VDB

SUSE-SU-2022%3A3339-1

SUSE-SU-2022%3A3339-1 PUBLISHED CVSS 9.300000190734863 CRITICAL

Record from OSV · Published September 22, 2022

Security update for ardana-ansible, ardana-cobbler, ardana-tempest, grafana, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-neutron-gbp, openstack-nova, python-Django1, rabbitmq-server, rubygem-puma

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
openstack-heat-templatesSUSE:OpenStack Cloud 90.0.0+git.1654529662.75fa04a7-3.15.1, 0.0.0+git.1654529662.75fa04a7
rabbitmq-serverSUSE:OpenStack Cloud 93.6.16-4.3.1
openstack-novaSUSE:OpenStack Cloud Crowbar 918.3.1~dev92-3.43.1, 18.3.1
openstack-neutron-gbpSUSE:OpenStack Cloud 914.0.1~dev46-3.34.1, 14.0.1
openstack-horizon-plugin-gbp-uiSUSE:OpenStack Cloud Crowbar 914.0.1~dev4-3.12.1, 14.0.1
python-Django1SUSE:OpenStack Cloud Crowbar 91.11.29-3.40.1
openstack-heat-templatesSUSE:OpenStack Cloud Crowbar 90.0.0+git.1654529662.75fa04a7-3.15.1, 0.0.0+git.1654529662.75fa04a7
openstack-horizon-plugin-gbp-uiSUSE:OpenStack Cloud 914.0.1~dev4-3.12.1, 14.0.1
openstack-neutron-gbpSUSE:OpenStack Cloud Crowbar 914.0.1~dev46-3.34.1, 14.0.1
ardana-ansibleSUSE:OpenStack Cloud 99.0+git.1660748476.c118d23-3.32.1, 9.0+git.1660748476.c118d23
grafanaSUSE:OpenStack Cloud 96.7.4-3.29.1
rabbitmq-serverSUSE:OpenStack Cloud Crowbar 93.6.16-4.3.1

10 more packages have a fixed version. See every fix in Lookup.

Risk scores

CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

VendorProductVersions
SUSE:OpenStack Cloud 9openstack-heat-templates0, 0
SUSE:OpenStack Cloud 9rabbitmq-server0
SUSE:OpenStack Cloud Crowbar 9openstack-nova0, 0
SUSE:OpenStack Cloud 9openstack-neutron-gbp0, 0
SUSE:OpenStack Cloud Crowbar 9openstack-horizon-plugin-gbp-ui0, 0
SUSE:OpenStack Cloud Crowbar 9python-Django10
SUSE:OpenStack Cloud Crowbar 9openstack-heat-templates0, 0
SUSE:OpenStack Cloud 9openstack-horizon-plugin-gbp-ui0, 0
SUSE:OpenStack Cloud Crowbar 9openstack-neutron-gbp0, 0
SUSE:OpenStack Cloud 9ardana-ansible0, 0
SUSE:OpenStack Cloud 9grafana0
SUSE:OpenStack Cloud Crowbar 9rabbitmq-server0
SUSE:OpenStack Cloud 9venv-openstack-heat0, 0
SUSE:OpenStack Cloud Crowbar 9rubygem-puma0
SUSE:OpenStack Cloud 9ardana-tempest0, 0
SUSE:OpenStack Cloud 9venv-openstack-neutron0, 0
SUSE:OpenStack Cloud 9venv-openstack-horizon0, 0
SUSE:OpenStack Cloud 9venv-openstack-nova0, 0
SUSE:OpenStack Cloud 9python-Django10
SUSE:OpenStack Cloud 9ardana-cobbler0, 0

…and 2 more

Timeline

  • Sep 22, 2022 CVE Published

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln SUSE-SU-2022%3A3339-1
vulnetix vdb fixes SUSE-SU-2022%3A3339-1

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/SUSE-SU-2022%253A3339-1/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›