Security update for several openstack-components SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2016:2143-1 Final 1 1 2016-08-23T15:49:42Z current 2016-08-23T15:49:42Z 2016-08-23T15:49:42Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for several openstack-components This update provides the latest code from OpenStack Liberty for openstack-ceilometer, -cinder, -dashboard, -glance, -heat, -keystone, -manila, -neutron, -neutron-fwaas, -neutron-lbaas,-nova, -resource-agents, python-networking-cisco and python-openstackclient. Additionally some security-issues have been fixed: openstack-nova: - Always copy or recreate disk.info during a migration. (bsc#970258, CVE-2016-2140) openstack-dashboard: - Escape anularjs templating in unsafe HTML. (bsc#983807, CVE-2016-4428) openstack-neutron: - Fix bypassing of anti-spoof protection. (bsc#984443, CVE-2016-5363, bsc#984442, CVE-2016-5362) For a detailed description of all fixes and improvements, please refer to the changelog. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-OpenStack-Cloud-6-2016-1261 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2016/suse-su-20162143-1/ Link for SUSE-SU-2016:2143-1 https://lists.suse.com/pipermail/sle-security-updates/2016-August/002223.html E-Mail link for SUSE-SU-2016:2143-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/970258 SUSE Bug 970258 https://bugzilla.suse.com/982426 SUSE Bug 982426 https://bugzilla.suse.com/983807 SUSE Bug 983807 https://bugzilla.suse.com/984442 SUSE Bug 984442 https://bugzilla.suse.com/984443 SUSE Bug 984443 https://bugzilla.suse.com/988729 SUSE Bug 988729 https://www.suse.com/security/cve/CVE-2016-2140/ SUSE CVE CVE-2016-2140 page https://www.suse.com/security/cve/CVE-2016-4428/ SUSE CVE CVE-2016-4428 page https://www.suse.com/security/cve/CVE-2016-5362/ SUSE CVE CVE-2016-5362 page https://www.suse.com/security/cve/CVE-2016-5363/ SUSE CVE CVE-2016-5363 page SUSE OpenStack Cloud 6 openstack-ceilometer-5.0.4~a0~dev6-6.1 openstack-ceilometer-agent-central-5.0.4~a0~dev6-6.1 openstack-ceilometer-agent-compute-5.0.4~a0~dev6-6.1 openstack-ceilometer-agent-ipmi-5.0.4~a0~dev6-6.1 openstack-ceilometer-agent-notification-5.0.4~a0~dev6-6.1 openstack-ceilometer-alarm-evaluator-5.0.4~a0~dev6-6.1 openstack-ceilometer-alarm-notifier-5.0.4~a0~dev6-6.1 openstack-ceilometer-api-5.0.4~a0~dev6-6.1 openstack-ceilometer-collector-5.0.4~a0~dev6-6.1 openstack-ceilometer-doc-5.0.4~a0~dev6-6.2 openstack-ceilometer-polling-5.0.4~a0~dev6-6.1 openstack-cinder-7.0.3~a0~dev2-7.1 openstack-cinder-api-7.0.3~a0~dev2-7.1 openstack-cinder-backup-7.0.3~a0~dev2-7.1 openstack-cinder-doc-7.0.3~a0~dev2-7.1 openstack-cinder-scheduler-7.0.3~a0~dev2-7.1 openstack-cinder-volume-7.0.3~a0~dev2-7.1 openstack-dashboard-8.0.2~a0~dev34-8.1 openstack-glance-11.0.2~a0~dev13-7.1 openstack-glance-doc-11.0.2~a0~dev13-7.1 openstack-heat-5.0.2~a0~dev93-9.1 openstack-heat-api-5.0.2~a0~dev93-9.1 openstack-heat-api-cfn-5.0.2~a0~dev93-9.1 openstack-heat-api-cloudwatch-5.0.2~a0~dev93-9.1 openstack-heat-doc-5.0.2~a0~dev93-9.3 openstack-heat-engine-5.0.2~a0~dev93-9.1 openstack-heat-plugin-heat_docker-5.0.2~a0~dev93-9.1 openstack-keystone-8.1.1~a0~dev13-3.1 openstack-keystone-doc-8.1.1~a0~dev13-3.2 openstack-manila-1.0.2~a0~dev11-9.1 openstack-manila-api-1.0.2~a0~dev11-9.1 openstack-manila-doc-1.0.2~a0~dev11-9.2 openstack-manila-scheduler-1.0.2~a0~dev11-9.1 openstack-manila-share-1.0.2~a0~dev11-9.1 openstack-neutron-7.1.2~a0~dev29-10.1 openstack-neutron-dhcp-agent-7.1.2~a0~dev29-10.1 openstack-neutron-doc-7.1.2~a0~dev29-10.1 openstack-neutron-fwaas-7.1.2~a0~dev1-6.1 openstack-neutron-fwaas-doc-7.1.2~a0~dev1-6.1 openstack-neutron-ha-tool-7.1.2~a0~dev29-10.1 openstack-neutron-l3-agent-7.1.2~a0~dev29-10.1 openstack-neutron-lbaas-7.1.2~a0~dev1-6.1 openstack-neutron-lbaas-agent-7.1.2~a0~dev1-6.1 openstack-neutron-lbaas-doc-7.1.2~a0~dev1-6.1 openstack-neutron-linuxbridge-agent-7.1.2~a0~dev29-10.1 openstack-neutron-metadata-agent-7.1.2~a0~dev29-10.1 openstack-neutron-metering-agent-7.1.2~a0~dev29-10.1 openstack-neutron-mlnx-agent-7.1.2~a0~dev29-10.1 openstack-neutron-nvsd-agent-7.1.2~a0~dev29-10.1 openstack-neutron-openvswitch-agent-7.1.2~a0~dev29-10.1 openstack-neutron-restproxy-agent-7.1.2~a0~dev29-10.1 openstack-neutron-server-7.1.2~a0~dev29-10.1 openstack-nova-12.0.5~a0~dev2-7.1 openstack-nova-api-12.0.5~a0~dev2-7.1 