Vulnerability from csaf_suse
Published
2020-01-13 09:38
Modified
2020-01-13 09:38
Summary
Security update for crowbar-core, crowbar-openstack, openstack-horizon-plugin-monasca-ui, openstack-monasca-api, openstack-monasca-log-api, openstack-neutron, rubygem-puma, rubygem-rest-client

Notes

Title of the patch
Security update for crowbar-core, crowbar-openstack, openstack-horizon-plugin-monasca-ui, openstack-monasca-api, openstack-monasca-log-api, openstack-neutron, rubygem-puma, rubygem-rest-client
Description of the patch
This update for crowbar-core, crowbar-openstack, openstack-horizon-plugin-monasca-ui, openstack-monasca-api, openstack-monasca-log-api, openstack-neutron, rubygem-puma, rubygem-rest-client contains the following fixes: Security issue fixed for rubygem-puma: - CVE-2019-16770: Fixed a potential denial of service in Puma's reactor (bsc#1158675, jsc#SOC-10999) Security issue fixed for rubygem-rest-client: - CVE-2015-3448: Fixed a plain text local password disclosure. (bsc#917802) Updates for crowbar-core: - Update to version 4.0+git.1574788924.e4a6aeb0c: * Allow pacemaker remotes for upgrade (SOC-10133) - Update to version 4.0+git.1574713660.972029d1a: * Ignore CVE-2019-13117 in CI builds (bsc#1157028) Updates for crowbar-openstack: - Update to version 4.0+git.1574869671.9c7bade2d: * tempest: configure Kibana version (SOC-10131) - Update to version 4.0+git.1574764112.c260c70e5: * horizon: install lbaas horizon dashboard (SOC-10883) Updates for openstack-horizon-plugin-monasca-ui: - Refresh allow-raw-grafana-links.patch - update to version 1.5.5~dev3 * Replace openstack.org git:// URLs with https:// * Fix the partial missing metrics in Create Alarm Definition flow * import zuul job settings from project-config * Fix incorrect splitting of dimension in ProxyView * Fix Alarm status Panel on Overview page * Change IntegerField to ChoiceField for notification period * Imported Translations from Zanata * Display unique metric names for alarm * Fix Alarm Details section in Alarm History view * Fix validators for creating and editing notifications * Center the text for the button Deterministic * Adding title to Filter Alarms pop-up * Fix misleading validation error * Fix nit found in monasca-ui * Fix Breadcrumbs * Fix description for name field * Fixing 'Create Alarm Definition' for IE11 * Imported Translations from Zanata Updates to openstack-monasca-api: - added fix-metric-name-offset.patch (SOC-10131) - removed 0001-Fix-InfluxDB-repository-list_dimension_values-to-sup.patch (merged upstream) - update to version 1.7.1~dev18 * Replace openstack.org git:// URLs with https:// * import zuul job settings from project-config * Upgrade Apache Storm to 1.0.6 * Zuul: Remove project name Updates to openstack-monasca-log-api: - added fix-tempest-region.patch (SOC-10131) - update to version 1.4.3~dev3 * Replace openstack.org git:// URLs with https:// * import zuul job settings from project-config * Avoid tox\_install.sh for constraints support Updates to openstack-neutron: - neutron: Remove stop action from ovs-cleanup (bsc#1157482) backport of https://review.opendev.org/#/c/695867/
Patchnames
SUSE-2020-81,SUSE-OpenStack-Cloud-7-2020-81
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).


