{
  "affected": [],
  "aliases": [
    "CVE-2017-4965"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-79"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2017-06-13T06:29:00Z",
    "severity": "MODERATE"
  },
  "details": "An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ management UI are vulnerable to XSS attacks.",
  "id": "GHSA-734q-gfvq-r9w2",
  "modified": "2022-05-13T01:03:07Z",
  "published": "2022-05-13T01:03:07Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-4965"
    },
    {
      "type": "WEB",
      "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html"
    },
    {
      "type": "WEB",
      "url": "https://pivotal.io/security/cve-2017-4965"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/98394"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
      "type": "CVSS_V3"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for ansible, crowbar-core, crowbar-ha, crowbar-openstack, etcd, flannel, grafana, keepalived, kibana, memcached, monasca-installer, openstack-dashboard-theme-SUSE, openstack-manila, openstack-neutron-fwaas, openstack-nova, openstack-tempest, python-Django, python-Pillow, python-psql2mysql, python-psutil, python-py, python-pysaml2, python-waitress, rabbitmq-server, release-notes-suse-openstack-cloud, zookeeper",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for ansible, crowbar-core, crowbar-ha, crowbar-openstack, etcd, flannel, grafana, keepalived, kibana, memcached, monasca-installer, openstack-dashboard-theme-SUSE, openstack-manila, openstack-neutron-fwaas, openstack-nova, openstack-tempest, python-Django, python-Pillow, python-psql2mysql, python-psutil, python-py, python-pysaml2, python-waitress, rabbitmq-server, release-notes-suse-openstack-cloud, zookeeper fixes the following issues:\n\nSecurity fixes included ins this update:\n\nansible\n- CVE-2019-3828: Fixed a path traversal in the fetch module (bsc#1126503).\n\ngrafana\n- CVE-2020-13379: Fixed an incorrect access control issue which could\nlead to information leaks or denial of service (bsc#1172409).\n- CVE-2020-12052: Fixed an cross site scripting vulnerability related to\nthe annotation popup (bsc#1170657).\n\nkibana\n- CVE-2020-10743: Fixed a clickjacking vulnerability (bsc#1171909).\n\nmemcached (to version 1.5.17)\n- CVE-2019-15026: Fixed a stack-based buffer over-read\nin conn_to_str()n (bsc#1149110).\n- CVE-2019-11596: Fixed a denial of service in the \u0027lru\u0027 command\n(bsc#1133817)\n- CVE-2018-1000115: Disabled UDP by default to reduce DDoS amplification\nattacks (bsc#1083903).\n\npython-Django\n- CVE-2020-13254: Fixed a data leakage via malformed memcached keys\n(bsc#1172167).\n- CVE-2020-13596: Fixed a cross site scripting vulnerability related to\nthe admin parameters of the ForeignKeyRawIdWidget (bsc#1172166).\n- Fixed a regression with the fix for CVE-2019-3498 (bsc#1161349).\n\npython-Pillow\n- CVE-2019-16865: Fixed a denial of service with specially crafted\nimage files (bsc#1153191).\n- CVE-2020-5312: Fixed a buffer overflow in the PCX P mode (bsc#1160152).\n- CVE-2020-5313: Fixed a buffer overflow related to FLI (bsc#1160153).\n- CVE-2019-19911: Fixed a denial of service in FpxImagePlugin.py\n(bsc#1160192).\n\npython-pysaml2\n- CVE-2020-5390: Fixed an issue with the verification of signatures in\nSAML documents (bsc#1160851)\n- CVE-2017-1000246: Fixed an issue with  weak encryption data, caused by\ninitialization vector reuse(bsc#1068612).\n\npython-waitress (to version 1.4.3)\n- CVE-2019-16785: Fixed HTTP request smuggling through LF vs CRLF\nhandling (bsc#1161088).\n- CVE-2019-16786: Fixed HTTP request smuggling through invalid\nTransfer-Encoding (bsc#1161089).\n- CVE-2019-16789: Fixed HTTP Request Smuggling through invalid\nwhitespace characters (bsc#1160790).\n- CVE-2019-16792: Fixed HTTP Request Smuggling through Content-Length\nheader handling (bsc#1161670).\n\nrubygem-activeresource\n- CVE-2020-8151: Fixed information disclosure issue through specially\ncrafted requests (bsc#1171560)\n\nrubygem-json-1_7\n- CVE-2020-10663: Fixed Unsafe Object Creation Vulnerability in JSON\n(bsc#1167244)\n\nrubygem-puma\n- CVE-2020-11077: Fixed HTTP Request Smuggling through proxy (bsc#1172175)\n- CVE-2020-11076: Fixed HTTP Request smuggling through invalid\nTransfer-Encoding header.\n- CVE-2020-5247: Fixed HTTP Response Splitting through newline characters\nhandling (bsc#1165402)\n\nzookeeper:\n- CVE-2019-0201: Fixed an information disclosure related to\ngetACL() (bsc#1135773).\n\nNon security fixes included in this update:\n\nChanges in ansible:\n- Add 0001-Disallow-use-of-remote-home-directories-containing-..patch\n  (bsc#1126503, CVE-2019-3828)\n\nChanges in crowbar-core:\n- Update to version 4.0+git.1580209654.1d112d31f:\n  * network: start OVS before wickedd (SOC-11067)\n\nChanges in crowbar-ha:\n- Update to version 4.0+git.1585316203.d6ad2c8:\n  * [4.0] add ssl termination on haproxy (bsc#1149535)\n\nChanges in crowbar-openstack:\n- Update to version 4.0+git.1589804581.9972163f0:\n  * [4.0] magnum: fix check for image/flavor (SOC-11251)\n\n- Update to version 4.0+git.1589647351.ccfd9481f:\n  * [4.0] trove: fix rabbitmq connection URL (SOC-11286)\n\n- Update to version 4.0+git.1589458214.9f765aa08:\n  * [4.0] Fix create magnum k8s image and flavor (SOC-11251)\n\n- Update to version 4.0+git.1588271860.131fc8cc1:\n  * run keystone_register on cluster founder only when HA (SOC-11248)\n  * nova: run keystone_register on cluster founder only (SOC-11243)\n\n- Update to version 4.0+git.1588096523.679da5c50:\n  * tempest: retry openstack commands (SOC-11238)\n\n- Update to version 4.0+git.1587129016.c009e43c9:\n  * Disable magnum.tests.functional.api.v1.test_cluster (SOC-11224)\n\n- Update to version 4.0+git.1587035427.abb6e9b4e:\n  * Fix barbican SSL support (SOC-9298)\n\n- Update to version 4.0+git.1586421486.5601320b7:\n  * Fix magnum tempest tests (SOC-9298)\n\n- Update to version 4.0+git.1585331022.609482166:\n  * tempest: update blacklisted tempest test cases (SOC-9801,SOC-11174,SOC-11187)\n\n- Update to version 4.0+git.1585136604.988f3a1da:\n  * Disabling failing tempest tests on SOC7\n  * [4.0] ec2-api: run keystone_register on cluster founder only (SOC-11079)\n\n- Update to version 4.0+git.1582582068.c8c2448c0:\n  * neutron: Place space between CLI arguments\n\n- Update to version 4.0+git.1580894959.1fe5fd282:\n  * Revert \u0027[4.0] rabbitmq: sync startup definitions.json with recipe\u0027 (SOC-11082)\n\n- Update to version 4.0+git.1580469474.967ab8baf:\n  * rabbitmq: sync startup definitions.json with recipe (SOC-11077)\n\nChanges in etcd:\n- Build against go 1.6\n\n- Fix etcd build. We are generating 2 binaries, etcd and etcdctl.\n  They need to be built separately \n\n- Ensure /var/lib/etcd is controlled by etcd:etcd\n\n- exclude i586. We don\u0027t expect this package to be built on i586. \n\n- remove sysconfig.etcd: this file is not being used \n\n- Update to version 3.1.0:\n  * raft: add node should reset the pendingConf state\n  * v3rpc: don\u0027t close watcher if client closes send\n  * e2e: add test for v3 watch over grpc gateway\n  * mvcc: remove unused restore method\n  * integration: don\u0027t expect recv to stop on CloseSend in waitResponse\n  * Documentation: add grpc gateway watch example\n  * version: bump up v3.1.0-rc.1+git\n  * discovery: warn on scheme mismatch\n  * grpcproxy: fix deadlock on watch broadcasts stop\n  * etcdmain: add \u0027/metrics\u0027 HTTP/1 path to grpc-proxy\n  * etcd-tester: do not resolve localhost\n  * raftexample: confState should be saved after apply\n  * raft: test case to check the duplicate add node propose\n  * raft: fix test case, should wait config propose applied\n  * raft: fix test case for data race\n  * raft: use the channel instead of sleep to make test case reliable\n  * raft: fix TestNodeProposeAddDuplicateNode\n  * etcdmain: handle TLS in grpc-proxy listener\n  * etcd-tester:limit max retry backoff delay\n  * functional-tester: add withBlock() to grpc dial\n  * op-guide: add notes about Prometheus data source in Grafana\n  * clientv3: return copy of endpoints, not pointer\n  * auth: add a timeout mechanism to simple token\n  * client: update README about health monitoring\n  * grpcproxy: fix race between watch ranges delete() and broadcasts empty()\n  * lease: Use monotonic time in lease\n  * integration: use Range to wait for reboot in quota tests\n  * grpcproxy: fix race between coalesce and bcast on nextrev\n  * etcd-tester: refactor lease checker\n  * store: check sorted order in TestStoreGetSorted\n  * vendor: bump go-systemd to v14 to avoid build error\n  * integration: cancel Watch when TestV3WatchWithPrevKV exits\n  * grpcproxy: add richer metrics for watch\n  * grpcproxy: add cache related metrics\n  * raft: Fix election \u0027logs converge\u0027 test\n  * raft: Export Progress.IsPaused\n  * benchmark: add rate limit\n  * etcdctl: remove GetUser check before mutable commands\n  * grpcproxy: lock store when getting size\n  * Documentation: link added to libraries-and-tools.md with a new v2 Scala Client\n  * grpcproxy: fix deadlock in watchbroadcast\n  * etcdserver: time out when readStateC is blocking\n  * store: fix store_test.go comments\n  * vendor: update ugorji/go\n  * client: update generated ugorji codec\n  * doc: initial faq\n  * clientv3/integration: test lease keepalive works following quorum loss\n  * integration: use RequireLeader for TestV3LeaseFailover\n  * v3rpc, etcdserver, leasehttp: ctxize Renew with request timeout\n  * Documentation: add blox and chain as users\n  * etcdserver: do not send v2 sync if ttl keys do not exist\n  * ROADMAP: update for 3.2\n  * Documentation: add more FAQ questions\n  * grpcproxy: fix minor typo\n  * vendor: use versions when possible in glide.yaml\n  * scripts: use glide update if repo exists in glide.lock\n  * github: make bug reporting link non-relative\n  * github: make contribution link non-relative\n  * Documentation: update get examples to be clearer about ranges\n  * etcdserver, embed, v2http: move pprof setup to embed\n  * doc: add faq about apply warning logging\n  * test: exclude \u0027_home\u0027 for gosimple, unused\n  * auth: fix gosimple errors\n  * integration: simplify boolean comparison in resp.Created\n  * raft: simplify boolean comparison, remove unused\n  * tools: simplify boolean comparison, remove unused\n  * e2e: remove unused \u0027ctlV3GetFailPerm\u0027\n  * v3rpc: remove unused \u0027splitMethodName\u0027 function\n  * grpcproxy: remove unused field \u0027wbs *watchBroadcasts\u0027\n  * doc: add faq about missing heartbeat\n  * etcdctl: \u0027fields\u0027 output formats\n  * build: remove dir use -r flag\n  * etcd-tester: add \u0027enable-pprof\u0027 option\n  * etcd-tester: cancel lease stream; fix OOM panic\n  * doc: add hardware section\n  * auth: improve \u0027removeSubsetRangePerms\u0027 to O(n)\n  * Documentation: use port 2379 in local cluster guide The port in endpoints should be 2379, instead of 12379.\n  * op-guide/clustering: fix typo\n  * embed: deep copy user handlers\n  * Documentation: add more FAQs (follower, leader, sys-require)\n  * clientv3: close Lease on client Close\n  * netutil: ctx-ize URLStringsEqual\n  * etcdserver: retry for 30s on advertise url check\n  * membership: retry for 30s on advertise url check\n  * clientv3: return error from KeepAlive if corresponding loop exits\n  * clientv3: add test for keep alive loop exit case\n  * auth, etcdserver: protect membership change operations with auth\n  * e2e: test cases of protecting membership change with auth\n  * clientv3: better error message for keep alive loop halt\n  * Documentation: FAQ entry for cluster ID mismatches\n  * dev-guide: add limit.md\n  * Documentation: minor fix nodes -\u003e node\n  * etcdctl: warn when backend takes too long to open on migrate\n  * docs: explicitly set ETCDCTL_API=3 in recovery.md\n  * v3api, rpctypes: add ErrTimeoutDueToConnectionLost\n  * clientv3/integration: test lease grant/keepalive with/without failures\n  * clientv3: don\u0027t reset keepalive stream on grant failure\n  * etcdctl: tighten up output, reorganize README.md\n  * Documentation: add FAQs on membership operation\n  * Documentation: add \u0027why.md\u0027\n  * embed: only override default advertised client URL if the client listen URL is 0.0.0.0\n  * raft: make memory storage set method thread safe\n  * raft: resume paused followers on receipt of MsgHeartbeatResp\n  * etcd-tester: fix typo, add endpoint in logs\n  * lease: force leader to apply its pending committed index for lease operations\n  * leasehttp: buffer error channel to prevent goroutine leak\n  * raft: fix pre-vote tests\n  * etcdserver: rework update committed index logic\n  * etcd-tester: remove unused err var from maxRev\n  * e2e: check etcdctl endpoint health is healthy if denied permission to key\n  * benchmark: a new option for configuring dial timeout\n  * ctlv3: consider permission denied error to be healthy for endpoints\n  * etcdmain: add --metrics flag for exposing histogram metrics\n  * e2e: test cluster-health\n  * v2http: submit QGET in health endpoint if no progress\n  * test: bump grpcproxy pass timeout to 15m\n  * lease: use atomics for accessing lease expiry\n  * e2e: poll \u0027/version\u0027 in release upgrade tests\n  * e2e: unset ETCDCTL_API env var before running u2e tests\n  * etcdserver: consistent naming in raftReadyHandler\n  * coverage: rework code coverage for unit and integration tests\n  * testutil: whitelist thread created by go cover\n  * rafthttp: bump up timeout in pipeline test\n  * grpcproxy, etcdmain, integration: return done channel with WatchServer\n  * integration: defer clus.Terminate in watch tests\n  * raftexample: load snapshot when opening WAL\n  * etcd-runner: make command compliant\n  * raft: use status to test node stop\n  * etcdserver: expose ErrNotEnoughStartedMembers\n  * etcdserver: resume compactor only if leader\n  * benchmark: enable grpc error logging on stderr\n  * etcd-runner:add flags in watcher for hardcoded values\n  * docs: fix recovery example in recovery.md\n  * auth: use quorum get for GetUser/GetRole for mutable operations\n  * grpcproxy: tear down watch when client context is done\n  * integration: use only digits in unix ports\n  * e2e: dump stack on ctlTest timeout\n  * expect: EXPECT_DEBUG environment variable\n  * why: add origin of the term etcd\n  * testutil: increase size of buffer for stack dump\n  * raft: fix test case for #7042\n  * vendor: update ugorji/go\n  * integration: add grpc auth testing\n  * auth: reject empty user name when checking op permissions\n  * etcdctl: create root role on auth enable if it does not yet exist\n  * raft: add RawNode test case for #6866\n  * pkg/report: support 99.9-percentile, change column name\n  * documentation: display docs.md in github browser\n  * benchmark: option to rate limit range benchmark\n  * etcdserver, clientv3: handle a case of expired auth token\n  * tools: Add etcd 3.0 load test tool refernece\n  * transport: warn on user-provided CA\n  * NEWS: add v3.1.0, v3.0.16 + minor fixes\n  * clienv3: fix balancer test logic\n  * clientv3: don\u0027t reset stream on keepaliveonce or