openstack-nova-cells-12.0.5~a0~dev2-7.1 openstack-nova-cert-12.0.5~a0~dev2-7.1 openstack-nova-compute-12.0.5~a0~dev2-7.1 openstack-nova-conductor-12.0.5~a0~dev2-7.1 openstack-nova-console-12.0.5~a0~dev2-7.1 openstack-nova-consoleauth-12.0.5~a0~dev2-7.1 openstack-nova-doc-12.0.5~a0~dev2-7.1 openstack-nova-novncproxy-12.0.5~a0~dev2-7.1 openstack-nova-objectstore-12.0.5~a0~dev2-7.1 openstack-nova-scheduler-12.0.5~a0~dev2-7.1 openstack-nova-serialproxy-12.0.5~a0~dev2-7.1 openstack-nova-vncproxy-12.0.5~a0~dev2-7.1 openstack-resource-agents-1.0+git.1467079370.4f2c49d-7.1 python-ceilometer-5.0.4~a0~dev6-6.1 python-cinder-7.0.3~a0~dev2-7.1 python-glance-11.0.2~a0~dev13-7.1 python-heat-5.0.2~a0~dev93-9.1 python-horizon-8.0.2~a0~dev34-8.1 python-keystone-8.1.1~a0~dev13-3.1 python-manila-1.0.2~a0~dev11-9.1 python-networking-cisco-2.1.1-6.1 python-neutron-7.1.2~a0~dev29-10.1 python-neutron-fwaas-7.1.2~a0~dev1-6.1 python-neutron-lbaas-7.1.2~a0~dev1-6.1 python-nova-12.0.5~a0~dev2-7.1 python-openstackclient-1.7.2-4.1 openstack-ceilometer-5.0.4~a0~dev6-6.1 as a component of SUSE OpenStack Cloud 6 openstack-ceilometer-agent-central-5.0.4~a0~dev6-6.1 as a component of SUSE OpenStack Cloud 6 openstack-ceilometer-agent-compute-5.0.4~a0~dev6-6.1 as a component of SUSE OpenStack Cloud 6 openstack-ceilometer-agent-ipmi-5.0.4~a0~dev6-6.1 as a component of SUSE OpenStack Cloud 6 openstack-ceilometer-agent-notification-5.0.4~a0~dev6-6.1 as a component of SUSE OpenStack Cloud 6 openstack-ceilometer-alarm-evaluator-5.0.4~a0~dev6-6.1 as a component of SUSE OpenStack Cloud 6 openstack-ceilometer-alarm-notifier-5.0.4~a0~dev6-6.1 as a component of SUSE OpenStack Cloud 6 openstack-ceilometer-api-5.0.4~a0~dev6-6.1 as a component of SUSE OpenStack Cloud 6 openstack-ceilometer-collector-5.0.4~a0~dev6-6.1 as a component of SUSE OpenStack Cloud 6 openstack-ceilometer-doc-5.0.4~a0~dev6-6.2 as a component of SUSE OpenStack Cloud 6 openstack-ceilometer-polling-5.0.4~a0~dev6-6.1 as a component of SUSE OpenStack Cloud 6 openstack-cinder-7.0.3~a0~dev2-7.1 as a component of SUSE OpenStack Cloud 6 openstack-cinder-api-7.0.3~a0~dev2-7.1 as a component of SUSE OpenStack Cloud 6 openstack-cinder-backup-7.0.3~a0~dev2-7.1 as a component of SUSE OpenStack Cloud 6 openstack-cinder-doc-7.0.3~a0~dev2-7.1 as a component of SUSE OpenStack Cloud 6 openstack-cinder-scheduler-7.0.3~a0~dev2-7.1 as a component of SUSE OpenStack Cloud 6 openstack-cinder-volume-7.0.3~a0~dev2-7.1 as a component of SUSE OpenStack Cloud 6 openstack-dashboard-8.0.2~a0~dev34-8.1 as a component of SUSE OpenStack Cloud 6 openstack-glance-11.0.2~a0~dev13-7.1 as a component of SUSE OpenStack Cloud 6 openstack-glance-doc-11.0.2~a0~dev13-7.1 as a component of SUSE OpenStack Cloud 6 openstack-heat-5.0.2~a0~dev93-9.1 as a component of SUSE OpenStack Cloud 6 openstack-heat-api-5.0.2~a0~dev93-9.1 as a component of SUSE OpenStack Cloud 6 openstack-heat-api-cfn-5.0.2~a0~dev93-9.1 as a component of SUSE OpenStack Cloud 6 openstack-heat-api-cloudwatch-5.0.2~a0~dev93-9.1 as a component of SUSE OpenStack Cloud 6 openstack-heat-doc-5.0.2~a0~dev93-9.3 as a component of SUSE OpenStack Cloud 6 openstack-heat-engine-5.0.2~a0~dev93-9.1 as a component of SUSE OpenStack Cloud 6 openstack-heat-plugin-heat_docker-5.0.2~a0~dev93-9.1 as a component of SUSE OpenStack Cloud 6 openstack-keystone-8.1.1~a0~dev13-3.1 as a component of SUSE OpenStack Cloud 6 openstack-keystone-doc-8.1.1~a0~dev13-3.2 as a component of SUSE OpenStack Cloud 6 openstack-manila-1.0.2~a0~dev11-9.1 as a component of SUSE OpenStack Cloud 6 openstack-manila-api-1.0.2~a0~dev11-9.1 as a component of SUSE OpenStack Cloud 6 openstack-manila-doc-1.0.2~a0~dev11-9.2 as a component of SUSE OpenStack Cloud 6 openstack-manila-scheduler-1.0.2~a0~dev11-9.1 as a component of SUSE OpenStack Cloud 6 openstack-manila-share-1.0.2~a0~dev11-9.1 as a component of SUSE OpenStack Cloud 6 openstack-neutron-7.1.2~a0~dev29-10.1 as a component of SUSE OpenStack Cloud 6 openstack-neutron-dhcp-agent-7.1.2~a0~dev29-10.1 as a component of SUSE OpenStack Cloud 6 openstack-neutron-doc-7.1.2~a0~dev29-10.1 as a component of SUSE OpenStack Cloud 6 openstack-neutron-fwaas-7.1.2~a0~dev1-6.1 as a component of SUSE OpenStack Cloud 6 openstack-neutron-fwaas-doc-7.1.2~a0~dev1-6.1 as a component of SUSE OpenStack Cloud 6 openstack-neutron-ha-tool-7.1.2~a0~dev29-10.1 as a component of SUSE OpenStack