SUSE-SU-2018:2761-1: moderate: Security update for OpenStack

sle-security-updates at lists.suse.com sle-security-updates at lists.suse.com
Thu Sep 20 04:11:33 MDT 2018


   SUSE Security Update: Security update for OpenStack
______________________________________________________________________________

Announcement ID:    SUSE-SU-2018:2761-1
Rating:             moderate
References:         #1084362 #1102151 
Cross-References:   CVE-2018-14432
Affected Products:
                    SUSE OpenStack Cloud Crowbar 8
                    SUSE OpenStack Cloud 8
                    HPE Helion Openstack 8
______________________________________________________________________________

   An update that solves one vulnerability and has one errata
   is now available.

Description:

   This update for OpenStack fixes the following issues:

   The following security issue with openstack-keystone has been fixed:

   - CVE-2018-14432: Reduce duplication in federated authentication APIs.
     (bsc#1102151)

   Additionally, the following non-security issues have been fixed:

   aodh:

   - Support same projects in different domain.

   barbican:

   - Add zuulv3 to Pike.

   cinder:

   - Empty option value maybe cause Unity driver failed to initialize.
   - GoodnessWeigher schedules non-type volumes.
   - Fix quota error when deleting temporary volume.
   - Fix cinder quota-usage error.
   - Unity: Return logged-out initiators.
   - Correct S-Series to DS-Series systems.
   - Update storage backends supported for Lenovo.
   - Unity: Add support of removing empty host.
   - NetApp: Fix to support SVM scoped permissions.
   - NetApp ONTAP iSCSI: Force exception on online extend.
   - NetApp ONTAP: Set new sub-lun clone limit for ONTAP driver.

   dashboard:

   - Make @memoize thread-aware.

   designate:

   - Add provides to handle installation of mdns and producer seamlessly.
   - Fix service files.
   - Install a default pools.yaml.

   glance:

   - doc: Modify the description for the command.
   - Make ImageTarget behave like a dictionary.
   - Add barbican-tempest experimental job.

   heat:

   - Fixing unicode issue when to\_dict is called on py2.7 env.
   - Ignore NotFound error in prepare\_for\_replace.
   - Reset resource replaced\_by field for rollback.
   - Ignore RESOLVE translation errors when translating before\_props.
   - Ignore errors in purging events.

   heat-templates:

   - Deprecate hooks in heat-templates.

   horizon-plugin-designate-ui:

   - Install all designate panels that are available.

   horizon-plugin-freezer-ui:

   - Avoid using deprecated opt in Web-UI.

   horizon-plugin-gbp-ui:

   - Fix patching of create instance dialog.

   neutron-lbaas-dashboard:

   - Remove custom zuul jobs.

   horizon-plugin-trove-ui:

   - Update UPPER\_CONSTRAINTS\_FILE for stable/pike.

   ironic:

   - Fix error when deleting a non-existent port.
   - Tear down console during unprovisioning.

   manila:

   - Fix ZFSOnLinux doc about manage ops.
   - DB Migration: Fix downgrade.
   - Fix share-service VM restart problem.
   - Added Handling Newer Quobyte API Error Codes.
   - NetApp ONTAP: Fix delete-share for vsadmin users.
   - Remove confusing DB deprecation messages.
   - Add missing Requires: for python-tooz

   neutron:


   - Skip MTU check during deletion of Networks.
   - HA L3 agent restart only standby agents.
   - Retry dhcp\_release on failures.
   - Reduce IP address collision during port creating.
   - Refactor DVR HA migarations DB operations.
   - Disallow router interface out of subnet IP range.
   - Fix fwaas v1 configuration doc.
   - Add list of all working DSCP marks.
   - Set trusted port only once in iptables firewall driver.
   - Fix UT BridgeLibTest when IPv6 is disabled.

   neutron-fwaas:

   - DVR-FWaaS: Fix DVR FWaaS rules for fipnamespace.

   neutron-lbaas:

   - Get providers directly from ORM to make startup take half as long.
   - Cap haproxy log level severity.
   - Fix sphinx-docs job for stable branch.

   neutron-vpnaas:

   - Fix sphinx-docs job for stable branch and pep8 issues.

   neutron-zvm-agent:

   - Backport zCC backend networking-zvm.

   nova:

