Security update for openstack-barbican, openstack-heat-gbp, openstack-horizon-plugin-gbp-ui, openstack-neutron, openstack-neutron-gbp SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:0070-1 Final 1 1 2023-01-11T14:40:56Z current 2023-01-11T14:40:56Z 2023-01-11T14:40:56Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for openstack-barbican, openstack-heat-gbp, openstack-horizon-plugin-gbp-ui, openstack-neutron, openstack-neutron-gbp This update for openstack-barbican, openstack-heat-gbp, openstack-horizon-plugin-gbp-ui, openstack-neutron, openstack-neutron-gbp fixes the following issues: Security fixes included on this update: openstack-barbican: - CVE-2022-3100: Fixed an access policy bypass via query string injection (bsc#1203873). spark: - CVE-2022-33891: Fixed a command injection vulnerability via Spark UI (bsc#1204326). Non Security fixes: Changes in openstack-barbican: - Add patch to address access policy bypass via query string injection. (bsc#1203873, CVE-2022-3100.) Changes in openstack-heat-gbp: - Update to version group-based-policy-automation-14.0.1.dev5: * Add support for zed Changes in openstack-horizon-plugin-gbp-ui: - Update to version group-based-policy-ui-14.0.1.dev6: * Add support for zed - Update to version group-based-policy-ui-14.0.1.dev5: * fix launch instance GBP issue Changes in openstack-neutron: - Update to version neutron-13.0.8.dev209: * Update documentation link for openSUSE index - Update to version neutron-13.0.8.dev208: * fix: Fix url of Floodlight - Update to version neutron-13.0.8.dev207: * Mellanox\_eth.img url expires, remove the mellanox\_eth.img node Changes in openstack-neutron: - Update to version neutron-13.0.8.dev209: * Update documentation link for openSUSE index - Update to version neutron-13.0.8.dev208: * fix: Fix url of Floodlight - Update to version neutron-13.0.8.dev207: * Mellanox\_eth.img url expires, remove the mellanox\_eth.img node Changes in openstack-neutron-gbp: - Update to version group-based-policy-14.0.1.dev52: * Fix keystone notification listener - Update to version group-based-policy-14.0.1.dev51: * Support for epg subnet 2014.2.0rc1 - Update to version group-based-policy-14.0.1.dev50: * Use top-level contract references 2014.2.rc1 - Update to version group-based-policy-14.0.1.dev48: * Remove py37 jobs from gate 2014.2rc1 Changes in spark: - Avoid using bash -c in ShellBasedGroupsMappingProvider. (bsc#1204326, CVE-2022-33891) - Add _constraints to prevent build from running out of disk space - Update to version group-based-policy-14.0.1.dev47: * Remove python39 from voting The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2023-70,SUSE-OpenStack-Cloud-9-2023-70,SUSE-OpenStack-Cloud-Crowbar-9-2023-70 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20230070-1/ Link for SUSE-SU-2023:0070-1 https://lists.suse.com/pipermail/sle-security-updates/2023-January/013456.html E-Mail link for SUSE-SU-2023:0070-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1203873 SUSE Bug 1203873 https://bugzilla.suse.com/1204326 SUSE Bug 1204326 https://www.suse.com/security/cve/CVE-2022-3100/ SUSE CVE CVE-2022-3100 page https://www.suse.com/security/cve/CVE-2022-33891/ SUSE CVE CVE-2022-33891 page SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 openstack-barbican-7.0.1~dev24-3.17.1 openstack-barbican-api-7.0.1~dev24-3.17.1 openstack-barbican-keystone-listener-7.0.1~dev24-3.17.1 openstack-barbican-retry-7.0.1~dev24-3.17.1 openstack-barbican-test-7.0.1~dev24-3.17.1 openstack-barbican-worker-7.0.1~dev24-3.17.1 openstack-heat-gbp-14.0.1~dev5-3.12.1 openstack-heat-gbp-test-14.0.1~dev5-3.12.1 openstack-horizon-plugin-gbp-ui-14.0.1~dev6-3.15.1 openstack-horizon-plugin-gbp-ui-test-14.0.1~dev6-3.15.1 openstack-neutron-13.0.8~dev209-3.43.1 openstack-neutron-dhcp-agent-13.0.8~dev209-3.43.1 openstack-neutron-gbp-14.0.1~dev52-3.37.1 openstack-neutron-gbp-test-14.0.1~dev52-3.37.1 openstack-neutron-ha-tool-13.0.8~dev209-3.43.1 openstack-neutron-l3-agent-13.0.8~dev209-3.43.1 openstack-neutron-linuxbridge-agent-13.0.8~dev209-3.43.1 openstack-neutron-macvtap-agent-13.0.8~dev209-3.43.1 openstack-neutron-metadata-agent-13.0.8~dev209-3.43.1 openstack-neutron-metering-agent-13.0.8~dev209-3.43.1 openstack-neutron-openvswitch-agent-13.0.8~dev209-3.43.1 openstack-neutron-server-13.0.8~dev209-3.43.1 