{"schema_version":"1.7.3","id":"SUSE-SU-2020:0081-1","published":"2020-01-13T09:38:16Z","modified":"2026-02-04T04:25:40.499069Z","related":["CVE-2015-3448","CVE-2019-13117","CVE-2019-16770"],"upstream":["CVE-2015-3448","CVE-2019-13117","CVE-2019-16770"],"summary":"Security update for crowbar-core, crowbar-openstack, openstack-horizon-plugin-monasca-ui, openstack-monasca-api, openstack-monasca-log-api, openstack-neutron, rubygem-puma, rubygem-rest-client","details":"This update for crowbar-core, crowbar-openstack, openstack-horizon-plugin-monasca-ui, openstack-monasca-api, openstack-monasca-log-api, openstack-neutron, rubygem-puma, rubygem-rest-client contains the following fixes:\n\nSecurity issue fixed for rubygem-puma:\n\n- CVE-2019-16770: Fixed a potential denial of service  in Puma's reactor (bsc#1158675, jsc#SOC-10999)\n\nSecurity issue fixed for rubygem-rest-client:\n\n- CVE-2015-3448: Fixed a plain text local password disclosure. (bsc#917802)\n\nUpdates for crowbar-core:\n- Update to version 4.0+git.1574788924.e4a6aeb0c:\n  * Allow pacemaker remotes for upgrade (SOC-10133)\n\n- Update to version 4.0+git.1574713660.972029d1a:\n  * Ignore CVE-2019-13117 in CI builds (bsc#1157028)\n\nUpdates for crowbar-openstack:\n- Update to version 4.0+git.1574869671.9c7bade2d:\n  * tempest: configure Kibana version (SOC-10131)\n\n- Update to version 4.0+git.1574764112.c260c70e5:\n  * horizon: install lbaas horizon dashboard (SOC-10883)\n\nUpdates for openstack-horizon-plugin-monasca-ui:\n- Refresh allow-raw-grafana-links.patch\n- update to version 1.5.5~dev3\n  * Replace openstack.org git:// URLs with https://\n  * Fix the partial missing metrics in Create Alarm Definition flow\n  * import zuul job settings from project-config\n  * Fix incorrect splitting of dimension in ProxyView\n  * Fix Alarm status Panel on Overview page\n  * Change IntegerField to ChoiceField for notification period\n  * Imported Translations from Zanata\n  * Display unique metric names for alarm\n  * Fix Alarm Details section in Alarm History view\n  * Fix validators for creating and editing notifications\n  * Center the text for the button Deterministic\n  * Adding title to Filter Alarms pop-up\n  * Fix misleading validation error\n  * Fix nit found in monasca-ui\n  * Fix Breadcrumbs\n  * Fix description for name field\n  * Fixing 'Create Alarm Definition' for IE11\n  * Imported Translations from Zanata\n\nUpdates to openstack-monasca-api:\n- added fix-metric-name-offset.patch (SOC-10131)\n- removed 0001-Fix-InfluxDB-repository-list_dimension_values-to-sup.patch\n  (merged upstream)\n- update to version 1.7.1~dev18\n  * Replace openstack.org git:// URLs with https://\n  * import zuul job settings from project-config\n  * Upgrade Apache Storm to 1.0.6\n  * Zuul: Remove project name\n\nUpdates to openstack-monasca-log-api:\n- added fix-tempest-region.patch (SOC-10131)\n- update to version 1.4.3~dev3\n  * Replace openstack.org git:// URLs with https://\n  * import zuul job settings from project-config\n  * Avoid tox\\_install.sh for constraints support\n\nUpdates to openstack-neutron:\n- neutron: Remove stop action from ovs-cleanup (bsc#1157482)\n  