   - libvirt: Add method to configure migration speed.
   - Make host\_aggregate\_map dictionary case-insensitive.
   - Fix unbound local when saving an unchanged RequestSpec.
   - Cleanup mapping/reqspec after archive instance.
   - Default embedded instance.flavor.disabled attribute.
   - Backport tox.ini to switch to stestr.
   - Cleanup RP and HM records while deleting a compute service.
   - Delete allocations from API if nova-compute is down.
   - Block deleting compute services which are hosting instances.
   - api-ref: Add a note in DELETE /os-services about deleting computes.
   - Add functional test for deleting a compute service.
   - Factor out compute service start in ServerMovingTest.
   - Moving more utils to ProviderUsageBaseTestCase.
   - Make nova service-list use scatter-gather routine.
   - libvirt: Slow live-migration to ensure network is ready.
   - Use instance project/user when creating RequestSpec during resize
     reschedule.
   - Mock utils.execute() in qemu-img unit test.
   - Add policy rule to block image-backed servers with 0 root disk flavor.
   - Change consecutive build failure limit to a weigher.
   - Ensure resource class cache when listing usages.
   - Metadata-API fails to retrieve avz for instances created before Pike.
   - placement: Fix HTTP error generation.
   - Add amd-ssbd and amd-no-ssb CPU flags.
   - Fixed auto-convergence option name in doc.
   - libvirt: Skip fetching the virtual size of block devices.
   - libvirt: Handle DiskNotFound during update\_available\_resource.
   - Avoid showing password in log.
   - Fix shelving a paused instance.
   - Document how to disable notifications.
   - Add ssbd and virt-ssbd flags to cpu\_model\_extra\_flags whitelist.
   - Stringify instance UUID.

   nova-virt-zvm:

   - Backport zvm driver.

   octavia:

   - Update introduction documention page.
   - Use HMAC.hexdigest to avoid non-ascii characters for package data.

   trove:

   - Add .stestr.conf to fix tox-py27 stable job.
   - Fix mysql instance create failed when enable skip-name-resolve.
   - Failed to build mongo image.
   - Open the volume\_support of redis.
   - Remove Mitaka reference in install/dashboard.rst.
   - Enable longer Keystone token life.
   - Fix gate issues.

   python-barbicanclient:

   - Update time for functional tests. (bsc#1084362)

   python-keystone-json-assignment:

   - Speedup project lookup.

   python-manilaclient:

   - Fix for use endpoint_type in _discover_client method.
   - Add search_opts in func list of ManagerWithFind type classes.
   - Fix share can not be found by name in admin context.

   python-vmware-nsx:

   - NSX|V3: Handle port-not-found during get_ports.
   - NSXAdminV3: Add message on client cert generation.
   - NSX-V: Add server-ip-address to the supported dhcp options.
   - NSX|V3: Fix global SG creation duplication.
   - Fix security groups ext_properties loading.
   - NSXv3: Add pool-level lock for LB pool member operations.
   - NSX|v3: Do not retry on DB duplications on section init.
   - NSXv: Handle listener failures on backend.
   - Add mock to the requirements.
   - AdminUtils V3: Do not set nat_pass for NO-NAT rules.
   - NSX|V3: Wait for another neutron to create default section.
   - NSX|V3: Cleanup duplicate sections on startup.
   - V and D: Make security group logging more robust.
   - NSX|v3: Ensure that 0.0.0.0/# is treated correctly in SG rules.
   - NSX|V: Fix create/delete subnet race condition.

   python-vmware-nsxlib:

   - Fix service ports for egress firewall rule.
   - Add server-ip-address to the suppoprted dhcp options.
   - Retry on 503 Service Unavailable.
   - Remove sha224 from supported client cert hash algs.
   - Add logging when initializing a default FW section.
   - Fixed tenacity usage.
   - Retry is IOError is received.
   - Handle cluster connection closed by server.


Patch Instructions:

   To install this SUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE OpenStack Cloud Crowbar 8:

      zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2018-1929=1

   - SUSE OpenStack Cloud 8:

      zypper in -t patch SUSE-OpenStack-Cloud-8-2018-1929=1

   - HPE Helion Openstack 8:

      zypper in -t patch HPE-Helion-OpenStack-8-2018-1929=1



Package List:

   - SUSE OpenStack Cloud Crowbar 8 (noarch):