Cloud 6 openstack-neutron-l3-agent-7.1.2~a0~dev29-10.1 as a component of SUSE OpenStack Cloud 6 openstack-neutron-lbaas-7.1.2~a0~dev1-6.1 as a component of SUSE OpenStack Cloud 6 openstack-neutron-lbaas-agent-7.1.2~a0~dev1-6.1 as a component of SUSE OpenStack Cloud 6 openstack-neutron-lbaas-doc-7.1.2~a0~dev1-6.1 as a component of SUSE OpenStack Cloud 6 openstack-neutron-linuxbridge-agent-7.1.2~a0~dev29-10.1 as a component of SUSE OpenStack Cloud 6 openstack-neutron-metadata-agent-7.1.2~a0~dev29-10.1 as a component of SUSE OpenStack Cloud 6 openstack-neutron-metering-agent-7.1.2~a0~dev29-10.1 as a component of SUSE OpenStack Cloud 6 openstack-neutron-mlnx-agent-7.1.2~a0~dev29-10.1 as a component of SUSE OpenStack Cloud 6 openstack-neutron-nvsd-agent-7.1.2~a0~dev29-10.1 as a component of SUSE OpenStack Cloud 6 openstack-neutron-openvswitch-agent-7.1.2~a0~dev29-10.1 as a component of SUSE OpenStack Cloud 6 openstack-neutron-restproxy-agent-7.1.2~a0~dev29-10.1 as a component of SUSE OpenStack Cloud 6 openstack-neutron-server-7.1.2~a0~dev29-10.1 as a component of SUSE OpenStack Cloud 6 openstack-nova-12.0.5~a0~dev2-7.1 as a component of SUSE OpenStack Cloud 6 openstack-nova-api-12.0.5~a0~dev2-7.1 as a component of SUSE OpenStack Cloud 6 openstack-nova-cells-12.0.5~a0~dev2-7.1 as a component of SUSE OpenStack Cloud 6 openstack-nova-cert-12.0.5~a0~dev2-7.1 as a component of SUSE OpenStack Cloud 6 openstack-nova-compute-12.0.5~a0~dev2-7.1 as a component of SUSE OpenStack Cloud 6 openstack-nova-conductor-12.0.5~a0~dev2-7.1 as a component of SUSE OpenStack Cloud 6 openstack-nova-console-12.0.5~a0~dev2-7.1 as a component of SUSE OpenStack Cloud 6 openstack-nova-consoleauth-12.0.5~a0~dev2-7.1 as a component of SUSE OpenStack Cloud 6 openstack-nova-doc-12.0.5~a0~dev2-7.1 as a component of SUSE OpenStack Cloud 6 openstack-nova-novncproxy-12.0.5~a0~dev2-7.1 as a component of SUSE OpenStack Cloud 6 openstack-nova-objectstore-12.0.5~a0~dev2-7.1 as a component of SUSE OpenStack Cloud 6 openstack-nova-scheduler-12.0.5~a0~dev2-7.1 as a component of SUSE OpenStack Cloud 6 openstack-nova-serialproxy-12.0.5~a0~dev2-7.1 as a component of SUSE OpenStack Cloud 6 openstack-nova-vncproxy-12.0.5~a0~dev2-7.1 as a component of SUSE OpenStack Cloud 6 openstack-resource-agents-1.0+git.1467079370.4f2c49d-7.1 as a component of SUSE OpenStack Cloud 6 python-ceilometer-5.0.4~a0~dev6-6.1 as a component of SUSE OpenStack Cloud 6 python-cinder-7.0.3~a0~dev2-7.1 as a component of SUSE OpenStack Cloud 6 python-glance-11.0.2~a0~dev13-7.1 as a component of SUSE OpenStack Cloud 6 python-heat-5.0.2~a0~dev93-9.1 as a component of SUSE OpenStack Cloud 6 python-horizon-8.0.2~a0~dev34-8.1 as a component of SUSE OpenStack Cloud 6 python-keystone-8.1.1~a0~dev13-3.1 as a component of SUSE OpenStack Cloud 6 python-manila-1.0.2~a0~dev11-9.1 as a component of SUSE OpenStack Cloud 6 python-networking-cisco-2.1.1-6.1 as a component of SUSE OpenStack Cloud 6 python-neutron-7.1.2~a0~dev29-10.1 as a component of SUSE OpenStack Cloud 6 python-neutron-fwaas-7.1.2~a0~dev1-6.1 as a component of SUSE OpenStack Cloud 6 python-neutron-lbaas-7.1.2~a0~dev1-6.1 as a component of SUSE OpenStack Cloud 6 python-nova-12.0.5~a0~dev2-7.1 as a component of SUSE OpenStack Cloud 6 python-openstackclient-1.7.2-4.1 as a component of SUSE OpenStack Cloud 6 The libvirt driver in OpenStack Compute (Nova) before 2015.1.4 (kilo) and 12.0.x before 12.0.3 (liberty), when using raw storage and use_cow_images is set to false, allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or root disk. CVE-2016-2140 SUSE OpenStack Cloud 6:openstack-ceilometer-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-agent-central-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-agent-compute-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-agent-ipmi-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-agent-notification-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-alarm-evaluator-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-alarm-notifier-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-api-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-collector-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-doc-5.0.4~a0~dev6-6.2 SUSE OpenStack Cloud 