backport of https://review.opendev.org/#/c/695867/\n  ","affected":[{"package":{"name":"crowbar-core","ecosystem":"SUSE:OpenStack Cloud 7","purl":"pkg:rpm/suse/crowbar-core&distro=SUSE%20OpenStack%20Cloud%207"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0+git.1574788924.e4a6aeb0c-9.60.2"}]}],"ecosystem_specific":{"binaries":[{"crowbar-core":"4.0+git.1574788924.e4a6aeb0c-9.60.2","crowbar-core-branding-upstream":"4.0+git.1574788924.e4a6aeb0c-9.60.2","crowbar-openstack":"4.0+git.1574869671.9c7bade2d-9.65.1","grafana-monasca-ui-drilldown":"1.5.5~dev3-8.1","openstack-horizon-plugin-monasca-ui":"1.5.5~dev3-8.1","openstack-monasca-api":"1.7.1~dev18-12.1","openstack-monasca-log-api":"1.4.3~dev3-5.1","openstack-neutron":"9.4.2~dev21-7.38.1","openstack-neutron-dhcp-agent":"9.4.2~dev21-7.38.1","openstack-neutron-doc":"9.4.2~dev21-7.38.1","openstack-neutron-ha-tool":"9.4.2~dev21-7.38.1","openstack-neutron-l3-agent":"9.4.2~dev21-7.38.1","openstack-neutron-linuxbridge-agent":"9.4.2~dev21-7.38.1","openstack-neutron-macvtap-agent":"9.4.2~dev21-7.38.1","openstack-neutron-metadata-agent":"9.4.2~dev21-7.38.1","openstack-neutron-metering-agent":"9.4.2~dev21-7.38.1","openstack-neutron-openvswitch-agent":"9.4.2~dev21-7.38.1","openstack-neutron-server":"9.4.2~dev21-7.38.1","python-horizon-plugin-monasca-ui":"1.5.5~dev3-8.1","python-monasca-api":"1.7.1~dev18-12.1","python-monasca-log-api":"1.4.3~dev3-5.1","python-neutron":"9.4.2~dev21-7.38.1","ruby2.1-rubygem-puma":"2.16.0-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0081-1.json"}},{"package":{"name":"crowbar-openstack","ecosystem":"SUSE:OpenStack Cloud 7","purl":"pkg:rpm/suse/crowbar-openstack&distro=SUSE%20OpenStack%20Cloud%207"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0+git.1574869671.9c7bade2d-9.65.1"}]}],"ecosystem_specific":{"binaries":[{"crowbar-core":"4.0+git.1574788924.e4a6aeb0c-9.60.2","crowbar-core-branding-upstream":"4.0+git.1574788924.e4a6aeb0c-9.60.2","crowbar-openstack":"4.0+git.1574869671.9c7bade2d-9.65.1","grafana-monasca-ui-drilldown":"1.5.5~dev3-8.1","openstack-horizon-plugin-monasca-ui":"1.5.5~dev3-8.1","openstack-monasca-api":"1.7.1~dev18-12.1","openstack-monasca-log-api":"1.4.3~dev3-5.1","openstack-neutron":"9.4.2~dev21-7.38.1","openstack-neutron-dhcp-agent":"9.4.2~dev21-7.38.1","openstack-neutron-doc":"9.4.2~dev21-7.38.1","openstack-neutron-ha-tool":"9.4.2~dev21-7.38.1","openstack-neutron-l3-agent":"9.4.2~dev21-7.38.1","openstack-neutron-linuxbridge-agent":"9.4.2~dev21-7.38.1","openstack-neutron-macvtap-agent":"9.4.2~dev21-7.38.1","openstack-neutron-metadata-agent":"9.4.2~dev21-7.38.1","openstack-neutron-metering-agent":"9.4.2~dev21-7.38.1","openstack-neutron-openvswitch-agent":"9.4.2~dev21-7.38.1","openstack-neutron-server":"9.4.2~dev21-7.38.1","python-horizon-plugin-monasca-ui":"1.5.5~dev3-8.1","python-monasca-api":"1.7.1~dev18-12.1","python-monasca-log-api":"1.4.3~dev3-5.1","python-neutron":"9.4.2~dev21-7.38.1","ruby2.1-rubygem-puma":"2.16.0-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0081-1.json"}},{"package":{"name":"openstack-horizon-plugin-monasca-ui","ecosystem":"SUSE:OpenStack Cloud 