      openstack-aodh-5.1.1~dev5-3.5.3
      openstack-aodh-api-5.1.1~dev5-3.5.3
      openstack-aodh-doc-5.1.1~dev5-3.5.4
      openstack-aodh-evaluator-5.1.1~dev5-3.5.3
      openstack-aodh-expirer-5.1.1~dev5-3.5.3
      openstack-aodh-listener-5.1.1~dev5-3.5.3
      openstack-aodh-notifier-5.1.1~dev5-3.5.3
      openstack-barbican-5.0.1~dev11-3.8.3
      openstack-barbican-api-5.0.1~dev11-3.8.3
      openstack-barbican-doc-5.0.1~dev11-3.8.3
      openstack-barbican-keystone-listener-5.0.1~dev11-3.8.3
      openstack-barbican-retry-5.0.1~dev11-3.8.3
      openstack-barbican-worker-5.0.1~dev11-3.8.3
      openstack-cinder-11.1.2~dev14-3.6.3
      openstack-cinder-api-11.1.2~dev14-3.6.3
      openstack-cinder-backup-11.1.2~dev14-3.6.3
      openstack-cinder-doc-11.1.2~dev14-3.6.4
      openstack-cinder-scheduler-11.1.2~dev14-3.6.3
      openstack-cinder-volume-11.1.2~dev14-3.6.3
      openstack-dashboard-12.0.4~dev1-3.8.3
      openstack-designate-5.0.2~dev5-3.5.3
      openstack-designate-agent-5.0.2~dev5-3.5.3
      openstack-designate-api-5.0.2~dev5-3.5.3
      openstack-designate-central-5.0.2~dev5-3.5.3
      openstack-designate-doc-5.0.2~dev5-3.5.3
      openstack-designate-producer-5.0.2~dev5-3.5.3
      openstack-designate-sink-5.0.2~dev5-3.5.3
      openstack-designate-worker-5.0.2~dev5-3.5.3
      openstack-glance-15.0.2~dev4-3.3.3
      openstack-glance-api-15.0.2~dev4-3.3.3
      openstack-glance-doc-15.0.2~dev4-3.3.3
      openstack-glance-registry-15.0.2~dev4-3.3.3
      openstack-heat-9.0.5~dev11-3.6.3
      openstack-heat-api-9.0.5~dev11-3.6.3
      openstack-heat-api-cfn-9.0.5~dev11-3.6.3
      openstack-heat-api-cloudwatch-9.0.5~dev11-3.6.3
      openstack-heat-doc-9.0.5~dev11-3.6.4
      openstack-heat-engine-9.0.5~dev11-3.6.3
      openstack-heat-plugin-heat_docker-9.0.5~dev11-3.6.3
      openstack-heat-templates-0.0.0+git.1525957319.6b5a7cd-3.3.3
      openstack-heat-test-9.0.5~dev11-3.6.3
      openstack-horizon-plugin-designate-ui-5.0.2~dev5-3.3.5
      openstack-horizon-plugin-freezer-ui-5.0.1~dev6-3.3.5
      openstack-horizon-plugin-gbp-ui-5.0.1~dev21-4.3.3
      openstack-horizon-plugin-manila-ui-2.10.3~dev4-4.5.5
      openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev2-3.5.4
      openstack-horizon-plugin-trove-ui-9.0.1~dev7-3.3.5
      openstack-ironic-9.1.5~dev7-3.6.3
      openstack-ironic-api-9.1.5~dev7-3.6.3
      openstack-ironic-conductor-9.1.5~dev7-3.6.3
      openstack-ironic-doc-9.1.5~dev7-3.6.3
      openstack-keystone-12.0.1~dev19-5.8.3
      openstack-keystone-doc-12.0.1~dev19-5.8.3
      openstack-manila-5.0.2~dev55-3.6.3
      openstack-manila-api-5.0.2~dev55-3.6.3
      openstack-manila-data-5.0.2~dev55-3.6.3
      openstack-manila-doc-5.0.2~dev55-3.6.4
      openstack-manila-scheduler-5.0.2~dev55-3.6.3
      openstack-manila-share-5.0.2~dev55-3.6.3
      openstack-neutron-11.0.6~dev63-3.6.3
      openstack-neutron-dhcp-agent-11.0.6~dev63-3.6.3
      openstack-neutron-doc-11.0.6~dev63-3.6.3
      openstack-neutron-fwaas-11.0.2~dev7-3.5.3
      openstack-neutron-fwaas-doc-11.0.2~dev7-3.5.3
      openstack-neutron-ha-tool-11.0.6~dev63-3.6.3
      openstack-neutron-l3-agent-11.0.6~dev63-3.6.3
      openstack-neutron-lbaas-11.0.4~dev4-3.3.4
      openstack-neutron-lbaas-agent-11.0.4~dev4-3.3.4