revoke failure\n  * grpcproxy: use ccache for key cache\n  * vendor: remove groupcache, add ccache\n  * pkg/report: add \u0027Stats\u0027 to expose report raw data\n  * travis: use Go 1.7.4, drop old env var\n  * ctlv3: print cluster info after adding new member\n  * Documentation: document upgrading to v3.1\n  * pkg/report: add nil checking for getTimeSeries\n  * etcdserver: use ReqTimeout for linearized read\n  * grpcproxy, etcdmain, integration: add close channel to kv proxy\n  * glide: update \u0027golang.org/x/net\u0027\n  * vendor: update \u0027golang.org/x/net\u0027\n  * Documentation: update experimental_apis for v3.1 release\n  * NEWS: fix date for v3.1 release\n  * Documentation: fix typo s/endpoint-health/endpoint health/\n  * clientv3/concurrency: fix rev comparison on concurrent key deletion\n  * integration: test STM apply on concurrent deletion\n  * pkg/flags: fixed prefix checking of the env variables\n  * etcdctlv3: snapshot restore works with lease key\n  * test: passed the test script arguments as the test function parameters\n  * documentation: update build documentation\n  * version: bump to v3.1.0\n\n- Update to version 3.1.0rc.1:\n  * grpcproxy: watch next revision should be start revision when not 0\n  * grpcproxy: copy range request before storing in cache\n  * raft: return empty status if node is stopped\n  * mvcc: store.restore taking too long triggering snapshot cycle fix\n  * mvcc: TestStoreRestore fix\n  * mvcc : Added benchmark for store.resotre\n  * pkg/netutil: get default interface for tc commands\n  * version: bump up v3.1.0-rc.1\n\nChanges in grafana:\n- Add CVE-2020-13379.patch\n  * Security: fix unauthorized avatar proxying (bsc#1172409, CVE-2020-13379)\n- Refresh systemd-notification.patch\n- Fix declaration for LICENSE\n\n- Add 0002-CVE-2020-12052-bsc1170657-XSS-annotation-popup-vulnerability.patch    \n  * Security: Fix annotation popup XSS vulnerability                             \n    (bsc#1170657) \n\n- Add CVE-2019-15043.patch (SOC-10357, CVE-2019-15043, bsc#1148383)\nChanges in keepalived:\n- update to 2.0.19\n- new BR pkgconfig(libnftnl) to fix nftables support\n- add nftables to the BR\n- added patch\n  * linux-4.15.patch\n- add buildrequires for file-devel\n  - used in the checker to verify scripts\n- enable json stats and config dump support\n  new BR: pkgconfig(json-c)\n- enable http regexp support: new BR pcre2-devel\n- disable dbus instance creation support as it is marked as\n  dangerous\n- Add BFD build option to keepalived.spec rpm file\n  Issue #1114 identified that the keepalived.spec file was not being\n  generated to build BFD support even if keepalived had been\n  configured to support it.\n- full changelog\n  https://keepalived.org/changelog.html\n\n- update to 1.4.5:\n  * Update snapcraft.yaml for 1.4.x+git\n  * Fix generation of git-commit.h with git commit number.\n  * Set virtual server address family correctly.\n  * Set virtual server address family correctly when using tunnelled\n    real servers.\n  * Fix handling of virtual servers with no real servers at config time.\n  * Add warning if virtual and real servers are different address families.\n    Although normally the virtual server and real servers must have the\n    same address family, if a real server is tunnelled, the address families\n    can be different. However, the kernel didn\u0027t support that until 3.18,\n    so add a check that the address families are the same if different\n    address families are not supported by the kernel.\n  * Send correct status in Dbus VrrpStatusChange notification.\n    When an instance transitioned from BACKUP to FAULT, the Dbus\n    status change message reported the old status (BACKUP) rather than\n    the new status (FAULT). This commit attempts to resolved that.\n  * doc: ipvs schedulers update\n  * Fix a couple of typos in configure.ac.\n  * Fix namespace collision with musl if_ether.h.\n  * Check if return value from read_value_block() is null before using.\n  * Fix reporting real server stats via SNMP.\n  * Make checker process handle RTM_NEWLINK messages with -a option\n    Even though the checker process doesn\u0027t subscribe to RTNLGRP_LINK\n    messages, it appears that older kernels (certainly 2.6.32) can\n    send RTM_NEWLINK (but not RTM_DELLINK) messages. This occurs\n    when the link is set to up state.\n    Only the VRRP process is interested in link messages, and so the\n    checker process doesn\u0027t do the necessary initialisation to be able\n    to handle RTM_NEWLINK messages.\n    This commit makes the checker process simply discard RTM_NEWLINK\n    and RTM_DELLINK messages, rather than assuming that if it receives\n    an RTM_NEWLINK message it must be the VRRP process.\n    This problem was reported in issue #848 since the checker process\n    was segfaulting when a new interface was added when the -a command\n    line option was specified.\n  * Fix handling RTM_NEWLINK when building without VRRP code.\n  * Fix building on Fedora 28.\n    net-snmp-config output can include compiler and linker flags that\n    refer to spec files that were used to build net-snmp but may not\n    exist on the system building keepalived. That would cause the build\n    done by configure to test for net-snmp support to fail; in particular\n    on a Fedora 28 system that doesn\u0027t have the redhat-rpm-config package\n    installed.\n    This commit checks that any spec files in the compiler and linker\n    flags returned by net-snmp-config exist on the system building\n    keepalived, and if not it removes the reference(s) to the spec file(s).\n  * keepalived-1.4.3 released.\n  * vrrp: setting \u00270\u0027 as default value for ifa_flags to make gcc happy.\n  * Add additional libraries when testing for presence of SSL_CTX_new().\n    It appears that some systems need -lcrypto when linking with -lssl.\n  * Sanitise checking of libnl3 in configure.ac.\n  * Report and handle missing \u0027}\u0027s in config files.\n  * Add missing \u0027\\n\u0027 in keepalived.data output.\n  * Stop backup taking over as master while master reloads.\n    If a reload was initiated just before an advert, and since it took\n    one advert interval after a reload before an advert was sent, if the\n    reload itself took more than one advert interval, the backup could\n    time out and take over as master.\n    This commit makes keepalived send adverts for all instances that are\n    master immediately before a reload, and also sends adverts immediately\n    after a reload, thereby trippling the time available for the reload\n    to complete.\n  * Add route option fastopen_no_cookie and rule option l3mdev.\n  * Fix errors in KEEPALIVED-MIB.txt.\n  * Simplify setting on IN6_ADDR_GEN_MODE.\n  * Cosmetic changes to keepalived(8) man page.\n  * Don\u0027t set ipvs sync daemon to master state before becoming master\n    If a vrrp instance which was the one specified for the ipvs sync\n    daemon was configured with initial state master, the sync daemon\n    was being set to master mode before the vrrp instance transitioned\n    to master mode. This caused an error message when the vrrp instance\n    transitioned to master and attempted to make the sync daemon go from\n    backup to master mode.\n    This commit stops setting the sync daemon to master mode at initialisation\n    time, and it is set to master mode when the vrrp instance transitions\n    to master.\n  * Fix freeing vector which has not had any entries allocated.\n  * Add additional mem-check disgnostics\n    vector_alloc, vectot_alloc_slot, vector_free and alloc_strvec all\n    call MALLOC/FREE but the functions written in the mem_check log\n    are vector_alloc etc, not the functions that call them.\n    This commit adds logging of the originating calling function.\n  * Fix memory leak in parser.c.\n  * Improve alignment of new mem-check logging.\n  * Disable all checkers on a virtual server when ha_suspend set.\n    Only the first checker was being disabled; this commit now disables\n    all of them.\n    Also, make the decision to disable a checker when starting/reloading\n    when scheduling the checker, so that the existance of the required\n    address can be checked.\n  * Stop genhash segfaulting when built with --enable-mem-check.\n  * Fix memory allocation problems in genhash.\n  * Properly fix memory allocation problems in genhash.\n  * Fix persistence_granularity IPv4 netmask validation.\n    The logic test from inet_aton() appears to be inverted.\n  * Fix segfault when checker configuration is missing expected parameter\n    Issue #806 mentioned as an aside that \u0027nb_get_retry\u0027 without a parameter\n    was sigfaulting. Commit be7ae80 - \u0027Stop segfaulting when configuration\n    keyword is missing its parameter\u0027 missed the \u0027hidden\u0027 uses of vector_slot()\n    (i.e. those used via definitions in header files).\n    This commit now updates those uses of vector_slot() to use strvec_slot()\n    instead.\n  * Fix compiling on Linux 2.x kernels.\n    There were missing checks for HAVE_DECL_CLONE_NEWNET causing\n    references to an undeclared variable if CLONE_NEWNET wasn\u0027t defined.\n  * Improve parsing of kernel release.\n    The kernel EXTRAVERSION can start with any character (although\n    starting with a digit would be daft), so relax the check for it\n    starting with a \u0027-\u0027. Kernels using both \u0027+\u0027 and \u0027.\u0027 being the\n    first character of EXTRAVERSION have been reported.\n  * Improve grammer.\n  * add support for SNI in SSL_GET check.\n    this adds a `enable_sni` parameter to SSL_GET, making sure the check\n    passes the virtualhost in the SNI extension during SSL handshake.\n  * Optimise setting host name for SSL_GET requests with SNI.\n  * Allow SNI to be used with SSL_GET with OpenSSL v1.0.0 and LibreSSL.\n  * Use configure to check for SSL_set_tlsext_host_name()\n    Rather than checking for a specific version of the OpenSSL library\n    (and it would also need checking the version of the LibreSSL library)\n    let configure check for the presence of SSL_set_tlsext_host_name().\n    Also omit all code related to SNI of SSL_set_tlsext_host_name() is\n    not available.\n  * Use configure to determine available OpenSSL functionality\n    Rather than using version numbers of the OpenSSL library to determine\n    what functions are available, let configure determine whether the\n    functions are supported.\n    The also means that the same tests work for LibreSSL.\n  * Add support for gratuitous ARPs for IP over Infiniband.\n  * Use system header definition instead of local definition IF_HWADDR_MAX\n    linux/netdevice.h has definition MAX_ADDR_LEN, which is 32, whereas\n    IF_HWADDR_MAX was locally defined to be 20.\n    Unfortunately we end up with more system header file juggling to ensure\n    we don\u0027t have duplicate definitions.\n  * Fix vrrp_script and check_misc scripts of type \u003c/dev/tcp/127.0.0.1/80.\n  * Add the first pre-defined config definition (${_PWD})\n    ${_PWD} in a configuration file will be replaced with the full\n    path name of the directory that keepalived is reading the current\n    configuration file from.\n  * Open and run the notify fifo and script if no other fifo\n    Due to the way the code was structured the notify_fifo for both\n    checker and vrrp messages wasn\u0027t run if neither the vrrp or checker\n    fifo wasn\u0027t configured.\n    Also, if all three fifos were configured, the general fifo script\n    was executed by both the vrrp and checker process, causing problems.\n  * Add support for Infiniband interfaces when dumping configuration.\n  * Tidy up layout in vrrp_arp.c.\n  * Add configure check for support of position independant executables (PIE).\n  * Add check for -pie support, and fix writing to keepalived.data.\n  * keepalived-1.4.2 released.\n  * Make genhash exit with exit code 1 on error.\n    Issue #766 identified that genhash always exits with exit code 1\n    even if an error has occurred.\n  * Rationalise printing of http header in genhash.\n  * Use http header Content-Length field in HTTP_CHECK/SSL_CHECK.\n    If a Content-Length is supplied in the http header, use that as a\n    limit to the data length (as wget does). If the length of data\n    received does not match the Content-Length log a warning.\n  * Optimise parameter passing to fprintf in genhash.\n  * Don\u0027t declare mark variable if don\u0027t have MARK socket option.\n  * Fix sync groups with only one member.\n    Commit c88744a0 allowed sync groups with only 1 member again, but\n    didn\u0027t stop removing the sync group if there was only 1 member.\n    This commit now doesn\u0027t remove sync groups with only one member.\n  * Make track scripts work with --enable-debug config option.\n  * Add warning if --enable-debug configure option is used.\n  * Allow more flexibility of layout of { and } in config files.\n    keepalived was a bit fussy about where \u0027{\u0027s and \u0027}\u0027s (braces) could\n    be placed in terms of after the keyword, or on a line on their own.\n    It certainly was not possible to have multiple braces on one line.\n    This commit now provides complete flexibility of where braces are, so\n    long as they occur in the correct order.\n  * Make alloc_value_block() report block type if there is an error.\n  * Simplify alloc_value_block() by using libc string functions.\n  * Add dumping of garp delay config when using -d option.\n  * Fix fractions of seconds for garp group garp_interval.\n  * Make read_value_block() use alloc_value_block().\n    This removes quite a bit of duplication of functionality, and\n    ensures the configuration parsing will be more consistent.\n  * Fix build with Linux kernel headers v4.15.\n    Linux kernel version 4.15 changed the libc/kernel headers suppression\n    logic in a way that introduces collisions.\n  * Add missing command line options to keepalived(8) man page.\n  * Fix --dont-release-vrrp.\n    On github, ushuz reported that commit 62e8455 - \u0027Don\u0027t delete vmac\n    interfaces before dropping multicast membership\u0027 broke --dont-release-vrrp.\n    This commit restores the correct functionality.\n  * Define _GNU_SOURCE for all compilation units.\n    Rather than defining _GNU_SOURCE when needed, let configure add\n    it to the flags passed to the C compiler, so that it is defined\n    for all compilation units. This ensures consistence.\n  * Fix new warnings procuded by gcc 8.\n  * Fix dumping empty lists.\n    Add a check in dump_list() for an empty list, and don\u0027t attempt\n    to dump it if it is empty.\n  * Resolve conversion-check compiler warnings.\n  * Add missing content to installing_keepalived.rst documentation.\n    Issue #778 identified that there was text missing at the end of\n    the document, and that is now added.\n  * Fix systemd service to start after network-online.target.\n    This fix was merged downstream by RedHat in response to\n    RHBZ #1413320.\n  * Update INSTALL file to describe packages needed for building\n    documentation.\n  * INSTALL: note linux distro package that provides \u0027sphinx_rtd_theme\u0027\n  * Clear /proc/sys/net/ipv6/conf/IF/disable_ipv6 when create VMACs.