7","purl":"pkg:rpm/suse/openstack-horizon-plugin-monasca-ui&distro=SUSE%20OpenStack%20Cloud%207"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5~dev3-8.1"}]}],"ecosystem_specific":{"binaries":[{"crowbar-core":"4.0+git.1574788924.e4a6aeb0c-9.60.2","crowbar-core-branding-upstream":"4.0+git.1574788924.e4a6aeb0c-9.60.2","crowbar-openstack":"4.0+git.1574869671.9c7bade2d-9.65.1","grafana-monasca-ui-drilldown":"1.5.5~dev3-8.1","openstack-horizon-plugin-monasca-ui":"1.5.5~dev3-8.1","openstack-monasca-api":"1.7.1~dev18-12.1","openstack-monasca-log-api":"1.4.3~dev3-5.1","openstack-neutron":"9.4.2~dev21-7.38.1","openstack-neutron-dhcp-agent":"9.4.2~dev21-7.38.1","openstack-neutron-doc":"9.4.2~dev21-7.38.1","openstack-neutron-ha-tool":"9.4.2~dev21-7.38.1","openstack-neutron-l3-agent":"9.4.2~dev21-7.38.1","openstack-neutron-linuxbridge-agent":"9.4.2~dev21-7.38.1","openstack-neutron-macvtap-agent":"9.4.2~dev21-7.38.1","openstack-neutron-metadata-agent":"9.4.2~dev21-7.38.1","openstack-neutron-metering-agent":"9.4.2~dev21-7.38.1","openstack-neutron-openvswitch-agent":"9.4.2~dev21-7.38.1","openstack-neutron-server":"9.4.2~dev21-7.38.1","python-horizon-plugin-monasca-ui":"1.5.5~dev3-8.1","python-monasca-api":"1.7.1~dev18-12.1","python-monasca-log-api":"1.4.3~dev3-5.1","python-neutron":"9.4.2~dev21-7.38.1","ruby2.1-rubygem-puma":"2.16.0-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0081-1.json"}},{"package":{"name":"openstack-monasca-api","ecosystem":"SUSE:OpenStack Cloud 7","purl":"pkg:rpm/suse/openstack-monasca-api&distro=SUSE%20OpenStack%20Cloud%207"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1~dev18-12.1"}]}],"ecosystem_specific":{"binaries":[{"crowbar-core":"4.0+git.1574788924.e4a6aeb0c-9.60.2","crowbar-core-branding-upstream":"4.0+git.1574788924.e4a6aeb0c-9.60.2","crowbar-openstack":"4.0+git.1574869671.9c7bade2d-9.65.1","grafana-monasca-ui-drilldown":"1.5.5~dev3-8.1","openstack-horizon-plugin-monasca-ui":"1.5.5~dev3-8.1","openstack-monasca-api":"1.7.1~dev18-12.1","openstack-monasca-log-api":"1.4.3~dev3-5.1","openstack-neutron":"9.4.2~dev21-7.38.1","openstack-neutron-dhcp-agent":"9.4.2~dev21-7.38.1","openstack-neutron-doc":"9.4.2~dev21-7.38.1","openstack-neutron-ha-tool":"9.4.2~dev21-7.38.1","openstack-neutron-l3-agent":"9.4.2~dev21-7.38.1","openstack-neutron-linuxbridge-agent":"9.4.2~dev21-7.38.1","openstack-neutron-macvtap-agent":"9.4.2~dev21-7.38.1","openstack-neutron-metadata-agent":"9.4.2~dev21-7.38.1","openstack-neutron-metering-agent":"9.4.2~dev21-7.38.1","openstack-neutron-openvswitch-agent":"9.4.2~dev21-7.38.1","openstack-neutron-server":"9.4.2~dev21-7.38.1","python-horizon-plugin-monasca-ui":"1.5.5~dev3-8.1","python-monasca-api":"1.7.1~dev18-12.1","python-monasca-log-api":"1.4.3~dev3-5.1","python-neutron":"9.4.2~dev21-7.38.1","ruby2.1-rubygem-puma":"2.16.0-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0081-1.json"}},{"package":{"name":"openstack-monasca-log-api","ecosystem":"SUSE:OpenStack Cloud 