      openstack-neutron-lbaas-doc-11.0.4~dev4-3.3.3
      openstack-neutron-linuxbridge-agent-11.0.6~dev63-3.6.3
      openstack-neutron-macvtap-agent-11.0.6~dev63-3.6.3
      openstack-neutron-metadata-agent-11.0.6~dev63-3.6.3
      openstack-neutron-metering-agent-11.0.6~dev63-3.6.3
      openstack-neutron-openvswitch-agent-11.0.6~dev63-3.6.3
      openstack-neutron-server-11.0.6~dev63-3.6.3
      openstack-neutron-vpn-agent-11.0.1~dev1-3.3.3
      openstack-neutron-vpnaas-11.0.1~dev1-3.3.3
      openstack-neutron-vpnaas-doc-11.0.1~dev1-3.3.3
      openstack-neutron-vyatta-agent-11.0.1~dev1-3.3.3
      openstack-neutron-zvm-agent-8.0.1~dev12-4.3.3
      openstack-nova-16.1.5~dev49-3.8.4
      openstack-nova-api-16.1.5~dev49-3.8.4
      openstack-nova-cells-16.1.5~dev49-3.8.4
      openstack-nova-compute-16.1.5~dev49-3.8.4
      openstack-nova-conductor-16.1.5~dev49-3.8.4
      openstack-nova-console-16.1.5~dev49-3.8.4
      openstack-nova-consoleauth-16.1.5~dev49-3.8.4
      openstack-nova-doc-16.1.5~dev49-3.8.4
      openstack-nova-novncproxy-16.1.5~dev49-3.8.4
      openstack-nova-placement-api-16.1.5~dev49-3.8.4
      openstack-nova-scheduler-16.1.5~dev49-3.8.4
      openstack-nova-serialproxy-16.1.5~dev49-3.8.4
      openstack-nova-virt-zvm-8.0.1~dev56-3.3.4
      openstack-nova-vncproxy-16.1.5~dev49-3.8.4
      openstack-octavia-1.0.3~dev21-4.6.3
      openstack-octavia-amphora-agent-1.0.3~dev21-4.6.3
      openstack-octavia-api-1.0.3~dev21-4.6.3
      openstack-octavia-health-manager-1.0.3~dev21-4.6.3
      openstack-octavia-housekeeping-1.0.3~dev21-4.6.3
      openstack-octavia-worker-1.0.3~dev21-4.6.3
      openstack-trove-8.0.1~dev11-3.3.3
      openstack-trove-api-8.0.1~dev11-3.3.3
      openstack-trove-conductor-8.0.1~dev11-3.3.3
      openstack-trove-doc-8.0.1~dev11-3.3.3
      openstack-trove-guestagent-8.0.1~dev11-3.3.3
      openstack-trove-taskmanager-8.0.1~dev11-3.3.3
      python-aodh-5.1.1~dev5-3.5.3
      python-barbican-5.0.1~dev11-3.8.3
      python-barbicanclient-4.5.2-4.3.2
      python-barbicanclient-doc-4.5.2-4.3.2
      python-cinder-11.1.2~dev14-3.6.3
      python-designate-5.0.2~dev5-3.5.3
      python-glance-15.0.2~dev4-3.3.3
      python-heat-9.0.5~dev11-3.6.3
      python-horizon-12.0.4~dev1-3.8.3
      python-horizon-plugin-designate-ui-5.0.2~dev5-3.3.5
      python-horizon-plugin-freezer-ui-5.0.1~dev6-3.3.5
      python-horizon-plugin-gbp-ui-5.0.1~dev21-4.3.3
      python-horizon-plugin-manila-ui-2.10.3~dev4-4.5.5
      python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev2-3.5.4
      python-horizon-plugin-trove-ui-9.0.1~dev7-3.3.5
      python-ironic-9.1.5~dev7-3.6.3
      python-keystone-12.0.1~dev19-5.8.3
      python-keystone-json-assignment-0.0.2-3.3.2
      python-manila-5.0.2~dev55-3.6.3
      python-manilaclient-1.17.3-3.3.2
      python-manilaclient-doc-1.17.3-3.3.2
      python-neutron-11.0.6~dev63-3.6.3
      python-neutron-fwaas-11.0.2~dev7-3.5.3
      python-neutron-lbaas-11.0.4~dev4-3.3.4
      python-neutron-vpnaas-11.0.1~dev1-3.3.3
      python-nova-16.1.5~dev49-3.8.4
      python-octavia-1.0.3~dev21-4.6.3
      python-trove-8.0.1~dev11-3.3.3
      python-vmware-nsx-11.0.3~dev16-3.3.2
      python-vmware-nsxlib-11.0.4~dev7-3.3.2