\n    An issue was identified where keepalived was reporting permission\n    denied when attempting to add an IPv6 address to a VMAC interface.\n    It turned out that this was because\n    /proc/sys/net/ipv6/conf/default/disable_ipv6\n    was set to 1, causing IPv6 to be disables on all interfaces that\n    keepalived created.\n    This commit clears disable_ipv6 on any VMAC interfaces that\n    keepalived creates if the vrrp instance is using IPv6.\n- remove linux-4.15.patch: does not apply anymore and not needed\n  (the distros using 4.15 have moved on to keepalived 2.x)\n\n- Only Require insserv on distributions without systemd.\n- Fix systemd related requires/buildRequires\n- Do not run scriptlets that use insserv when using systemd\n\n- add linux-4.15.patch\n\nChanges in kibana:\n- Add 0001-Configurable-custom-response-headers-for-server.patch\n  (bsc#1171909, CVE-2020-10743)\n\nChanges in memcached:\n- version update to 1.5.17\n  * bugfixes\n    fix strncpy call in stats conns to avoid ASAN violation (bsc#1149110, CVE-2019-15026)\n    extstore: fix indentation\n    add error handling when calling dup function\n    add unlock when item_cachedump malloc failed\n    extstore: emulate pread(v) for macOS\n    fix off-by-one in logger to allow CAS commands to be logged.\n    use strdup for explicitly configured slab sizes\n    move mem_requested from slabs.c to items.c (internal cleanup)\n  * new features\n    add server address to the \u0027stats conns\u0027 output\n    log client connection id with fetchers and mutations\n    Add a handler for seccomp crashes\n- version update to 1.5.16\n  * bugfixes\n    When nsuffix is 0 space for flags hasn\u0027t been allocated so don\u0027t memcpy them.\n- version update to 1.5.15\n  * bugfixes\n    Speed up incr/decr by replacing snprintf.\n    Use correct buffer size for internal URI encoding.\n    change some links from http to https\n    Fix small memory leak in testapp.c.\n    free window_global in slab_automove_extstore.c\n    remove inline_ascii_response option\n    -Y [filename] for ascii authentication mode\n    fix: idle-timeout wasn\u0027t compatible with binprot\n  * features\n    -Y [authfile] enables an authentication mode for ASCII protocol.\n- modified patches\n  % memcached-autofoo.patch (refreshed)\n\n- version update to 1.5.14\n  * update -h output for -I (max item size)\n  * fix segfault in \u0027lru\u0027 command (bsc#1133817, CVE-2019-11596)\n  * fix compile error on centos7\n  * extstore: error adjusting page_size after ext_path\n  * extstore: fix segfault if page_count is too high.\n  * close delete + incr item survival race bug\n  * memcached-tool dump fix loss of exp value\n  * Fix \u0027qw\u0027 in \u0027MemcachedTest.pm\u0027 so wait_ext_flush is exported properly\n  * Experimental TLS support.\n  * Basic implementation of TLS for memcached.\n  * Improve Get And Touch documentation\n  * fix INCR/DECR refcount leak for invalid items\n- modified patches\n  % memcached-autofoo.patch (refreshed)\n\n- Version bump to 1.5.11:\n  * extstore: balance IO thread queues\n- Drop memcached-fix_test.patch that is present now upstream\n\n- Add patch to fix aarch64, ppc64* and s390x tests:\n  * memcached-fix_test.patch\n\n- Fix linter errors regarding COPYING\n\n- update to 1.5.10:\n  * disruptive change in extstore: -o ext_page_count= is deprecated\n    and no longer works. To specify size: -o ext_path=/d/m/e:500G\n    extstore figures out the page count based on your desired page\n    size. M|G|T|P supported.\n  * extstore: Add basic JBOD support: ext_path can be specified\n    multiple times for striping onto simimar devices\n  * fix alignment issues on some ARM platforms for chunked items\n\n- Update to 1.5.9:\n  * Bugfix release.\n  * Important note: if using --enable-seccomp, privilege dropping\n    is no longer on by default. The feature is experimental and many\n    users are reporting hard to diagnose problems on varied platforms.\n  * Seccomp is now marked EXPERIMENTAL, and must be explicitly\n    enabled by adding -o drop_privileges. Once we\u0027re more confident\n    with the usability of the feature, it will be enabled in -o modern,\n    like any other new change. You should only use it if you are\n    willing to carefully test it, especially if you\u0027re a vendor or\n    distribution.\n  * Also important is a crash fix in extstore when using the ASCII\n    protocol, large items, and running low on memory.\n\n- update to 1.5.8:\n  * Bugfixes for seccomp and extstore\n  * Extstore platform portability has been greatly improved for ARM\n    and 32bit systems\n- includes changes from 1.5.7:\n  * Fix alignment issues for 64bit ARM processors\n  * Fix seccomp portability\n  * Fix refcount leak with extstore while using binary touch commands\n\n- turn on the testsuite again, it seems to pass server side,\n  too\n\n- Home directory shouldn\u0027t be world readable bsc#1077718\n- Mention that this stream isn\u0027t affected by bsc#1085209, \n  CVE-2018-1000127 to make the checker bots happy.\n\n- update to 1.5.6 (bsc#1083903, CVE-2018-1000115):\n  * This update disables UDP by default to reduce DDoS amplification\n  attacks\n  * see https://github.com/memcached/memcached/wiki/ReleaseNotes156\n  * see https://github.com/memcached/memcached/wiki/ReleaseNotes155\n  * see https://github.com/memcached/memcached/wiki/ReleaseNotes154\n  * see https://github.com/memcached/memcached/wiki/ReleaseNotes153\n  * see https://github.com/memcached/memcached/wiki/ReleaseNotes152\n  * see https://github.com/memcached/memcached/wiki/ReleaseNotes151\n  * see https://github.com/memcached/memcached/wiki/ReleaseNotes150\n\n- Replace references to /var/adm/fillup-templates with new \n  %_fillupdir macro (boo#1069468)\n\nChanges in monasca-installer:\n- Add 0001-kibana:-set-x-frame-options-header.patch (bsc#1171909,\n  CVE-2020-10743)\n\nChanges in openstack-dashboard-theme-SUSE:\n- Switch github URL from git@ to git:// to bypass authentication\n\nChanges in openstack-manila:\n- Add 0001-Fix-exportfs-u-usage-in-generic-driver.patch\n  Backported from upstream patch https://review.opendev.org/#/c/411631/\n  Related Bug (SOC-9801)\n\nChanges in openstack-neutron-fwaas:\n- Add 0050-Remove-tempest-shared-physical-network.patch (SOC-9801)\n  This tempest configuration option is not present in tempest, as\n  it was only added after the SOC7 release cut.\n\nChanges in openstack-nova:\n- Add 0001-live-mig-keep-disk-device-address-same.patch (bsc#1164316)\n  - Fix for https://bugs.launchpad.net/nova/+bug/1715569\n\nChanges in openstack-tempest:\n\n- Add 0001-Use-available-scheduler-filters.patch\n  Backported from upstream patch https://review.opendev.org/#/c/570207/\n  Related Bugs: SOC-9801,SOC-11174\n\n- Add 0001-Remove-volume_feature_enabled.volume_services.patch\n  Backported from upstream patch https://review.opendev.org/#/c/438220/\n  Related Bug (SOC-9801)\n\n\nChanges in python-cffi:\n- Do not build python3 subpackages as C:OS:Newton does not support\n  it\n\n- provide also python-cffi = 1.10.0 and 1.5.2 to avoid breaking the\n  cloud 7 and 8 requirements (bsc#948198)\n\n- Update in SLE-12 (bsc#1138748, jsc#ECO-1256, jsc#PM-1598)\n\n- Add dont-corrupt-memory.patch to fix boo#1111657 (originally\n  from https://bitbucket.org/cffi/cffi/commits/7a76a3815340)\n\n- build python3 subpackage (FATE#324435, FATE#323875)\n\n- Add patch cffi-loader.patch to fix bsc#1070737\n- Sort out with spec-cleaner\n\n- update to version 1.11.2:\n  * Fix Windows issue with managing the thread-state on CPython 3.0 to\n    3.5\n\n- Update pytest in spec to add c directory tests in addition to \n  testing directory.\n- Omit test_init_once_multithread tests as they rely on multiple\n  threads finishing in a given time. Returns sporadic pass/fail\n  within build.\n- Update to 1.11.1:\n  * Fix tests, remove deprecated C API usage\n  * Fix (hack) for 3.6.0/3.6.1/3.6.2 giving incompatible binary\n    extensions (cpython issue #29943)\n  * Fix for 3.7.0a1+\n\n- Update to 1.11.0:\n  * Support the modern standard types char16_t and char32_t. These\n    work like wchar_t: they represent one unicode character, or when\n    used as charN_t * or charN_t[] they represent a unicode string.\n    The difference with wchar_t is that they have a known, fixed\n    size. They should work at all places that used to work with\n    wchar_t (please report an issue if I missed something). Note\n    that with set_source(), you need to make sure that these types\n    are actually defined by the C source you provide (if used in\n    cdef()).\n  * Support the C99 types float _Complex and double _Complex. Note\n    that libffi doesn\u2019t support them, which means that in the ABI\n    mode you still cannot call C functions that take complex\n    numbers directly as arguments or return type.\n  * Fixed a rare race condition when creating multiple FFI instances\n    from multiple threads. (Note that you aren\u2019t meant to create\n    many FFI instances: in inline mode, you should write\n    ffi = cffi.FFI() at module level just after import cffi; and in\n    out-of-line mode you don\u2019t instantiate FFI explicitly at all.)\n  * Windows: using callbacks can be messy because the CFFI internal\n    error messages show up to stderr\u2014but stderr goes nowhere in many\n    applications. This makes it particularly hard to get started\n    with the embedding mode. (Once you get started, you can at least\n    use @ffi.def_extern(onerror=...) and send the error logs where\n    it makes sense for your application, or record them in log\n    files, and so on.) So what is new in CFFI is that now, on\n    Windows CFFI will try to open a non-modal MessageBox (in addition\n    to sending raw messages to stderr). The MessageBox is only\n    visible if the process stays alive: typically, console\n    applications that crash close immediately, but that is also the\n    situation where stderr should be visible anyway.\n  * Progress on support for callbacks in NetBSD.\n  * Functions returning booleans would in some case still return 0\n    or 1 instead of False or True. Fixed.\n  * ffi.gc() now takes an optional third parameter, which gives an\n    estimate of the size (in bytes) of the object. So far, this is\n    only used by PyPy, to make the next GC occur more quickly\n    (issue #320). In the future, this might have an effect on\n    CPython too (provided the CPython issue 31105 is addressed).\n  * Add a note to the documentation: the ABI mode gives function\n    objects that are slower to call than the API mode does. For\n    some reason it is often thought to be faster. It is not!\n- Update to 1.10.1:\n  * Fixed the line numbers reported in case of cdef() errors. Also,\n    I just noticed, but pycparser always supported the preprocessor\n    directive # 42 \u0027foo.h\u0027 to mean \u201cfrom the next line, we\u2019re in\n    file foo.h starting from line 42\u201d, which it puts in the error\n    messages. \n\n- update to 1.10.0:\n * Issue #295: use calloc() directly instead of PyObject_Malloc()+memset()\n   to handle ffi.new() with a default allocator. Speeds up ffi.new(large-array)\n   where most of the time you never touch most of the array.\n  * Some OS/X build fixes (\u201conly with Xcode but without CLT\u201d).\n  * Improve a couple of error messages: when getting mismatched versions of\n    cffi and its backend; and when calling functions which cannot be called with\n    libffi because an argument is a struct that is \u201ctoo complicated\u201d (and not\n    a struct pointer, which always works).\n  * Add support for some unusual compilers (non-msvc, non-gcc, non-icc, non-clang)\n  * Implemented the remaining cases for ffi.from_buffer. Now all\n    buffer/memoryview objects can be passed. The one remaining check is against\n    passing unicode strings in Python 2. (They support the buffer interface, but\n    that gives the raw bytes behind the UTF16/UCS4 storage, which is most of the\n    times not what you expect. In Python 3 this has been fixed and the unicode\n    strings don\u2019t support the memoryview interface any more.)\n  * The C type _Bool or bool now converts to a Python boolean when reading,\n    instead of the content of the byte as an integer. The potential\n    incompatibility here is what occurs if the byte contains a value different\n    from 0 and 1. Previously, it would just return it; with this change, CFFI\n    raises an exception in this case. But this case means \u201cundefined behavior\u201d\n    in C; if you really have to interface with a library relying on this,\n    don\u2019t use bool in the CFFI side. Also, it is still valid to use a byte\n    string as initializer for a bool[], but now it must only contain \\x00 or\n    \\x01. As an aside, ffi.string() no longer works on bool[] (but it never made\n    much sense, as this function stops at the first zero).\n  * ffi.buffer is now the name of cffi\u2019s buffer type, and ffi.buffer() works\n    like before but is the constructor of that type.\n  * ffi.addressof(lib, \u0027name\u0027) now works also in in-line mode, not only in\n    out-of-line mode. This is useful for taking the address of global variables.\n  * Issue #255: cdata objects of a primitive type (integers, floats, char) are\n    now compared and ordered by value. For example, \u003ccdata \u0027int\u0027 42\u003e compares\n    equal to 42 and \u003ccdata \u0027char\u0027 b\u0027A\u0027\u003e compares equal to b\u0027A\u0027. Unlike C,\n    \u003ccdata \u0027int\u0027 -1\u003e does not compare equal to ffi.cast(\u0027unsigned int\u0027, -1): it\n    compares smaller, because -1 \u003c 4294967295.\n  * PyPy: ffi.new() and ffi.new_allocator()() did not record \u201cmemory pressure\u201d,\n    causing the GC to run too infrequently if you call ffi.new() very often\n    and/or with large arrays. Fixed in PyPy 5.7.\n  * Support in ffi.cdef() for numeric expressions with + or -. Assumes that\n    there is no overflow; it should be fixed first before we add more general\n    support for arbitrary arithmetic on constants.\n\n- do not generate HTML documentation for packages that are indirect\n  dependencies of Sphinx\n  (see docs at https://cffi.readthedocs.org/ )\n\n- update to 1.9.1\n  - Structs with variable-sized arrays as their last field: now we track the\n    length of the array after ffi.new() is called, just like we always tracked\n    the length of ffi.new(\u0027int[]\u0027, 42). This lets us detect out-of-range\n    accesses to array items. This also lets us display a better repr(), and\n    have the total size returned by ffi.sizeof() and ffi.buffer(). Previously\n    both functions would return a result based on the size of the declared\n    structure type, with an assumed empty array. (Thanks andrew for starting\n    this refactoring.)\n  - Add support in cdef()/set_source() for unspecified-length arrays in\n    typedefs: typedef int foo_t[...];. It was already supported for global\n    variables or structure fields.