7","purl":"pkg:rpm/suse/openstack-monasca-log-api&distro=SUSE%20OpenStack%20Cloud%207"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3~dev3-5.1"}]}],"ecosystem_specific":{"binaries":[{"crowbar-core":"4.0+git.1574788924.e4a6aeb0c-9.60.2","crowbar-core-branding-upstream":"4.0+git.1574788924.e4a6aeb0c-9.60.2","crowbar-openstack":"4.0+git.1574869671.9c7bade2d-9.65.1","grafana-monasca-ui-drilldown":"1.5.5~dev3-8.1","openstack-horizon-plugin-monasca-ui":"1.5.5~dev3-8.1","openstack-monasca-api":"1.7.1~dev18-12.1","openstack-monasca-log-api":"1.4.3~dev3-5.1","openstack-neutron":"9.4.2~dev21-7.38.1","openstack-neutron-dhcp-agent":"9.4.2~dev21-7.38.1","openstack-neutron-doc":"9.4.2~dev21-7.38.1","openstack-neutron-ha-tool":"9.4.2~dev21-7.38.1","openstack-neutron-l3-agent":"9.4.2~dev21-7.38.1","openstack-neutron-linuxbridge-agent":"9.4.2~dev21-7.38.1","openstack-neutron-macvtap-agent":"9.4.2~dev21-7.38.1","openstack-neutron-metadata-agent":"9.4.2~dev21-7.38.1","openstack-neutron-metering-agent":"9.4.2~dev21-7.38.1","openstack-neutron-openvswitch-agent":"9.4.2~dev21-7.38.1","openstack-neutron-server":"9.4.2~dev21-7.38.1","python-horizon-plugin-monasca-ui":"1.5.5~dev3-8.1","python-monasca-api":"1.7.1~dev18-12.1","python-monasca-log-api":"1.4.3~dev3-5.1","python-neutron":"9.4.2~dev21-7.38.1","ruby2.1-rubygem-puma":"2.16.0-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0081-1.json"}},{"package":{"name":"openstack-neutron","ecosystem":"SUSE:OpenStack Cloud 7","purl":"pkg:rpm/suse/openstack-neutron&distro=SUSE%20OpenStack%20Cloud%207"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2~dev21-7.38.1"}]}],"ecosystem_specific":{"binaries":[{"crowbar-core":"4.0+git.1574788924.e4a6aeb0c-9.60.2","crowbar-core-branding-upstream":"4.0+git.1574788924.e4a6aeb0c-9.60.2","crowbar-openstack":"4.0+git.1574869671.9c7bade2d-9.65.1","grafana-monasca-ui-drilldown":"1.5.5~dev3-8.1","openstack-horizon-plugin-monasca-ui":"1.5.5~dev3-8.1","openstack-monasca-api":"1.7.1~dev18-12.1","openstack-monasca-log-api":"1.4.3~dev3-5.1","openstack-neutron":"9.4.2~dev21-7.38.1","openstack-neutron-dhcp-agent":"9.4.2~dev21-7.38.1","openstack-neutron-doc":"9.4.2~dev21-7.38.1","openstack-neutron-ha-tool":"9.4.2~dev21-7.38.1","openstack-neutron-l3-agent":"9.4.2~dev21-7.38.1","openstack-neutron-linuxbridge-agent":"9.4.2~dev21-7.38.1","openstack-neutron-macvtap-agent":"9.4.2~dev21-7.38.1","openstack-neutron-metadata-agent":"9.4.2~dev21-7.38.1","openstack-neutron-metering-agent":"9.4.2~dev21-7.38.1","openstack-neutron-openvswitch-agent":"9.4.2~dev21-7.38.1","openstack-neutron-server":"9.4.2~dev21-7.38.1","python-horizon-plugin-monasca-ui":"1.5.5~dev3-8.1","python-monasca-api":"1.7.1~dev18-12.1","python-monasca-log-api":"1.4.3~dev3-5.1","python-neutron":"9.4.2~dev21-7.38.1","ruby2.1-rubygem-puma":"2.16.0-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0081-1.json"}},{"package":{"name":"openstack-neutron-doc","ecosystem":"SUSE:OpenStack Cloud 