SUSE-RU-2019:1161-1: ardana-ansible&distro=HPE Helion OpenStack 8 SUSE Linux Enterprise

Vulnerability summary

SUSE-RU-2019:1161-1 is a vulnerability in ardana-ansible&distro=HPE Helion OpenStack 8 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 06-05-2019
   PublishedVulnerability first disclosed.
2. 23-03-2026
   Last modifiedVulnerability information updated.

Description

Recommended update for ardana-ansible, ardana-cobbler, ardana-db, ardana-heat, ardana-manila, ardana-neutron, ardana-nova, ardana-octavia, ardana-osconfig, ardana-service, ardana-ses, ardana-swift, ardana-tempest, crowbar, crowbar-core, crowbar-ha, crowbar-openstack, documentation-suse-openstack-cloud, galera-python-clustercheck, openstack-dashboard, openstack-ec2-api, openstack-heat, openstack-heat-templates, openstack-horizon-plugin-ironic-ui, openstack-horizon-plugin-magnum-ui, openstack-horizon-plugin-sahara-ui, openstack-ironic, openstack-keystone, openstack-magnum, openstack-manila, openstack-monasca-api, openstack-monasca-notification, openstack-monasca-persister, openstack-murano, openstack-neutron, openstack-neutron-fwaas, openstack-nova, openstack-octavia, openstack-sahara, openstack-swift, openstack-tempest, python-cinderclient, python-cryptography, python-monasca-common, python-networking-hyperv, python-os-brick, python-venvjail, venv-openstack-aodh, venv-openstack-barbican, venv-openstack-ceilometer, venv-openstack-cinder, venv-openstack-designate, venv-openstack-freezer, venv-openstack-glance, venv-openstack-heat, venv-openstack-horizon, venv-openstack-ironic, venv-openstack-keystone, venv-openstack-magnum, venv-openstack-manila, venv-openstack-monasca, venv-openstack-monasca-ceilometer, venv-openstack-murano, venv-openstack-nova, venv-openstack-octavia, venv-openstack-sahara, venv-openstack-swift, venv-openstack-trove This update for ardana-ansible, ardana-cobbler, ardana-db, ardana-heat, ardana-manila, ardana-neutron, ardana-nova, ardana-octavia, ardana-osconfig, ardana-service, ardana-ses, ardana-swift, ardana-tempest, crowbar, crowbar-core, crowbar-ha, crowbar-openstack, documentation-suse-openstack-cloud, galera-python-clustercheck, openstack-dashboard, openstack-ec2-api, openstack-heat, openstack-heat-templates, openstack-horizon-plugin-ironic-ui, openstack-horizon-plugin-magnum-ui, openstack-horizon-plugin-sahara-ui, openstack-ironic, openstack-keystone, openstack-magnum, openstack-manila, openstack-monasca-api, openstack-monasca-notification, openstack-monasca-persister, openstack-murano, openstack-neutron, openstack-neutron-fwaas, openstack-nova, openstack-octavia, openstack-sahara, openstack-swift, openstack-tempest, python-cinderclient, python-cryptography, python-monasca-common, python-networking-hyperv, python-os-brick, python-venvjail, venv-openstack-aodh, venv-openstack-barbican, venv-openstack-ceilometer, venv-openstack-cinder, venv-openstack-designate, venv-openstack-freezer, venv-openstack-glance, venv-openstack-heat, venv-openstack-horizon, venv-openstack-ironic, venv-openstack-keystone, venv-openstack-magnum, venv-openstack-manila, venv-openstack-monasca, venv-openstack-monasca-ceilometer, venv-openstack-murano, venv-openstack-nova, venv-openstack-octavia, venv-openstack-sahara, venv-openstack-swift, venv-openstack-trove fixes the following issues: This update fixes the following issues: ardana-ansible: * Move manila to the correct location in verb action list files (SCRD-6812) * Enable manila service in verb action list files (SCRD-6812) * Improve user experience (bsc#1114632) ardana-cobbler: * gate cobbler import on distro existence (SCRD-6821) ardana-db: * xtrabackup no longer needed (SCRD-7640, bsc#1116686) ardana-heat: * Fix typo so that heat gets correct name for hostname certs (bsc#127227) ardana-manila: * Put all config into one template (SCRD-7770) * Fail when Manila service is not running (SCRD-7413) * Split Manila API and Share