\n  - I turned in v1.8 a warning from cffi/model.py into an error: \u0027enum xxx\u0027 has\n    no values explicitly defined: refusing to guess which integer type it is\n    meant to be (unsigned/signed, int/long). Now I\u2019m turning it back to a\n    warning again; it seems that guessing that the enum has size int is a\n    99%-safe bet. (But not 100%, so it stays as a warning.)\n  - Fix leaks in the code handling FILE * arguments. In CPython 3 there is a\n    remaining issue that is hard to fix: if you pass a Python file object to a\n    FILE * argument, then os.dup() is used and the new file descriptor is only\n    closed when the GC reclaims the Python file object\u2014and not at the earlier\n    time when you call close(), which only closes the original file descriptor.\n    If this is an issue, you should avoid this automatic convertion of Python\n    file objects: instead, explicitly manipulate file descriptors and call\n    fdopen() from C (...via cffi).\n  - When passing a void * argument to a function with a different pointer type,\n    or vice-versa, the cast occurs automatically, like in C. The same occurs\n    for initialization with ffi.new() and a few other places. However, I\n    thought that char * had the same property\u2014but I was mistaken. In C you get\n    the usual warning if you try to give a char * to a char ** argument, for\n    example. Sorry about the confusion. This has been fixed in CFFI by giving\n    for now a warning, too. It will turn into an error in a future version.\n  - Issue #283: fixed ffi.new() on structures/unions with nested anonymous\n    structures/unions, when there is at least one union in the mix. When\n    initialized with a list or a dict, it should now behave more closely like\n    the { } syntax does in GCC.\n  - CPython 3.x: experimental: the generated C extension modules now use the\n    \u201climited API\u201d, which means that, as a compiled .so/.dll, it should work\n    directly on any version of CPython \u003e= 3.2. The name produced by distutils\n    is still version-specific. To get the version-independent name, you can\n    rename it manually to NAME.abi3.so, or use the very recent setuptools 26.\n  - Added ffi.compile(debug=...), similar to python setup.py build --debug but\n    defaulting to True if we are running a debugging version of Python itself.\n  - Removed the restriction that ffi.from_buffer() cannot be used on byte\n    strings. Now you can get a char * out of a byte string, which is valid as\n    long as the string object is kept alive. (But don\u2019t use it to modify the\n    string object! If you need this, use bytearray or other official\n    techniques.)\n  - PyPy 5.4 can now pass a byte string directly to a char * argument (in older\n    versions, a copy would be made). This used to be a CPython-only\n    optimization.\n  - ffi.gc(p, None) removes the destructor on an object previously created by\n    another call to ffi.gc()\n  - bool(ffi.cast(\u0027primitive type\u0027, x)) now returns False if the value is zero\n    (including -0.0), and True otherwise. Previously this would only return\n    False for cdata objects of a pointer type when the pointer is NULL.\n  - bytearrays: ffi.from_buffer(bytearray-object) is now supported. (The reason\n    it was not supported was that it was hard to do in PyPy, but it works since\n    PyPy 5.3.) To call a C function with a char * argument from a buffer\n    object\u2014now including bytearrays\u2014you write lib.foo(ffi.from_buffer(x)).\n    Additionally, this is now supported: p[0:length] = bytearray-object. The\n    problem with this was that a iterating over bytearrays gives numbers\n    instead of characters. (Now it is implemented with just a memcpy, of\n    course, not actually iterating over the characters.)\n  - C++: compiling the generated C code with C++ was supposed to work, but\n    failed if you make use the bool type (because that is rendered as the C\n    _Bool type, which doesn\u2019t exist in C++).\n  - help(lib) and help(lib.myfunc) now give useful information, as well as\n    dir(p) where p is a struct or pointer-to-struct.\n- drop upstreamed python-cffi-avoid-bitshifting-negative-int.patch\n\n- update for multipython build\n\n- Add python-cffi-avoid-bitshifting-negative-int.patch to actually\n  fix the \u0027negative left shift\u0027 warning by replacing bitshifting\n  in appropriate places by bitwise and comparison to self; patch\n  taken from upstream git. Drop cffi-1.5.2-wnoerror.patch: no\n  longer required.\n\n- disable \u0027negative left shift\u0027 warning in test suite to prevent\n  failures with gcc6, until upstream fixes the undefined code\n  in question (boo#981848, cffi-1.5.2-wnoerror.patch)\n\n- Update to version 1.6.0:\n  * ffi.list_types()\n  * ffi.unpack()\n  * extern \u201cPython+C\u201d\n  * in API mode, lib.foo.__doc__ contains the C signature now.\n  * Yet another attempt at robustness of ffi.def_extern() against\n    CPython\u2019s interpreter shutdown logic.\n\nChanges in python-pylons-sphinx-themes:\n\n- moved LICENSE.txt to docs to match old structure\n\n- specfile:\n  * update copyright year\n- update to version 1.0.11:\n  * Fix the width of linenos table column when used in code-blocks.\n\n- Replace %fdupes -s with plain %fdupes; hardlinks are better.\n\n- Update to version 1.0.10 (2018-09-25)\n  + Add Read the Docs to the recipients of ad revenue.\n- Update to version 1.0.9 (2018-09-23)\n  + Remove hyphenation because it sometimes hyphenates\n    inappropriately, such as in code.\n- Update to version 1.0.8 (2018-09-21)\n  + Fix support for Ethical Ads.\n- Update to version 1.0.7 (2018-09-21)\n  + Added support for Ethical Ads for Read The Docs.\n    See https://github.com/Pylons/pylons-sphinx-themes/pull/12\n\n- Remove superfluous devel dependency for noarch package\n\n- Update to version 1.0.6\n  * Update zest.releaser in order to release to PyPI.\n- Update to version 1.0.5\n  * Clean up licensing\n    https://github.com/Pylons/pylons-sphinx-themes/issues/8\n\n- Provide/obsolete old pylons_sphinx_theme\n\n- Update to version 1.0.4\n  * Specify line spacing for list items for only within the\n    .body class.\n  version 1.0.3\n  * Add line spacing for list items. Closes #4.\n  version 1.0.2:\n  * Remove HTTPS protocol to allow either HTTPS or HTTP.\n  version 1.0.1:\n  * Use HTTPS for protocol of stylesheets.\n  version 1.0:\n  * Use zest.releaser for releasing.\n  * Improve documentation.\n- Converted to single-spec\n\n- version 0.3.1: initial build\n\nChanges in python-Django:\n- Fix merge artifact in CVE-2020-13596.patch\n\n- Add CVE-2019-19844.patch (bsc#1159447, CVE-2019-19844)\n  * Fix Potential account hijack via password reset form\n\n- Security fixes (bsc#1172167, bsc#1172166, CVE-2020-13254,  CVE-2020-13596)\n  * Added patch CVE-2020-13254.patch\n  * Added patch CVE-2020-13596.patch\n\n- Set _defaultlicensedir \n\n- Fix for SG#56542, bsc#1161349:\n  * Fixed CVE-2019-3498-Fixed-content-spoof.patch\n\n- Fix for SG#56542, bsc#1161349:\n  * Fixed CVE-2019-3498-Fixed-content-spoof.patch\n  (There was a bug in this .patch file; some code had been\n  accidentally included in the backport, and this stopped the 404\n  page from loading. See commit message and bug report for more\n  information)\n\nChanges in python-Pillow:\n- Remove decompression_bomb.gif and relevant test case to avoid\n  ClamAV scan alerts during build\n\n- Add 0008-Corrected-negative-seeks.patch\n   * From upstream, backported\n   * Fixes part of CVE-2019-16865, bsc#1153191\n- Add 0009-Make-Image.crop-an-immediate-operation.patch\n   * From upstream, backported\n   * Fixes https://github.com/python-pillow/Pillow/issues/1077\n   * Used by 0012-Added-decompression-bomb-checks.patch\n- Add 0010-Crop-decompression.patch\n   * From upstream, backported\n   * Fixes https://github.com/python-pillow/Pillow/issues/2402\n   * Used by 0012-Added-decompression-bomb-checks.patch\n- Add 0011-Added-DecompressionBombError.patch\n   * From upstream, backported\n   * Adds DecompressionBombError class\n   * Used by 0012-Added-decompression-bomb-checks.patch\n- Add 0012-Added-decompression-bomb-checks.patch\n   * From upstream, backported\n   * Fixes part of CVE-2019-16865, bsc#1153191\n- Add 0013-Raise-error-if-dimension-is-a-string.patch\n   * From upstream, backported\n   * Fixes part of CVE-2019-16865, bsc#1153191\n- Add 0014-Catch-buffer-overruns.patch\n   * From upstream, backported\n   * Fixes part of CVE-2019-16865, bsc#1153191\n- Add 0015-Catch-PCX-P-mode-buffer-overrun.patch\n   * From upstream, backported\n   * Fixes CVE-2020-5312, bsc#1160152\n- Add 0016-Ensure-previous-FLI-frame-is-loaded.patch\n   * From upstream, backported\n   * Fixes https://github.com/python-pillow/Pillow/issues/2649\n   * Uncovers CVE-2020-5313, bsc#1160153\n- Add 0017-Catch-FLI-buffer-overrun.patch\n   * From upstream, backported\n   * Fixes CVE-2020-5313, bsc#1160153\n- Add 018-Invalid-number-of-bands-in-FPX-image.patch\n   * From upstream, backported\n   * Fixes CVE-2019-19911, bsc#1160192\n\nChanges in python-psql2mysql:\n- Update to version 0.5.0+git.1589351878.4ef877c:\n  * Do not fail on instance_info length, it is expected to be LONGTEXT\n\n- Update to version 0.5.0+git.1582192453.98e9561:\n  * Neutron drivers use own naming for alembic migrations, e.g. cisco_alembic_version, aci_alembic_version, etc depending on driver.\n\nChanges in python-psutil:\n- Add bsc1156525-CVE-2019-18874.patch (bsc#1156525, CVE-2019-18874)\n\nChanges in python-py:\n- update to version 1.5.2\n-----------------------------------------------------------------\n- update to version 1.4.33\n\nChanges in python-py:\n- update to version 1.5.2:\n  * fix #169, #170: error importing py.log on Windows: no module named\n    \u0027syslog\u0027.\n- changes from version 1.5.1:\n  * fix #167 - prevent pip from installing py in unsupported Python\n    versions.\n- changes from version 1.5.0:\n  * python 2.6 and 3.3 are no longer supported\n  * deprecate py.std and remove all internal uses\n  * fix #73 turn py.error into an actual module\n  * path join to / no longer produces leading double slashes\n  * fix #82 - remove unsupportable aliases\n  * fix python37 compatibility of path.sysfind on windows by correctly\n    replacing vars\n  * turn iniconfig and apipkg into vendored packages and ease\n    de-vendoring for distributions\n  * fix #68 remove invalid py.test.ensuretemp references\n  * fix #25 - deprecate path.listdir(sort=callable)\n  * add TerminalWriter.chars_on_current_line read-only property that\n    tracks how many characters have been written to the current line.\n- changes from version 1.4.34\n  * fix issue119 / pytest issue708 where tmpdir may fail to make\n    numbered directories when the filesystem is case-insensitive.\n\n- update to version 1.4.33:\n  * avoid imports in calls to py.path.local().fnmatch(). Thanks\n    Andreas Pelme for the PR.\n  * fix issue106: Naive unicode encoding when calling fspath() in\n    python2. Thanks Tiago Nobrega for the PR.\n  * fix issue110: unittest.TestCase.assertWarns fails with py\n    imported.\n- changes from version 1.4.32\n  * fix issue70: aded ability to copy all stat info in\n    py.path.local.copy.\n  * make TerminalWriter.fullwidth a property. This results in the\n    correct value when the terminal gets resized.\n  * update supported html tags to include recent additions.\n    Thanks Denis Afonso for the PR.\n  * Remove internal code in ``Source.compile`` meant to support\n    earlier Python 3 versions that produced the side effect\n    of leaving ``None`` in ``sys.modules`` when called (see\n    pytest-dev/pytest#2103). Thanks Bruno Oliveira for the PR.\n\nChanges in python-pysaml2:\n- Add 0001-Always-generate-a-random-IV-for-AES-operations.patch\n  (CVE-2017-1000246, bsc#1068612)\n\n- Add 0001-Fix-XML-Signature-Wrapping-XSW-vulnerabilities.patch\n  (CVE-2020-5390, bsc#1160851)\n\nChanges in python-waitress:\n- update to 1.4.3 to include fixes for:\n  * CVE-2019-16785 / bsc#1161088\n  * CVE-2019-16786 / bsc#1161089\n  * CVE-2019-16789 / bsc#1160790\n  * CVE-2019-16792 / bsc#1161670\n\n- moved LICENSE.txt to docs to match old structure \n\n- make sure UTF8 locale is used when runnning tests\n  * Sometimes functional tests executed in python3 failed if stdout was not\n    set to UTF-8. The error message was:\n      ValueError: underlying buffer has been detached\n\n- %python3_only -\u003e %python_alternative\n\n- update to 1.4.3\n  * Waitress did not properly validate that the HTTP headers it received \n    were properly formed, thereby potentially allowing a front-end server \n    to treat a request different from Waitress. This could lead to HTTP \n    request smuggling/splitting.\n- drop patch local-intersphinx-inventories.patch\n  * it was commented out, anyway\n\n- update to 1.4.0:\n  - Waitress used to slam the door shut on HTTP pipelined requests without\n  setting the ``Connection: close`` header as appropriate in the response. This\n  is of course not very friendly. Waitress now explicitly sets the header when\n  responding with an internally generated error such as 400 Bad Request or 500\n  Internal Server Error to notify the remote client that it will be closing the\n  connection after the response is sent.\n  - Waitress no longer allows any spaces to exist between the header field-name\n  and the colon. While waitress did not strip the space and thereby was not\n  vulnerable to any potential header field-name confusion, it should have sent\n  back a 400 Bad Request. See https://github.com/Pylons/waitress/issues/273\n  - CRLR handling Security fixes\n\n- update to 1.3.1\n  * Waitress won\u2019t accidentally throw away part of the path if it \n    starts with a double slash\n\n- version update to 1.3.0\n  Deprecations\n  ~~~~~~~~~~~~\n  - The ``send_bytes`` adjustment now defaults to ``1`` and is deprecated\n    pending removal in a future release.\n    and https://github.com/Pylons/waitress/pull/246\n  Features\n  ~~~~~~~~\n  - Add a new ``outbuf_high_watermark`` adjustment which is used to apply\n    backpressure on the ``app_iter`` to avoid letting it spin faster than data\n    can be written to the socket. This stabilizes responses that iterate quickly\n    with a lot of data.\n    See https://github.com/Pylons/waitress/pull/242\n  - Stop early and close the ``app_iter`` when attempting to write to a closed\n    socket due to a client disconnect. This should notify a long-lived streaming\n    response when a client hangs up.\n    See https://github.com/Pylons/waitress/pull/238\n    and https://github.com/Pylons/waitress/pull/240\n    and https://github.com/Pylons/waitress/pull/241\n  - Adjust the flush to output ``SO_SNDBUF`` bytes instead of whatever was\n    set in the ``send_bytes`` adjustment. ``send_bytes`` now only controls how\n    much waitress will buffer internally before flushing to the kernel, whereas\n    previously it used to also throttle how much data was sent to the kernel.\n    This change enables a streaming ``app_iter`` containing small chunks to\n    still be flushed efficiently.