To clipboard 

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for crowbar-core, crowbar-openstack, openstack-horizon-plugin-monasca-ui, openstack-monasca-api, openstack-monasca-log-api, openstack-neutron, rubygem-puma, rubygem-rest-client",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "This update for crowbar-core, crowbar-openstack, openstack-horizon-plugin-monasca-ui, openstack-monasca-api, openstack-monasca-log-api, openstack-neutron, rubygem-puma, rubygem-rest-client contains the following fixes:\n\nSecurity issue fixed for rubygem-puma:\n\n- CVE-2019-16770: Fixed a potential denial of service  in Puma's reactor (bsc#1158675, jsc#SOC-10999)\n\nSecurity issue fixed for rubygem-rest-client:\n\n- CVE-2015-3448: Fixed a plain text local password disclosure. (bsc#917802)\n\nUpdates for crowbar-core:\n- Update to version 4.0+git.1574788924.e4a6aeb0c:\n  * Allow pacemaker remotes for upgrade (SOC-10133)\n\n- Update to version 4.0+git.1574713660.972029d1a:\n  * Ignore CVE-2019-13117 in CI builds (bsc#1157028)\n\nUpdates for crowbar-openstack:\n- Update to version 4.0+git.1574869671.9c7bade2d:\n  * tempest: configure Kibana version (SOC-10131)\n\n- Update to version 4.0+git.1574764112.c260c70e5:\n  * horizon: install lbaas horizon dashboard (SOC-10883)\n\nUpdates for openstack-horizon-plugin-monasca-ui:\n- Refresh allow-raw-grafana-links.patch\n- update to version 1.5.5~dev3\n  * Replace openstack.org git:// URLs with https://\n  * Fix the partial missing metrics in Create Alarm Definition flow\n  * import zuul job settings from project-config\n  * Fix incorrect splitting of dimension in ProxyView\n  * Fix Alarm status Panel on Overview page\n  * Change IntegerField to ChoiceField for notification period\n  * Imported Translations from Zanata\n  * Display unique metric names for alarm\n  * Fix Alarm Details section in Alarm History view\n  * Fix validators for creating and editing notifications\n  * Center the text for the button Deterministic\n  * Adding title to Filter Alarms pop-up\n  * Fix misleading validation error\n  * Fix nit found in monasca-ui\n  * Fix Breadcrumbs\n  * Fix description for name field\n  * Fixing 'Create Alarm Definition' for IE11\n  * Imported Translations from Zanata\n\nUpdates to openstack-monasca-api:\n- added fix-metric-name-offset.patch (SOC-10131)\n- removed 0001-Fix-InfluxDB-repository-list_dimension_values-to-sup.patch\n  (merged upstream)\n- update to version 1.7.1~dev18\n  * Replace openstack.org git:// URLs with https://\n  * import zuul job settings from project-config\n  * Upgrade Apache Storm to 1.0.6\n  * Zuul: Remove project name\n\nUpdates to openstack-monasca-log-api:\n- added fix-tempest-region.patch (SOC-10131)\n- update to version 1.4.3~dev3\n  * Replace openstack.org git:// URLs with https://\n  * import zuul job settings from project-config\n  * Avoid tox\\_install.sh for constraints support\n\nUpdates to openstack-neutron:\n- neutron: Remove stop action from ovs-cleanup (bsc#1157482)\n  backport of https://review.opendev.org/#/c/695867/\n  ",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-2020-81,SUSE-OpenStack-Cloud-7-2020-81",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_0081-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2020:0081-1",
            url: "https://www.suse.com/support/update/announcement/2020/suse-su-20200081-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2020:0081-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2020-January/006330.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1157028",
            url: "https://bugzilla.suse.com/1157028",
         },
         {
            category: "self",
            summary: "SUSE Bug 1157482",
            url: "https://bugzilla.suse.com/1157482",
         },
         {
            category: "self",
            summary: "SUSE Bug 1158675",
            url: "https://bugzilla.suse.com/1158675",
         },
         {
            category: "self",
            summary: "SUSE Bug 917802",
            url: "https://bugzilla.suse.com/917802",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-3448 page",
            url: "https://www.suse.com/security/cve/CVE-2015-3448/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-13117 page",
            url: "https://www.suse.com/security/cve/CVE-2019-13117/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-16770 page",
            url: "https://www.suse.com/security/cve/CVE-2019-16770/",
         },
         {
            category: "self",
            summary: "SUSE Bug SOC-10131",
            url: "https://bugzilla.suse.com/SOC-10131",
         },
         {
            category: "self",
            summary: "SUSE Bug SOC-10133",
            url: "https://bugzilla.suse.com/SOC-10133",
         },
         {
            category: "self",
            summary: "SUSE Bug SOC-10883",
            url: "https://bugzilla.suse.com/SOC-10883",
         },
         {
            category: "self",
            summary: "SUSE Bug SOC-10999",
            url: "https://bugzilla.suse.com/SOC-10999",
         },
      ],
      title: "Security update for crowbar-core, crowbar-openstack, openstack-horizon-plugin-monasca-ui, openstack-monasca-api, openstack-monasca-log-api, openstack-neutron, rubygem-puma, rubygem-rest-client",
      tracking: {
         current_release_date: "2020-01-13T09:38:16Z",
         generator: {
            date: "2020-01-13T09:38:16Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2020:0081-1",
         initial_release_date: "2020-01-13T09:38:16Z",
         revision_history: [
            {
               date: "2020-01-13T09:38:16Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
                        product: {
                           name: "crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
                           product_id: "crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
                        product: {
                           name: "crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
                           product_id: "crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "crowbar-core-devel-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
                        product: {
                           name: "crowbar-core-devel-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
                           product_id: "crowbar-core-devel-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ruby2.1-rubygem-puma-2.16.0-4.3.1.aarch64",
                        product: {
                           name: "ruby2.1-rubygem-puma-2.16.0-4.3.1.aarch64",
                           product_id: "ruby2.1-rubygem-puma-2.16.0-4.3.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ruby2.1-rubygem-puma-doc-2.16.0-4.3.1.aarch64",
                        product: {
                           name: "ruby2.1-rubygem-puma-doc-2.16.0-4.3.1.aarch64",
