CVE-2020-17376 — OpenStack Nova Live migration fails to update persistent domain XML

Description

An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1, and 21.0.0. By performing a soft reboot of an instance that has previously undergone live migration, a user may gain access to destination host devices that share the same paths as host devices previously referenced by the virtual machine on the source host. This can include block devices that map to different Cinder volumes at the destination than at the source. Only deployments allowing host-based connections (for instance, root and ephemeral devices) are affected.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	nova	2:21.1.0-1	—
Debian 13	nova	2:21.1.0-1	—
Debian 12	nova	2:21.1.0-1	—

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 20.04 LTS	nova	2:21.2.4-0ubuntu2.1	USN-5866-1
Ubuntu 18.04 LTS	nova	2:17.0.13-0ubuntu5.3	USN-5866-1

Show 1 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Ubuntu Pro 16.04 LTS	nova	2:13.1.4-0ubuntu4.5+esm1	USN-5866-1

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
Red Hat OpenStack 16	python3-nova +11	1:20.1.2-0.20200401205215.28324e6.el8ost	RHSA-2020:3704, RHSA-2020:3702
Red Hat OpenStack 15	python3-nova +13	1:19.1.0-0.20200207070459.bf9d9e5.el8ost	RHSA-2020:3706
Red Hat OpenStack 13	python-nova +15	1:17.0.13-24.el7ost	RHSA-2020:3708

Show 1 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Red Hat OpenStack 10	python-nova +16	1:14.1.0-65.el7ost	RHSA-2020:3711

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SUSE OpenStack Cloud Crowbar 9	crowbar-core	6.0+git.1598519900.770074aa7-3.28.4	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud Crowbar 9	grafana	6.7.4-3.17.1	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud Crowbar 9	grafana-natel-discrete-panel	0.0.9-4.3.3	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud Crowbar 9	openstack-cinder	13.0.10~dev16-3.25.3	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud Crowbar 9	openstack-dashboard	14.1.1~dev7-3.18.3	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud Crowbar 9	openstack-ironic	11.1.5~dev16-3.22.3	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud Crowbar 9	openstack-ironic-python-agent	3.3.4~dev5-3.16.2	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud Crowbar 9	openstack-manila	7.4.2~dev54-4.27.3	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud Crowbar 9	openstack-neutron	13.0.8~dev95-3.28.3	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud Crowbar 9	openstack-nova	18.3.1~dev54-3.28.3	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud Crowbar 9	rubygem-crowbar-client	3.9.3-3.9.1	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud Crowbar 9	storm	1.2.3-3.3.4	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud Crowbar 8	ansible	2.9.14-3.15.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8	crowbar-core	5.0+git.1600432272.b3ad722f0-3.44.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8	crowbar-openstack	5.0+git.1599037158.5c4d07480-4.43.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8	documentation-suse-openstack-cloud-deployment +3	8.20201007-1.29.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8	grafana	6.7.4-4.12.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8	grafana-natel-discrete-panel	0.0.9-3.3.6	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8	openstack-cinder	11.2.3~dev29-3.28.2	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8	openstack-cinder-doc	11.2.3~dev29-3.28.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8	openstack-monasca-installer	20190923_16.32-3.15.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8	openstack-neutron	11.0.9~dev69-3.37.2	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8	openstack-neutron-doc	11.0.9~dev69-3.37.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8	openstack-nova	16.1.9~dev76-3.39.2	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8	openstack-nova-doc	16.1.9~dev76-3.39.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8	python-Django	1.11.29-3.19.2	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8	python-Pillow	4.2.1-3.9.2	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8	python-keystoneclient	3.13.1-3.3.2	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8	python-keystonemiddleware	4.17.1-5.3.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8	python-kombu	4.1.0-3.7.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8	python-straight-plugin	1.5.0-1.3.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8	python-urllib3	1.22-5.12.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8	release-notes-suse-openstack-cloud	8.20200922-3.23.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8	rubygem-crowbar-client	3.9.3-1.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud Crowbar 8	storm	1.2.3-3.6.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 9	ardana-ansible	9.0+git.1596813072.110811d-3.25.2	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud 9	ardana-cinder	9.0+git.1596129576.0b3d3ce-3.13.2	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud 9	ardana-cobbler	9.0+git.1588258487.3acf8ad-3.16.2	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud 9	ardana-installer-ui	9.0+git.1569535129.ca87ef0-3.13.2	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud 9	ardana-opsconsole-ui	9.0+git.1566593422.813e56c-4.13.2	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud 9	ardana-osconfig	9.0+git.1597427032.a062830-3.19.2	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud 9	grafana	6.7.4-3.17.1	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud 9	grafana-natel-discrete-panel	0.0.9-4.3.3	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud 9	openstack-cinder	13.0.10~dev16-3.25.3	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud 9	openstack-dashboard	14.1.1~dev7-3.18.3	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud 9	openstack-ironic	11.1.5~dev16-3.22.3	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud 9	openstack-ironic-python-agent	3.3.4~dev5-3.16.2	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud 9	openstack-manila	7.4.2~dev54-4.27.3	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud 9	openstack-neutron	13.0.8~dev95-3.28.3	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud 9	openstack-nova	18.3.1~dev54-3.28.3	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud 9	python-Flask-Cors	3.0.3-4.3.2	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud 9	storm	1.2.3-3.3.4	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud 9	venv-openstack-cinder	13.0.10~dev16-3.22.3	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud 9	venv-openstack-horizon	14.1.1~dev7-4.21.3	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud 9	venv-openstack-ironic	11.1.5~dev16-4.17.2	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud 9	venv-openstack-manila	7.4.2~dev54-3.23.2	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud 9	venv-openstack-neutron	13.0.8~dev95-6.21.3	SUSE-SU-2020:2876-1
SUSE OpenStack Cloud 9	venv-openstack-nova	18.3.1~dev54-3.21.2	SUSE-SU-2020:2876-1