\n    See https://github.com/Pylons/waitress/pull/246\n  Bugfixes\n  ~~~~~~~~\n  - Upon receiving a request that does not include HTTP/1.0 or HTTP/1.1 we will\n    no longer set the version to the string value \u0027None\u0027. See\n    https://github.com/Pylons/waitress/pull/252 and\n    https://github.com/Pylons/waitress/issues/110\n  - When a client closes a socket unexpectedly there was potential for memory\n    leaks in which data was written to the buffers after they were closed,\n    causing them to reopen.\n    See https://github.com/Pylons/waitress/pull/239\n  - Fix the queue depth warnings to only show when all threads are busy.\n    See https://github.com/Pylons/waitress/pull/243\n    and https://github.com/Pylons/waitress/pull/247\n  - Trigger the ``app_iter`` to close as part of shutdown. This will only be\n    noticeable for users of the internal server api. In more typical operations\n    the server will die before benefiting from these changes.\n    See https://github.com/Pylons/waitress/pull/245\n  - Fix a bug in which a streaming ``app_iter`` may never cleanup data that has\n    already been sent. This would cause buffers in waitress to grow without\n    bounds. These buffers now properly rotate and release their data.\n    See https://github.com/Pylons/waitress/pull/242\n  - Fix a bug in which non-seekable subclasses of ``io.IOBase`` would trigger\n    an exception when passed to the ``wsgi.file_wrapper`` callback.\n    See https://github.com/Pylons/waitress/pull/249\n\n- Trim marketing wording and other platform mentions.\n\n- Add fetch-intersphinx-inventories.sh to sources\n- Add local-intersphinx-inventories.patch for generating the docs\n  correctly\n\n- update to version 1.2.1:\n  too many changes to list here, see:\n  https://github.com/Pylons/waitress/blob/master/CHANGES.txt\n  or even:\n  https://github.com/Pylons/waitress/commits/master\n\n- Remove superfluous devel dependency for noarch package\n\n- update to version 1.1.0:\n  * Features\n    + Waitress now has a __main__ and thus may be called with \u0027python\n      -mwaitress\u0027\n  * Bugfixes\n    + Waitress no longer allows lowercase HTTP verbs. This change was\n      made to fall in line with most HTTP servers. See\n      https://github.com/Pylons/waitress/pull/170\n    + When receiving non-ascii bytes in the request URL, waitress will\n      no longer abruptly close the connection, instead returning a 400\n      Bad Request. See https://github.com/Pylons/waitress/pull/162 and\n      https://github.com/Pylons/waitress/issues/64\n\n- Update to 1.0.2\n  * Python 3.6 is now officially supported in Waitress\n  * Add a work-around for libc issue on Linux not following the\n    documented standards. If getnameinfo() fails because of DNS not\n    being available it should return the IP address instead of the\n    reverse DNS entry, however instead getnameinfo() raises. We\n    catch this, and ask getnameinfo() for the same information\n    again, explicitly asking for IP address instead of reverse\n    DNS hostname.\n- Implement single-spec version.\n- Fix source URL.\n\n- update to 1.0.1:\n  - IPv6 support on Windows was broken due to missing constants in the socket\n    module. This has been resolved by setting the constants on Windows if they\n    are missing. See https://github.com/Pylons/waitress/issues/138\n  - A ValueError was raised on Windows when passing a string for the port, on\n    Windows in Python 2 using service names instead of port numbers doesn\u0027t work\n    with `getaddrinfo`. This has been resolved by attempting to convert the port\n    number to an integer, if that fails a ValueError will be raised. See\n    https://github.com/Pylons/waitress/issues/139\n  - Removed `AI_ADDRCONFIG` from the call to `getaddrinfo`, this resolves an\n    issue whereby `getaddrinfo` wouldn\u0027t return any addresses to `bind` to on\n    hosts where there is no internet connection but localhost is requested to be\n    bound to. See https://github.com/Pylons/waitress/issues/131 for more\n    information.\n- disable tests. need network access.\n\nChanges in rabbitmq-server:\n- Apply patches to resolve CVE-2017-4967,CVE-2017-4965 (bsc#1037777)\n   0001-Escape-HTML-tags-in-policy-definition-fields.patch\n   0002-Don-t-echo-provided-encoding-value-back.patch\n   0003-Strip-off-pids-and-format-consumer-details-for-2-end.patch\n   0004-Format-Web-contexts.patch\n\nChanges in release-notes-suse-openstack-cloud:\n- Switch github URL from git@ to https:// to bypass authentication \n\nChanges in rubygem-activeresource:\n- Add bsc#1171560-CVE-2020-8151-encode-id-param.patch\n  Prevent possible information disclosure issue that could allow\n  an attacker to create specially crafted requests to access data\n  in an unexpected way (bsc#1171560 CVE-2020-8151)) \n\nChanges in rubygem-crowbar-client:\n- Update to 3.9.2\n  - Enable SES commands in Cloud8 (SOC-11122)\n\nChanges in rubygem-json-1_7:\n- Add CVE-2020-10663.patch (CVE-2020-10663, bsc#1167244)\n\nChanges in rubygem-puma:\n- Fix indentation in gem2rpm.yml \n\n- Add CVE-2020-11077.patch (bsc#1172175, CVE-2020-11077)\n- Add chunked-request-handling.patch (needed for CVE-2020-11076.patch)\n- Add CVE-2020-11076.patch (bsc#1172176, CVE-2020-11076)\n- Add all patches to gem2rpm.yml\n\n- Add CVE-2020-5247.patch (bsc#1165402)\n  \u0027Fixes a problem where we were not splitting newlines in headers\n  according to Rack spec\u0027\n  The patch is reduced compared to the upstream version, which was\n  patching also the parts that are not implemented in our old Puma\n  version. This applies to unit test as well.\n\nChanges in zookeeper:\n- Apply 0002-Apply-patch-to-resolve-CVE-2019-0201.patch\n  This applies the patch for ZOOKEEPER-1392 to resolve CVE-2019-0201\n  Should not allow to read ACL when not authorized to read node \n  (bsc#1135773)\n\n- Various cleanups in spec file\n\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2020-2072,SUSE-OpenStack-Cloud-7-2020-2072",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-ru-2020_2072-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-RU-2020:2072-1",
        "url": "https://www.suse.com/support/update/announcement//suse-ru-20202072-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-RU-2020:2072-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2020-July/015563.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1037777",
        "url": "https://bugzilla.suse.com/1037777"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1068612",
        "url": "https://bugzilla.suse.com/1068612"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1069468",
        "url": "https://bugzilla.suse.com/1069468"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1070737",
        "url": "https://bugzilla.suse.com/1070737"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1077718",
        "url": "https://bugzilla.suse.com/1077718"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1083903",
        "url": "https://bugzilla.suse.com/1083903"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1111657",
        "url": "https://bugzilla.suse.com/1111657"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1126503",
        "url": "https://bugzilla.suse.com/1126503"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1133817",
        "url": "https://bugzilla.suse.com/1133817"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1135773",
        "url": "https://bugzilla.suse.com/1135773"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1138748",
        "url": "https://bugzilla.suse.com/1138748"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1148383",
        "url": "https://bugzilla.suse.com/1148383"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1149110",
        "url": "https://bugzilla.suse.com/1149110"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1149535",
        "url": "https://bugzilla.suse.com/1149535"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1153191",
        "url": "https://bugzilla.suse.com/1153191"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156525",
        "url": "https://bugzilla.suse.com/1156525"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1159447",
        "url": "https://bugzilla.suse.com/1159447"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1160152",
        "url": "https://bugzilla.suse.com/1160152"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1160153",
        "url": "https://bugzilla.suse.com/1160153"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1160192",
        "url": "https://bugzilla.suse.com/1160192"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1160790",
        "url": "https://bugzilla.suse.com/1160790"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1160851",
        "url": "https://bugzilla.suse.com/1160851"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1161088",
        "url": "https://bugzilla.suse.com/1161088"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1161089",
        "url": "https://bugzilla.suse.com/1161089"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1161349",
        "url": "https://bugzilla.suse.com/1161349"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1161670",
        "url": "https://bugzilla.suse.com/1161670"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1164316",
        "url": "https://bugzilla.suse.com/1164316"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1165402",
        "url": "https://bugzilla.suse.com/1165402"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1167244",
        "url": "https://bugzilla.suse.com/1167244"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1170657",
        "url": "https://bugzilla.suse.com/1170657"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1171560",
        "url": "https://bugzilla.suse.com/1171560"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1171909",
        "url": "https://bugzilla.suse.com/1171909"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1172166",
        "url": "https://bugzilla.suse.com/1172166"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1172167",
        "url": "https://bugzilla.suse.com/1172167"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1172175",
        "url": "https://bugzilla.suse.com/1172175"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1172176",
        "url": "https://bugzilla.suse.com/1172176"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1172409",
        "url": "https://bugzilla.suse.com/1172409"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 948198",
        "url": "https://bugzilla.suse.com/948198"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 981848",
        "url": "https://bugzilla.suse.com/981848"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-1000246 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-1000246/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-4965 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-4965/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-4967 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-4967/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-1000115 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-1000115/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-0201 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-0201/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11596 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11596/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-15026 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-15026/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-15043 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-15043/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-16785 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-16785/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-16786 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-16786/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-16789 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-16789/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-16792 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-16792/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-16865 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-16865/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-18874 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-18874/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19844 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19844/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19911 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19911/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-3498 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-3498/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-3828 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-3828/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-10663 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-10663/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-10743 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-10743/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-11076 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-11076/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-11077 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-11077/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-12052 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-12052/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-13254 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-13254/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-13379 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-13379/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-13596 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-13596/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-5247 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-5247/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-5312 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-5312/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-5313 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-5313/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-5390 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-5390/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-8151 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-8151/"
      }
    ],
    "title": "Security update for ansible, crowbar-core, crowbar-ha, crowbar-openstack, etcd, flannel, grafana, keepalived, kibana, memcached, monasca-installer, openstack-dashboard-theme-SUSE, openstack-manila, openstack-neutron-fwaas, openstack-nova, openstack-tempest, python-Django, python-Pillow, python-psql2mysql, python-psutil, python-py, python-pysaml2, python-waitress, rabbitmq-server, release-notes-suse-openstack-cloud, zookeeper",
    "tracking": {
      "current_release_date": "2020-07-29T14:31:35Z",
      "generator": {
        "date": "2020-07-29T14:31:35Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-RU-2020:2072-1",
      "initial_release_date": "2020-07-29T14:31:35Z",
      "revision_history": [
        {
          "date": "2020-07-29T14:31:35Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.aarch64",
                "product": {
                  "name": "crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.aarch64",