   - SUSE OpenStack Cloud 8 (noarch):

      openstack-aodh-5.1.1~dev5-3.5.3
      openstack-aodh-api-5.1.1~dev5-3.5.3
      openstack-aodh-doc-5.1.1~dev5-3.5.4
      openstack-aodh-evaluator-5.1.1~dev5-3.5.3
      openstack-aodh-expirer-5.1.1~dev5-3.5.3
      openstack-aodh-listener-5.1.1~dev5-3.5.3
      openstack-aodh-notifier-5.1.1~dev5-3.5.3
      openstack-barbican-5.0.1~dev11-3.8.3
      openstack-barbican-api-5.0.1~dev11-3.8.3
      openstack-barbican-doc-5.0.1~dev11-3.8.3
      openstack-barbican-keystone-listener-5.0.1~dev11-3.8.3
      openstack-barbican-retry-5.0.1~dev11-3.8.3
      openstack-barbican-worker-5.0.1~dev11-3.8.3
      openstack-cinder-11.1.2~dev14-3.6.3
      openstack-cinder-api-11.1.2~dev14-3.6.3
      openstack-cinder-backup-11.1.2~dev14-3.6.3
      openstack-cinder-doc-11.1.2~dev14-3.6.4
      openstack-cinder-scheduler-11.1.2~dev14-3.6.3
      openstack-cinder-volume-11.1.2~dev14-3.6.3
      openstack-dashboard-12.0.4~dev1-3.8.3
      openstack-designate-5.0.2~dev5-3.5.3
      openstack-designate-agent-5.0.2~dev5-3.5.3
      openstack-designate-api-5.0.2~dev5-3.5.3
      openstack-designate-central-5.0.2~dev5-3.5.3
      openstack-designate-doc-5.0.2~dev5-3.5.3
      openstack-designate-producer-5.0.2~dev5-3.5.3
      openstack-designate-sink-5.0.2~dev5-3.5.3
      openstack-designate-worker-5.0.2~dev5-3.5.3
      openstack-glance-15.0.2~dev4-3.3.3
      openstack-glance-api-15.0.2~dev4-3.3.3
      openstack-glance-doc-15.0.2~dev4-3.3.3
      openstack-glance-registry-15.0.2~dev4-3.3.3
      openstack-heat-9.0.5~dev11-3.6.3
      openstack-heat-api-9.0.5~dev11-3.6.3
      openstack-heat-api-cfn-9.0.5~dev11-3.6.3
      openstack-heat-api-cloudwatch-9.0.5~dev11-3.6.3
      openstack-heat-doc-9.0.5~dev11-3.6.4
      openstack-heat-engine-9.0.5~dev11-3.6.3
      openstack-heat-plugin-heat_docker-9.0.5~dev11-3.6.3
      openstack-heat-templates-0.0.0+git.1525957319.6b5a7cd-3.3.3
      openstack-heat-test-9.0.5~dev11-3.6.3
      openstack-horizon-plugin-designate-ui-5.0.2~dev5-3.3.5
      openstack-horizon-plugin-freezer-ui-5.0.1~dev6-3.3.5
      openstack-horizon-plugin-gbp-ui-5.0.1~dev21-4.3.3
      openstack-horizon-plugin-manila-ui-2.10.3~dev4-4.5.5
      openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev2-3.5.4
      openstack-horizon-plugin-trove-ui-9.0.1~dev7-3.3.5
      openstack-ironic-9.1.5~dev7-3.6.3
      openstack-ironic-api-9.1.5~dev7-3.6.3
      openstack-ironic-conductor-9.1.5~dev7-3.6.3
      openstack-ironic-doc-9.1.5~dev7-3.6.3
      openstack-keystone-12.0.1~dev19-5.8.3
      openstack-keystone-doc-12.0.1~dev19-5.8.3
      openstack-manila-5.0.2~dev55-3.6.3
      openstack-manila-api-5.0.2~dev55-3.6.3
      openstack-manila-data-5.0.2~dev55-3.6.3
      openstack-manila-doc-5.0.2~dev55-3.6.4
      openstack-manila-scheduler-5.0.2~dev55-3.6.3
      openstack-manila-share-5.0.2~dev55-3.6.3
      openstack-neutron-11.0.6~dev63-3.6.3
      openstack-neutron-dhcp-agent-11.0.6~dev63-3.6.3
      openstack-neutron-doc-11.0.6~dev63-3.6.3
      openstack-neutron-fwaas-11.0.2~dev7-3.5.3
      openstack-neutron-fwaas-doc-11.0.2~dev7-3.5.3
      openstack-neutron-ha-tool-11.0.6~dev63-3.6.3
      openstack-neutron-l3-agent-11.0.6~dev63-3.6.3
      openstack-neutron-lbaas-11.0.4~dev4-3.3.4
      openstack-neutron-lbaas-agent-11.0.4~dev4-3.3.4
      openstack-neutron-lbaas-doc-11.0.4~dev4-3.3.3
      openstack-neutron-linuxbridge-agent-11.0.6~dev63-3.6.3
      openstack-neutron-macvtap-agent-11.0.6~dev63-3.6.3
      openstack-neutron-metadata-agent-11.0.6~dev63-3.6.3
      openstack-neutron-metering-agent-11.0.6~dev63-3.6.3
      openstack-neutron-openvswitch-agent-11.0.6~dev63-3.6.3