openstack-neutron-test-13.0.8~dev209-3.43.1 python-barbican-7.0.1~dev24-3.17.1 python-heat-gbp-14.0.1~dev5-3.12.1 python-horizon-plugin-gbp-ui-14.0.1~dev6-3.15.1 python-neutron-13.0.8~dev209-3.43.1 python-neutron-gbp-14.0.1~dev52-3.37.1 spark-2.2.3-5.12.1 venv-openstack-barbican-x86_64-7.0.1~dev24-3.37.1 venv-openstack-horizon-x86_64-14.1.1~dev11-4.43.1 venv-openstack-neutron-x86_64-13.0.8~dev209-6.43.1 venv-openstack-nova-x86_64-18.3.1~dev92-3.43.1 openstack-barbican-7.0.1~dev24-3.17.1 as a component of SUSE OpenStack Cloud 9 openstack-barbican-api-7.0.1~dev24-3.17.1 as a component of SUSE OpenStack Cloud 9 openstack-barbican-keystone-listener-7.0.1~dev24-3.17.1 as a component of SUSE OpenStack Cloud 9 openstack-barbican-retry-7.0.1~dev24-3.17.1 as a component of SUSE OpenStack Cloud 9 openstack-barbican-worker-7.0.1~dev24-3.17.1 as a component of SUSE OpenStack Cloud 9 openstack-heat-gbp-14.0.1~dev5-3.12.1 as a component of SUSE OpenStack Cloud 9 openstack-horizon-plugin-gbp-ui-14.0.1~dev6-3.15.1 as a component of SUSE OpenStack Cloud 9 openstack-neutron-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud 9 openstack-neutron-dhcp-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud 9 openstack-neutron-gbp-14.0.1~dev52-3.37.1 as a component of SUSE OpenStack Cloud 9 openstack-neutron-ha-tool-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud 9 openstack-neutron-l3-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud 9 openstack-neutron-linuxbridge-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud 9 openstack-neutron-macvtap-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud 9 openstack-neutron-metadata-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud 9 openstack-neutron-metering-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud 9 openstack-neutron-openvswitch-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud 9 openstack-neutron-server-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud 9 python-barbican-7.0.1~dev24-3.17.1 as a component of SUSE OpenStack Cloud 9 python-heat-gbp-14.0.1~dev5-3.12.1 as a component of SUSE OpenStack Cloud 9 python-horizon-plugin-gbp-ui-14.0.1~dev6-3.15.1 as a component of SUSE OpenStack Cloud 9 python-neutron-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud 9 python-neutron-gbp-14.0.1~dev52-3.37.1 as a component of SUSE OpenStack Cloud 9 spark-2.2.3-5.12.1 as a component of SUSE OpenStack Cloud 9 venv-openstack-barbican-x86_64-7.0.1~dev24-3.37.1 as a component of SUSE OpenStack Cloud 9 venv-openstack-horizon-x86_64-14.1.1~dev11-4.43.1 as a component of SUSE OpenStack Cloud 9 venv-openstack-neutron-x86_64-13.0.8~dev209-6.43.1 as a component of SUSE OpenStack Cloud 9 venv-openstack-nova-x86_64-18.3.1~dev92-3.43.1 as a component of SUSE OpenStack Cloud 9 openstack-barbican-7.0.1~dev24-3.17.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-barbican-api-7.0.1~dev24-3.17.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-barbican-keystone-listener-7.0.1~dev24-3.17.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-barbican-retry-7.0.1~dev24-3.17.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-barbican-worker-7.0.1~dev24-3.17.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-heat-gbp-14.0.1~dev5-3.12.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-horizon-plugin-gbp-ui-14.0.1~dev6-3.15.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-neutron-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-neutron-dhcp-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-neutron-gbp-14.0.1~dev52-3.37.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-neutron-ha-tool-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-neutron-l3-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-neutron-linuxbridge-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-neutron-macvtap-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-neutron-metadata-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-neutron-metering-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-neutron-openvswitch-agent-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 openstack-neutron-server-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 python-barbican-7.0.1~dev24-3.17.1 as a component of SUSE OpenStack Cloud Crowbar 9 