7","purl":"pkg:rpm/suse/openstack-neutron-doc&distro=SUSE%20OpenStack%20Cloud%207"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.2~dev21-7.38.1"}]}],"ecosystem_specific":{"binaries":[{"crowbar-core":"4.0+git.1574788924.e4a6aeb0c-9.60.2","crowbar-core-branding-upstream":"4.0+git.1574788924.e4a6aeb0c-9.60.2","crowbar-openstack":"4.0+git.1574869671.9c7bade2d-9.65.1","grafana-monasca-ui-drilldown":"1.5.5~dev3-8.1","openstack-horizon-plugin-monasca-ui":"1.5.5~dev3-8.1","openstack-monasca-api":"1.7.1~dev18-12.1","openstack-monasca-log-api":"1.4.3~dev3-5.1","openstack-neutron":"9.4.2~dev21-7.38.1","openstack-neutron-dhcp-agent":"9.4.2~dev21-7.38.1","openstack-neutron-doc":"9.4.2~dev21-7.38.1","openstack-neutron-ha-tool":"9.4.2~dev21-7.38.1","openstack-neutron-l3-agent":"9.4.2~dev21-7.38.1","openstack-neutron-linuxbridge-agent":"9.4.2~dev21-7.38.1","openstack-neutron-macvtap-agent":"9.4.2~dev21-7.38.1","openstack-neutron-metadata-agent":"9.4.2~dev21-7.38.1","openstack-neutron-metering-agent":"9.4.2~dev21-7.38.1","openstack-neutron-openvswitch-agent":"9.4.2~dev21-7.38.1","openstack-neutron-server":"9.4.2~dev21-7.38.1","python-horizon-plugin-monasca-ui":"1.5.5~dev3-8.1","python-monasca-api":"1.7.1~dev18-12.1","python-monasca-log-api":"1.4.3~dev3-5.1","python-neutron":"9.4.2~dev21-7.38.1","ruby2.1-rubygem-puma":"2.16.0-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0081-1.json"}},{"package":{"name":"rubygem-puma","ecosystem":"SUSE:OpenStack Cloud 7","purl":"pkg:rpm/suse/rubygem-puma&distro=SUSE%20OpenStack%20Cloud%207"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.0-4.3.1"}]}],"ecosystem_specific":{"binaries":[{"crowbar-core":"4.0+git.1574788924.e4a6aeb0c-9.60.2","crowbar-core-branding-upstream":"4.0+git.1574788924.e4a6aeb0c-9.60.2","crowbar-openstack":"4.0+git.1574869671.9c7bade2d-9.65.1","grafana-monasca-ui-drilldown":"1.5.5~dev3-8.1","openstack-horizon-plugin-monasca-ui":"1.5.5~dev3-8.1","openstack-monasca-api":"1.7.1~dev18-12.1","openstack-monasca-log-api":"1.4.3~dev3-5.1","openstack-neutron":"9.4.2~dev21-7.38.1","openstack-neutron-dhcp-agent":"9.4.2~dev21-7.38.1","openstack-neutron-doc":"9.4.2~dev21-7.38.1","openstack-neutron-ha-tool":"9.4.2~dev21-7.38.1","openstack-neutron-l3-agent":"9.4.2~dev21-7.38.1","openstack-neutron-linuxbridge-agent":"9.4.2~dev21-7.38.1","openstack-neutron-macvtap-agent":"9.4.2~dev21-7.38.1","openstack-neutron-metadata-agent":"9.4.2~dev21-7.38.1","openstack-neutron-metering-agent":"9.4.2~dev21-7.38.1","openstack-neutron-openvswitch-agent":"9.4.2~dev21-7.38.1","openstack-neutron-server":"9.4.2~dev21-7.38.1","python-horizon-plugin-monasca-ui":"1.5.5~dev3-8.1","python-monasca-api":"1.7.1~dev18-12.1","python-monasca-log-api":"1.4.3~dev3-5.1","python-neutron":"9.4.2~dev21-7.38.1","ruby2.1-rubygem-puma":"2.16.0-4.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0081-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200081-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1157028"},{"type":"REPORT","url":"https://bugzilla.suse.com/1157482"},{"type":"REPORT","url":"https://bugzilla.suse.com/1158675"},{"type":"REPORT","url":"https://bugzilla.suse.com/917802"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-3448"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-13117"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-16770"},{"type":"REPORT","url":"https://bugzilla.suse.com/SOC-10131"},{"type":"REPORT","url":"https://bugzilla.suse.com/SOC-10133"},{"type":"REPORT","url":"https://bugzilla.suse.com/SOC-10883"},{"type":"REPORT","url":"https://bugzilla.suse.com/SOC-10999"}]}