6:openstack-ceilometer-polling-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-cinder-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-cinder-api-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-cinder-backup-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-cinder-doc-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-cinder-scheduler-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-cinder-volume-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-dashboard-8.0.2~a0~dev34-8.1 SUSE OpenStack Cloud 6:openstack-glance-11.0.2~a0~dev13-7.1 SUSE OpenStack Cloud 6:openstack-glance-doc-11.0.2~a0~dev13-7.1 SUSE OpenStack Cloud 6:openstack-heat-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:openstack-heat-api-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:openstack-heat-api-cfn-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:openstack-heat-api-cloudwatch-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:openstack-heat-doc-5.0.2~a0~dev93-9.3 SUSE OpenStack Cloud 6:openstack-heat-engine-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:openstack-heat-plugin-heat_docker-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:openstack-keystone-8.1.1~a0~dev13-3.1 SUSE OpenStack Cloud 6:openstack-keystone-doc-8.1.1~a0~dev13-3.2 SUSE OpenStack Cloud 6:openstack-manila-1.0.2~a0~dev11-9.1 SUSE OpenStack Cloud 6:openstack-manila-api-1.0.2~a0~dev11-9.1 SUSE OpenStack Cloud 6:openstack-manila-doc-1.0.2~a0~dev11-9.2 SUSE OpenStack Cloud 6:openstack-manila-scheduler-1.0.2~a0~dev11-9.1 SUSE OpenStack Cloud 6:openstack-manila-share-1.0.2~a0~dev11-9.1 SUSE OpenStack Cloud 6:openstack-neutron-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-dhcp-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-doc-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-fwaas-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:openstack-neutron-fwaas-doc-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:openstack-neutron-ha-tool-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-l3-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-lbaas-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:openstack-neutron-lbaas-agent-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:openstack-neutron-lbaas-doc-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:openstack-neutron-linuxbridge-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-metadata-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-metering-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-mlnx-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-nvsd-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-openvswitch-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-restproxy-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-server-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-nova-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-api-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-cells-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-cert-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-compute-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-conductor-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-console-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-consoleauth-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-doc-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-novncproxy-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-objectstore-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-scheduler-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-serialproxy-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-vncproxy-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-resource-agents-1.0+git.1467079370.4f2c49d-7.1 SUSE OpenStack Cloud 6:python-ceilometer-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:python-cinder-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:python-glance-11.0.2~a0~dev13-7.1 SUSE OpenStack Cloud 6:python-heat-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:python-horizon-8.0.2~a0~dev34-8.1 SUSE OpenStack Cloud 6:python-keystone-8.1.1~a0~dev13-3.1 SUSE OpenStack Cloud 6:python-manila-1.0.2~a0~dev11-9.1 SUSE OpenStack Cloud 6:python-networking-cisco-2.1.1-6.1 SUSE OpenStack Cloud 6:python-neutron-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:python-neutron-fwaas-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:python-neutron-lbaas-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:python-nova-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:python-openstackclient-1.7.2-4.1 