python-heat-gbp-14.0.1~dev5-3.12.1 as a component of SUSE OpenStack Cloud Crowbar 9 python-horizon-plugin-gbp-ui-14.0.1~dev6-3.15.1 as a component of SUSE OpenStack Cloud Crowbar 9 python-neutron-13.0.8~dev209-3.43.1 as a component of SUSE OpenStack Cloud Crowbar 9 python-neutron-gbp-14.0.1~dev52-3.37.1 as a component of SUSE OpenStack Cloud Crowbar 9 spark-2.2.3-5.12.1 as a component of SUSE OpenStack Cloud Crowbar 9 A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API. CVE-2022-3100 SUSE OpenStack Cloud 9:openstack-barbican-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud 9:openstack-barbican-api-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud 9:openstack-barbican-keystone-listener-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud 9:openstack-barbican-retry-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud 9:openstack-barbican-worker-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud 9:openstack-heat-gbp-14.0.1~dev5-3.12.1 SUSE OpenStack Cloud 9:openstack-horizon-plugin-gbp-ui-14.0.1~dev6-3.15.1 SUSE OpenStack Cloud 9:openstack-neutron-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-dhcp-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-gbp-14.0.1~dev52-3.37.1 SUSE OpenStack Cloud 9:openstack-neutron-ha-tool-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-l3-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-linuxbridge-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-macvtap-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-metadata-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-metering-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-openvswitch-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-server-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:python-barbican-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud 9:python-heat-gbp-14.0.1~dev5-3.12.1 SUSE OpenStack Cloud 9:python-horizon-plugin-gbp-ui-14.0.1~dev6-3.15.1 SUSE OpenStack Cloud 9:python-neutron-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:python-neutron-gbp-14.0.1~dev52-3.37.1 SUSE OpenStack Cloud 9:spark-2.2.3-5.12.1 SUSE OpenStack Cloud 9:venv-openstack-barbican-x86_64-7.0.1~dev24-3.37.1 SUSE OpenStack Cloud 9:venv-openstack-horizon-x86_64-14.1.1~dev11-4.43.1 SUSE OpenStack Cloud 9:venv-openstack-neutron-x86_64-13.0.8~dev209-6.43.1 SUSE OpenStack Cloud 9:venv-openstack-nova-x86_64-18.3.1~dev92-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-barbican-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud Crowbar 9:openstack-barbican-api-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud Crowbar 9:openstack-barbican-keystone-listener-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud Crowbar 9:openstack-barbican-retry-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud Crowbar 9:openstack-barbican-worker-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud Crowbar 9:openstack-heat-gbp-14.0.1~dev5-3.12.1 SUSE OpenStack Cloud Crowbar 9:openstack-horizon-plugin-gbp-ui-14.0.1~dev6-3.15.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-dhcp-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-gbp-14.0.1~dev52-3.37.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-ha-tool-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-l3-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-linuxbridge-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-macvtap-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-metadata-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-metering-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-openvswitch-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-server-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:python-barbican-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud Crowbar 9:python-heat-gbp-14.0.1~dev5-3.12.1 SUSE OpenStack Cloud Crowbar 9:python-horizon-plugin-gbp-ui-14.0.1~dev6-3.15.1 SUSE OpenStack Cloud Crowbar 9:python-neutron-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:python-neutron-gbp-14.0.1~dev52-3.37.1 SUSE OpenStack Cloud Crowbar 9:spark-2.2.3-5.12.