{"schemaVersion":3,"id":"SUSE-SU-2016:2143-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for several openstack-components\n\n\nThis update provides the latest code from OpenStack Liberty for openstack-ceilometer, -cinder,\n-dashboard, -glance, -heat, -keystone, -manila, -neutron, -neutron-fwaas, -neutron-lbaas,-nova,\n-resource-agents, python-networking-cisco and python-openstackclient.\n\nAdditionally some security-issues have been fixed:\n\nopenstack-nova:\n\n- Always copy or recreate disk.info during a migration. (bsc#970258, CVE-2016-2140)\n\nopenstack-dashboard:\n\n- Escape anularjs templating in unsafe HTML. (bsc#983807, CVE-2016-4428)\n\nopenstack-neutron:\n\n- Fix bypassing of anti-spoof protection. (bsc#984443, CVE-2016-5363, bsc#984442, CVE-2016-5362)\n\nFor a detailed description of all fixes and improvements, please refer to the changelog.","dates":{"published":"2016-08-23T15:49:42.000Z","modified":"2026-02-04T02:53:18.835Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"openstack-ceilometer-doc&distro=SUSE OpenStack Cloud 6","name":"openstack-ceilometer-doc","label":"openstack-ceilometer-doc&distro=SUSE OpenStack Cloud 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openstack-ceilometer-doc&distro=SUSE OpenStack Cloud 6","purlType":"rpm","versions":[{"text":"< 5.0.4~a0~dev6-6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.0.4~a0~dev6-6.2","eol":null,"hubHref":null},{"vendor":"suse","product":"openstack-ceilometer&distro=SUSE OpenStack Cloud 6","name":"openstack-ceilometer","label":"openstack-ceilometer&distro=SUSE OpenStack Cloud 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openstack-ceilometer&distro=SUSE OpenStack Cloud 6","purlType":"rpm","versions":[{"text":"< 5.0.4~a0~dev6-6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.0.4~a0~dev6-6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"openstack-cinder-doc&distro=SUSE OpenStack Cloud 6","name":"openstack-cinder-doc","label":"openstack-cinder-doc&distro=SUSE OpenStack Cloud 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openstack-cinder-doc&distro=SUSE OpenStack Cloud 6","purlType":"rpm","versions":[{"text":"< 7.0.3~a0~dev2-7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.0.3~a0~dev2-7.1","eol":null,"hubHref":null},{"vendor":"suse","product":"openstack-cinder&distro=SUSE OpenStack Cloud 6","name":"openstack-cinder","label":"openstack-cinder&distro=SUSE OpenStack Cloud 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openstack-cinder&distro=SUSE OpenStack Cloud 6","purlType":"rpm","versions":[{"text":"< 7.0.3~a0~dev2-7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.0.3~a0~dev2-7.1","eol":null,"hubHref":null},{"vendor":"suse","product":"openstack-dashboard&distro=SUSE OpenStack Cloud 6","name":"openstack-dashboard","label":"openstack-dashboard&distro=SUSE OpenStack Cloud 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openstack-dashboard&distro=SUSE OpenStack Cloud 6","purlType":"rpm","versions":[{"text":"< 8.0.2~a0~dev34-8.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.2~a0~dev34-8.1","eol":null,"hubHref":null},{"vendor":"suse","product":"openstack-glance-doc&distro=SUSE OpenStack Cloud 6","name":"openstack-glance-doc","label":"openstack-glance-doc&distro=SUSE OpenStack Cloud 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openstack-glance-doc&distro=SUSE OpenStack Cloud 6","purlType":"rpm","versions":[{"text":"< 11.0.2~a0~dev13-7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.0.2~a0~dev13-7.1","eol":null,"hubHref":null},{"vendor":"suse","product":"openstack-glance&distro=SUSE OpenStack Cloud 6","name":"openstack-glance","label":"openstack-glance&distro=SUSE OpenStack Cloud 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openstack-glance&distro=SUSE OpenStack Cloud 6","purlType":"rpm","versions":[{"text":"< 11.0.2~a0~dev13-7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.0.2~a0~dev13-7.1","eol":null,"hubHref":null},{"vendor":"suse","product":"openstack-heat-doc&distro=SUSE OpenStack Cloud 6","name":"openstack-heat-doc","label":"openstack-heat-doc&distro=SUSE OpenStack Cloud 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openstack-heat-doc&distro=SUSE OpenStack Cloud 6","purlType":"rpm","versions":[{"text":"< 5.0.2~a0~dev93-9.