      openstack-neutron-server-11.0.6~dev63-3.6.3
      openstack-neutron-vpn-agent-11.0.1~dev1-3.3.3
      openstack-neutron-vpnaas-11.0.1~dev1-3.3.3
      openstack-neutron-vpnaas-doc-11.0.1~dev1-3.3.3
      openstack-neutron-vyatta-agent-11.0.1~dev1-3.3.3
      openstack-neutron-zvm-agent-8.0.1~dev12-4.3.3
      openstack-nova-16.1.5~dev49-3.8.4
      openstack-nova-api-16.1.5~dev49-3.8.4
      openstack-nova-cells-16.1.5~dev49-3.8.4
      openstack-nova-compute-16.1.5~dev49-3.8.4
      openstack-nova-conductor-16.1.5~dev49-3.8.4
      openstack-nova-console-16.1.5~dev49-3.8.4
      openstack-nova-consoleauth-16.1.5~dev49-3.8.4
      openstack-nova-doc-16.1.5~dev49-3.8.4
      openstack-nova-novncproxy-16.1.5~dev49-3.8.4
      openstack-nova-placement-api-16.1.5~dev49-3.8.4
      openstack-nova-scheduler-16.1.5~dev49-3.8.4
      openstack-nova-serialproxy-16.1.5~dev49-3.8.4
      openstack-nova-virt-zvm-8.0.1~dev56-3.3.4
      openstack-nova-vncproxy-16.1.5~dev49-3.8.4
      openstack-octavia-1.0.3~dev21-4.6.3
      openstack-octavia-amphora-agent-1.0.3~dev21-4.6.3
      openstack-octavia-api-1.0.3~dev21-4.6.3
      openstack-octavia-health-manager-1.0.3~dev21-4.6.3
      openstack-octavia-housekeeping-1.0.3~dev21-4.6.3
      openstack-octavia-worker-1.0.3~dev21-4.6.3
      openstack-trove-8.0.1~dev11-3.3.3
      openstack-trove-api-8.0.1~dev11-3.3.3
      openstack-trove-conductor-8.0.1~dev11-3.3.3
      openstack-trove-doc-8.0.1~dev11-3.3.3
      openstack-trove-guestagent-8.0.1~dev11-3.3.3
      openstack-trove-taskmanager-8.0.1~dev11-3.3.3
      python-aodh-5.1.1~dev5-3.5.3
      python-barbican-5.0.1~dev11-3.8.3
      python-barbicanclient-4.5.2-4.3.2
      python-barbicanclient-doc-4.5.2-4.3.2
      python-cinder-11.1.2~dev14-3.6.3
      python-designate-5.0.2~dev5-3.5.3
      python-glance-15.0.2~dev4-3.3.3
      python-heat-9.0.5~dev11-3.6.3
      python-horizon-12.0.4~dev1-3.8.3
      python-horizon-plugin-designate-ui-5.0.2~dev5-3.3.5
      python-horizon-plugin-freezer-ui-5.0.1~dev6-3.3.5
      python-horizon-plugin-gbp-ui-5.0.1~dev21-4.3.3
      python-horizon-plugin-manila-ui-2.10.3~dev4-4.5.5
      python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev2-3.5.4
      python-horizon-plugin-trove-ui-9.0.1~dev7-3.3.5
      python-ironic-9.1.5~dev7-3.6.3
      python-keystone-12.0.1~dev19-5.8.3
      python-keystone-json-assignment-0.0.2-3.3.2
      python-manila-5.0.2~dev55-3.6.3
      python-manilaclient-1.17.3-3.3.2
      python-manilaclient-doc-1.17.3-3.3.2
      python-neutron-11.0.6~dev63-3.6.3
      python-neutron-fwaas-11.0.2~dev7-3.5.3
      python-neutron-lbaas-11.0.4~dev4-3.3.4
      python-neutron-vpnaas-11.0.1~dev1-3.3.3
      python-nova-16.1.5~dev49-3.8.4
      python-octavia-1.0.3~dev21-4.6.3
      python-trove-8.0.1~dev11-3.3.3
      python-vmware-nsx-11.0.3~dev16-3.3.2
      python-vmware-nsxlib-11.0.4~dev7-3.3.2
      venv-openstack-aodh-x86_64-5.0.1-12.4.1
      venv-openstack-barbican-x86_64-5.0.1-12.5.1
      venv-openstack-cinder-x86_64-11.0.2-14.5.1
      venv-openstack-designate-x86_64-5.0.1-12.3.1
      venv-openstack-glance-x86_64-15.0.1-12.3.1
      venv-openstack-heat-x86_64-9.0.1-12.5.1
      venv-openstack-horizon-x86_64-11.0.2-14.6.1
      venv-openstack-ironic-x86_64-9.1.3-12.5.1
      venv-openstack-keystone-x86_64-12.0.1-11.5.1
      venv-openstack-magnum-x86_64-5.0.2-11.4.1
      venv-openstack-manila-x86_64-5.0.2-12.5.1
      venv-openstack-neutron-x86_64-11.0.2-13.8.1
      venv-openstack-nova-x86_64-16.0.3-11.6.1
      venv-openstack-octavia-x86_64-1.0.2-12.5.1
      venv-openstack-sahara-x86_64-7.0.1-11.4.1
      venv-openstack-trove-x86_64-8.0.0.0-11.4.1