                  "product_id": "crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.aarch64",
                "product": {
                  "name": "crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.aarch64",
                  "product_id": "crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "crowbar-core-devel-4.0+git.1580209654.1d112d31f-9.66.5.aarch64",
                "product": {
                  "name": "crowbar-core-devel-4.0+git.1580209654.1d112d31f-9.66.5.aarch64",
                  "product_id": "crowbar-core-devel-4.0+git.1580209654.1d112d31f-9.66.5.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "erlang-rabbitmq-client-3.4.4-3.16.1.aarch64",
                "product": {
                  "name": "erlang-rabbitmq-client-3.4.4-3.16.1.aarch64",
                  "product_id": "erlang-rabbitmq-client-3.4.4-3.16.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "grafana-4.6.5-1.14.1.aarch64",
                "product": {
                  "name": "grafana-4.6.5-1.14.1.aarch64",
                  "product_id": "grafana-4.6.5-1.14.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "keepalived-2.0.19-1.8.1.aarch64",
                "product": {
                  "name": "keepalived-2.0.19-1.8.1.aarch64",
                  "product_id": "keepalived-2.0.19-1.8.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "kibana-4.6.3-5.1.aarch64",
                "product": {
                  "name": "kibana-4.6.3-5.1.aarch64",
                  "product_id": "kibana-4.6.3-5.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libzookeeper2-3.4.10-6.1.aarch64",
                "product": {
                  "name": "libzookeeper2-3.4.10-6.1.aarch64",
                  "product_id": "libzookeeper2-3.4.10-6.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libzookeeper2-devel-3.4.10-6.1.aarch64",
                "product": {
                  "name": "libzookeeper2-devel-3.4.10-6.1.aarch64",
                  "product_id": "libzookeeper2-devel-3.4.10-6.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "memcached-1.5.17-3.6.1.aarch64",
                "product": {
                  "name": "memcached-1.5.17-3.6.1.aarch64",
                  "product_id": "memcached-1.5.17-3.6.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "memcached-devel-1.5.17-3.6.1.aarch64",
                "product": {
                  "name": "memcached-devel-1.5.17-3.6.1.aarch64",
                  "product_id": "memcached-devel-1.5.17-3.6.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "python-Pillow-2.8.1-4.12.1.aarch64",
                "product": {
                  "name": "python-Pillow-2.8.1-4.12.1.aarch64",
                  "product_id": "python-Pillow-2.8.1-4.12.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "python-Pillow-tk-2.8.1-4.12.1.aarch64",
                "product": {
                  "name": "python-Pillow-tk-2.8.1-4.12.1.aarch64",
                  "product_id": "python-Pillow-tk-2.8.1-4.12.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "python-psutil-1.2.1-21.1.aarch64",
                "product": {
                  "name": "python-psutil-1.2.1-21.1.aarch64",
                  "product_id": "python-psutil-1.2.1-21.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "python3-psutil-1.2.1-21.1.aarch64",
                "product": {
                  "name": "python3-psutil-1.2.1-21.1.aarch64",
                  "product_id": "python3-psutil-1.2.1-21.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "rabbitmq-server-3.4.4-3.16.1.aarch64",
                "product": {
                  "name": "rabbitmq-server-3.4.4-3.16.1.aarch64",
                  "product_id": "rabbitmq-server-3.4.4-3.16.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "rabbitmq-server-plugins-3.4.4-3.16.1.aarch64",
                "product": {
                  "name": "rabbitmq-server-plugins-3.4.4-3.16.1.aarch64",
                  "product_id": "rabbitmq-server-plugins-3.4.4-3.16.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-activeresource-4.0.0-3.3.1.aarch64",
                "product": {
                  "name": "ruby2.1-rubygem-activeresource-4.0.0-3.3.1.aarch64",
                  "product_id": "ruby2.1-rubygem-activeresource-4.0.0-3.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-activeresource-doc-4.0.0-3.3.1.aarch64",
                "product": {
                  "name": "ruby2.1-rubygem-activeresource-doc-4.0.0-3.3.1.aarch64",
                  "product_id": "ruby2.1-rubygem-activeresource-doc-4.0.0-3.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.aarch64",
                "product": {
                  "name": "ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.aarch64",
                  "product_id": "ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-crowbar-client-doc-3.9.2-7.20.1.aarch64",
                "product": {
                  "name": "ruby2.1-rubygem-crowbar-client-doc-3.9.2-7.20.1.aarch64",
                  "product_id": "ruby2.1-rubygem-crowbar-client-doc-3.9.2-7.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-crowbar-client-testsuite-3.9.2-7.20.1.aarch64",
                "product": {
                  "name": "ruby2.1-rubygem-crowbar-client-testsuite-3.9.2-7.20.1.aarch64",
                  "product_id": "ruby2.1-rubygem-crowbar-client-testsuite-3.9.2-7.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.aarch64",
                "product": {
                  "name": "ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.aarch64",
                  "product_id": "ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-puma-2.16.0-4.6.1.aarch64",
                "product": {
                  "name": "ruby2.1-rubygem-puma-2.16.0-4.6.1.aarch64",
                  "product_id": "ruby2.1-rubygem-puma-2.16.0-4.6.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-puma-doc-2.16.0-4.6.1.aarch64",
                "product": {
                  "name": "ruby2.1-rubygem-puma-doc-2.16.0-4.6.1.aarch64",
                  "product_id": "ruby2.1-rubygem-puma-doc-2.16.0-4.6.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "zookeeper-client-3.4.10-6.1.aarch64",
                "product": {
                  "name": "zookeeper-client-3.4.10-6.1.aarch64",
                  "product_id": "zookeeper-client-3.4.10-6.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "ansible-2.2.3.0-12.2.noarch",
                "product": {
                  "name": "ansible-2.2.3.0-12.2.noarch",
                  "product_id": "ansible-2.2.3.0-12.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
                "product": {
                  "name": "crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
                  "product_id": "crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
                "product": {
                  "name": "crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
                  "product_id": "crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "monasca-installer-20180608_12.47-12.1.noarch",
                "product": {
                  "name": "monasca-installer-20180608_12.47-12.1.noarch",
                  "product_id": "monasca-installer-20180608_12.47-12.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
                "product": {
                  "name": "openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
                  "product_id": "openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-manila-3.0.1~dev30-4.12.2.noarch",
                "product": {
                  "name": "openstack-manila-3.0.1~dev30-4.12.2.noarch",
                  "product_id": "openstack-manila-3.0.1~dev30-4.12.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
                "product": {
                  "name": "openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
                  "product_id": "openstack-manila-api-3.0.1~dev30-4.12.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
                "product": {
                  "name": "openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
                  "product_id": "openstack-manila-data-3.0.1~dev30-4.12.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
                "product": {
                  "name": "openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
                  "product_id": "openstack-manila-doc-3.0.1~dev30-4.12.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
                "product": {
                  "name": "openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
                  "product_id": "openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
                "product": {
                  "name": "openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
                  "product_id": "openstack-manila-share-3.0.1~dev30-4.12.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-manila-test-3.0.1~dev30-4.12.2.noarch",
                "product": {
                  "name": "openstack-manila-test-3.0.1~dev30-4.12.2.noarch",
                  "product_id": "openstack-manila-test-3.0.1~dev30-4.12.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
                "product": {
                  "name": "openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
                  "product_id": "openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
                "product": {
                  "name": "openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
                  "product_id": "openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-neutron-fwaas-test-9.0.2~dev5-4.9.3.noarch",
                "product": {
                  "name": "openstack-neutron-fwaas-test-9.0.2~dev5-4.9.3.noarch",
                  "product_id": "openstack-neutron-fwaas-test-9.0.2~dev5-4.9.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-14.0.11~dev13-4.40.2.noarch",
                "product": {
                  "name": "openstack-nova-14.0.11~dev13-4.40.2.noarch",
                  "product_id": "openstack-nova-14.0.11~dev13-4.40.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
                "product": {
                  "name": "openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
                  "product_id": "openstack-nova-api-14.0.11~dev13-4.40.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
                "product": {
                  "name": "openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
                  "product_id": "openstack-nova-cells-14.0.11~dev13-4.40.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
                "product": {
                  "name": "openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
                  "product_id": "openstack-nova-cert-14.0.11~dev13-4.40.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
                "product": {
                  "name": "openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
                  "product_id": "openstack-nova-compute-14.0.11~dev13-4.40.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
                "product": {
                  "name": "openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
                  "product_id": "openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
                "product": {
                  "name": "openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
                  "product_id": "openstack-nova-console-14.0.11~dev13-4.40.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
                "product": {
                  "name": "openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
                  "product_id": "openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
                "product": {
                  "name": "openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
                  "product_id": "openstack-nova-doc-14.0.11~dev13-4.40.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-network-14.0.11~dev13-4.40.2.noarch",
                "product": {
                  "name": "openstack-nova-network-14.0.11~dev13-4.40.2.noarch",
                  "product_id": "openstack-nova-network-14.0.11~dev13-4.40.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
                "product": {
                  "name": "openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
                  "product_id": "openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
                "product": {
                  "name": "openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
                  "product_id": "openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
                "product": {
                  "name": "openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
                  "product_id": "openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
                "product": {
                  "name": "openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
                  "product_id": "openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-test-14.0.11~dev13-4.40.2.noarch",
                "product": {
                  "name": "openstack-nova-test-14.0.11~dev13-4.40.2.noarch",
                  "product_id": "openstack-nova-test-14.0.11~dev13-4.40.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
                "product": {
                  "name": "openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
                  "product_id": "openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
                "product": {
                  "name": "openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
                  "product_id": "openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
                "product": {
                  "name": "openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
                  "product_id": "openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "openstack-xen-plugins-14.0.11~dev13-4.40.2.noarch",
                "product": {
                  "name": "openstack-xen-plugins-14.0.11~dev13-4.40.2.noarch",
                  "product_id": "openstack-xen-plugins-14.0.11~dev13-4.40.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python-Django-1.8.19-3.23.1.noarch",
                "product": {
                  "name": "python-Django-1.8.19-3.23.1.noarch",
                  "product_id": "python-Django-1.8.19-3.23.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python-manila-3.0.1~dev30-4.12.2.noarch",
                "product": {
                  "name": "python-manila-3.0.1~dev30-4.12.2.noarch",
                  "product_id": "python-manila-3.0.1~dev30-4.12.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
                "product": {
                  "name": "python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
                  "product_id": "python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python-nova-14.0.11~dev13-4.40.2.noarch",
                "product": {
                  "name": "python-nova-14.0.11~dev13-4.40.2.noarch",
                  "product_id": "python-nova-14.0.11~dev13-4.40.2.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
                "product": {