                           product_id: "ruby2.1-rubygem-puma-doc-2.16.0-4.3.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ruby2.1-rubygem-rest-client-1_6-1.6.7-3.3.1.aarch64",
                        product: {
                           name: "ruby2.1-rubygem-rest-client-1_6-1.6.7-3.3.1.aarch64",
                           product_id: "ruby2.1-rubygem-rest-client-1_6-1.6.7-3.3.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ruby2.1-rubygem-rest-client-doc-1_6-1.6.7-3.3.1.aarch64",
                        product: {
                           name: "ruby2.1-rubygem-rest-client-doc-1_6-1.6.7-3.3.1.aarch64",
                           product_id: "ruby2.1-rubygem-rest-client-doc-1_6-1.6.7-3.3.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ruby2.1-rubygem-rest-client-testsuite-1_6-1.6.7-3.3.1.aarch64",
                        product: {
                           name: "ruby2.1-rubygem-rest-client-testsuite-1_6-1.6.7-3.3.1.aarch64",
                           product_id: "ruby2.1-rubygem-rest-client-testsuite-1_6-1.6.7-3.3.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "crowbar-openstack-4.0+git.1574869671.9c7bade2d-9.65.1.noarch",
                        product: {
                           name: "crowbar-openstack-4.0+git.1574869671.9c7bade2d-9.65.1.noarch",
                           product_id: "crowbar-openstack-4.0+git.1574869671.9c7bade2d-9.65.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "grafana-monasca-ui-drilldown-1.5.5~dev3-8.1.noarch",
                        product: {
                           name: "grafana-monasca-ui-drilldown-1.5.5~dev3-8.1.noarch",
                           product_id: "grafana-monasca-ui-drilldown-1.5.5~dev3-8.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openstack-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
                        product: {
                           name: "openstack-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
                           product_id: "openstack-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openstack-monasca-api-1.7.1~dev18-12.1.noarch",
                        product: {
                           name: "openstack-monasca-api-1.7.1~dev18-12.1.noarch",
                           product_id: "openstack-monasca-api-1.7.1~dev18-12.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openstack-monasca-log-api-1.4.3~dev3-5.1.noarch",
                        product: {
                           name: "openstack-monasca-log-api-1.4.3~dev3-5.1.noarch",
                           product_id: "openstack-monasca-log-api-1.4.3~dev3-5.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openstack-neutron-9.4.2~dev21-7.38.1.noarch",
                        product: {
                           name: "openstack-neutron-9.4.2~dev21-7.38.1.noarch",
                           product_id: "openstack-neutron-9.4.2~dev21-7.38.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openstack-neutron-dhcp-agent-9.4.2~dev21-7.38.1.noarch",
                        product: {
                           name: "openstack-neutron-dhcp-agent-9.4.2~dev21-7.38.1.noarch",
                           product_id: "openstack-neutron-dhcp-agent-9.4.2~dev21-7.38.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openstack-neutron-doc-9.4.2~dev21-7.38.1.noarch",
                        product: {
                           name: "openstack-neutron-doc-9.4.2~dev21-7.38.1.noarch",
                           product_id: "openstack-neutron-doc-9.4.2~dev21-7.38.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openstack-neutron-ha-tool-9.4.2~dev21-7.38.1.noarch",
                        product: {
                           name: "openstack-neutron-ha-tool-9.4.2~dev21-7.38.1.noarch",
                           product_id: "openstack-neutron-ha-tool-9.4.2~dev21-7.38.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openstack-neutron-l3-agent-9.4.2~dev21-7.38.1.noarch",
                        product: {
                           name: "openstack-neutron-l3-agent-9.4.2~dev21-7.38.1.noarch",
                           product_id: "openstack-neutron-l3-agent-9.4.2~dev21-7.38.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openstack-neutron-linuxbridge-agent-9.4.2~dev21-7.38.1.noarch",
                        product: {
                           name: "openstack-neutron-linuxbridge-agent-9.4.2~dev21-7.38.1.noarch",
                           product_id: "openstack-neutron-linuxbridge-agent-9.4.2~dev21-7.38.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openstack-neutron-macvtap-agent-9.4.2~dev21-7.38.1.noarch",
                        product: {
                           name: "openstack-neutron-macvtap-agent-9.4.2~dev21-7.38.1.noarch",
                           product_id: "openstack-neutron-macvtap-agent-9.4.2~dev21-7.38.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openstack-neutron-metadata-agent-9.4.2~dev21-7.38.1.noarch",
                        product: {
                           name: "openstack-neutron-metadata-agent-9.4.2~dev21-7.38.1.noarch",
                           product_id: "openstack-neutron-metadata-agent-9.4.2~dev21-7.38.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openstack-neutron-metering-agent-9.4.2~dev21-7.38.1.noarch",
                        product: {
                           name: "openstack-neutron-metering-agent-9.4.2~dev21-7.38.1.noarch",
                           product_id: "openstack-neutron-metering-agent-9.4.2~dev21-7.38.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openstack-neutron-openvswitch-agent-9.4.2~dev21-7.38.1.noarch",
                        product: {
                           name: "openstack-neutron-openvswitch-agent-9.4.2~dev21-7.38.1.noarch",
                           product_id: "openstack-neutron-openvswitch-agent-9.4.2~dev21-7.38.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openstack-neutron-server-9.4.2~dev21-7.38.1.noarch",
                        product: {
                           name: "openstack-neutron-server-9.4.2~dev21-7.38.1.noarch",
                           product_id: "openstack-neutron-server-9.4.2~dev21-7.38.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "openstack-neutron-test-9.4.2~dev21-7.38.1.noarch",
                        product: {
                           name: "openstack-neutron-test-9.4.2~dev21-7.38.1.noarch",
                           product_id: "openstack-neutron-test-9.4.2~dev21-7.38.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
                        product: {
                           name: "python-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
                           product_id: "python-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python-monasca-api-1.7.1~dev18-12.1.noarch",
                        product: {
                           name: "python-monasca-api-1.7.1~dev18-12.1.noarch",
