SUSE-SU-2023:2378-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2023/suse-su-20232378-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2378-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2023:2378-1
Upstream
CVE (3)
Related
CVE (3)
Published
2023-06-05T14:38:36Z
Modified
2026-03-11T07:23:10Z
Summary
Security update for openstack-heat, openstack-swift, python-Werkzeug
Details

This update for openstack-heat, openstack-swift, python-Werkzeug contains the following fixes:

Security fixes included in this update:

openstack-heat:

  • CVE-2023-1625: Fixed an issue where parameter values marked as 'hidden' would be shown in the stack's environment (bsc#1209774).

openstack-swift:

  • CVE-2022-47950: Fixed a local file disclosure that could be triggered by an authenticated attacker by supplying a malicious XML (bnc#1207035).

python-Werkzeug:

  • CVE-2023-25577: Fixed an unbounded resource usage when parsing multipart forms with many fields (bsc#1208283).

Non security changes on this update:

Changes in openstack-heat:

  • Honor 'hidden' parameter in 'stack environment show' command. (bsc#1209774, CVE-2023-1625)

Changes in openstack-swift:

  • Prevent XXE injections in API. (bsc#1207035, CVE-2022-47950)

Changes in python-Werkzeug;

  • Limit maximum number of multipart form parts. (bsc#1208283, CVE-2023-25577)
References

Affected packages

SUSE:OpenStack Cloud 9
openstack-heat

Package

Name
openstack-heat
Purl
pkg:rpm/suse/openstack-heat&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
11.0.4~dev4-3.24.4

Ecosystem specific 

{
    "binaries":  [
        {
            "openstack-heat":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api-cfn":  "11.0.4~dev4-3.24.4",
            "openstack-heat-engine":  "11.0.4~dev4-3.24.4",
            "openstack-heat-plugin-heat_docker":  "11.0.4~dev4-3.24.4",
            "openstack-swift":  "2.19.3~dev3-3.6.3",
            "openstack-swift-account":  "2.19.3~dev3-3.6.3",
            "openstack-swift-container":  "2.19.3~dev3-3.6.3",
            "openstack-swift-object":  "2.19.3~dev3-3.6.3",
            "openstack-swift-proxy":  "2.19.3~dev3-3.6.3",
            "python-Werkzeug":  "0.14.1-3.6.2",
            "python-heat":  "11.0.4~dev4-3.24.4",
            "python-swift":  "2.19.3~dev3-3.6.3",
            "venv-openstack-designate-x86_64":  "7.0.2~dev2-3.41.2",
            "venv-openstack-heat-x86_64":  "11.0.4~dev4-3.43.2",
            "venv-openstack-keystone-x86_64":  "14.2.1~dev9-3.42.2",
            "venv-openstack-magnum-x86_64":  "7.2.1~dev1-4.41.3",
            "venv-openstack-octavia-x86_64":  "3.2.3~dev7-4.41.2",
            "venv-openstack-sahara-x86_64":  "9.0.2~dev15-3.41.2",
            "venv-openstack-swift-x86_64":  "2.19.3~dev3-2.36.3"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2378-1.json"
openstack-swift

Package

Name
openstack-swift
Purl
pkg:rpm/suse/openstack-swift&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.19.3~dev3-3.6.3

Ecosystem specific 

{
    "binaries":  [
        {
            "openstack-heat":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api-cfn":  "11.0.4~dev4-3.24.4",
            "openstack-heat-engine":  "11.0.4~dev4-3.24.4",
            "openstack-heat-plugin-heat_docker":  "11.0.4~dev4-3.24.4",
            "openstack-swift":  "2.19.3~dev3-3.6.3",
            "openstack-swift-account":  "2.19.3~dev3-3.6.3",
            "openstack-swift-container":  "2.19.3~dev3-3.6.3",
            "openstack-swift-object":  "2.19.3~dev3-3.6.3",
            "openstack-swift-proxy":  "2.19.3~dev3-3.6.3",
            "python-Werkzeug":  "0.14.1-3.6.2",
            "python-heat":  "11.0.4~dev4-3.24.4",
            "python-swift":  "2.19.3~dev3-3.6.3",
            "venv-openstack-designate-x86_64":  "7.0.2~dev2-3.41.2",
            "venv-openstack-heat-x86_64":  "11.0.4~dev4-3.43.2",
            "venv-openstack-keystone-x86_64":  "14.2.1~dev9-3.42.2",
            "venv-openstack-magnum-x86_64":  "7.2.1~dev1-4.41.3",
            "venv-openstack-octavia-x86_64":  "3.2.3~dev7-4.41.2",
            "venv-openstack-sahara-x86_64":  "9.0.2~dev15-3.41.2",
            "venv-openstack-swift-x86_64":  "2.19.3~dev3-2.36.3"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2378-1.json"
python-Werkzeug