   - HPE Helion Openstack 8 (noarch):

      openstack-aodh-5.1.1~dev5-3.5.3
      openstack-aodh-api-5.1.1~dev5-3.5.3
      openstack-aodh-doc-5.1.1~dev5-3.5.4
      openstack-aodh-evaluator-5.1.1~dev5-3.5.3
      openstack-aodh-expirer-5.1.1~dev5-3.5.3
      openstack-aodh-listener-5.1.1~dev5-3.5.3
      openstack-aodh-notifier-5.1.1~dev5-3.5.3
      openstack-barbican-5.0.1~dev11-3.8.3
      openstack-barbican-api-5.0.1~dev11-3.8.3
      openstack-barbican-doc-5.0.1~dev11-3.8.3
      openstack-barbican-keystone-listener-5.0.1~dev11-3.8.3
      openstack-barbican-retry-5.0.1~dev11-3.8.3
      openstack-barbican-worker-5.0.1~dev11-3.8.3
      openstack-cinder-11.1.2~dev14-3.6.3
      openstack-cinder-api-11.1.2~dev14-3.6.3
      openstack-cinder-backup-11.1.2~dev14-3.6.3
      openstack-cinder-doc-11.1.2~dev14-3.6.4
      openstack-cinder-scheduler-11.1.2~dev14-3.6.3
      openstack-cinder-volume-11.1.2~dev14-3.6.3
      openstack-dashboard-12.0.4~dev1-3.8.3
      openstack-designate-5.0.2~dev5-3.5.3
      openstack-designate-agent-5.0.2~dev5-3.5.3
      openstack-designate-api-5.0.2~dev5-3.5.3
      openstack-designate-central-5.0.2~dev5-3.5.3
      openstack-designate-doc-5.0.2~dev5-3.5.3
      openstack-designate-producer-5.0.2~dev5-3.5.3
      openstack-designate-sink-5.0.2~dev5-3.5.3
      openstack-designate-worker-5.0.2~dev5-3.5.3
      openstack-glance-15.0.2~dev4-3.3.3
      openstack-glance-api-15.0.2~dev4-3.3.3
      openstack-glance-doc-15.0.2~dev4-3.3.3
      openstack-glance-registry-15.0.2~dev4-3.3.3
      openstack-heat-9.0.5~dev11-3.6.3
      openstack-heat-api-9.0.5~dev11-3.6.3
      openstack-heat-api-cfn-9.0.5~dev11-3.6.3
      openstack-heat-api-cloudwatch-9.0.5~dev11-3.6.3
      openstack-heat-doc-9.0.5~dev11-3.6.4
      openstack-heat-engine-9.0.5~dev11-3.6.3
      openstack-heat-plugin-heat_docker-9.0.5~dev11-3.6.3
      openstack-heat-templates-0.0.0+git.1525957319.6b5a7cd-3.3.3
      openstack-heat-test-9.0.5~dev11-3.6.3
      openstack-horizon-plugin-designate-ui-5.0.2~dev5-3.3.5
      openstack-horizon-plugin-freezer-ui-5.0.1~dev6-3.3.5
      openstack-horizon-plugin-gbp-ui-5.0.1~dev21-4.3.3
      openstack-horizon-plugin-manila-ui-2.10.3~dev4-4.5.5
      openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev2-3.5.4
      openstack-horizon-plugin-trove-ui-9.0.1~dev7-3.3.5
      openstack-ironic-9.1.5~dev7-3.6.3
      openstack-ironic-api-9.1.5~dev7-3.6.3
      openstack-ironic-conductor-9.1.5~dev7-3.6.3
      openstack-ironic-doc-9.1.5~dev7-3.6.3
      openstack-keystone-12.0.1~dev19-5.8.3
      openstack-keystone-doc-12.0.1~dev19-5.8.3
      openstack-manila-5.0.2~dev55-3.6.3
      openstack-manila-api-5.0.2~dev55-3.6.3
      openstack-manila-data-5.0.2~dev55-3.6.3
      openstack-manila-doc-5.0.2~dev55-3.6.4
      openstack-manila-scheduler-5.0.2~dev55-3.6.3
      openstack-manila-share-5.0.2~dev55-3.6.3
      openstack-neutron-11.0.6~dev63-3.6.3
      openstack-neutron-dhcp-agent-11.0.6~dev63-3.6.3
      openstack-neutron-doc-11.0.6~dev63-3.6.3
      openstack-neutron-fwaas-11.0.2~dev7-3.5.3
      openstack-neutron-fwaas-doc-11.0.2~dev7-3.5.3
      openstack-neutron-ha-tool-11.0.6~dev63-3.6.3
      openstack-neutron-l3-agent-11.0.6~dev63-3.6.3
      openstack-neutron-lbaas-11.0.4~dev4-3.3.4
      openstack-neutron-lbaas-agent-11.0.4~dev4-3.3.4
      openstack-neutron-lbaas-doc-11.0.4~dev4-3.3.3
      openstack-neutron-linuxbridge-agent-11.0.6~dev63-3.6.3
      openstack-neutron-macvtap-agent-11.0.6~dev63-3.6.3
      openstack-neutron-metadata-agent-11.0.6~dev63-3.6.3
      openstack-neutron-metering-agent-11.0.6~dev63-3.6.3
      openstack-neutron-openvswitch-agent-11.0.6~dev63-3.6.3
      openstack-neutron-server-11.0.6~dev63-3.6.3
      openstack-neutron-vpn-agent-11.0.1~dev1-3.3.3