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.0.2~a0~dev93-9.3","eol":null,"hubHref":null},{"vendor":"suse","product":"openstack-heat&distro=SUSE OpenStack Cloud 6","name":"openstack-heat","label":"openstack-heat&distro=SUSE OpenStack Cloud 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openstack-heat&distro=SUSE OpenStack Cloud 6","purlType":"rpm","versions":[{"text":"< 5.0.2~a0~dev93-9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.0.2~a0~dev93-9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"openstack-keystone-doc&distro=SUSE OpenStack Cloud 6","name":"openstack-keystone-doc","label":"openstack-keystone-doc&distro=SUSE OpenStack Cloud 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openstack-keystone-doc&distro=SUSE OpenStack Cloud 6","purlType":"rpm","versions":[{"text":"< 8.1.1~a0~dev13-3.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.1.1~a0~dev13-3.2","eol":null,"hubHref":null},{"vendor":"suse","product":"openstack-keystone&distro=SUSE OpenStack Cloud 6","name":"openstack-keystone","label":"openstack-keystone&distro=SUSE OpenStack Cloud 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openstack-keystone&distro=SUSE OpenStack Cloud 6","purlType":"rpm","versions":[{"text":"< 8.1.1~a0~dev13-3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.1.1~a0~dev13-3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"openstack-manila-doc&distro=SUSE OpenStack Cloud 6","name":"openstack-manila-doc","label":"openstack-manila-doc&distro=SUSE OpenStack Cloud 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openstack-manila-doc&distro=SUSE OpenStack Cloud 6","purlType":"rpm","versions":[{"text":"< 1.0.2~a0~dev11-9.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.2~a0~dev11-9.2","eol":null,"hubHref":null},{"vendor":"suse","product":"openstack-manila&distro=SUSE OpenStack Cloud 6","name":"openstack-manila","label":"openstack-manila&distro=SUSE OpenStack Cloud 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openstack-manila&distro=SUSE OpenStack Cloud 6","purlType":"rpm","versions":[{"text":"< 1.0.2~a0~dev11-9.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.2~a0~dev11-9.1","eol":null,"hubHref":null},{"vendor":"suse","product":"openstack-neutron-doc&distro=SUSE OpenStack Cloud 6","name":"openstack-neutron-doc","label":"openstack-neutron-doc&distro=SUSE OpenStack Cloud 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openstack-neutron-doc&distro=SUSE OpenStack Cloud 6","purlType":"rpm","versions":[{"text":"< 7.1.2~a0~dev29-10.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.1.2~a0~dev29-10.1","eol":null,"hubHref":null},{"vendor":"suse","product":"openstack-neutron-fwaas-doc&distro=SUSE OpenStack Cloud 6","name":"openstack-neutron-fwaas-doc","label":"openstack-neutron-fwaas-doc&distro=SUSE OpenStack Cloud 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openstack-neutron-fwaas-doc&distro=SUSE OpenStack Cloud 6","purlType":"rpm","versions":[{"text":"< 7.1.2~a0~dev1-6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.1.2~a0~dev1-6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"openstack-neutron-fwaas&distro=SUSE OpenStack Cloud 6","name":"openstack-neutron-fwaas","label":"openstack-neutron-fwaas&distro=SUSE OpenStack Cloud 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openstack-neutron-fwaas&distro=SUSE OpenStack Cloud 6","purlType":"rpm","versions":[{"text":"< 7.1.2~a0~dev1-6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.1.2~a0~dev1-6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"openstack-neutron-lbaas-doc&distro=SUSE OpenStack Cloud 6","name":"openstack-neutron-lbaas-doc","label":"openstack-neutron-lbaas-doc&distro=SUSE OpenStack Cloud 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openstack-neutron-lbaas-doc&distro=SUSE OpenStack Cloud 6","purlType":"rpm","versions":[{"text":"< 7.1.2~a0~dev1-6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.1.2~a0~dev1-6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"openstack-neutron-lbaas&distro=SUSE OpenStack Cloud 6","name":"openstack-neutron-lbaas","label":"openstack-neutron-lbaas&distro=SUSE OpenStack Cloud 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openstack-neutron-lbaas&distro=SUSE OpenStack Cloud 6","purlType":"rpm","versions":[{"text":"< 7.1.2~a0~dev1-6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.1.2~a0~dev1-6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"openstack-neutron&distro=SUSE OpenStack Cloud 6","name":"openstack-neutron","label":"openstack-neutron&distro=SUSE OpenStack Cloud 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openstack-neutron&distro=SUSE OpenStack Cloud 6","purlType":"rpm","versions":[{"text":"< 7.1.2~a0~dev29-10.