Package

Name
python-Werkzeug
Purl
pkg:rpm/suse/python-Werkzeug&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.14.1-3.6.2

Ecosystem specific 

{
    "binaries":  [
        {
            "openstack-heat":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api-cfn":  "11.0.4~dev4-3.24.4",
            "openstack-heat-engine":  "11.0.4~dev4-3.24.4",
            "openstack-heat-plugin-heat_docker":  "11.0.4~dev4-3.24.4",
            "openstack-swift":  "2.19.3~dev3-3.6.3",
            "openstack-swift-account":  "2.19.3~dev3-3.6.3",
            "openstack-swift-container":  "2.19.3~dev3-3.6.3",
            "openstack-swift-object":  "2.19.3~dev3-3.6.3",
            "openstack-swift-proxy":  "2.19.3~dev3-3.6.3",
            "python-Werkzeug":  "0.14.1-3.6.2",
            "python-heat":  "11.0.4~dev4-3.24.4",
            "python-swift":  "2.19.3~dev3-3.6.3",
            "venv-openstack-designate-x86_64":  "7.0.2~dev2-3.41.2",
            "venv-openstack-heat-x86_64":  "11.0.4~dev4-3.43.2",
            "venv-openstack-keystone-x86_64":  "14.2.1~dev9-3.42.2",
            "venv-openstack-magnum-x86_64":  "7.2.1~dev1-4.41.3",
            "venv-openstack-octavia-x86_64":  "3.2.3~dev7-4.41.2",
            "venv-openstack-sahara-x86_64":  "9.0.2~dev15-3.41.2",
            "venv-openstack-swift-x86_64":  "2.19.3~dev3-2.36.3"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2378-1.json"
venv-openstack-designate

Package

Name
venv-openstack-designate
Purl
pkg:rpm/suse/venv-openstack-designate&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.0.2~dev2-3.41.2

Ecosystem specific 

{
    "binaries":  [
        {
            "openstack-heat":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api-cfn":  "11.0.4~dev4-3.24.4",
            "openstack-heat-engine":  "11.0.4~dev4-3.24.4",
            "openstack-heat-plugin-heat_docker":  "11.0.4~dev4-3.24.4",
            "openstack-swift":  "2.19.3~dev3-3.6.3",
            "openstack-swift-account":  "2.19.3~dev3-3.6.3",
            "openstack-swift-container":  "2.19.3~dev3-3.6.3",
            "openstack-swift-object":  "2.19.3~dev3-3.6.3",
            "openstack-swift-proxy":  "2.19.3~dev3-3.6.3",
            "python-Werkzeug":  "0.14.1-3.6.2",
            "python-heat":  "11.0.4~dev4-3.24.4",
            "python-swift":  "2.19.3~dev3-3.6.3",
            "venv-openstack-designate-x86_64":  "7.0.2~dev2-3.41.2",
            "venv-openstack-heat-x86_64":  "11.0.4~dev4-3.43.2",
            "venv-openstack-keystone-x86_64":  "14.2.1~dev9-3.42.2",
            "venv-openstack-magnum-x86_64":  "7.2.1~dev1-4.41.3",
            "venv-openstack-octavia-x86_64":  "3.2.3~dev7-4.41.2",
            "venv-openstack-sahara-x86_64":  "9.0.2~dev15-3.41.2",
            "venv-openstack-swift-x86_64":  "2.19.3~dev3-2.36.3"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2378-1.json"
venv-openstack-heat

Package

Name
venv-openstack-heat
Purl
pkg:rpm/suse/venv-openstack-heat&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
11.0.4~dev4-3.43.2

