SUSE-SU-2016:2325-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2016/suse-su-20162325-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:2325-1.json

JSON Data

https://api.test.osv.dev/v1/vulns/SUSE-SU-2016:2325-1

Upstream

CVE-2015-3646

CVE-2015-7548

Related

Published

2016-09-16T12:10:42Z

Modified

2026-03-11T06:29:03Z

Summary

Security update for openstack-keystone, openstack-nova, and openstack-swift

Details

This update for openstack-keystone, openstack-nova, and openstack-swift fixes the following issues:

Fix hybrid backend from keystone v3 (bsc#967356)
Fix cleanup when block migration fails (bsc#960015)
Avoid host data leak (bsc#960601, CVE-2015-7548)
Fix init script for openstack-swift-object-expirer
Mark backend_argument as secret (bsc#929628, CVE-2015-3646)

References

Affected packages

SUSE:OpenStack Cloud 5

openstack-keystone

Package

Name: openstack-keystone
Purl: pkg:rpm/suse/openstack-keystone&distro=SUSE%20OpenStack%20Cloud%205

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2014.2.4.juno-17.1

Ecosystem specific

{
    "binaries":  [
        {
            "openstack-keystone":  "2014.2.4.juno-17.1",
            "openstack-keystone-doc":  "2014.2.4.juno-17.2",
            "openstack-nova":  "2014.2.4.juno-29.1",
            "openstack-nova-api":  "2014.2.4.juno-29.1",
            "openstack-nova-cells":  "2014.2.4.juno-29.1",
            "openstack-nova-cert":  "2014.2.4.juno-29.1",
            "openstack-nova-compute":  "2014.2.4.juno-29.1",
            "openstack-nova-conductor":  "2014.2.4.juno-29.1",
            "openstack-nova-console":  "2014.2.4.juno-29.1",
            "openstack-nova-consoleauth":  "2014.2.4.juno-29.1",
            "openstack-nova-doc":  "2014.2.4.juno-29.1",
            "openstack-nova-novncproxy":  "2014.2.4.juno-29.1",
            "openstack-nova-objectstore":  "2014.2.4.juno-29.1",
            "openstack-nova-scheduler":  "2014.2.4.juno-29.1",
            "openstack-nova-serialproxy":  "2014.2.4.juno-29.1",
            "openstack-nova-vncproxy":  "2014.2.4.juno-29.1",
            "openstack-swift":  "2.1.0-14.1",
            "openstack-swift-account":  "2.1.0-14.1",
            "openstack-swift-container":  "2.1.0-14.1",
            "openstack-swift-doc":  "2.1.0-14.1",
            "openstack-swift-object":  "2.1.0-14.1",
            "openstack-swift-proxy":  "2.1.0-14.1",
            "python-keystone":  "2014.2.4.juno-17.1",
            "python-nova":  "2014.2.4.juno-29.1",
            "python-swift":  "2.1.0-14.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:2325-1.json"

openstack-keystone-doc

Package

Name: openstack-keystone-doc
Purl: pkg:rpm/suse/openstack-keystone-doc&distro=SUSE%20OpenStack%20Cloud%205

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2014.2.4.juno-17.2

Ecosystem specific

{
    "binaries":  [
        {
            "openstack-keystone":  "2014.2.4.juno-17.1",
            "openstack-keystone-doc":  "2014.2.4.juno-17.2",
            "openstack-nova":  "2014.2.4.juno-29.1",
            "openstack-nova-api":  "2014.2.4.juno-29.1",
            "openstack-nova-cells":  "2014.2.4.juno-29.1",
            "openstack-nova-cert":  "2014.2.4.juno-29.1",
            "openstack-nova-compute":  "2014.2.4.juno-29.1",
            "openstack-nova-conductor":  "2014.2.4.juno-29.1",
            "openstack-nova-console":  "2014.2.4.juno-29.1",
            "openstack-nova-consoleauth":  "2014.2.4.juno-29.1",
            "openstack-nova-doc":  "2014.2.4.juno-29.1",
            "openstack-nova-novncproxy":  "2014.2.4.juno-29.1",
            "openstack-nova-objectstore":  "2014.2.4.juno-29.1",
            "openstack-nova-scheduler":  "2014.2.4.juno-29.1",
            "openstack-nova-serialproxy":  "2014.2.4.juno-29.1",
            "openstack-nova-vncproxy":  "2014.2.4.juno-29.1",
            "openstack-swift":  "2.1.0-14.1",
            "openstack-swift-account":  "2.1.0-14.1",
            "openstack-swift-container":  "2.1.0-14.1",
            "openstack-swift-doc":  "2.1.0-14.1",
            "openstack-swift-object":  "2.1.0-14.1",
            "openstack-swift-proxy":  "2.1.0-14.1",
            "python-keystone":  "2014.2.4.juno-17.1",
            "python-nova":  "2014.2.4.juno-29.1",
            "python-swift":  "2.1.0-14.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:2325-1.json"