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.1.2~a0~dev29-10.1","eol":null,"hubHref":null},{"vendor":"suse","product":"openstack-nova-doc&distro=SUSE OpenStack Cloud 6","name":"openstack-nova-doc","label":"openstack-nova-doc&distro=SUSE OpenStack Cloud 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openstack-nova-doc&distro=SUSE OpenStack Cloud 6","purlType":"rpm","versions":[{"text":"< 12.0.5~a0~dev2-7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.0.5~a0~dev2-7.1","eol":null,"hubHref":null},{"vendor":"suse","product":"openstack-nova&distro=SUSE OpenStack Cloud 6","name":"openstack-nova","label":"openstack-nova&distro=SUSE OpenStack Cloud 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openstack-nova&distro=SUSE OpenStack Cloud 6","purlType":"rpm","versions":[{"text":"< 12.0.5~a0~dev2-7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.0.5~a0~dev2-7.1","eol":null,"hubHref":null},{"vendor":"suse","product":"openstack-resource-agents&distro=SUSE OpenStack Cloud 6","name":"openstack-resource-agents","label":"openstack-resource-agents&distro=SUSE OpenStack Cloud 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/openstack-resource-agents&distro=SUSE OpenStack Cloud 6","purlType":"rpm","versions":[{"text":"< 1.0+git.1467079370.4f2c49d-7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0+git.1467079370.4f2c49d-7.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-networking-cisco&distro=SUSE OpenStack Cloud 6","name":"python-networking-cisco","label":"python-networking-cisco&distro=SUSE OpenStack Cloud 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-networking-cisco&distro=SUSE OpenStack Cloud 6","purlType":"rpm","versions":[{"text":"< 2.1.1-6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.1.1-6.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-openstackclient&distro=SUSE OpenStack Cloud 6","name":"python-openstackclient","label":"python-openstackclient&distro=SUSE OpenStack Cloud 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-openstackclient&distro=SUSE OpenStack Cloud 6","purlType":"rpm","versions":[{"text":"< 1.7.2-4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.2-4.1","eol":null,"hubHref":null}],"affectedCount":24,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162143-1/","label":"www.suse.com/support/update/announcement/2016/suse-su-20162143-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/970258","label":"bugzilla.suse.com/970258","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/982426","label":"bugzilla.suse.com/982426","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/983807","label":"bugzilla.suse.com/983807","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/984442","label":"bugzilla.suse.com/984442","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/984443","label":"bugzilla.suse.com/984443","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/988729","label":"bugzilla.suse.com/988729","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2140","label":"www.suse.com/security/cve/CVE-2016-2140","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4428","label":"www.suse.com/security/cve/CVE-2016-4428","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5362","label":"www.suse.com/security/cve/CVE-2016-5362","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5363","label":"www.suse.com/security/cve/CVE-2016-5363","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2016-2140","CVE-2016-4428","CVE-2016-5362","CVE-2016-5363"],"downstream":[],"duplicates":[],"related":["CVE-2016-2140","CVE-2016-4428","CVE-2016-5362","CVE-2016-5363"]},"timeline":[{"kind":"published","date":"2016-08-23T15:49:42.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T02:53:18.835Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T14:22:32.960Z","stale":false,"partial":false}}