                           product_id: "python-monasca-api-1.7.1~dev18-12.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python-monasca-log-api-1.4.3~dev3-5.1.noarch",
                        product: {
                           name: "python-monasca-log-api-1.4.3~dev3-5.1.noarch",
                           product_id: "python-monasca-log-api-1.4.3~dev3-5.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python-neutron-9.4.2~dev21-7.38.1.noarch",
                        product: {
                           name: "python-neutron-9.4.2~dev21-7.38.1.noarch",
                           product_id: "python-neutron-9.4.2~dev21-7.38.1.noarch",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.ppc64le",
                        product: {
                           name: "crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.ppc64le",
                           product_id: "crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.ppc64le",
                        product: {
                           name: "crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.ppc64le",
                           product_id: "crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "crowbar-core-devel-4.0+git.1574788924.e4a6aeb0c-9.60.2.ppc64le",
                        product: {
                           name: "crowbar-core-devel-4.0+git.1574788924.e4a6aeb0c-9.60.2.ppc64le",
                           product_id: "crowbar-core-devel-4.0+git.1574788924.e4a6aeb0c-9.60.2.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ruby2.1-rubygem-puma-2.16.0-4.3.1.ppc64le",
                        product: {
                           name: "ruby2.1-rubygem-puma-2.16.0-4.3.1.ppc64le",
                           product_id: "ruby2.1-rubygem-puma-2.16.0-4.3.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ruby2.1-rubygem-puma-doc-2.16.0-4.3.1.ppc64le",
                        product: {
                           name: "ruby2.1-rubygem-puma-doc-2.16.0-4.3.1.ppc64le",
                           product_id: "ruby2.1-rubygem-puma-doc-2.16.0-4.3.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ruby2.1-rubygem-rest-client-1_6-1.6.7-3.3.1.ppc64le",
                        product: {
                           name: "ruby2.1-rubygem-rest-client-1_6-1.6.7-3.3.1.ppc64le",
                           product_id: "ruby2.1-rubygem-rest-client-1_6-1.6.7-3.3.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ruby2.1-rubygem-rest-client-doc-1_6-1.6.7-3.3.1.ppc64le",
                        product: {
                           name: "ruby2.1-rubygem-rest-client-doc-1_6-1.6.7-3.3.1.ppc64le",
                           product_id: "ruby2.1-rubygem-rest-client-doc-1_6-1.6.7-3.3.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ruby2.1-rubygem-rest-client-testsuite-1_6-1.6.7-3.3.1.ppc64le",
                        product: {
                           name: "ruby2.1-rubygem-rest-client-testsuite-1_6-1.6.7-3.3.1.ppc64le",
                           product_id: "ruby2.1-rubygem-rest-client-testsuite-1_6-1.6.7-3.3.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
                        product: {
                           name: "crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
                           product_id: "crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
                        product: {
                           name: "crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
                           product_id: "crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "crowbar-core-devel-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
                        product: {
                           name: "crowbar-core-devel-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
                           product_id: "crowbar-core-devel-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ruby2.1-rubygem-puma-2.16.0-4.3.1.s390x",
                        product: {
                           name: "ruby2.1-rubygem-puma-2.16.0-4.3.1.s390x",
                           product_id: "ruby2.1-rubygem-puma-2.16.0-4.3.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ruby2.1-rubygem-puma-doc-2.16.0-4.3.1.s390x",
                        product: {
                           name: "ruby2.1-rubygem-puma-doc-2.16.0-4.3.1.s390x",
                           product_id: "ruby2.1-rubygem-puma-doc-2.16.0-4.3.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ruby2.1-rubygem-rest-client-1_6-1.6.7-3.3.1.s390x",
                        product: {
                           name: "ruby2.1-rubygem-rest-client-1_6-1.6.7-3.3.1.s390x",
                           product_id: "ruby2.1-rubygem-rest-client-1_6-1.6.7-3.3.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ruby2.1-rubygem-rest-client-doc-1_6-1.6.7-3.3.1.s390x",
                        product: {
                           name: "ruby2.1-rubygem-rest-client-doc-1_6-1.6.7-3.3.1.s390x",
                           product_id: "ruby2.1-rubygem-rest-client-doc-1_6-1.6.7-3.3.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ruby2.1-rubygem-rest-client-testsuite-1_6-1.6.7-3.3.1.s390x",
                        product: {
                           name: "ruby2.1-rubygem-rest-client-testsuite-1_6-1.6.7-3.3.1.s390x",
                           product_id: "ruby2.1-rubygem-rest-client-testsuite-1_6-1.6.7-3.3.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
                        product: {
                           name: "crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
                           product_id: "crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
                        product: {
                           name: "crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
                           product_id: "crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "crowbar-core-devel-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
                        product: {
                           name: "crowbar-core-devel-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
                           product_id: "crowbar-core-devel-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ruby2.1-rubygem-puma-2.16.0-4.3.1.x86_64",
                        product: {
                           name: "ruby2.1-rubygem-puma-2.16.0-4.3.1.x86_64",
                           product_id: "ruby2.1-rubygem-puma-2.16.0-4.3.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ruby2.1-rubygem-puma-doc-2.16.0-4.3.1.x86_64",
                        product: {
                           name: "ruby2.1-rubygem-puma-doc-2.16.0-4.3.1.x86_64",
                           product_id: "ruby2.1-rubygem-puma-doc-2.16.0-4.3.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ruby2.1-rubygem-rest-client-1_6-1.6.7-3.3.1.x86_64",
                        product: {
