1~dev5-3.6.1 SUSE OpenStack Cloud Crowbar 9:openstack-keystone-14.2.1~dev7-3.25.2 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-gbp-14.0.1~dev19-3.28.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-api-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-cells-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-compute-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-conductor-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-console-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-novncproxy-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-placement-api-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-scheduler-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-serialproxy-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:openstack-nova-vncproxy-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:python-cinder-13.0.10~dev23-3.31.2 SUSE OpenStack Cloud Crowbar 9:python-ec2api-7.1.1~dev6-3.3.2 SUSE OpenStack Cloud Crowbar 9:python-eventlet-0.20.0-8.3.1 SUSE OpenStack Cloud Crowbar 9:python-heat-gbp-12.0.1~dev4-3.6.1 SUSE OpenStack Cloud Crowbar 9:python-horizon-plugin-gbp-ui-12.0.1~dev5-3.6.1 SUSE OpenStack Cloud Crowbar 9:python-keystone-14.2.1~dev7-3.25.2 SUSE OpenStack Cloud Crowbar 9:python-neutron-gbp-14.0.1~dev19-3.28.1 SUSE OpenStack Cloud Crowbar 9:python-nova-18.3.1~dev91-3.40.1 SUSE OpenStack Cloud Crowbar 9:ruby2.1-rubygem-puma-2.16.0-4.15.1 SUSE OpenStack Cloud Crowbar 9:ruby2.1-rubygem-redcarpet-3.2.3-4.3.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20213729-1/ https://www.suse.com/security/cve/CVE-2021-41136.html CVE-2021-41136 https://bugzilla.suse.com/1191681 SUSE Bug 1191681