openstack-nova

Package

Name: openstack-nova
Purl: pkg:rpm/suse/openstack-nova&distro=SUSE%20OpenStack%20Cloud%205

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2014.2.4.juno-29.1

Ecosystem specific

{
    "binaries":  [
        {
            "openstack-keystone":  "2014.2.4.juno-17.1",
            "openstack-keystone-doc":  "2014.2.4.juno-17.2",
            "openstack-nova":  "2014.2.4.juno-29.1",
            "openstack-nova-api":  "2014.2.4.juno-29.1",
            "openstack-nova-cells":  "2014.2.4.juno-29.1",
            "openstack-nova-cert":  "2014.2.4.juno-29.1",
            "openstack-nova-compute":  "2014.2.4.juno-29.1",
            "openstack-nova-conductor":  "2014.2.4.juno-29.1",
            "openstack-nova-console":  "2014.2.4.juno-29.1",
            "openstack-nova-consoleauth":  "2014.2.4.juno-29.1",
            "openstack-nova-doc":  "2014.2.4.juno-29.1",
            "openstack-nova-novncproxy":  "2014.2.4.juno-29.1",
            "openstack-nova-objectstore":  "2014.2.4.juno-29.1",
            "openstack-nova-scheduler":  "2014.2.4.juno-29.1",
            "openstack-nova-serialproxy":  "2014.2.4.juno-29.1",
            "openstack-nova-vncproxy":  "2014.2.4.juno-29.1",
            "openstack-swift":  "2.1.0-14.1",
            "openstack-swift-account":  "2.1.0-14.1",
            "openstack-swift-container":  "2.1.0-14.1",
            "openstack-swift-doc":  "2.1.0-14.1",
            "openstack-swift-object":  "2.1.0-14.1",
            "openstack-swift-proxy":  "2.1.0-14.1",
            "python-keystone":  "2014.2.4.juno-17.1",
            "python-nova":  "2014.2.4.juno-29.1",
            "python-swift":  "2.1.0-14.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:2325-1.json"

openstack-nova-doc

Package

Name: openstack-nova-doc
Purl: pkg:rpm/suse/openstack-nova-doc&distro=SUSE%20OpenStack%20Cloud%205

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2014.2.4.juno-29.1

Ecosystem specific

{
    "binaries":  [
        {
            "openstack-keystone":  "2014.2.4.juno-17.1",
            "openstack-keystone-doc":  "2014.2.4.juno-17.2",
            "openstack-nova":  "2014.2.4.juno-29.1",
            "openstack-nova-api":  "2014.2.4.juno-29.1",
            "openstack-nova-cells":  "2014.2.4.juno-29.1",
            "openstack-nova-cert":  "2014.2.4.juno-29.1",
            "openstack-nova-compute":  "2014.2.4.juno-29.1",
            "openstack-nova-conductor":  "2014.2.4.juno-29.1",
            "openstack-nova-console":  "2014.2.4.juno-29.1",
            "openstack-nova-consoleauth":  "2014.2.4.juno-29.1",
            "openstack-nova-doc":  "2014.2.4.juno-29.1",
            "openstack-nova-novncproxy":  "2014.2.4.juno-29.1",
            "openstack-nova-objectstore":  "2014.2.4.juno-29.1",
            "openstack-nova-scheduler":  "2014.2.4.juno-29.1",
            "openstack-nova-serialproxy":  "2014.2.4.juno-29.1",
            "openstack-nova-vncproxy":  "2014.2.4.juno-29.1",
            "openstack-swift":  "2.1.0-14.1",
            "openstack-swift-account":  "2.1.0-14.1",
            "openstack-swift-container":  "2.1.0-14.1",
            "openstack-swift-doc":  "2.1.0-14.1",
            "openstack-swift-object":  "2.1.0-14.1",
            "openstack-swift-proxy":  "2.1.0-14.1",
            "python-keystone":  "2014.2.4.juno-17.1",
            "python-nova":  "2014.2.4.juno-29.1",
            "python-swift":  "2.1.0-14.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:2325-1.json"

openstack-swift

Package

Name: openstack-swift
Purl: pkg:rpm/suse/openstack-swift&distro=SUSE%20OpenStack%20Cloud%205