low 6 AV:N/AC:M/Au:S/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162143-1/ https://www.suse.com/security/cve/CVE-2016-2140.html CVE-2016-2140 https://bugzilla.suse.com/970258 SUSE Bug 970258 Cross-site scripting (XSS) vulnerability in OpenStack Dashboard (Horizon) 8.0.1 and earlier and 9.0.0 through 9.0.1 allows remote authenticated users to inject arbitrary web script or HTML by injecting an AngularJS template in a dashboard form. CVE-2016-4428 SUSE OpenStack Cloud 6:openstack-ceilometer-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-agent-central-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-agent-compute-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-agent-ipmi-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-agent-notification-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-alarm-evaluator-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-alarm-notifier-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-api-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-collector-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-doc-5.0.4~a0~dev6-6.2 SUSE OpenStack Cloud 6:openstack-ceilometer-polling-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-cinder-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-cinder-api-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-cinder-backup-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-cinder-doc-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-cinder-scheduler-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-cinder-volume-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-dashboard-8.0.2~a0~dev34-8.1 SUSE OpenStack Cloud 6:openstack-glance-11.0.2~a0~dev13-7.1 SUSE OpenStack Cloud 6:openstack-glance-doc-11.0.2~a0~dev13-7.1 SUSE OpenStack Cloud 6:openstack-heat-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:openstack-heat-api-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:openstack-heat-api-cfn-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:openstack-heat-api-cloudwatch-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:openstack-heat-doc-5.0.2~a0~dev93-9.3 SUSE OpenStack Cloud 6:openstack-heat-engine-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:openstack-heat-plugin-heat_docker-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:openstack-keystone-8.1.1~a0~dev13-3.1 SUSE OpenStack Cloud 6:openstack-keystone-doc-8.1.1~a0~dev13-3.2 SUSE OpenStack Cloud 6:openstack-manila-1.0.2~a0~dev11-9.1 SUSE OpenStack Cloud 6:openstack-manila-api-1.0.2~a0~dev11-9.1 SUSE OpenStack Cloud 6:openstack-manila-doc-1.0.2~a0~dev11-9.2 SUSE OpenStack Cloud 6:openstack-manila-scheduler-1.0.2~a0~dev11-9.1 SUSE OpenStack Cloud 6:openstack-manila-share-1.0.2~a0~dev11-9.1 SUSE OpenStack Cloud 6:openstack-neutron-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-dhcp-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-doc-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-fwaas-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:openstack-neutron-fwaas-doc-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:openstack-neutron-ha-tool-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-l3-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-lbaas-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:openstack-neutron-lbaas-agent-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:openstack-neutron-lbaas-doc-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:openstack-neutron-linuxbridge-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-metadata-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-metering-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-mlnx-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-nvsd-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-openvswitch-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-restproxy-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-server-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-nova-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-api-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-cells-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-cert-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-compute-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-conductor-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-console-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-consoleauth-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-doc-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-novncproxy-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-objectstore-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-scheduler-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-serialproxy-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-vncproxy-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-resource-agents-1.0+git.1467079370.4f2c49d-7.1 