                           name: "ruby2.1-rubygem-rest-client-1_6-1.6.7-3.3.1.x86_64",
                           product_id: "ruby2.1-rubygem-rest-client-1_6-1.6.7-3.3.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ruby2.1-rubygem-rest-client-doc-1_6-1.6.7-3.3.1.x86_64",
                        product: {
                           name: "ruby2.1-rubygem-rest-client-doc-1_6-1.6.7-3.3.1.x86_64",
                           product_id: "ruby2.1-rubygem-rest-client-doc-1_6-1.6.7-3.3.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ruby2.1-rubygem-rest-client-testsuite-1_6-1.6.7-3.3.1.x86_64",
                        product: {
                           name: "ruby2.1-rubygem-rest-client-testsuite-1_6-1.6.7-3.3.1.x86_64",
                           product_id: "ruby2.1-rubygem-rest-client-testsuite-1_6-1.6.7-3.3.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE OpenStack Cloud 7",
                        product: {
                           name: "SUSE OpenStack Cloud 7",
                           product_id: "SUSE OpenStack Cloud 7",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse-openstack-cloud:7",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64 as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
            },
            product_reference: "crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
            },
            product_reference: "crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64 as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
            },
            product_reference: "crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64 as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
            },
            product_reference: "crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
            },
            product_reference: "crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64 as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
            },
            product_reference: "crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "crowbar-openstack-4.0+git.1574869671.9c7bade2d-9.65.1.noarch as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1574869671.9c7bade2d-9.65.1.noarch",
            },
            product_reference: "crowbar-openstack-4.0+git.1574869671.9c7bade2d-9.65.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "grafana-monasca-ui-drilldown-1.5.5~dev3-8.1.noarch as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:grafana-monasca-ui-drilldown-1.5.5~dev3-8.1.noarch",
            },
            product_reference: "grafana-monasca-ui-drilldown-1.5.5~dev3-8.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openstack-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:openstack-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
            },
            product_reference: "openstack-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openstack-monasca-api-1.7.1~dev18-12.1.noarch as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:openstack-monasca-api-1.7.1~dev18-12.1.noarch",
            },
            product_reference: "openstack-monasca-api-1.7.1~dev18-12.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openstack-monasca-log-api-1.4.3~dev3-5.1.noarch as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:openstack-monasca-log-api-1.4.3~dev3-5.1.noarch",
            },
            product_reference: "openstack-monasca-log-api-1.4.3~dev3-5.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openstack-neutron-9.4.2~dev21-7.38.1.noarch as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:openstack-neutron-9.4.2~dev21-7.38.1.noarch",
            },
            product_reference: "openstack-neutron-9.4.2~dev21-7.38.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openstack-neutron-dhcp-agent-9.4.2~dev21-7.38.1.noarch as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:openstack-neutron-dhcp-agent-9.4.2~dev21-7.38.1.noarch",
            },
            product_reference: "openstack-neutron-dhcp-agent-9.4.2~dev21-7.38.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openstack-neutron-doc-9.4.2~dev21-7.38.1.noarch as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:openstack-neutron-doc-9.4.2~dev21-7.38.1.noarch",
            },
            product_reference: "openstack-neutron-doc-9.4.2~dev21-7.38.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openstack-neutron-ha-tool-9.4.2~dev21-7.38.1.noarch as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:openstack-neutron-ha-tool-9.4.2~dev21-7.38.1.noarch",
            },
            product_reference: "openstack-neutron-ha-tool-9.4.2~dev21-7.38.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openstack-neutron-l3-agent-9.4.2~dev21-7.38.1.noarch as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:openstack-neutron-l3-agent-9.4.2~dev21-7.38.1.noarch",
            },
            product_reference: "openstack-neutron-l3-agent-9.4.2~dev21-7.38.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openstack-neutron-linuxbridge-agent-9.4.2~dev21-7.38.1.noarch as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:openstack-neutron-linuxbridge-agent-9.4.2~dev21-7.38.1.noarch",
            },
            product_reference: "openstack-neutron-linuxbridge-agent-9.4.2~dev21-7.38.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openstack-neutron-macvtap-agent-9.4.2~dev21-7.38.1.noarch as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:openstack-neutron-macvtap-agent-9.4.2~dev21-7.38.1.noarch",
            },
            product_reference: "openstack-neutron-macvtap-agent-9.4.2~dev21-7.38.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openstack-neutron-metadata-agent-9.4.2~dev21-7.38.1.noarch as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:openstack-neutron-metadata-agent-9.4.2~dev21-7.38.1.noarch",
            },
            product_reference: "openstack-neutron-metadata-agent-9.4.2~dev21-7.38.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openstack-neutron-metering-agent-9.4.2~dev21-7.38.1.noarch as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:openstack-neutron-metering-agent-9.4.2~dev21-7.38.1.noarch",
            },
            product_reference: "openstack-neutron-metering-agent-9.4.2~dev21-7.38.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openstack-neutron-openvswitch-agent-9.4.2~dev21-7.38.1.noarch as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:openstack-neutron-openvswitch-agent-9.4.2~dev21-7.38.1.noarch",
            },
            product_reference: "openstack-neutron-openvswitch-agent-9.4.2~dev21-7.38.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openstack-neutron-server-9.4.2~dev21-7.38.1.noarch as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:openstack-neutron-server-9.4.2~dev21-7.38.1.noarch",
            },
            product_reference: "openstack-neutron-server-9.4.2~dev21-7.38.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:python-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