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.1.0-14.1

Ecosystem specific

{
    "binaries":  [
        {
            "openstack-keystone":  "2014.2.4.juno-17.1",
            "openstack-keystone-doc":  "2014.2.4.juno-17.2",
            "openstack-nova":  "2014.2.4.juno-29.1",
            "openstack-nova-api":  "2014.2.4.juno-29.1",
            "openstack-nova-cells":  "2014.2.4.juno-29.1",
            "openstack-nova-cert":  "2014.2.4.juno-29.1",
            "openstack-nova-compute":  "2014.2.4.juno-29.1",
            "openstack-nova-conductor":  "2014.2.4.juno-29.1",
            "openstack-nova-console":  "2014.2.4.juno-29.1",
            "openstack-nova-consoleauth":  "2014.2.4.juno-29.1",
            "openstack-nova-doc":  "2014.2.4.juno-29.1",
            "openstack-nova-novncproxy":  "2014.2.4.juno-29.1",
            "openstack-nova-objectstore":  "2014.2.4.juno-29.1",
            "openstack-nova-scheduler":  "2014.2.4.juno-29.1",
            "openstack-nova-serialproxy":  "2014.2.4.juno-29.1",
            "openstack-nova-vncproxy":  "2014.2.4.juno-29.1",
            "openstack-swift":  "2.1.0-14.1",
            "openstack-swift-account":  "2.1.0-14.1",
            "openstack-swift-container":  "2.1.0-14.1",
            "openstack-swift-doc":  "2.1.0-14.1",
            "openstack-swift-object":  "2.1.0-14.1",
            "openstack-swift-proxy":  "2.1.0-14.1",
            "python-keystone":  "2014.2.4.juno-17.1",
            "python-nova":  "2014.2.4.juno-29.1",
            "python-swift":  "2.1.0-14.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:2325-1.json"

openstack-swift-doc

Package

Name: openstack-swift-doc
Purl: pkg:rpm/suse/openstack-swift-doc&distro=SUSE%20OpenStack%20Cloud%205

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.1.0-14.1

Ecosystem specific

{
    "binaries":  [
        {
            "openstack-keystone":  "2014.2.4.juno-17.1",
            "openstack-keystone-doc":  "2014.2.4.juno-17.2",
            "openstack-nova":  "2014.2.4.juno-29.1",
            "openstack-nova-api":  "2014.2.4.juno-29.1",
            "openstack-nova-cells":  "2014.2.4.juno-29.1",
            "openstack-nova-cert":  "2014.2.4.juno-29.1",
            "openstack-nova-compute":  "2014.2.4.juno-29.1",
            "openstack-nova-conductor":  "2014.2.4.juno-29.1",
            "openstack-nova-console":  "2014.2.4.juno-29.1",
            "openstack-nova-consoleauth":  "2014.2.4.juno-29.1",
            "openstack-nova-doc":  "2014.2.4.juno-29.1",
            "openstack-nova-novncproxy":  "2014.2.4.juno-29.1",
            "openstack-nova-objectstore":  "2014.2.4.juno-29.1",
            "openstack-nova-scheduler":  "2014.2.4.juno-29.1",
            "openstack-nova-serialproxy":  "2014.2.4.juno-29.1",
            "openstack-nova-vncproxy":  "2014.2.4.juno-29.1",
            "openstack-swift":  "2.1.0-14.1",
            "openstack-swift-account":  "2.1.0-14.1",
            "openstack-swift-container":  "2.1.0-14.1",
            "openstack-swift-doc":  "2.1.0-14.1",
            "openstack-swift-object":  "2.1.0-14.1",
            "openstack-swift-proxy":  "2.1.0-14.1",
            "python-keystone":  "2014.2.4.juno-17.1",
            "python-nova":  "2014.2.4.juno-29.1",
            "python-swift":  "2.1.0-14.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:2325-1.json"