Show 3 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SUSE OpenStack Cloud 8	ansible	2.9.14-3.15.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	ardana-ansible	8.0+git.1596735237.54109b1-3.77.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	ardana-cinder	8.0+git.1596129856.263f430-3.43.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	ardana-glance	8.0+git.1593631779.76fa9b7-3.24.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	ardana-mq	8.0+git.1593618123.678c32b-3.26.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	ardana-nova	8.0+git.1601298847.dd01585-3.42.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	ardana-osconfig	8.0+git.1595885113.93abcbc-3.49.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	documentation-suse-openstack-cloud-user +8	8.20201007-1.29.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	grafana	6.7.4-4.12.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	grafana-natel-discrete-panel	0.0.9-3.3.6	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	openstack-cinder	11.2.3~dev29-3.28.2	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	openstack-cinder-doc	11.2.3~dev29-3.28.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	openstack-monasca-installer	20190923_16.32-3.15.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	openstack-neutron	11.0.9~dev69-3.37.2	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	openstack-neutron-doc	11.0.9~dev69-3.37.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	openstack-nova	16.1.9~dev76-3.39.2	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	openstack-nova-doc	16.1.9~dev76-3.39.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	python-Django	1.11.29-3.19.2	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	python-Flask-Cors	3.0.3-3.3.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	python-Pillow	4.2.1-3.9.2	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	python-ardana-packager	0.0.3-7.7.2	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	python-keystoneclient	3.13.1-3.3.2	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	python-keystonemiddleware	4.17.1-5.3.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	python-kombu	4.1.0-3.7.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	python-straight-plugin	1.5.0-1.3.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	python-urllib3	1.22-5.12.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	release-notes-suse-openstack-cloud	8.20200922-3.23.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	storm	1.2.3-3.6.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	venv-openstack-aodh	5.1.1~dev7-12.28.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	venv-openstack-barbican	5.0.2~dev3-12.29.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	venv-openstack-ceilometer	9.0.8~dev7-12.26.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	venv-openstack-cinder	11.2.3~dev29-14.30.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	venv-openstack-designate	5.0.3~dev7-12.27.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	venv-openstack-freezer	5.0.0.0~xrc2~dev2-10.24.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	venv-openstack-glance	15.0.3~dev3-12.27.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	venv-openstack-heat	9.0.8~dev22-12.29.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	venv-openstack-horizon	12.0.5~dev3-14.32.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	venv-openstack-ironic	9.1.8~dev8-12.29.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	venv-openstack-keystone	12.0.4~dev11-11.30.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	venv-openstack-magnum	5.0.2_5.0.2_5.0.2~dev31-11.28.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	venv-openstack-manila	5.1.1~dev5-12.33.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	venv-openstack-monasca	2.2.2~dev1-11.24.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	venv-openstack-monasca-ceilometer	1.5.1_1.5.1_1.5.1~dev3-8.24.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	venv-openstack-murano	4.0.2~dev2-12.24.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	venv-openstack-neutron	11.0.9~dev69-13.32.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	venv-openstack-nova	16.1.9~dev76-11.30.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	venv-openstack-octavia	1.0.6~dev3-12.29.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	venv-openstack-sahara	7.0.5~dev4-11.28.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	venv-openstack-swift	2.15.2_2.15.2_2.15.2~dev32-11.21.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 8	venv-openstack-trove	8.0.2~dev2-11.28.1	SUSE-SU-2020:3309-1
SUSE OpenStack Cloud 7	ansible	2.2.3.0-17.2	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	crowbar-core	4.0+git.1600767499.0615a418f-9.69.3	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	crowbar-openstack	4.0+git.1599037255.25b759234-9.74.4	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	grafana	6.7.4-1.17.1	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	grafana-natel-discrete-panel	0.0.9-1.6.5	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	openstack-aodh	3.0.5~dev2-2.11.2	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	openstack-aodh-doc	3.0.5~dev2-2.11.1	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	openstack-barbican	3.0.1~dev9-2.12.4	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	openstack-barbican-doc	3.0.1~dev9-2.12.2	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	openstack-cinder +1	9.1.5~dev6-4.28.1	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	openstack-gnocchi	3.0.7~dev1-2.8.2	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	openstack-heat	7.0.7~dev10-5.17.3	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	openstack-heat-doc	7.0.7~dev10-5.17.2	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	openstack-ironic +1	6.2.5~dev3-2.8.2	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	