            },
            product_reference: "python-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-monasca-api-1.7.1~dev18-12.1.noarch as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:python-monasca-api-1.7.1~dev18-12.1.noarch",
            },
            product_reference: "python-monasca-api-1.7.1~dev18-12.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-monasca-log-api-1.4.3~dev3-5.1.noarch as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:python-monasca-log-api-1.4.3~dev3-5.1.noarch",
            },
            product_reference: "python-monasca-log-api-1.4.3~dev3-5.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python-neutron-9.4.2~dev21-7.38.1.noarch as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:python-neutron-9.4.2~dev21-7.38.1.noarch",
            },
            product_reference: "python-neutron-9.4.2~dev21-7.38.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ruby2.1-rubygem-puma-2.16.0-4.3.1.aarch64 as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.aarch64",
            },
            product_reference: "ruby2.1-rubygem-puma-2.16.0-4.3.1.aarch64",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ruby2.1-rubygem-puma-2.16.0-4.3.1.s390x as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.s390x",
            },
            product_reference: "ruby2.1-rubygem-puma-2.16.0-4.3.1.s390x",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ruby2.1-rubygem-puma-2.16.0-4.3.1.x86_64 as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.x86_64",
            },
            product_reference: "ruby2.1-rubygem-puma-2.16.0-4.3.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2015-3448",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-3448",
            },
         ],
         notes: [
            {
               category: "general",
               text: "REST client for Ruby (aka rest-client) before 1.7.3 logs usernames and passwords, which allows local users to obtain sensitive information by reading the log.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
               "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
               "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
               "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
               "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
               "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
               "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1574869671.9c7bade2d-9.65.1.noarch",
               "SUSE OpenStack Cloud 7:grafana-monasca-ui-drilldown-1.5.5~dev3-8.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-monasca-api-1.7.1~dev18-12.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-monasca-log-api-1.4.3~dev3-5.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-dhcp-agent-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-doc-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-ha-tool-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-l3-agent-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-linuxbridge-agent-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-macvtap-agent-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-metadata-agent-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-metering-agent-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-openvswitch-agent-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-server-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:python-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
               "SUSE OpenStack Cloud 7:python-monasca-api-1.7.1~dev18-12.1.noarch",
               "SUSE OpenStack Cloud 7:python-monasca-log-api-1.4.3~dev3-5.1.noarch",
               "SUSE OpenStack Cloud 7:python-neutron-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.aarch64",
               "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.s390x",
               "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-3448",
               url: "https://www.suse.com/security/cve/CVE-2015-3448",
            },
            {
               category: "external",
               summary: "SUSE Bug 917802 for CVE-2015-3448",
               url: "https://bugzilla.suse.com/917802",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
                  "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
                  "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
                  "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
                  "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
                  "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
                  "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1574869671.9c7bade2d-9.65.1.noarch",
                  "SUSE OpenStack Cloud 7:grafana-monasca-ui-drilldown-1.5.5~dev3-8.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-monasca-api-1.7.1~dev18-12.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-monasca-log-api-1.4.3~dev3-5.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-dhcp-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-doc-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-ha-tool-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-l3-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-linuxbridge-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-macvtap-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-metadata-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-metering-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-openvswitch-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-server-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:python-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
                  "SUSE OpenStack Cloud 7:python-monasca-api-1.7.1~dev18-12.1.noarch",
                  "SUSE OpenStack Cloud 7:python-monasca-log-api-1.4.3~dev3-5.1.noarch",
                  "SUSE OpenStack Cloud 7:python-neutron-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.aarch64",
                  "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.s390x",
                  "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-01-13T09:38:16Z",
               details: "low",
            },
         ],
         title: "CVE-2015-3448",
      },
      {
         cve: "CVE-2019-13117",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-13117",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any other character.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
               "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
               "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
               "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
               "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