SUSE OpenStack Cloud 6:python-ceilometer-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:python-cinder-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:python-glance-11.0.2~a0~dev13-7.1 SUSE OpenStack Cloud 6:python-heat-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:python-horizon-8.0.2~a0~dev34-8.1 SUSE OpenStack Cloud 6:python-keystone-8.1.1~a0~dev13-3.1 SUSE OpenStack Cloud 6:python-manila-1.0.2~a0~dev11-9.1 SUSE OpenStack Cloud 6:python-networking-cisco-2.1.1-6.1 SUSE OpenStack Cloud 6:python-neutron-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:python-neutron-fwaas-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:python-neutron-lbaas-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:python-nova-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:python-openstackclient-1.7.2-4.1 low 6 AV:N/AC:M/Au:S/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162143-1/ https://www.suse.com/security/cve/CVE-2016-4428.html CVE-2016-4428 https://bugzilla.suse.com/983807 SUSE Bug 983807 The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended DHCP-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a crafted DHCP discovery message. CVE-2016-5362 SUSE OpenStack Cloud 6:openstack-ceilometer-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-agent-central-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-agent-compute-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-agent-ipmi-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-agent-notification-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-alarm-evaluator-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-alarm-notifier-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-api-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-collector-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-doc-5.0.4~a0~dev6-6.2 SUSE OpenStack Cloud 6:openstack-ceilometer-polling-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-cinder-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-cinder-api-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-cinder-backup-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-cinder-doc-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-cinder-scheduler-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-cinder-volume-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-dashboard-8.0.2~a0~dev34-8.1 SUSE OpenStack Cloud 6:openstack-glance-11.0.2~a0~dev13-7.1 SUSE OpenStack Cloud 6:openstack-glance-doc-11.0.2~a0~dev13-7.1 SUSE OpenStack Cloud 6:openstack-heat-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:openstack-heat-api-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:openstack-heat-api-cfn-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:openstack-heat-api-cloudwatch-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:openstack-heat-doc-5.0.2~a0~dev93-9.3 SUSE OpenStack Cloud 6:openstack-heat-engine-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:openstack-heat-plugin-heat_docker-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:openstack-keystone-8.1.1~a0~dev13-3.1 SUSE OpenStack Cloud 6:openstack-keystone-doc-8.1.1~a0~dev13-3.2 SUSE OpenStack Cloud 6:openstack-manila-1.0.2~a0~dev11-9.1 SUSE OpenStack Cloud 6:openstack-manila-api-1.0.2~a0~dev11-9.1 SUSE OpenStack Cloud 6:openstack-manila-doc-1.0.2~a0~dev11-9.2 SUSE OpenStack Cloud 6:openstack-manila-scheduler-1.0.2~a0~dev11-9.1 SUSE OpenStack Cloud 6:openstack-manila-share-1.0.2~a0~dev11-9.1 SUSE OpenStack Cloud 