PT-2019-20197 · Openstack+6 · Openstack Heat+44

Published 2019-10-04 · Updated 2019-10-04

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions ansible1 versions prior to 9.0+git.1568385829.54601ac ardana-ansible versions prior to 9.0+git.1568385829.54601ac ardana-cluster versions prior to 9.0+git.1568385829.54601ac ardana-db versions prior to 9.0+git.1568385829.54601ac ardana-extensions-nsx versions prior to 9.0+git.1568385829.54601ac ardana-glance versions prior to 9.0+git.1568385829.54601ac ardana-input-model versions prior to 9.0+git.1568385829.54601ac ardana-installer-ui versions prior to 9.0+git.1568385829.54601ac ardana-manila versions prior to 9.0+git.1568385829.54601ac ardana-monasca versions prior to 9.0+git.1568385829.54601ac ardana-neutron versions prior to 9.0+git.1568385829.54601ac ardana-nova versions prior to 9.0+git.1568385829.54601ac ardana-octavia versions prior to 9.0+git.1568385829.54601ac ardana-opsconsole-ui versions prior to 9.0+git.1568385829.54601ac ardana-osconfig versions prior to 9.0+git.1568385829.54601ac ardana-service versions prior to 9.0+git.1568385829.54601ac ardana-tls versions prior to 9.0+git.1568385829.54601ac crowbar-core versions prior to 6.0+git.1569587091.3f083d63c crowbar-ha versions prior to 6.0+git.1569587091.3f083d63c crowbar-openstack versions prior to 6.0+git.1569587091.3f083d63c crowbar-ui versions prior to 6.0+git.1569587091.3f083d63c grafana versions prior to 6.2.5 novnc versions prior to 1.1.0 openstack-cinder versions prior to cinder-13.0.7.dev16 openstack-dashboard versions prior to horizon-14.0.4.dev11 openstack-designate versions prior to designate-7.0.1.dev22 openstack-glance versions prior to glance-17.0.1.dev30 openstack-heat versions prior to openstack-heat-11.0.3.dev23 openstack-horizon-plugin-heat-ui versions prior to horizon-14.0.4.dev11 openstack-horizon-plugin-monasca-ui versions prior to horizon-14.0.4.dev11 openstack-ironic versions prior to ironic-11.1.4.dev15 openstack-ironic-python-agent versions prior to ironic-python-agent-3.3.3.dev5 openstack-keystone versions prior to keystone-14.1.1.dev16 openstack-manila versions prior to manila-7.3.1.dev6 openstack-neutron versions prior to neutron-13.0.5.dev50 openstack-neutron-gbp versions prior to neutron-13.0.5.dev50 openstack-nova versions prior to nova-18.2.3.dev22 openstack-octavia versions prior to octavia-3.1.2.dev45 openstack-sahara versions prior to sahara-9.0.2.dev12 openstack-tempest versions prior to 1.14.1dev9 openstack-watcher versions prior to 1.12.1dev19 python-ardana-configurationprocessor versions prior to 9.0+git.1568385829.54601ac python-cinder-tempest-plugin versions prior to cinder-13.0.7.dev16 python-urllib3 versions prior to 9.0+git.1568385829.54601ac rubygem-easy diff versions prior to 1.0.0

Description The update for the listed software components includes several fixes and improvements. One of the key fixes is related to IPv6 addresses, which need to be wrapped in the form scp user@[ipv6address]:port when used in the scp command. Additionally, there are updates to various components, including ardana-ansible, crowbar-core, grafana, and openstack-keystone, among others. These updates address issues such as fixing broken links, improving database handling, and enhancing security features. However, the exact nature of the vulnerability is not explicitly stated in the provided information.

Recommendations For each affected version, the recommendation is to update to the latest version that includes the fixes and improvements mentioned. Specifically:

• Update ansible1 to version 9.0+git.1568385829.54601ac or later.
• Update ardana-ansible to version 9.0+git.1568385829.54601ac or later.
• Update ardana-cluster to version 9.0+git.1568385829.54601ac or later.
• Update ardana-db to version 9.0+git.1568385829.54601ac or later.
• Update ardana-extensions-nsx to version 9.0+git.1568385829.54601ac or later.
• Update ardana-glance to version 9.0+git.1568385829.54601ac or later.
• Update ardana-input-model to version 9.0+git.1568385829.54601ac or later.
• Update ardana-installer-ui to version 9.0+git.1568385829.54601ac or later.
• Update ardana-manila to version 9.0+git.1568385829.54601ac or later.
• Update ardana-monasca to version 9.0+git.1568385829.54601ac or later.
• Update ardana-neutron to version 9.0+git.1568385829.54601ac or later.
• Update ardana-nova to version 9.0+git.1568385829.54601ac or later.
• Update ardana-octavia to version 9.0+git.1568385829.54601ac or later.
• Update ardana-opsconsole-ui to version 9.0+git.1568385829.54601ac or later.
• Update ardana-osconfig to version 9.0+git.1568385829.54601ac or later.
• Update ardana-service to version 9.0+git.1568385829.54601ac or later.
• Update ardana-tls to version 9.0+git.1568385829.54601ac or later.
• Update crowbar-core to version 6.0+git.1569587091.3f083d63c or later.
• Update crowbar-ha to version 6.0+git.1569587091.3f083d63c or later.
• Update crowbar-openstack to version 6.0+git.1569587091.3f083d63c or later.
• Update crowbar-ui to version 6.0+git.1569587091.3f083d63c or later.
• Update grafana to version 6.2.5 or later.
• Update novnc to version 1.1.0 or later.
• Update openstack-cinder to version cinder-13.0.7.dev16 or later.
• Update openstack-dashboard to version horizon-14.0.4.dev11 or later.
• Update openstack-designate to version designate-7.0.1.dev22 or later.
• Update openstack-glance to version glance-17.0.1.dev30 or later.
• Update openstack-heat to version openstack-heat-11.0.3.dev23 or later.
• Update openstack-horizon-plugin-heat-ui to version horizon-14.0.4.dev11 or later.
• Update openstack-horizon-plugin-monasca-ui to version horizon-14.0.4.dev11 or later.
• Update openstack-ironic to version ironic-11.1.4.dev15 or later.
• Update openstack-ironic-python-agent to version ironic-python-agent-3.3.3.dev5 or later.
• Update openstack-keystone to version keystone-14.1.1.dev16 or later.
• Update openstack-manila to version manila-7.3.1.dev6 or later.
• Update openstack-neutron to version neutron-13.0.5.dev50 or later.
• Update openstack-neutron-gbp to version neutron-13.0.5.dev50 or later.
• Update openstack-nova to version nova-18.2.3.dev22 or later.
• Update openstack-octavia to version octavia-3.1.2.dev45 or later.
• Update openstack-sahara to version sahara-9.0.2.dev12 or later.
• Update openstack-tempest to version 1.14.1~dev9 or later.
• Update openstack-watcher to version 1.12.1~dev19 or later.
• Update python-ardana-configurationprocessor to version 9.0+git.1568385829.54601ac or later.
• Update python-cinder-tempest-plugin to version cinder-13.0.7.dev16 or later.
• Update python-urllib3 to version 9.0+git.1568385829.54601ac or later.
• Update rubygem-easy diff to version 1.0.0 or later.

Related Identifiers

SUSE-SU-2019:2562-1

Affected Products

Ansible

Ardana-Ansible

Ardana-Cluster

Ardana-Db

Ardana-Extensions-Nsx

Ardana-Glance

Ardana-Input-Model

Ardana-Installer-Ui

Ardana-Manila

Ardana-Monasca

Ardana-Neutron

Ardana-Nova

Ardana-Octavia

Ardana-Opsconsole-Ui

Ardana-Osconfig

Ardana-Service

Ardana-Tls

Crowbar-Core

Crowbar-Ha

Crowbar-Openstack

Crowbar-Ui

Grafana

Novnc

Openstack Cinder

Openstack Dashboard

Openstack Designate

Openstack Glance

Openstack Heat

Openstack-Horizon-Plugin-Heat-Ui

Openstack-Horizon-Plugin-Monasca-Ui

Openstack Ironic

Openstack-Ironic-Python-Agent

Openstack Keystone

Openstack Manila

Openstack Neutron

Openstack-Neutron-Gbp

Openstack Nova

Openstack Octavia

Openstack-Sahara

Openstack-Tempest

Openstack-Watcher

Python-Ardana-Configurationprocessor

Python-Cinder-Tempest-Plugin

Python-Urllib3

Rubygem-Easy Diff

References · 79

• https://osv.dev/vulnerability/SUSE-SU-2019:2562-1 · Vendor Advisory
• https://bugzilla.suse.com/1118900 · Note
• https://bugzilla.suse.com/1152032 · Note
• https://bugzilla.suse.com/1150895 · Note
• https://bugzilla.suse.com/SOC-4183 · Note
• https://bugzilla.suse.com/SOC-9616 · Note
• https://bugzilla.suse.com/SOC-6397 · Note
• https://bugzilla.suse.com/1120657 · Note
• https://bugzilla.suse.com/1148158 · Note
• https://bugzilla.suse.com/SOC-10273 · Note
• https://bugzilla.suse.com/SOC-10072 · Note
• https://bugzilla.suse.com/SOC-10010 · Note
• https://bugzilla.suse.com/SOC-10191 · Note
• https://bugzilla.suse.com/SOC-10470 · Note
• https://bugzilla.suse.com/SOC-10456 · Note