deployment (SCRD-7773) * Comment out example backends (bsc#1116501) ardana-neutron: * Fix misspelled variable names (SCRD-7836) * Neutron services require network service to be started (SCRD-7764) ardana-nova: * Add dosfstools as requirement for nova-comptue (SCRD-8175) ardana-octavia: * Remove octavia dependency from monasca (SCRD-7690) ardana-osconfig: * Clean up ifcfg- files left behind by udevadm (bsc#1105822) ardana-service: * Add support for deprecated encryption-key parameter (SCRD-7837) ardana-ses: * Run SWF-PRX tasks in dedicated play (SCRD-8602) * Make SES globals available to SWF (SCRD-8109) * Add symlink ceph.conf.j2 to ~/openstack/my_cloud/config/ses (bsc#1128479) * Add support for reusing clients (bsc#1122237) * Ensure keyring files are readable (bsc#1122237) ardana-swift: * Prefer Kronos logrotate conf to Swift RPM logrotate conf (SCRD-7410) ardana-tempest: * Enable additional keystone tests (SCRD-7496) * Enable domain specific drivers on tempest (SCRD-7496) * Fix tempest heat plugin configuration (SCRD-7508) * Add freezer to tempest available/testable list (SCRD-7496) * Fix tempest configuration for magnum (SCRD-7496) * Add missing test packages (SCRD-7496) * Set cinder/glance admin on tempest roles (SCRD-7496) * Update tempest test filters (SCRD-7496) * Configure tempest accordingly when SES enabled (SCRD-7496) * Merge test results from parallel and serial filters (SCRD-7784) crowbar: * install-chef-suse: filter comments from authorized_keys file crowbar-core: * crowbar: Do not rely on Chef::Util::FileEdit to write the file (bsc#1127752) * Revert 'Disable upgrade API in Cloud8' * upgrade: Make sure all compute nodes get compute related scripts * network: run wicked ifdown for interface cleanup (bsc#1063535) crowbar-ha: * improve galera HA setup (bsc#1122875) crowbar-openstack: * ceilometer: Install package which contains cron file (bsc#1130414) * monasca: Set hostname for monasca-agent as FQDN (SCRD-8705) * memcache: Use first array element as fallback (SCRD-8255) * db: Raise default connection limit to 2048 * rabbit: fix mirroring regex * neutron: Add osprofiler support * nova: Add osprofiler support * cinder: Add osprofiler support * glance: Add osprofiler support * keystone: Make osprofiler connection_string configurable * keystone: Add basic osprofiler support documentation-suse-openstack-cloud: * Additional corrections from Carl * Fix reference to wrong neutron-reconfigure.yml playbook (SCRD-7709) * increasing url_timeout parameter (SCRD-8512) * Fix <screen> prompts in migration guide (SCRD-3763) * Revert 'Fix <screen> prompts in migration guide (SCRD-3763)' * Fix <screen> prompts in migration guide (SCRD-3763) * Include additional notes for 3PAR multipath instructions (SCRD-8584) * remove L2 Gateway Agent (SCRD-7645) * Added more detail about how to test load balancer during migration * Fix RHEL SMT repo setup command (SCPM-93) * added <step> tags * Update to octavia migration process * Support Octavia LB's during HOS 5 -> C8 migration (bsc#1094690) * change parameters ardana-update-status.yml (SCRD-8530) * Fix haproxy user deletion * Update description of kernel patch needed for RHEL 7.5 (SCPM-93) * Adding missing nova guide * Remove screenshots * Fix IDs and x-refs * Fix Magnim user guide. WIP * Add missing guide. Need fixing * change 3par multipath statements (bsc#1128928,SCRD-8396) * remove vlan transparency section (bsc#1125216,SCRD-7648) * remove ESXi create DVS from the Command Line (bsc#1125180) * make QE recommended edits (bsc#1124017, bsc#1124022) * Use &clm; instead of &lcm; for C*loud Lifec*ycle Manager * add supportconfig, sosreport cross-references (SCRD-2680) * Fixing xref tag for package builds * Fix missing ID * make hidden-tag consistent (SCRD-7870) * Nesting availability zone aware section * Removing the API content from the admin guide * Remove empty sections * Remove weird [OBJ] characters in odd places * Replace <function> -> <literal> * Fixing broken ref * Add references to DIB back to guide * rabbitmq cluster replace node (SCRD-7468,SCRD-7469) * minor typo and prompt changes (no bsc or SCRD) galera-python-clustercheck: * Add socket read timeout (bsc#1122053) openstack-dashboard: * network topology: handle port AZ correctly openstack-ec2-api: * Replace openstack.org git:// URLs with https:// openstack-heat: * Retry on DB deadlock when updating resource openstack-heat-templates: * Replace openstack.org git:// URLs with https:// openstack-horizon-plugin-ironic-ui: * Normalize operation messages into capital case * Replace openstack.org git:// URLs with https:// penstack-horizon-plugin-magnum-ui: * Replace openstack.org git:// URLs with https:// * Set ubuntu-xenial for nodejs jobs openstack-horizon-plugin-sahara-ui: * Replace openstack.org git:// URLs with https:// * Remove the legacy integration tests job penstack-ironic: * Fix CPU count returned by introspection in Ironic iDRAC driver openstack-keystone: * create proper tmpdir for locking * Remove publish-loci post job openstack-magnum: * Replace openstack.org git:// URLs with https:// openstack-manila: * Replace openstack.org git:// URLs with https:// * Manila VMAX docs - differences between quotas * Manila VMAX docs - improve pre-configurations on VMAX section * Manila VMAX docs - clarify snapshot support * Manila VMAX docs - clarify driver\_handles\_share\_servers * VMAX manila doc - SSL Support * VMAX manila doc - use of correct VMAX tags * VMAX manila - deprecate old tags correctly * Destroy type quotas when a share type is deleted * Fix driver filter to not check share\_backend\_name * Only run the needed services for CephFS jobs * Return request-id to APIs that don't respond with a body * Fix service image boot issues * Port dummy driver manage/unmanage changes to stable openstack-monasca-api: * Replace openstack.org git:// URLs with https:// openstack-monasca-notification: * Replace openstack.org git:// URLs with https:// openstack-monasca-persister: * Replace openstack.org git:// URLs with https:// openstack-murano: * Replace openstack.org git:// URLs with https:// openstack-neutron: * Specify tenant\_id in TestRevisionPlugin objects * Fix QoS rule update * Add rootwrap filters to kill state change monitor * Fix port update deferred IP allocation with host\_id + new MAC * Try to enable dnsmasq process several times * Remove conntrack rule when FIP is deleted * More accurate agent restart state transfer * [OVS] Exception message when retrieving bridge-id and is not present * [Functional tests] Change way how conntrack entries are checked * Change duplicate OVS bridge datapath-ids * Fix KeyError in OVS firewall * ovs: raise RuntimeError in \_get\_dp if id is None * Replace openstack.org git:// URLs with https:// * [Functional] Don't assert that HA router don't have IPs configured * Improve invalid port ranges error message * Do not release DHCP lease when no client ID is set on port * ovsfw: Update SG rules even if OVSFW Port is not found * Enable ipv6\_forwarding in HA router's namespace * Spawn metadata proxy on dvr ha standby routers * Set initial ha router state in neutron-keepalived-state-change * When converting sg rules to iptables, do not emit dport if not supported * DVR edge router: avoid accidental centralized floating IP remove * ovsfw: Don't create rules if updated port doesn't exist * Add new test decorator skip\_if\_timeout * Fix notification about arp entries for dvr routers * Add lock\_path in installation guide * Fix update of ports cache in router\_info class * Ensure dnsmasq is down before enabling it in restart method * Block port update from unbound DHCP agent * Fix performance regression adding rules to security groups * Always fill UDP checksums in DHCPv6 replies * Secure dnsmasq process against external abuse * Check port VNIC type when associating a floating IP * Enable 'all' IPv6 