6:openstack-neutron-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-dhcp-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-doc-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-fwaas-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:openstack-neutron-fwaas-doc-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:openstack-neutron-ha-tool-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-l3-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-lbaas-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:openstack-neutron-lbaas-agent-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:openstack-neutron-lbaas-doc-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:openstack-neutron-linuxbridge-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-metadata-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-metering-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-mlnx-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-nvsd-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-openvswitch-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-restproxy-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-server-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-nova-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-api-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-cells-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-cert-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-compute-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-conductor-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-console-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-consoleauth-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-doc-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-novncproxy-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-objectstore-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-scheduler-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-serialproxy-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-vncproxy-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-resource-agents-1.0+git.1467079370.4f2c49d-7.1 SUSE OpenStack Cloud 6:python-ceilometer-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:python-cinder-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:python-glance-11.0.2~a0~dev13-7.1 SUSE OpenStack Cloud 6:python-heat-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:python-horizon-8.0.2~a0~dev34-8.1 SUSE OpenStack Cloud 6:python-keystone-8.1.1~a0~dev13-3.1 SUSE OpenStack Cloud 6:python-manila-1.0.2~a0~dev11-9.1 SUSE OpenStack Cloud 6:python-networking-cisco-2.1.1-6.1 SUSE OpenStack Cloud 6:python-neutron-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:python-neutron-fwaas-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:python-neutron-lbaas-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:python-nova-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:python-openstackclient-1.7.2-4.1 low 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162143-1/ https://www.suse.com/security/cve/CVE-2016-5362.html CVE-2016-5362 https://bugzilla.suse.com/984442 SUSE Bug 984442 https://bugzilla.suse.com/984443 SUSE Bug 984443 https://bugzilla.suse.com/984445 SUSE Bug 984445 The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended MAC-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via (1) a crafted DHCP discovery message or (2) crafted non-IP traffic. CVE-2016-5363 SUSE OpenStack Cloud 6:openstack-ceilometer-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-agent-central-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-agent-compute-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-agent-ipmi-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-agent-notification-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-alarm-evaluator-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-alarm-notifier-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-api-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-collector-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-ceilometer-doc-5.0.4~a0~dev6-6.2 SUSE OpenStack Cloud 6:openstack-ceilometer-polling-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:openstack-cinder-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-cinder-api-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-cinder-backup-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-cinder-doc-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-cinder-scheduler-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-cinder-volume-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-dashboard-8.0.2~a0~dev34-8.1 