                  "name": "python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
                  "product_id": "python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python-py-1.8.1-11.12.1.noarch",
                "product": {
                  "name": "python-py-1.8.1-11.12.1.noarch",
                  "product_id": "python-py-1.8.1-11.12.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python-pylons-sphinx-themes-1.0.11-1.3.1.noarch",
                "product": {
                  "name": "python-pylons-sphinx-themes-1.0.11-1.3.1.noarch",
                  "product_id": "python-pylons-sphinx-themes-1.0.11-1.3.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python-pysaml2-4.0.2-3.17.1.noarch",
                "product": {
                  "name": "python-pysaml2-4.0.2-3.17.1.noarch",
                  "product_id": "python-pysaml2-4.0.2-3.17.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
                "product": {
                  "name": "python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
                  "product_id": "python-tempest-12.2.1~a0~dev177-4.9.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python-waitress-1.4.3-3.3.1.noarch",
                "product": {
                  "name": "python-waitress-1.4.3-3.3.1.noarch",
                  "product_id": "python-waitress-1.4.3-3.3.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python-waitress-doc-1.4.3-3.3.1.noarch",
                "product": {
                  "name": "python-waitress-doc-1.4.3-3.3.1.noarch",
                  "product_id": "python-waitress-doc-1.4.3-3.3.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-py-1.8.1-11.12.1.noarch",
                "product": {
                  "name": "python3-py-1.8.1-11.12.1.noarch",
                  "product_id": "python3-py-1.8.1-11.12.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-waitress-1.4.3-3.3.1.noarch",
                "product": {
                  "name": "python3-waitress-1.4.3-3.3.1.noarch",
                  "product_id": "python3-waitress-1.4.3-3.3.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "python3-waitress-doc-1.4.3-3.3.1.noarch",
                "product": {
                  "name": "python3-waitress-doc-1.4.3-3.3.1.noarch",
                  "product_id": "python3-waitress-doc-1.4.3-3.3.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
                "product": {
                  "name": "release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
                  "product_id": "release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "zookeeper-server-3.4.10-6.1.noarch",
                "product": {
                  "name": "zookeeper-server-3.4.10-6.1.noarch",
                  "product_id": "zookeeper-server-3.4.10-6.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.ppc64le",
                "product": {
                  "name": "crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.ppc64le",
                  "product_id": "crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.ppc64le",
                "product": {
                  "name": "crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.ppc64le",
                  "product_id": "crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "crowbar-core-devel-4.0+git.1580209654.1d112d31f-9.66.5.ppc64le",
                "product": {
                  "name": "crowbar-core-devel-4.0+git.1580209654.1d112d31f-9.66.5.ppc64le",
                  "product_id": "crowbar-core-devel-4.0+git.1580209654.1d112d31f-9.66.5.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "erlang-rabbitmq-client-3.4.4-3.16.1.ppc64le",
                "product": {
                  "name": "erlang-rabbitmq-client-3.4.4-3.16.1.ppc64le",
                  "product_id": "erlang-rabbitmq-client-3.4.4-3.16.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "grafana-4.6.5-1.14.1.ppc64le",
                "product": {
                  "name": "grafana-4.6.5-1.14.1.ppc64le",
                  "product_id": "grafana-4.6.5-1.14.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "keepalived-2.0.19-1.8.1.ppc64le",
                "product": {
                  "name": "keepalived-2.0.19-1.8.1.ppc64le",
                  "product_id": "keepalived-2.0.19-1.8.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "kibana-4.6.3-5.1.ppc64le",
                "product": {
                  "name": "kibana-4.6.3-5.1.ppc64le",
                  "product_id": "kibana-4.6.3-5.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libzookeeper2-3.4.10-6.1.ppc64le",
                "product": {
                  "name": "libzookeeper2-3.4.10-6.1.ppc64le",
                  "product_id": "libzookeeper2-3.4.10-6.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libzookeeper2-devel-3.4.10-6.1.ppc64le",
                "product": {
                  "name": "libzookeeper2-devel-3.4.10-6.1.ppc64le",
                  "product_id": "libzookeeper2-devel-3.4.10-6.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "memcached-1.5.17-3.6.1.ppc64le",
                "product": {
                  "name": "memcached-1.5.17-3.6.1.ppc64le",
                  "product_id": "memcached-1.5.17-3.6.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "memcached-devel-1.5.17-3.6.1.ppc64le",
                "product": {
                  "name": "memcached-devel-1.5.17-3.6.1.ppc64le",
                  "product_id": "memcached-devel-1.5.17-3.6.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "python-Pillow-2.8.1-4.12.1.ppc64le",
                "product": {
                  "name": "python-Pillow-2.8.1-4.12.1.ppc64le",
                  "product_id": "python-Pillow-2.8.1-4.12.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "python-Pillow-tk-2.8.1-4.12.1.ppc64le",
                "product": {
                  "name": "python-Pillow-tk-2.8.1-4.12.1.ppc64le",
                  "product_id": "python-Pillow-tk-2.8.1-4.12.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "python-psutil-1.2.1-21.1.ppc64le",
                "product": {
                  "name": "python-psutil-1.2.1-21.1.ppc64le",
                  "product_id": "python-psutil-1.2.1-21.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "python3-psutil-1.2.1-21.1.ppc64le",
                "product": {
                  "name": "python3-psutil-1.2.1-21.1.ppc64le",
                  "product_id": "python3-psutil-1.2.1-21.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "rabbitmq-server-3.4.4-3.16.1.ppc64le",
                "product": {
                  "name": "rabbitmq-server-3.4.4-3.16.1.ppc64le",
                  "product_id": "rabbitmq-server-3.4.4-3.16.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "rabbitmq-server-plugins-3.4.4-3.16.1.ppc64le",
                "product": {
                  "name": "rabbitmq-server-plugins-3.4.4-3.16.1.ppc64le",
                  "product_id": "rabbitmq-server-plugins-3.4.4-3.16.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-activeresource-4.0.0-3.3.1.ppc64le",
                "product": {
                  "name": "ruby2.1-rubygem-activeresource-4.0.0-3.3.1.ppc64le",
                  "product_id": "ruby2.1-rubygem-activeresource-4.0.0-3.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-activeresource-doc-4.0.0-3.3.1.ppc64le",
                "product": {
                  "name": "ruby2.1-rubygem-activeresource-doc-4.0.0-3.3.1.ppc64le",
                  "product_id": "ruby2.1-rubygem-activeresource-doc-4.0.0-3.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.ppc64le",
                "product": {
                  "name": "ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.ppc64le",
                  "product_id": "ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-crowbar-client-doc-3.9.2-7.20.1.ppc64le",
                "product": {
                  "name": "ruby2.1-rubygem-crowbar-client-doc-3.9.2-7.20.1.ppc64le",
                  "product_id": "ruby2.1-rubygem-crowbar-client-doc-3.9.2-7.20.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-crowbar-client-testsuite-3.9.2-7.20.1.ppc64le",
                "product": {
                  "name": "ruby2.1-rubygem-crowbar-client-testsuite-3.9.2-7.20.1.ppc64le",
                  "product_id": "ruby2.1-rubygem-crowbar-client-testsuite-3.9.2-7.20.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.ppc64le",
                "product": {
                  "name": "ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.ppc64le",
                  "product_id": "ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-puma-2.16.0-4.6.1.ppc64le",
                "product": {
                  "name": "ruby2.1-rubygem-puma-2.16.0-4.6.1.ppc64le",
                  "product_id": "ruby2.1-rubygem-puma-2.16.0-4.6.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-puma-doc-2.16.0-4.6.1.ppc64le",
                "product": {
                  "name": "ruby2.1-rubygem-puma-doc-2.16.0-4.6.1.ppc64le",
                  "product_id": "ruby2.1-rubygem-puma-doc-2.16.0-4.6.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "zookeeper-client-3.4.10-6.1.ppc64le",
                "product": {
                  "name": "zookeeper-client-3.4.10-6.1.ppc64le",
                  "product_id": "zookeeper-client-3.4.10-6.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
                "product": {
                  "name": "crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
                  "product_id": "crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
                "product": {
                  "name": "crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
                  "product_id": "crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "crowbar-core-devel-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
                "product": {
                  "name": "crowbar-core-devel-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
                  "product_id": "crowbar-core-devel-4.0+git.1580209654.1d112d31f-9.66.5.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "erlang-rabbitmq-client-3.4.4-3.16.1.s390x",
                "product": {
                  "name": "erlang-rabbitmq-client-3.4.4-3.16.1.s390x",
                  "product_id": "erlang-rabbitmq-client-3.4.4-3.16.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "grafana-4.6.5-1.14.1.s390x",
                "product": {
                  "name": "grafana-4.6.5-1.14.1.s390x",
                  "product_id": "grafana-4.6.5-1.14.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "keepalived-2.0.19-1.8.1.s390x",
                "product": {
                  "name": "keepalived-2.0.19-1.8.1.s390x",
                  "product_id": "keepalived-2.0.19-1.8.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "kibana-4.6.3-5.1.s390x",
                "product": {
                  "name": "kibana-4.6.3-5.1.s390x",
                  "product_id": "kibana-4.6.3-5.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libzookeeper2-3.4.10-6.1.s390x",
                "product": {
                  "name": "libzookeeper2-3.4.10-6.1.s390x",
                  "product_id": "libzookeeper2-3.4.10-6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libzookeeper2-devel-3.4.10-6.1.s390x",
                "product": {
                  "name": "libzookeeper2-devel-3.4.10-6.1.s390x",
                  "product_id": "libzookeeper2-devel-3.4.10-6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "memcached-1.5.17-3.6.1.s390x",
                "product": {
                  "name": "memcached-1.5.17-3.6.1.s390x",
                  "product_id": "memcached-1.5.17-3.6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "memcached-devel-1.5.17-3.6.1.s390x",
                "product": {
                  "name": "memcached-devel-1.5.17-3.6.1.s390x",
                  "product_id": "memcached-devel-1.5.17-3.6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "python-Pillow-2.8.1-4.12.1.s390x",
                "product": {
                  "name": "python-Pillow-2.8.1-4.12.1.s390x",
                  "product_id": "python-Pillow-2.8.1-4.12.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "python-Pillow-tk-2.8.1-4.12.1.s390x",
                "product": {
                  "name": "python-Pillow-tk-2.8.1-4.12.1.s390x",
                  "product_id": "python-Pillow-tk-2.8.1-4.12.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "python-cffi-1.11.2-3.3.2.s390x",
                "product": {
                  "name": "python-cffi-1.11.2-3.3.2.s390x",
                  "product_id": "python-cffi-1.11.2-3.3.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "python-psutil-1.2.1-21.1.s390x",
                "product": {
                  "name": "python-psutil-1.2.1-21.1.s390x",
                  "product_id": "python-psutil-1.2.1-21.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "python3-psutil-1.2.1-21.1.s390x",
                "product": {
                  "name": "python3-psutil-1.2.1-21.1.s390x",
                  "product_id": "python3-psutil-1.2.1-21.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "rabbitmq-server-3.4.4-3.16.1.s390x",
                "product": {
                  "name": "rabbitmq-server-3.4.4-3.16.1.s390x",
                  "product_id": "rabbitmq-server-3.4.4-3.16.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
                "product": {
                  "name": "rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
                  "product_id": "rabbitmq-server-plugins-3.4.4-3.16.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
                "product": {
                  "name": "ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
                  "product_id": "ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-activeresource-doc-4.0.0-3.3.1.s390x",
                "product": {
                  "name": "ruby2.1-rubygem-activeresource-doc-4.0.0-3.3.1.s390x",
                  "product_id": "ruby2.1-rubygem-activeresource-doc-4.0.0-3.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
                "product": {
                  "name": "ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
                  "product_id": "ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-crowbar-client-doc-3.9.2-7.20.1.s390x",
                "product": {
                  "name": "ruby2.1-rubygem-crowbar-client-doc-3.9.2-7.20.1.s390x",
                  "product_id": "ruby2.1-rubygem-crowbar-client-doc-3.9.2-7.20.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-crowbar-client-testsuite-3.9.2-7.20.1.s390x",
                "product": {
                  "name": "ruby2.1-rubygem-crowbar-client-testsuite-3.9.2-7.20.1.s390x",
                  "product_id": "ruby2.1-rubygem-crowbar-client-testsuite-3.9.2-7.20.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
                "product": {
                  "name": "ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
                  "product_id": "ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
                "product": {
                  "name": "ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
