Security update for openstack-neutron SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:1884-1 Final 1 1 2022-05-31T06:55:12Z current 2022-05-31T06:55:12Z 2022-05-31T06:55:12Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for openstack-neutron This update for openstack-neutron fixes the following issues: - CVE-2021-40797: Fixed routes middleware memory leak for nonexistent controllers (bsc#1190339). - CVE-2021-40085: Fixed arbitrary dnsmasq reconfiguration via extra_dhcp_opts (bsc#1189794). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). HPE-Helion-OpenStack-8-2022-1884,SUSE-2022-1884,SUSE-OpenStack-Cloud-8-2022-1884,SUSE-OpenStack-Cloud-Crowbar-8-2022-1884 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20221884-1/ Link for SUSE-SU-2022:1884-1 https://lists.suse.com/pipermail/sle-security-updates/2022-May/011199.html E-Mail link for SUSE-SU-2022:1884-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1189794 SUSE Bug 1189794 https://bugzilla.suse.com/1190339 SUSE Bug 1190339 https://www.suse.com/security/cve/CVE-2021-40085/ SUSE CVE CVE-2021-40085 page https://www.suse.com/security/cve/CVE-2021-40797/ SUSE CVE CVE-2021-40797 page HPE Helion OpenStack 8 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 openstack-neutron-11.0.9~dev69-3.43.1 openstack-neutron-dhcp-agent-11.0.9~dev69-3.43.1 openstack-neutron-doc-11.0.9~dev69-3.43.1 openstack-neutron-ha-tool-11.0.9~dev69-3.43.1 openstack-neutron-l3-agent-11.0.9~dev69-3.43.1 openstack-neutron-linuxbridge-agent-11.0.9~dev69-3.43.1 openstack-neutron-macvtap-agent-11.0.9~dev69-3.43.1 openstack-neutron-metadata-agent-11.0.9~dev69-3.43.1 openstack-neutron-metering-agent-11.0.9~dev69-3.43.1 openstack-neutron-openvswitch-agent-11.0.9~dev69-3.43.1 openstack-neutron-server-11.0.9~dev69-3.43.1 python-neutron-11.0.9~dev69-3.43.1 openstack-neutron-test-11.0.9~dev69-3.43.1 openstack-neutron-11.0.9~dev69-3.43.1 as a component of HPE Helion OpenStack 8 openstack-neutron-dhcp-agent-11.0.9~dev69-3.43.1 as a component of HPE Helion OpenStack 8 openstack-neutron-doc-11.0.9~dev69-3.43.1 as a component of HPE Helion OpenStack 8 openstack-neutron-ha-tool-11.0.9~dev69-3.43.1 as a component of HPE Helion OpenStack 8 openstack-neutron-l3-agent-11.0.9~dev69-3.43.1 as a component of HPE Helion OpenStack 8 openstack-neutron-linuxbridge-agent-11.0.9~dev69-3.43.1 as a component of HPE Helion OpenStack 8 openstack-neutron-macvtap-agent-11.0.9~dev69-3.43.1 as a component of HPE Helion OpenStack 8 openstack-neutron-metadata-agent-11.0.9~dev69-3.43.1 as a component of HPE Helion OpenStack 8 openstack-neutron-metering-agent-11.0.9~dev69-3.43.1 as a component of HPE Helion OpenStack 8 openstack-neutron-openvswitch-agent-11.0.9~dev69-3.43.1 as a component of HPE Helion OpenStack 8 openstack-neutron-server-11.0.9~dev69-3.43.1 as a component of HPE Helion OpenStack 8 python-neutron-11.0.9~dev69-3.43.1 as a component of HPE Helion OpenStack 8 openstack-neutron-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud 8 openstack-neutron-dhcp-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud 8 openstack-neutron-doc-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud 8 openstack-neutron-ha-tool-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud 8 openstack-neutron-l3-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud 8 openstack-neutron-linuxbridge-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud 8 openstack-neutron-macvtap-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud 8 openstack-neutron-metadata-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud 8 openstack-neutron-metering-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud 8 openstack-neutron-openvswitch-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud 8 openstack-neutron-server-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud 8 python-neutron-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud 8 openstack-neutron-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-neutron-dhcp-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-neutron-doc-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-neutron-ha-tool-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-neutron-l3-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-neutron-linuxbridge-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-neutron-macvtap-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-neutron-metadata-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-neutron-metering-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-neutron-openvswitch-agent-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 openstack-neutron-server-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 python-neutron-11.0.9~dev69-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 8 An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value. CVE-2021-40085 HPE Helion OpenStack 8:openstack-neutron-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-dhcp-agent-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-doc-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-ha-tool-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-l3-agent-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-linuxbridge-agent-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-macvtap-agent-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-metadata-agent-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-metering-agent-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-openvswitch-agent-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-server-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:python-neutron-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-dhcp-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-doc-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-ha-tool-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-l3-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-linuxbridge-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-macvtap-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-metadata-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-metering-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-openvswitch-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-server-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:python-neutron-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-dhcp-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-doc-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-ha-tool-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-l3-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-linuxbridge-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-macvtap-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metadata-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metering-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-openvswitch-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-server-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:python-neutron-11.0.9~dev69-3.43.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221884-1/ https://www.suse.com/security/cve/CVE-2021-40085.html CVE-2021-40085 https://bugzilla.suse.com/1189794 SUSE Bug 1189794 An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. By making API requests involving nonexistent controllers, an authenticated user may cause the API worker to consume increasing amounts of memory, resulting in API performance degradation or denial of service. CVE-2021-40797 HPE Helion OpenStack 8:openstack-neutron-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-dhcp-agent-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-doc-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-ha-tool-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-l3-agent-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-linuxbridge-agent-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-macvtap-agent-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-metadata-agent-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-metering-agent-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-openvswitch-agent-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:openstack-neutron-server-11.0.9~dev69-3.43.1 HPE Helion OpenStack 8:python-neutron-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-dhcp-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-doc-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-ha-tool-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-l3-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-linuxbridge-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-macvtap-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-metadata-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-metering-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-openvswitch-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:openstack-neutron-server-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud 8:python-neutron-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-dhcp-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-doc-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-ha-tool-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-l3-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-linuxbridge-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-macvtap-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metadata-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-metering-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-openvswitch-agent-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:openstack-neutron-server-11.0.9~dev69-3.43.1 SUSE OpenStack Cloud Crowbar 8:python-neutron-11.0.9~dev69-3.43.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221884-1/ https://www.suse.com/security/cve/CVE-2021-40797.html CVE-2021-40797 https://bugzilla.suse.com/1190339 SUSE Bug 1190339