               "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
               "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1574869671.9c7bade2d-9.65.1.noarch",
               "SUSE OpenStack Cloud 7:grafana-monasca-ui-drilldown-1.5.5~dev3-8.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-monasca-api-1.7.1~dev18-12.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-monasca-log-api-1.4.3~dev3-5.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-dhcp-agent-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-doc-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-ha-tool-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-l3-agent-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-linuxbridge-agent-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-macvtap-agent-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-metadata-agent-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-metering-agent-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-openvswitch-agent-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-server-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:python-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
               "SUSE OpenStack Cloud 7:python-monasca-api-1.7.1~dev18-12.1.noarch",
               "SUSE OpenStack Cloud 7:python-monasca-log-api-1.4.3~dev3-5.1.noarch",
               "SUSE OpenStack Cloud 7:python-neutron-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.aarch64",
               "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.s390x",
               "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-13117",
               url: "https://www.suse.com/security/cve/CVE-2019-13117",
            },
            {
               category: "external",
               summary: "SUSE Bug 1140095 for CVE-2019-13117",
               url: "https://bugzilla.suse.com/1140095",
            },
            {
               category: "external",
               summary: "SUSE Bug 1157028 for CVE-2019-13117",
               url: "https://bugzilla.suse.com/1157028",
            },
            {
               category: "external",
               summary: "SUSE Bug 1160968 for CVE-2019-13117",
               url: "https://bugzilla.suse.com/1160968",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
                  "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
                  "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
                  "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
                  "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
                  "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
                  "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1574869671.9c7bade2d-9.65.1.noarch",
                  "SUSE OpenStack Cloud 7:grafana-monasca-ui-drilldown-1.5.5~dev3-8.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-monasca-api-1.7.1~dev18-12.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-monasca-log-api-1.4.3~dev3-5.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-dhcp-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-doc-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-ha-tool-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-l3-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-linuxbridge-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-macvtap-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-metadata-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-metering-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-openvswitch-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-server-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:python-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
                  "SUSE OpenStack Cloud 7:python-monasca-api-1.7.1~dev18-12.1.noarch",
                  "SUSE OpenStack Cloud 7:python-monasca-log-api-1.4.3~dev3-5.1.noarch",
                  "SUSE OpenStack Cloud 7:python-neutron-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.aarch64",
                  "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.s390x",
                  "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
                  "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
                  "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
                  "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
                  "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
                  "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
                  "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1574869671.9c7bade2d-9.65.1.noarch",
                  "SUSE OpenStack Cloud 7:grafana-monasca-ui-drilldown-1.5.5~dev3-8.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-monasca-api-1.7.1~dev18-12.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-monasca-log-api-1.4.3~dev3-5.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-dhcp-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-doc-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-ha-tool-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-l3-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-linuxbridge-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-macvtap-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-metadata-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-metering-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-openvswitch-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-server-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:python-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
                  "SUSE OpenStack Cloud 7:python-monasca-api-1.7.1~dev18-12.1.noarch",
                  "SUSE OpenStack Cloud 7:python-monasca-log-api-1.4.3~dev3-5.1.noarch",
                  "SUSE OpenStack Cloud 7:python-neutron-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.aarch64",
                  "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.s390x",
                  "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-01-13T09:38:16Z",
               details: "moderate",
            },
         ],
         title: "CVE-2019-13117",
      },
      {
         cve: "CVE-2019-16770",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-16770",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In Puma before versions 3.12.2 and 4.3.1, a poorly-behaved client could use keepalive requests to monopolize Puma's reactor and create a denial of service attack. If more keepalive connections to Puma are opened than there are threads available, additional connections will wait permanently if the attacker sends requests frequently enough. This vulnerability is patched in Puma 4.3.1 and 3.12.2.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