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230070-1/ https://www.suse.com/security/cve/CVE-2022-3100.html CVE-2022-3100 https://bugzilla.suse.com/1203873 SUSE Bug 1203873 The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilter can allow someone to perform impersonation by providing an arbitrary user name. A malicious user might then be able to reach a permission check function that will ultimately build a Unix shell command based on their input, and execute it. This will result in arbitrary shell command execution as the user Spark is currently running as. This affects Apache Spark versions 3.0.3 and earlier, versions 3.1.1 to 3.1.2, and versions 3.2.0 to 3.2.1. CVE-2022-33891 SUSE OpenStack Cloud 9:openstack-barbican-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud 9:openstack-barbican-api-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud 9:openstack-barbican-keystone-listener-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud 9:openstack-barbican-retry-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud 9:openstack-barbican-worker-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud 9:openstack-heat-gbp-14.0.1~dev5-3.12.1 SUSE OpenStack Cloud 9:openstack-horizon-plugin-gbp-ui-14.0.1~dev6-3.15.1 SUSE OpenStack Cloud 9:openstack-neutron-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-dhcp-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-gbp-14.0.1~dev52-3.37.1 SUSE OpenStack Cloud 9:openstack-neutron-ha-tool-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-l3-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-linuxbridge-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-macvtap-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-metadata-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-metering-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-openvswitch-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:openstack-neutron-server-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:python-barbican-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud 9:python-heat-gbp-14.0.1~dev5-3.12.1 SUSE OpenStack Cloud 9:python-horizon-plugin-gbp-ui-14.0.1~dev6-3.15.1 SUSE OpenStack Cloud 9:python-neutron-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud 9:python-neutron-gbp-14.0.1~dev52-3.37.1 SUSE OpenStack Cloud 9:spark-2.2.3-5.12.1 SUSE OpenStack Cloud 9:venv-openstack-barbican-x86_64-7.0.1~dev24-3.37.1 SUSE OpenStack Cloud 9:venv-openstack-horizon-x86_64-14.1.1~dev11-4.43.1 SUSE OpenStack Cloud 9:venv-openstack-neutron-x86_64-13.0.8~dev209-6.43.1 SUSE OpenStack Cloud 9:venv-openstack-nova-x86_64-18.3.1~dev92-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-barbican-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud Crowbar 9:openstack-barbican-api-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud Crowbar 9:openstack-barbican-keystone-listener-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud Crowbar 9:openstack-barbican-retry-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud Crowbar 9:openstack-barbican-worker-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud Crowbar 9:openstack-heat-gbp-14.0.1~dev5-3.12.1 SUSE OpenStack Cloud Crowbar 9:openstack-horizon-plugin-gbp-ui-14.0.1~dev6-3.15.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-dhcp-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-gbp-14.0.1~dev52-3.37.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-ha-tool-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-l3-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-linuxbridge-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-macvtap-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-metadata-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-metering-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-openvswitch-agent-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:openstack-neutron-server-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:python-barbican-7.0.1~dev24-3.17.1 SUSE OpenStack Cloud Crowbar 9:python-heat-gbp-14.0.1~dev5-3.12.1 SUSE OpenStack Cloud Crowbar 9:python-horizon-plugin-gbp-ui-14.0.1~dev6-3.15.1 SUSE OpenStack Cloud Crowbar 9:python-neutron-13.0.8~dev209-3.43.1 SUSE OpenStack Cloud Crowbar 9:python-neutron-gbp-14.0.1~dev52-3.37.1 SUSE OpenStack Cloud Crowbar 9:spark-2.2.3-5.12.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230070-1/ https://www.suse.com/security/cve/CVE-2022-33891.html CVE-2022-33891 https://bugzilla.suse.com/1204326 SUSE Bug 1204326