Summary
This update for Crowbar provides several fixes and improvements for the following barclamps:
crowbar-openstack:
- nova: Use internal placement url (bsc#1055188)
- nova: Subscribe to placement config (bsc#1055188)
- barbican: Add missing roles used in policy.json (bsc#1081573)
- barbican: Add creator role (bsc#1081573)
- memcached: Disable UDP by default (bsc#1083903)
- cinder: Set os_privileged_* values (bsc#1079763)
- apache: don't collect Listen ports from wsgi vhosts (bsc#1077234)
- magnum: Add domain name to keystone_auth (bsc#1080335)
- neutron-ha-tool: Add insecure flag (bsc#1075394)
crowbar-ha:
- pacemaker: Fix migration number.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| SUSE · OpenStack Cloud 7 | crowbar-ha | 4.0+git.1521473535.67d2302-4.28.1 |
| SUSE · OpenStack Cloud 7 | crowbar-openstack | 4.0+git.1522325467.43e431f91-9.30.1 |
Vulnerabilities 1
-
Unscored —
Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vul…
References
-
report
https://bugzilla.suse.com/1055188
-
report
https://bugzilla.suse.com/1075394
-
report
https://bugzilla.suse.com/1077234
-
report
https://bugzilla.suse.com/1079763
-
report
https://bugzilla.suse.com/1080335
-
report
https://bugzilla.suse.com/1081573
-
report
https://bugzilla.suse.com/1083903
-
web
https://www.suse.com/security/cve/CVE-2018-1000115