SUSE-SU-2018:1103-1: Security update for crowbar-openstack

[sle-security-updates at lists.suse.com]

   SUSE Security Update: Security update for crowbar-openstack
______________________________________________________________________________

Announcement ID:    SUSE-SU-2018:1103-1
Rating:             low
References:         #1057086 #1083903 
Cross-References:   CVE-2018-1000115
Affected Products:
                    SUSE OpenStack Cloud 6
______________________________________________________________________________

   An update that solves one vulnerability and has one errata
   is now available.

Description:


   This update for crowbar-openstack provides the following fixes:

   - memcached: Disable UDP by default to prevent spoofed traffic
     amplification DoS (bsc#1083903, CVE-2018-1000115)
   - nova: Add resource limits for api and compute (bsc#1057086)


Patch Instructions:

   To install this SUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE OpenStack Cloud 6:

      zypper in -t patch SUSE-OpenStack-Cloud-6-2018-752=1



Package List:

   - SUSE OpenStack Cloud 6 (noarch):

      crowbar-openstack-3.0+git.1521471181.2b39130da-39.10.1


References:

   https://www.suse.com/security/cve/CVE-2018-1000115.html
   https://bugzilla.suse.com/1057086
   https://bugzilla.suse.com/1083903