openstack-magnum	3.3.2~dev7-14.14.4	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	openstack-magnum-doc	3.3.2~dev7-14.14.2	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	openstack-manila	3.0.1~dev30-4.17.2	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	openstack-manila-doc	3.0.1~dev30-4.17.1	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	openstack-monasca-agent	1.10.1~dev4-13.3	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	openstack-murano	3.0.1~dev21-7.5.3	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	openstack-murano-doc	3.0.1~dev21-7.5.1	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	openstack-neutron	9.4.2~dev21-7.43.2	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	openstack-neutron-doc	9.4.2~dev21-7.43.1	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	openstack-neutron-vpnaas +1	9.0.1~dev8-5.8.2	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	openstack-nova	14.0.11~dev13-4.45.3	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	openstack-nova-doc	14.0.11~dev13-4.45.2	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	openstack-sahara	5.0.2~dev3-14.3	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	openstack-sahara-doc	5.0.2~dev3-14.1	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	python-Pillow	2.8.1-4.17.2	SUSE-SU-2020:2911-1
SUSE OpenStack Cloud 7	rubygem-crowbar-client	3.9.3-7.23.1	SUSE-SU-2020:2911-1
SUSE HPE Helion OpenStack 8	ansible	2.9.14-3.15.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	ardana-ansible	8.0+git.1596735237.54109b1-3.77.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	ardana-cinder	8.0+git.1596129856.263f430-3.43.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	ardana-glance	8.0+git.1593631779.76fa9b7-3.24.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	ardana-mq	8.0+git.1593618123.678c32b-3.26.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	ardana-nova	8.0+git.1601298847.dd01585-3.42.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	ardana-osconfig	8.0+git.1595885113.93abcbc-3.49.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	documentation-hpe-helion-openstack-user +5	8.20201007-1.29.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	grafana	6.7.4-4.12.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	grafana-natel-discrete-panel	0.0.9-3.3.6	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	openstack-cinder	11.2.3~dev29-3.28.2	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	openstack-cinder-doc	11.2.3~dev29-3.28.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	openstack-monasca-installer	20190923_16.32-3.15.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	openstack-neutron	11.0.9~dev69-3.37.2	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	openstack-neutron-doc	11.0.9~dev69-3.37.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	openstack-nova	16.1.9~dev76-3.39.2	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	openstack-nova-doc	16.1.9~dev76-3.39.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	python-Django	1.11.29-3.19.2	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	python-Flask-Cors	3.0.3-3.3.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	python-Pillow	4.2.1-3.9.2	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	python-ardana-packager	0.0.3-7.7.2	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	python-keystoneclient	3.13.1-3.3.2	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	python-keystonemiddleware	4.17.1-5.3.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	python-kombu	4.1.0-3.7.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	python-urllib3	1.22-5.12.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	release-notes-hpe-helion-openstack	8.20200922-3.23.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	storm	1.2.3-3.6.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	venv-openstack-aodh	5.1.1~dev7-12.28.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	venv-openstack-barbican	5.0.2~dev3-12.29.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	venv-openstack-ceilometer	9.0.8~dev7-12.26.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	venv-openstack-cinder	11.2.3~dev29-14.30.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	venv-openstack-designate	5.0.3~dev7-12.27.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	venv-openstack-freezer	5.0.0.0~xrc2~dev2-10.24.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	venv-openstack-glance	15.0.3~dev3-12.27.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	venv-openstack-heat	9.0.8~dev22-12.29.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	venv-openstack-horizon-hpe	12.0.5~dev3-14.32.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	venv-openstack-ironic	9.1.8~dev8-12.29.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	venv-openstack-keystone	12.0.4~dev11-11.30.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	venv-openstack-magnum	5.0.2_5.0.2_5.0.2~dev31-11.28.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	venv-openstack-manila	5.1.1~dev5-12.33.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	venv-openstack-monasca	2.2.2~dev1-11.24.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	venv-openstack-monasca-ceilometer	1.5.1_1.5.1_1.5.1~dev3-8.24.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	venv-openstack-murano	4.0.2~dev2-12.24.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	venv-openstack-neutron	11.0.9~dev69-13.32.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	venv-openstack-nova	16.1.9~dev76-11.30.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	venv-openstack-octavia	1.0.6~dev3-12.29.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	venv-openstack-sahara	7.0.5~dev4-11.28.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	venv-openstack-swift	2.15.2_2.15.2_2.15.2~dev32-11.21.1	SUSE-SU-2020:3309-1
SUSE HPE Helion OpenStack 8	venv-openstack-trove	8.0.2~dev2-11.28.1	SUSE-SU-2020:3309-1