Ecosystem specific 

{
    "binaries":  [
        {
            "openstack-heat":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api-cfn":  "11.0.4~dev4-3.24.4",
            "openstack-heat-engine":  "11.0.4~dev4-3.24.4",
            "openstack-heat-plugin-heat_docker":  "11.0.4~dev4-3.24.4",
            "openstack-swift":  "2.19.3~dev3-3.6.3",
            "openstack-swift-account":  "2.19.3~dev3-3.6.3",
            "openstack-swift-container":  "2.19.3~dev3-3.6.3",
            "openstack-swift-object":  "2.19.3~dev3-3.6.3",
            "openstack-swift-proxy":  "2.19.3~dev3-3.6.3",
            "python-Werkzeug":  "0.14.1-3.6.2",
            "python-heat":  "11.0.4~dev4-3.24.4",
            "python-swift":  "2.19.3~dev3-3.6.3",
            "venv-openstack-designate-x86_64":  "7.0.2~dev2-3.41.2",
            "venv-openstack-heat-x86_64":  "11.0.4~dev4-3.43.2",
            "venv-openstack-keystone-x86_64":  "14.2.1~dev9-3.42.2",
            "venv-openstack-magnum-x86_64":  "7.2.1~dev1-4.41.3",
            "venv-openstack-octavia-x86_64":  "3.2.3~dev7-4.41.2",
            "venv-openstack-sahara-x86_64":  "9.0.2~dev15-3.41.2",
            "venv-openstack-swift-x86_64":  "2.19.3~dev3-2.36.3"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2378-1.json"
venv-openstack-keystone

Package

Name
venv-openstack-keystone
Purl
pkg:rpm/suse/venv-openstack-keystone&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
14.2.1~dev9-3.42.2

Ecosystem specific 

{
    "binaries":  [
        {
            "openstack-heat":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api-cfn":  "11.0.4~dev4-3.24.4",
            "openstack-heat-engine":  "11.0.4~dev4-3.24.4",
            "openstack-heat-plugin-heat_docker":  "11.0.4~dev4-3.24.4",
            "openstack-swift":  "2.19.3~dev3-3.6.3",
            "openstack-swift-account":  "2.19.3~dev3-3.6.3",
            "openstack-swift-container":  "2.19.3~dev3-3.6.3",
            "openstack-swift-object":  "2.19.3~dev3-3.6.3",
            "openstack-swift-proxy":  "2.19.3~dev3-3.6.3",
            "python-Werkzeug":  "0.14.1-3.6.2",
            "python-heat":  "11.0.4~dev4-3.24.4",
            "python-swift":  "2.19.3~dev3-3.6.3",
            "venv-openstack-designate-x86_64":  "7.0.2~dev2-3.41.2",
            "venv-openstack-heat-x86_64":  "11.0.4~dev4-3.43.2",
            "venv-openstack-keystone-x86_64":  "14.2.1~dev9-3.42.2",
            "venv-openstack-magnum-x86_64":  "7.2.1~dev1-4.41.3",
            "venv-openstack-octavia-x86_64":  "3.2.3~dev7-4.41.2",
            "venv-openstack-sahara-x86_64":  "9.0.2~dev15-3.41.2",
            "venv-openstack-swift-x86_64":  "2.19.3~dev3-2.36.3"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2378-1.json"
venv-openstack-magnum

Package

Name
venv-openstack-magnum
Purl
pkg:rpm/suse/venv-openstack-magnum&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.2.1~dev1-4.41.3

Ecosystem specific 

{
    "binaries":  [
        {
            "openstack-heat":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api-cfn":  "11.0.4~dev4-3.24.4",
            "openstack-heat-engine":  "11.0.4~dev4-3.24.4",
            "openstack-heat-plugin-heat_docker":  "11.0.4~dev4-3.24.4",
            "openstack-swift":  "2.19.3~dev3-3.6.3",
            "openstack-swift-account":  "2.19.3~dev3-3.6.3",
            "openstack-swift-container":  "2.19.3~dev3-3.6.3",
            "openstack-swift-object":  "2.19.3~dev3-3.6.3",
            "openstack-swift-proxy":  "2.19.3~dev3-3.6.3",
            "python-Werkzeug":  "0.14.1-3.6.2",
            "python-heat":  "11.0.4~dev4-3.24.4",
            "python-swift":  "2.19.3~dev3-3.6.3",
            "venv-openstack-designate-x86_64":  "7.0.2~dev2-3.41.2",
            "venv-openstack-heat-x86_64":  "11.0.4~dev4-3.43.2",
            "venv-openstack-keystone-x86_64":  "14.2.1~dev9-3.42.2",
            "venv-openstack-magnum-x86_64":  "7.2.1~dev1-4.41.3",
            "venv-openstack-octavia-x86_64":  "3.2.3~dev7-4.41.2",
            "venv-openstack-sahara-x86_64":  "9.0.2~dev15-3.41.2",
            "venv-openstack-swift-x86_64":  "2.19.3~dev3-2.36.3"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2378-1.json"
venv-openstack-octavia

