VDB
SUSE-SU-2019%3A1862-1
SUSE-SU-2019%3A1862-1
PUBLISHED
CVSS 8.699999809265137 HIGH
Record from OSV · Published July 17, 2019
Security update for ardana and crowbar
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| venv-openstack-sahara | SUSE:OpenStack Cloud 8 | 7.0.4~dev1-11.16.1, 7.0.4 |
| venv-openstack-monasca | SUSE:OpenStack Cloud 8 | 2.2.1-11.13.1 |
| venv-openstack-murano | SUSE:OpenStack Cloud 8 | 4.0.1-12.11.1 |
| openstack-nova-doc | SUSE:OpenStack Cloud 8 | 16.1.9~dev3-3.23.1, 16.1.9 |
| openstack-ceilometer-doc | SUSE:HPE Helion OpenStack 8 | 9.0.8~dev7-3.12.1, 9.0.8 |
| ardana-service | SUSE:HPE Helion OpenStack 8 | 8.0+git.1551382173.a81d5e1-3.26.1, 8.0+git.1551382173.a81d5e1 |
| python-muranoclient | SUSE:OpenStack Cloud Crowbar 8 | 0.14.1-3.3.1 |
| python-oslo.config | SUSE:HPE Helion OpenStack 8 | 4.11.2-3.3.1 |
| ardana-nova | SUSE:HPE Helion OpenStack 8 | 8.0+git.1559253853.bb932ea-3.29.1, 8.0+git.1559253853.bb932ea |
| openstack-horizon-plugin-trove-ui | SUSE:OpenStack Cloud 8 | 9.0.1~dev10-3.9.1, 9.0.1 |
| ardana-osconfig | SUSE:OpenStack Cloud 8 | 8.0+git.1557503482.852ec24-3.36.1, 8.0+git.1557503482.852ec24 |
| venv-openstack-manila | SUSE:HPE Helion OpenStack 8 | 5.0.4~dev17-12.19.1, 5.0.4 |
88 more packages have a fixed version. See every fix in Lookup.
Risk scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected products
| Vendor | Product | Versions |
|---|---|---|
| SUSE:OpenStack Cloud 8 | venv-openstack-sahara | 0, 0 |
| SUSE:OpenStack Cloud 8 | venv-openstack-monasca | 0 |
| SUSE:OpenStack Cloud 8 | venv-openstack-murano | 0 |
| SUSE:OpenStack Cloud 8 | openstack-nova-doc | 0, 0 |
| SUSE:HPE Helion OpenStack 8 | openstack-ceilometer-doc | 0, 0 |
| SUSE:HPE Helion OpenStack 8 | ardana-service | 0, 0 |
| SUSE:OpenStack Cloud Crowbar 8 | python-muranoclient | 0 |
| SUSE:HPE Helion OpenStack 8 | python-oslo.config | 0 |
| SUSE:HPE Helion OpenStack 8 | ardana-nova | 0, 0 |
| SUSE:OpenStack Cloud 8 | openstack-horizon-plugin-trove-ui | 0, 0 |
| SUSE:OpenStack Cloud 8 | ardana-osconfig | 0, 0 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-manila | 0, 0 |
| SUSE:OpenStack Cloud 8 | python-oslo.versionedobjects | 0 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-monasca-ceilometer | 0 |
| SUSE:HPE Helion OpenStack 8 | venv-openstack-cinder | 0, 0 |
| SUSE:OpenStack Cloud Crowbar 8 | openstack-designate-doc | 0, 0 |
| SUSE:OpenStack Cloud Crowbar 8 | openstack-neutron-vpnaas | 0, 0 |
| SUSE:HPE Helion OpenStack 8 | python-muranoclient | 0 |
| SUSE:OpenStack Cloud 8 | ardana-service-ansible | 0, 0 |
| SUSE:OpenStack Cloud Crowbar 8 | python-oslo.log | 0 |
…and 326 more
Timeline
- Jul 17, 2019 CVE Published
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln SUSE-SU-2019%3A1862-1
vulnetix vdb fixes SUSE-SU-2019%3A1862-1
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/SUSE-SU-2019%253A1862-1/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://www.suse.com/support/update/announcement/2019/suse-su-20191862-1/ advisory
- https://bugzilla.suse.com/1105559 report
- https://bugzilla.suse.com/1126391 report
- https://bugzilla.suse.com/1130593 report
- https://bugzilla.suse.com/1131712 report
- https://bugzilla.suse.com/1132542 report
- https://bugzilla.suse.com/124991 report
- https://www.suse.com/security/cve/CVE-2019-10876 url
- https://bugzilla.suse.com/SCRD-5542 report
- https://bugzilla.suse.com/SCRD-7132 report
- https://bugzilla.suse.com/SCRD-7471 report
- https://bugzilla.suse.com/SCRD-7710 report
- https://bugzilla.suse.com/SCRD-7984 report
- https://bugzilla.suse.com/SCRD-8347 report
- https://bugzilla.suse.com/SCRD-8459 report
- https://bugzilla.suse.com/SCRD-8462 report
- https://bugzilla.suse.com/1083721 report
- https://bugzilla.suse.com/1118003 report
- https://bugzilla.suse.com/1120932 report
- https://bugzilla.suse.com/1122875 report
…and 21 more