      openstack-neutron-vpnaas-11.0.1~dev1-3.3.3
      openstack-neutron-vpnaas-doc-11.0.1~dev1-3.3.3
      openstack-neutron-vyatta-agent-11.0.1~dev1-3.3.3
      openstack-neutron-zvm-agent-8.0.1~dev12-4.3.3
      openstack-nova-16.1.5~dev49-3.8.4
      openstack-nova-api-16.1.5~dev49-3.8.4
      openstack-nova-cells-16.1.5~dev49-3.8.4
      openstack-nova-compute-16.1.5~dev49-3.8.4
      openstack-nova-conductor-16.1.5~dev49-3.8.4
      openstack-nova-console-16.1.5~dev49-3.8.4
      openstack-nova-consoleauth-16.1.5~dev49-3.8.4
      openstack-nova-doc-16.1.5~dev49-3.8.4
      openstack-nova-novncproxy-16.1.5~dev49-3.8.4
      openstack-nova-placement-api-16.1.5~dev49-3.8.4
      openstack-nova-scheduler-16.1.5~dev49-3.8.4
      openstack-nova-serialproxy-16.1.5~dev49-3.8.4
      openstack-nova-virt-zvm-8.0.1~dev56-3.3.4
      openstack-nova-vncproxy-16.1.5~dev49-3.8.4
      openstack-octavia-1.0.3~dev21-4.6.3
      openstack-octavia-amphora-agent-1.0.3~dev21-4.6.3
      openstack-octavia-api-1.0.3~dev21-4.6.3
      openstack-octavia-health-manager-1.0.3~dev21-4.6.3
      openstack-octavia-housekeeping-1.0.3~dev21-4.6.3
      openstack-octavia-worker-1.0.3~dev21-4.6.3
      openstack-trove-8.0.1~dev11-3.3.3
      openstack-trove-api-8.0.1~dev11-3.3.3
      openstack-trove-conductor-8.0.1~dev11-3.3.3
      openstack-trove-doc-8.0.1~dev11-3.3.3
      openstack-trove-guestagent-8.0.1~dev11-3.3.3
      openstack-trove-taskmanager-8.0.1~dev11-3.3.3
      python-aodh-5.1.1~dev5-3.5.3
      python-barbican-5.0.1~dev11-3.8.3
      python-barbicanclient-4.5.2-4.3.2
      python-barbicanclient-doc-4.5.2-4.3.2
      python-cinder-11.1.2~dev14-3.6.3
      python-designate-5.0.2~dev5-3.5.3
      python-glance-15.0.2~dev4-3.3.3
      python-heat-9.0.5~dev11-3.6.3
      python-horizon-12.0.4~dev1-3.8.3
      python-horizon-plugin-designate-ui-5.0.2~dev5-3.3.5
      python-horizon-plugin-freezer-ui-5.0.1~dev6-3.3.5
      python-horizon-plugin-gbp-ui-5.0.1~dev21-4.3.3
      python-horizon-plugin-manila-ui-2.10.3~dev4-4.5.5
      python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev2-3.5.4
      python-horizon-plugin-trove-ui-9.0.1~dev7-3.3.5
      python-ironic-9.1.5~dev7-3.6.3
      python-keystone-12.0.1~dev19-5.8.3
      python-keystone-json-assignment-0.0.2-3.3.2
      python-manila-5.0.2~dev55-3.6.3
      python-manilaclient-1.17.3-3.3.2
      python-manilaclient-doc-1.17.3-3.3.2
      python-neutron-11.0.6~dev63-3.6.3
      python-neutron-fwaas-11.0.2~dev7-3.5.3
      python-neutron-lbaas-11.0.4~dev4-3.3.4
      python-neutron-vpnaas-11.0.1~dev1-3.3.3
      python-nova-16.1.5~dev49-3.8.4
      python-octavia-1.0.3~dev21-4.6.3
      python-trove-8.0.1~dev11-3.3.3
      python-vmware-nsx-11.0.3~dev16-3.3.2
      python-vmware-nsxlib-11.0.4~dev7-3.3.2
      venv-openstack-aodh-x86_64-5.0.1-12.4.1
      venv-openstack-barbican-x86_64-5.0.1-12.5.1
      venv-openstack-cinder-x86_64-11.0.2-14.5.1
      venv-openstack-designate-x86_64-5.0.1-12.3.1
      venv-openstack-glance-x86_64-15.0.1-12.3.1
      venv-openstack-heat-x86_64-9.0.1-12.5.1
      venv-openstack-horizon-hpe-x86_64-11.0.2-14.6.1
      venv-openstack-ironic-x86_64-9.1.3-12.5.1
      venv-openstack-keystone-x86_64-12.0.1-11.5.1
      venv-openstack-magnum-x86_64-5.0.2-11.4.1
      venv-openstack-manila-x86_64-5.0.2-12.5.1
      venv-openstack-neutron-x86_64-11.0.2-13.8.1
      venv-openstack-nova-x86_64-16.0.3-11.6.1
      venv-openstack-octavia-x86_64-1.0.2-12.5.1
      venv-openstack-sahara-x86_64-7.0.1-11.4.1
      venv-openstack-trove-x86_64-8.0.0.0-11.4.1


References:

   https://www.suse.com/security/cve/CVE-2018-14432.html
   https://bugzilla.suse.com/1084362
   https://bugzilla.suse.com/1102151



More information about the sle-security-updates mailing list