VDB

SUSE-SU-2019%3A2267-1

SUSE-SU-2019%3A2267-1 PUBLISHED CVSS 9.300000190734863 CRITICAL

Record from OSV · Published September 18, 2019

Security update for ardana-ansible, ardana-barbican, ardana-cinder, ardana-cluster, ardana-cobbler, ardana-db, ardana-designate, ardana-extensions-nsx, ardana-glance, ardana-heat, ardana-horizon, ardana-input-model, ardana-installer-ui, ardana-ironic, ardana-keystone, ardana-logging, ardana-magnum, ardana-monasca, ardana-mq, ardana-neutron, ardana-nova, ardana-octavia, ardana-opsconsole, ardana-opsconsole-ui, ardana-osconfig, ardana-service, ardana-ses, ardana-swift, ardana-tempest, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, java-monasca-common, java-monasca-common-kit, openstack-ceilometer, openstack-cinder, openstack-designate, openstack-heat, openstack-horizon-plugin-neutron-fwaas-ui, openstack-horizon-plugin-neutron-lbaas-ui, openstack-horizon-plugin-neutron-vpnaas-ui, openstack-ironic, openstack-ironic-python-agent, openstack-keystone, openstack-magnum, openstack-manila, openstack-monasca-notification, openstack-monasca-persister, openstack-monasca-persister-java, openstack-monasca-persister-java-kit, openstack-neutron, openstack-neutron-gbp, openstack-neutron-lbaas, openstack-nova, openstack-octavia, openstack-tempest, python-ardana-configurationprocessor, python-cinder-tempest-plugin, python-ironicclient, python-keystonemiddleware, python-monasca-tempest-plugin, python-openstackclient, python-openstacksdk, python-proliantutils, python-python-engineio, python-swiftlm, python-vmware-nsx, python-vmware-nsxlib, yast2-crowbar

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
python-ironicclientSUSE:OpenStack Cloud 92.5.3-4.7.2
ardana-ironicSUSE:OpenStack Cloud 99.0+git.1565721987.ddc59c8-3.7.2, 9.0+git.1565721987.ddc59c8
python-openstacksdkSUSE:OpenStack Cloud 90.17.3-8.1
venv-openstack-horizonSUSE:OpenStack Cloud 914.0.4~dev4-4.7.2, 14.0.4
python-openstacksdkSUSE:OpenStack Cloud Crowbar 90.17.3-8.1
openstack-horizon-plugin-neutron-vpnaas-uiSUSE:OpenStack Cloud 91.4.1~dev7-8.1, 1.4.1
ardana-opsconsoleSUSE:OpenStack Cloud 99.0+git.1566251377.b1caeaa-3.7.2, 9.0+git.1566251377.b1caeaa
openstack-ironicSUSE:OpenStack Cloud 911.1.4~dev9-3.7.2, 11.1.4
openstack-cinderSUSE:OpenStack Cloud 913.0.7~dev3-3.7.2, 13.0.7
ardana-novaSUSE:OpenStack Cloud 99.0+git.1566332515.e232568-3.7.2, 9.0+git.1566332515.e232568
openstack-neutron-gbpSUSE:OpenStack Cloud 95.0.1~dev459-3.7.2, 5.0.1
venv-openstack-cinderSUSE:OpenStack Cloud 913.0.7~dev3-3.7.2, 13.0.7

88 more packages have a fixed version. See every fix in Lookup.

Risk scores

CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

VendorProductVersions
SUSE:OpenStack Cloud 9python-ironicclient0
SUSE:OpenStack Cloud 9ardana-ironic0, 0
SUSE:OpenStack Cloud 9python-openstacksdk0
SUSE:OpenStack Cloud 9venv-openstack-horizon0, 0
SUSE:OpenStack Cloud Crowbar 9python-openstacksdk0
SUSE:OpenStack Cloud 9openstack-horizon-plugin-neutron-vpnaas-ui0, 0
SUSE:OpenStack Cloud 9ardana-opsconsole0, 0
SUSE:OpenStack Cloud 9openstack-ironic0, 0
SUSE:OpenStack Cloud 9openstack-cinder0, 0
SUSE:OpenStack Cloud 9ardana-nova0, 0
SUSE:OpenStack Cloud 9openstack-neutron-gbp0, 0
SUSE:OpenStack Cloud 9venv-openstack-cinder0, 0
SUSE:OpenStack Cloud Crowbar 9yast2-crowbar0
SUSE:OpenStack Cloud Crowbar 9python-monasca-tempest-plugin0
SUSE:OpenStack Cloud Crowbar 9openstack-ironic0, 0
SUSE:OpenStack Cloud Crowbar 9openstack-nova0, 0
SUSE:OpenStack Cloud 9openstack-octavia0, 0
SUSE:OpenStack Cloud 9ardana-mq0, 0
SUSE:OpenStack Cloud 9venv-openstack-sahara0, 0
SUSE:OpenStack Cloud 9openstack-heat0, 0

…and 94 more

Timeline

  • Sep 18, 2019 CVE Published
  • Feb 4, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln SUSE-SU-2019%3A2267-1
vulnetix vdb fixes SUSE-SU-2019%3A2267-1

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/SUSE-SU-2019%253A2267-1/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

…and 60 more

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›