VDB

SUSE-SU-2021%3A2554-1

SUSE-SU-2021%3A2554-1 PUBLISHED CVSS 7.099999904632568 HIGH

Record from OSV · Published July 28, 2021

Security update for ardana-cobbler, cassandra, cassandra-kit, crowbar-core, crowbar-openstack, documentation-suse-openstack-cloud, grafana, kibana, openstack-heat-templates, openstack-monasca-installer, openstack-nova, python-Django, python-elementpath, python-eventlet, python-py, python-pysaml2, python-six, python-xmlschema

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
venv-openstack-saharaSUSE:HPE Helion OpenStack 87.0.5~dev4-11.32.3, 7.0.5
grafanaSUSE:HPE Helion OpenStack 86.7.4-4.18.2
venv-openstack-swiftSUSE:OpenStack Cloud 82.15.2_2.15.2_2.15.2~dev32-11.23.3, 2.15.2
python-pySUSE:OpenStack Cloud Crowbar 81.4.34-3.3.3
cassandraSUSE:OpenStack Cloud 83.11.10-5.3.5
python-DjangoSUSE:HPE Helion OpenStack 81.11.29-3.25.3
grafanaSUSE:OpenStack Cloud 86.7.4-4.18.2
ardana-cobblerSUSE:OpenStack Cloud 88.0+git.1614096566.e8c2b27-3.44.3, 8.0+git.1614096566.e8c2b27
openstack-heat-templatesSUSE:HPE Helion OpenStack 80.0.0+git.1623056900.7917e18-3.21.3, 0.0.0+git.1623056900.7917e18
ardana-cobblerSUSE:HPE Helion OpenStack 88.0+git.1614096566.e8c2b27-3.44.3, 8.0+git.1614096566.e8c2b27
venv-openstack-magnumSUSE:OpenStack Cloud 85.0.2_5.0.2_5.0.2~dev31-11.32.2, 5.0.2
venv-openstack-manilaSUSE:HPE Helion OpenStack 85.1.1~dev5-12.37.3, 5.1.1

88 more packages have a fixed version. See every fix in Lookup.

Risk scores

CVSS 4.0
7.099999904632568
CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:L/SA:N

Affected products

VendorProductVersions
SUSE:HPE Helion OpenStack 8venv-openstack-sahara0, 0
SUSE:HPE Helion OpenStack 8grafana0
SUSE:OpenStack Cloud 8venv-openstack-swift0, 0
SUSE:OpenStack Cloud Crowbar 8python-py0
SUSE:OpenStack Cloud 8cassandra0
SUSE:HPE Helion OpenStack 8python-Django0
SUSE:OpenStack Cloud 8grafana0
SUSE:OpenStack Cloud 8ardana-cobbler0, 0
SUSE:HPE Helion OpenStack 8openstack-heat-templates0, 0
SUSE:HPE Helion OpenStack 8ardana-cobbler0, 0
SUSE:OpenStack Cloud 8venv-openstack-magnum0, 0
SUSE:HPE Helion OpenStack 8venv-openstack-manila0, 0
SUSE:HPE Helion OpenStack 8python-xmlschema0
SUSE:HPE Helion OpenStack 8venv-openstack-monasca-ceilometer0, 0
SUSE:HPE Helion OpenStack 8openstack-monasca-installer0, 0
SUSE:OpenStack Cloud 8venv-openstack-sahara0, 0
SUSE:OpenStack Cloud 8venv-openstack-monasca0, 0
SUSE:OpenStack Cloud Crowbar 8cassandra0
SUSE:OpenStack Cloud 8venv-openstack-neutron0, 0
SUSE:OpenStack Cloud Crowbar 8documentation-suse-openstack-cloud-supplement0

…and 87 more

Timeline

  • Jul 28, 2021 CVE Published

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln SUSE-SU-2021%3A2554-1
vulnetix vdb fixes SUSE-SU-2021%3A2554-1

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/SUSE-SU-2021%253A2554-1/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›