Affected packages

Ecosystem	Package	Affected	Fixed	Record
PyPI	nova	< 19.3.1	19.3.1	GHSA-c7w7-9c85-4qxv
PyPI	nova	>= 20.0.0, < 20.3.1	20.3.1	GHSA-c7w7-9c85-4qxv
PyPI	nova	21.0.0	—	GHSA-c7w7-9c85-4qxv
PyPI	nova	< 19.3.1 · >= 20.0.0, < 20.3.1 · >= 21.0.0, < 21.1.0	19.3.1, 20.3.1, 21.1.0	PYSEC-2020-243

Advisories 10

RHSA-2020:3708 Red Hat Security Advisory: openstack-nova security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
RHSA-2020:3711 Red Hat Security Advisory: openstack-nova security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
RHSA-2020:3706 Red Hat Security Advisory: openstack-nova security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
RHSA-2020:3702 Red Hat Security Advisory: openstack-nova security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
RHSA-2020:3704 Red Hat Security Advisory: openstack-nova security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
USN-5866-1 nova vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
SUSE-SU-2020:2876-1 Security update for ardana-ansible, ardana-cinder, ardana-cobbler, ardana-installer-ui, ardana-opsconsole-ui, ardana-osconfig, crowbar-core, grafana, grafana-natel-discrete-panel, openstack-cinder, openstack-dashboard, openstack-ironic, openstack-ironic-python-agent, openstack-manila, openstack-neutron, openstack-neutron-infoblox, openstack-nova, python-Flask-Cors, rubygem-crowbar-client, storm, storm-kit, venv-openstack-cinder, venv-openstack-horizon SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2020:2911-1 Security update for ansible, crowbar-core, crowbar-openstack, grafana, grafana-natel-discrete-panel, openstack-aodh, openstack-barbican, openstack-cinder, openstack-gnocchi, openstack-heat, openstack-ironic, openstack-magnum, openstack-manila, openstack-monasca-agent, openstack-murano, openstack-neutron, openstack-neutron-vpnaas, openstack-nova, openstack-sahara, python-Pillow, rubygem-crowbar-client SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2020:3309-1 Security update for ansible, ardana-ansible, ardana-cinder, ardana-glance, ardana-mq, ardana-nova, ardana-osconfig, crowbar-core, crowbar-openstack, documentation-suse-openstack-cloud, grafana, grafana-natel-discrete-panel, openstack-cinder, openstack-monasca-installer, openstack-neutron, openstack-nova, python-Django, python-Flask-Cors, python-Pillow, python-ardana-packager, python-keystoneclient, python-keystonemiddleware, python-kombu, python-straight-plugin, python-urllib3, release-notes-sus SUSE / openSUSE Security Updates · Feb 4, 2026
WID-SEC-2023-0342 Red Hat OpenStack: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Feb 12, 2023

OpenStack Nova Live migration fails to update persistent domain XML

Description

Fixed in Linux distributions

Debian

Ubuntu

Red Hat

SUSE

Affected packages

Advisories 10

References