               "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
               "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
               "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
               "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
               "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
               "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1574869671.9c7bade2d-9.65.1.noarch",
               "SUSE OpenStack Cloud 7:grafana-monasca-ui-drilldown-1.5.5~dev3-8.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-monasca-api-1.7.1~dev18-12.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-monasca-log-api-1.4.3~dev3-5.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-dhcp-agent-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-doc-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-ha-tool-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-l3-agent-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-linuxbridge-agent-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-macvtap-agent-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-metadata-agent-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-metering-agent-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-openvswitch-agent-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:openstack-neutron-server-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:python-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
               "SUSE OpenStack Cloud 7:python-monasca-api-1.7.1~dev18-12.1.noarch",
               "SUSE OpenStack Cloud 7:python-monasca-log-api-1.4.3~dev3-5.1.noarch",
               "SUSE OpenStack Cloud 7:python-neutron-9.4.2~dev21-7.38.1.noarch",
               "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.aarch64",
               "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.s390x",
               "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-16770",
               url: "https://www.suse.com/security/cve/CVE-2019-16770",
            },
            {
               category: "external",
               summary: "SUSE Bug 1158675 for CVE-2019-16770",
               url: "https://bugzilla.suse.com/1158675",
            },
            {
               category: "external",
               summary: "SUSE Bug 1188527 for CVE-2019-16770",
               url: "https://bugzilla.suse.com/1188527",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
                  "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
                  "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
                  "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
                  "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
                  "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
                  "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1574869671.9c7bade2d-9.65.1.noarch",
                  "SUSE OpenStack Cloud 7:grafana-monasca-ui-drilldown-1.5.5~dev3-8.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-monasca-api-1.7.1~dev18-12.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-monasca-log-api-1.4.3~dev3-5.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-dhcp-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-doc-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-ha-tool-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-l3-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-linuxbridge-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-macvtap-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-metadata-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-metering-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-openvswitch-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-server-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:python-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
                  "SUSE OpenStack Cloud 7:python-monasca-api-1.7.1~dev18-12.1.noarch",
                  "SUSE OpenStack Cloud 7:python-monasca-log-api-1.4.3~dev3-5.1.noarch",
                  "SUSE OpenStack Cloud 7:python-neutron-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.aarch64",
                  "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.s390x",
                  "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
                  "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
                  "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
                  "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.aarch64",
                  "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.s390x",
                  "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1574788924.e4a6aeb0c-9.60.2.x86_64",
                  "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1574869671.9c7bade2d-9.65.1.noarch",
                  "SUSE OpenStack Cloud 7:grafana-monasca-ui-drilldown-1.5.5~dev3-8.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-monasca-api-1.7.1~dev18-12.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-monasca-log-api-1.4.3~dev3-5.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-dhcp-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-doc-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-ha-tool-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-l3-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-linuxbridge-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-macvtap-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-metadata-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-metering-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-openvswitch-agent-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:openstack-neutron-server-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:python-horizon-plugin-monasca-ui-1.5.5~dev3-8.1.noarch",
                  "SUSE OpenStack Cloud 7:python-monasca-api-1.7.1~dev18-12.1.noarch",
                  "SUSE OpenStack Cloud 7:python-monasca-log-api-1.4.3~dev3-5.1.noarch",
                  "SUSE OpenStack Cloud 7:python-neutron-9.4.2~dev21-7.38.1.noarch",
                  "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.aarch64",
                  "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.s390x",
                  "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.3.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-01-13T09:38:16Z",
               details: "important",
            },
         ],
         title: "CVE-2019-16770",
      },
   ],
}


Log in or create an account to share your comment.

Security Advisory comment format.

This schema specifies the format of a comment related to a security advisory.

UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).



Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.