forwarding knob correctly * protect DHCP agent cache out of sync * Add kill\_timeout to AsyncProcess * Fullstack: init trunk agent's driver only when necessary * Don't modify global variables in unit tests * Do state report after setting start\_flag on OVS restart * Do not delete trunk bridges if service port attached * Fix the bug about DHCP port whose network has multiple subnets * Force all fdb entries update after ovs-vswitchd restart * Get centralized FIP only on router's snat host * Include all rootwrap filters when building wheels openstack-neutron-fwaas: * don't package tempest plugin twice openstack-nova: * Document unset/reset wrinkle for \*\_allocation\_ratio options * Replace openstack.org git:// URLs with https:// * Refix disk size during live migration with disk over-commit * Fix WeighedHost logging regression * Correct examples in 'Manage Compute services' documentation * Fix disk size during live migration with disk over-commit * Exclude build request marker from server listing * Update port device\_owner when unshelving * Handle tags in \_bury\_in\_cell0 * Null out instance.availability\_zone on shelve offload * Fix server\_group\_members quota check * Add functional regressions tests for server\_group\_members OverQuota * Fix bug case by none token context * Migrate nova v2.0 legacy job to zuulv3 * Handle missing marker during online data migration * tox: Don't write byte code (maybe) * [pike-only] Fix resize\_instance rpcapi call * Lock detach\_volume * PCI: do not force remove allocated devices * Note the aggregate allocation ratio restriction in scheduler docs * Add regression test for bug #1764883 * Create BDMs/tags in cell with instance when over-quota * Add functional regression test for bug 1806064 * Not set instance to ERROR if set\_admin\_password failed * De-dupe subnet IDs when calling neutron /subnets API * Fix destination\_type attribute in the bdm\_v2 documentation openstack-octavia: * Replace openstack.org git:// URLs with https:// openstack-sahara: * Replace openstack.org git:// URLs with https:// * Use venv-py2 to run sahara-scenario, remove the py3 job * archive-primary.cloudera.com -> archive.cloudera.com * Changing hdfs fs to hdfs dfs * Add DEBIAN\_FRONTEND=noninteractive in front of apt-get install commands openstack-swift: * Fixed a cache invalidation issue related to GET and PUT requests to containers that would occasionally cause object PUTs to a container to 404 after the container had been successfully created. * Removed a race condition where a POST to an SLO could modify the X-Static-Large-Object metadata. * Fixed rare socket leak on range requests to erasure-coded objects. * Fix SLO delete for accounts with non-ASCII names. * Fixed an issue in COPY where concurrent requests may have copied the wrong data. * Fixed time skew when using X-Delete-After. * Send ETag header in 206 Partial Content responses to SLO reads. openstack-tempest: * create lockdir on install python-cinderclient: * Update .gitreview for stable/pike * Fix get_highest_client_server_version with Cinder API + uWSGI * Updated from global requirements * import zuul job settings from project-config * Update UPPER_CONSTRAINTS_FILE for stable/pike python-cryptography: * Add X509_up_ref() function to help pyOpenSSL deal with CVE-2018-1000807 (bsc#1111635) and CVE-2018-1000808 (bsc#1111634). python-monasca-common: * update to version 2.3.1~dev4 python-networking-hyperv: * import zuul job settings from project-config python-os-brick: * iscsiadm -m session' failure handling * Handle multiple errors in multipath -l parsing * Fixing FC scanning * RemoteFS: don't fail in do_mount if already mounted * Fix multipath disconnect with path failure * import zuul job settings from project-config python-venvjail: * Set [] as default value for --no-relocate-shebang-list * Exclude some files from relocation (SCRD-8594)

No weakness data has been published for this record.