Package

Name
venv-openstack-octavia
Purl
pkg:rpm/suse/venv-openstack-octavia&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.2.3~dev7-4.41.2

Ecosystem specific 

{
    "binaries":  [
        {
            "openstack-heat":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api-cfn":  "11.0.4~dev4-3.24.4",
            "openstack-heat-engine":  "11.0.4~dev4-3.24.4",
            "openstack-heat-plugin-heat_docker":  "11.0.4~dev4-3.24.4",
            "openstack-swift":  "2.19.3~dev3-3.6.3",
            "openstack-swift-account":  "2.19.3~dev3-3.6.3",
            "openstack-swift-container":  "2.19.3~dev3-3.6.3",
            "openstack-swift-object":  "2.19.3~dev3-3.6.3",
            "openstack-swift-proxy":  "2.19.3~dev3-3.6.3",
            "python-Werkzeug":  "0.14.1-3.6.2",
            "python-heat":  "11.0.4~dev4-3.24.4",
            "python-swift":  "2.19.3~dev3-3.6.3",
            "venv-openstack-designate-x86_64":  "7.0.2~dev2-3.41.2",
            "venv-openstack-heat-x86_64":  "11.0.4~dev4-3.43.2",
            "venv-openstack-keystone-x86_64":  "14.2.1~dev9-3.42.2",
            "venv-openstack-magnum-x86_64":  "7.2.1~dev1-4.41.3",
            "venv-openstack-octavia-x86_64":  "3.2.3~dev7-4.41.2",
            "venv-openstack-sahara-x86_64":  "9.0.2~dev15-3.41.2",
            "venv-openstack-swift-x86_64":  "2.19.3~dev3-2.36.3"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2378-1.json"
venv-openstack-sahara

Package

Name
venv-openstack-sahara
Purl
pkg:rpm/suse/venv-openstack-sahara&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.0.2~dev15-3.41.2

Ecosystem specific 

{
    "binaries":  [
        {
            "openstack-heat":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api-cfn":  "11.0.4~dev4-3.24.4",
            "openstack-heat-engine":  "11.0.4~dev4-3.24.4",
            "openstack-heat-plugin-heat_docker":  "11.0.4~dev4-3.24.4",
            "openstack-swift":  "2.19.3~dev3-3.6.3",
            "openstack-swift-account":  "2.19.3~dev3-3.6.3",
            "openstack-swift-container":  "2.19.3~dev3-3.6.3",
            "openstack-swift-object":  "2.19.3~dev3-3.6.3",
            "openstack-swift-proxy":  "2.19.3~dev3-3.6.3",
            "python-Werkzeug":  "0.14.1-3.6.2",
            "python-heat":  "11.0.4~dev4-3.24.4",
            "python-swift":  "2.19.3~dev3-3.6.3",
            "venv-openstack-designate-x86_64":  "7.0.2~dev2-3.41.2",
            "venv-openstack-heat-x86_64":  "11.0.4~dev4-3.43.2",
            "venv-openstack-keystone-x86_64":  "14.2.1~dev9-3.42.2",
            "venv-openstack-magnum-x86_64":  "7.2.1~dev1-4.41.3",
            "venv-openstack-octavia-x86_64":  "3.2.3~dev7-4.41.2",
            "venv-openstack-sahara-x86_64":  "9.0.2~dev15-3.41.2",
            "venv-openstack-swift-x86_64":  "2.19.3~dev3-2.36.3"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2378-1.json"
venv-openstack-swift

Package

Name
venv-openstack-swift
Purl
pkg:rpm/suse/venv-openstack-swift&distro=SUSE%20OpenStack%20Cloud%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.19.3~dev3-2.36.3