SUSE OpenStack Cloud 6:openstack-glance-11.0.2~a0~dev13-7.1 SUSE OpenStack Cloud 6:openstack-glance-doc-11.0.2~a0~dev13-7.1 SUSE OpenStack Cloud 6:openstack-heat-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:openstack-heat-api-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:openstack-heat-api-cfn-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:openstack-heat-api-cloudwatch-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:openstack-heat-doc-5.0.2~a0~dev93-9.3 SUSE OpenStack Cloud 6:openstack-heat-engine-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:openstack-heat-plugin-heat_docker-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:openstack-keystone-8.1.1~a0~dev13-3.1 SUSE OpenStack Cloud 6:openstack-keystone-doc-8.1.1~a0~dev13-3.2 SUSE OpenStack Cloud 6:openstack-manila-1.0.2~a0~dev11-9.1 SUSE OpenStack Cloud 6:openstack-manila-api-1.0.2~a0~dev11-9.1 SUSE OpenStack Cloud 6:openstack-manila-doc-1.0.2~a0~dev11-9.2 SUSE OpenStack Cloud 6:openstack-manila-scheduler-1.0.2~a0~dev11-9.1 SUSE OpenStack Cloud 6:openstack-manila-share-1.0.2~a0~dev11-9.1 SUSE OpenStack Cloud 6:openstack-neutron-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-dhcp-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-doc-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-fwaas-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:openstack-neutron-fwaas-doc-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:openstack-neutron-ha-tool-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-l3-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-lbaas-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:openstack-neutron-lbaas-agent-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:openstack-neutron-lbaas-doc-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:openstack-neutron-linuxbridge-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-metadata-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-metering-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-mlnx-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-nvsd-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-openvswitch-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-restproxy-agent-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-neutron-server-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:openstack-nova-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-api-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-cells-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-cert-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-compute-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-conductor-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-console-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-consoleauth-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-doc-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-novncproxy-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-objectstore-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-scheduler-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-serialproxy-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-nova-vncproxy-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:openstack-resource-agents-1.0+git.1467079370.4f2c49d-7.1 SUSE OpenStack Cloud 6:python-ceilometer-5.0.4~a0~dev6-6.1 SUSE OpenStack Cloud 6:python-cinder-7.0.3~a0~dev2-7.1 SUSE OpenStack Cloud 6:python-glance-11.0.2~a0~dev13-7.1 SUSE OpenStack Cloud 6:python-heat-5.0.2~a0~dev93-9.1 SUSE OpenStack Cloud 6:python-horizon-8.0.2~a0~dev34-8.1 SUSE OpenStack Cloud 6:python-keystone-8.1.1~a0~dev13-3.1 SUSE OpenStack Cloud 6:python-manila-1.0.2~a0~dev11-9.1 SUSE OpenStack Cloud 6:python-networking-cisco-2.1.1-6.1 SUSE OpenStack Cloud 6:python-neutron-7.1.2~a0~dev29-10.1 SUSE OpenStack Cloud 6:python-neutron-fwaas-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:python-neutron-lbaas-7.1.2~a0~dev1-6.1 SUSE OpenStack Cloud 6:python-nova-12.0.5~a0~dev2-7.1 SUSE OpenStack Cloud 6:python-openstackclient-1.7.2-4.1 low 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162143-1/ https://www.suse.com/security/cve/CVE-2016-5363.html CVE-2016-5363 https://bugzilla.suse.com/984442 SUSE Bug 984442 https://bugzilla.suse.com/984443 SUSE Bug 984443 https://bugzilla.suse.com/984445 SUSE Bug 984445