Ecosystem specific 

{
    "binaries":  [
        {
            "openstack-heat":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api-cfn":  "11.0.4~dev4-3.24.4",
            "openstack-heat-engine":  "11.0.4~dev4-3.24.4",
            "openstack-heat-plugin-heat_docker":  "11.0.4~dev4-3.24.4",
            "openstack-swift":  "2.19.3~dev3-3.6.3",
            "openstack-swift-account":  "2.19.3~dev3-3.6.3",
            "openstack-swift-container":  "2.19.3~dev3-3.6.3",
            "openstack-swift-object":  "2.19.3~dev3-3.6.3",
            "openstack-swift-proxy":  "2.19.3~dev3-3.6.3",
            "python-Werkzeug":  "0.14.1-3.6.2",
            "python-heat":  "11.0.4~dev4-3.24.4",
            "python-swift":  "2.19.3~dev3-3.6.3",
            "venv-openstack-designate-x86_64":  "7.0.2~dev2-3.41.2",
            "venv-openstack-heat-x86_64":  "11.0.4~dev4-3.43.2",
            "venv-openstack-keystone-x86_64":  "14.2.1~dev9-3.42.2",
            "venv-openstack-magnum-x86_64":  "7.2.1~dev1-4.41.3",
            "venv-openstack-octavia-x86_64":  "3.2.3~dev7-4.41.2",
            "venv-openstack-sahara-x86_64":  "9.0.2~dev15-3.41.2",
            "venv-openstack-swift-x86_64":  "2.19.3~dev3-2.36.3"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2378-1.json"
SUSE:OpenStack Cloud Crowbar 9
openstack-heat

Package

Name
openstack-heat
Purl
pkg:rpm/suse/openstack-heat&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
11.0.4~dev4-3.24.4

Ecosystem specific 

{
    "binaries":  [
        {
            "openstack-heat":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api-cfn":  "11.0.4~dev4-3.24.4",
            "openstack-heat-engine":  "11.0.4~dev4-3.24.4",
            "openstack-heat-plugin-heat_docker":  "11.0.4~dev4-3.24.4",
            "openstack-swift":  "2.19.3~dev3-3.6.3",
            "openstack-swift-account":  "2.19.3~dev3-3.6.3",
            "openstack-swift-container":  "2.19.3~dev3-3.6.3",
            "openstack-swift-object":  "2.19.3~dev3-3.6.3",
            "openstack-swift-proxy":  "2.19.3~dev3-3.6.3",
            "python-Werkzeug":  "0.14.1-3.6.2",
            "python-heat":  "11.0.4~dev4-3.24.4",
            "python-swift":  "2.19.3~dev3-3.6.3"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2378-1.json"
openstack-swift

Package

Name
openstack-swift
Purl
pkg:rpm/suse/openstack-swift&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.19.3~dev3-3.6.3

Ecosystem specific 

{
    "binaries":  [
        {
            "openstack-heat":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api-cfn":  "11.0.4~dev4-3.24.4",
            "openstack-heat-engine":  "11.0.4~dev4-3.24.4",
            "openstack-heat-plugin-heat_docker":  "11.0.4~dev4-3.24.4",
            "openstack-swift":  "2.19.3~dev3-3.6.3",
            "openstack-swift-account":  "2.19.3~dev3-3.6.3",
            "openstack-swift-container":  "2.19.3~dev3-3.6.3",
            "openstack-swift-object":  "2.19.3~dev3-3.6.3",
            "openstack-swift-proxy":  "2.19.3~dev3-3.6.3",
            "python-Werkzeug":  "0.14.1-3.6.2",
            "python-heat":  "11.0.4~dev4-3.24.4",
            "python-swift":  "2.19.3~dev3-3.6.3"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2378-1.json"
python-Werkzeug

Package

Name
python-Werkzeug
Purl
pkg:rpm/suse/python-Werkzeug&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.14.1-3.6.2

Ecosystem specific 

{
    "binaries":  [
        {
            "openstack-heat":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api":  "11.0.4~dev4-3.24.4",
            "openstack-heat-api-cfn":  "11.0.4~dev4-3.24.4",
            "openstack-heat-engine":  "11.0.4~dev4-3.24.4",
            "openstack-heat-plugin-heat_docker":  "11.0.4~dev4-3.24.4",
            "openstack-swift":  "2.19.3~dev3-3.6.3",
            "openstack-swift-account":  "2.19.3~dev3-3.6.3",
            "openstack-swift-container":  "2.19.3~dev3-3.6.3",
            "openstack-swift-object":  "2.19.3~dev3-3.6.3",
            "openstack-swift-proxy":  "2.19.3~dev3-3.6.3",
            "python-Werkzeug":  "0.14.1-3.6.2",
            "python-heat":  "11.0.4~dev4-3.24.4",
            "python-swift":  "2.19.3~dev3-3.6.3"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:2378-1.json"