                  "product_id": "ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-puma-doc-2.16.0-4.6.1.s390x",
                "product": {
                  "name": "ruby2.1-rubygem-puma-doc-2.16.0-4.6.1.s390x",
                  "product_id": "ruby2.1-rubygem-puma-doc-2.16.0-4.6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "zookeeper-client-3.4.10-6.1.s390x",
                "product": {
                  "name": "zookeeper-client-3.4.10-6.1.s390x",
                  "product_id": "zookeeper-client-3.4.10-6.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
                "product": {
                  "name": "crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
                  "product_id": "crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
                "product": {
                  "name": "crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
                  "product_id": "crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "crowbar-core-devel-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
                "product": {
                  "name": "crowbar-core-devel-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
                  "product_id": "crowbar-core-devel-4.0+git.1580209654.1d112d31f-9.66.5.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "erlang-rabbitmq-client-3.4.4-3.16.1.x86_64",
                "product": {
                  "name": "erlang-rabbitmq-client-3.4.4-3.16.1.x86_64",
                  "product_id": "erlang-rabbitmq-client-3.4.4-3.16.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "grafana-4.6.5-1.14.1.x86_64",
                "product": {
                  "name": "grafana-4.6.5-1.14.1.x86_64",
                  "product_id": "grafana-4.6.5-1.14.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "keepalived-2.0.19-1.8.1.x86_64",
                "product": {
                  "name": "keepalived-2.0.19-1.8.1.x86_64",
                  "product_id": "keepalived-2.0.19-1.8.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kibana-4.6.3-5.1.x86_64",
                "product": {
                  "name": "kibana-4.6.3-5.1.x86_64",
                  "product_id": "kibana-4.6.3-5.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libzookeeper2-3.4.10-6.1.x86_64",
                "product": {
                  "name": "libzookeeper2-3.4.10-6.1.x86_64",
                  "product_id": "libzookeeper2-3.4.10-6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libzookeeper2-devel-3.4.10-6.1.x86_64",
                "product": {
                  "name": "libzookeeper2-devel-3.4.10-6.1.x86_64",
                  "product_id": "libzookeeper2-devel-3.4.10-6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "memcached-1.5.17-3.6.1.x86_64",
                "product": {
                  "name": "memcached-1.5.17-3.6.1.x86_64",
                  "product_id": "memcached-1.5.17-3.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "memcached-devel-1.5.17-3.6.1.x86_64",
                "product": {
                  "name": "memcached-devel-1.5.17-3.6.1.x86_64",
                  "product_id": "memcached-devel-1.5.17-3.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "python-Pillow-2.8.1-4.12.1.x86_64",
                "product": {
                  "name": "python-Pillow-2.8.1-4.12.1.x86_64",
                  "product_id": "python-Pillow-2.8.1-4.12.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "python-Pillow-tk-2.8.1-4.12.1.x86_64",
                "product": {
                  "name": "python-Pillow-tk-2.8.1-4.12.1.x86_64",
                  "product_id": "python-Pillow-tk-2.8.1-4.12.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "python-cffi-1.11.2-3.3.2.x86_64",
                "product": {
                  "name": "python-cffi-1.11.2-3.3.2.x86_64",
                  "product_id": "python-cffi-1.11.2-3.3.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "python-psutil-1.2.1-21.1.x86_64",
                "product": {
                  "name": "python-psutil-1.2.1-21.1.x86_64",
                  "product_id": "python-psutil-1.2.1-21.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "python3-psutil-1.2.1-21.1.x86_64",
                "product": {
                  "name": "python3-psutil-1.2.1-21.1.x86_64",
                  "product_id": "python3-psutil-1.2.1-21.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "rabbitmq-server-3.4.4-3.16.1.x86_64",
                "product": {
                  "name": "rabbitmq-server-3.4.4-3.16.1.x86_64",
                  "product_id": "rabbitmq-server-3.4.4-3.16.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
                "product": {
                  "name": "rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
                  "product_id": "rabbitmq-server-plugins-3.4.4-3.16.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
                "product": {
                  "name": "ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
                  "product_id": "ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-activeresource-doc-4.0.0-3.3.1.x86_64",
                "product": {
                  "name": "ruby2.1-rubygem-activeresource-doc-4.0.0-3.3.1.x86_64",
                  "product_id": "ruby2.1-rubygem-activeresource-doc-4.0.0-3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
                "product": {
                  "name": "ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
                  "product_id": "ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-crowbar-client-doc-3.9.2-7.20.1.x86_64",
                "product": {
                  "name": "ruby2.1-rubygem-crowbar-client-doc-3.9.2-7.20.1.x86_64",
                  "product_id": "ruby2.1-rubygem-crowbar-client-doc-3.9.2-7.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-crowbar-client-testsuite-3.9.2-7.20.1.x86_64",
                "product": {
                  "name": "ruby2.1-rubygem-crowbar-client-testsuite-3.9.2-7.20.1.x86_64",
                  "product_id": "ruby2.1-rubygem-crowbar-client-testsuite-3.9.2-7.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
                "product": {
                  "name": "ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
                  "product_id": "ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
                "product": {
                  "name": "ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
                  "product_id": "ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "ruby2.1-rubygem-puma-doc-2.16.0-4.6.1.x86_64",
                "product": {
                  "name": "ruby2.1-rubygem-puma-doc-2.16.0-4.6.1.x86_64",
                  "product_id": "ruby2.1-rubygem-puma-doc-2.16.0-4.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "zookeeper-client-3.4.10-6.1.x86_64",
                "product": {
                  "name": "zookeeper-client-3.4.10-6.1.x86_64",
                  "product_id": "zookeeper-client-3.4.10-6.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE OpenStack Cloud 7",
                "product": {
                  "name": "SUSE OpenStack Cloud 7",
                  "product_id": "SUSE OpenStack Cloud 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-openstack-cloud:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ansible-2.2.3.0-12.2.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch"
        },
        "product_reference": "ansible-2.2.3.0-12.2.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x"
        },
        "product_reference": "crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64 as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64"
        },
        "product_reference": "crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x"
        },
        "product_reference": "crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64 as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64"
        },
        "product_reference": "crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch"
        },
        "product_reference": "crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch"
        },
        "product_reference": "crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana-4.6.5-1.14.1.x86_64 as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64"
        },
        "product_reference": "grafana-4.6.5-1.14.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "keepalived-2.0.19-1.8.1.s390x as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x"
        },
        "product_reference": "keepalived-2.0.19-1.8.1.s390x",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "keepalived-2.0.19-1.8.1.x86_64 as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64"
        },
        "product_reference": "keepalived-2.0.19-1.8.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kibana-4.6.3-5.1.x86_64 as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64"
        },
        "product_reference": "kibana-4.6.3-5.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "memcached-1.5.17-3.6.1.s390x as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x"
        },
        "product_reference": "memcached-1.5.17-3.6.1.s390x",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "memcached-1.5.17-3.6.1.x86_64 as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64"
        },
        "product_reference": "memcached-1.5.17-3.6.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "monasca-installer-20180608_12.47-12.1.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch"
        },
        "product_reference": "monasca-installer-20180608_12.47-12.1.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch"
        },
        "product_reference": "openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-manila-3.0.1~dev30-4.12.2.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch"
        },
        "product_reference": "openstack-manila-3.0.1~dev30-4.12.2.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-manila-api-3.0.1~dev30-4.12.2.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch"
        },
        "product_reference": "openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-manila-data-3.0.1~dev30-4.12.2.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch"
        },
        "product_reference": "openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-manila-doc-3.0.1~dev30-4.12.3.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch"
        },
        "product_reference": "openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch"
        },
        "product_reference": "openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-manila-share-3.0.1~dev30-4.12.2.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch"
        },
        "product_reference": "openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch"
        },
        "product_reference": "openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch"
        },
        "product_reference": "openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-14.0.11~dev13-4.40.2.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch"
        },
        "product_reference": "openstack-nova-14.0.11~dev13-4.40.2.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-api-14.0.11~dev13-4.40.2.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch"
        },
        "product_reference": "openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-cells-14.0.11~dev13-4.40.2.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch"
        },
        "product_reference": "openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-cert-14.0.11~dev13-4.40.2.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch"
        },
        "product_reference": "openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-compute-14.0.11~dev13-4.40.2.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch"
        },
        "product_reference": "openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch"
        },
        "product_reference": "openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-console-14.0.11~dev13-4.40.2.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch"
        },
        "product_reference": "openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch"
        },
        "product_reference": "openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-doc-14.0.11~dev13-4.40.2.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch"
        },
        "product_reference": "openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch"
        },
        "product_reference": "openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch"
        },
        "product_reference": "openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch"
        },
        "product_reference": "openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch"
        },
        "product_reference": "openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch"
        },
        "product_reference": "openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch"
        },
        "product_reference": "openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch"
        },
        "product_reference": "openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-Django-1.8.19-3.23.1.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch"
        },
        "product_reference": "python-Django-1.8.19-3.23.1.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-Pillow-2.8.1-4.12.1.s390x as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x"
        },
        "product_reference": "python-Pillow-2.8.1-4.12.1.s390x",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-Pillow-2.8.1-4.12.1.x86_64 as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64"
        },
        "product_reference": "python-Pillow-2.8.1-4.12.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-manila-3.0.1~dev30-4.12.2.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch"
        },
        "product_reference": "python-manila-3.0.1~dev30-4.12.2.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch"
        },
        "product_reference": "python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-nova-14.0.11~dev13-4.40.2.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch"
        },
        "product_reference": "python-nova-14.0.11~dev13-4.40.2.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch"
        },
        "product_reference": "python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-psutil-1.2.1-21.1.s390x as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x"
        },
        "product_reference": "python-psutil-1.2.1-21.1.s390x",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-psutil-1.2.1-21.1.x86_64 as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64"
        },
        "product_reference": "python-psutil-1.2.1-21.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-py-1.8.1-11.12.1.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch"
        },
        "product_reference": "python-py-1.8.1-11.12.1.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-pysaml2-4.0.2-3.17.1.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch"
        },
        "product_reference": "python-pysaml2-4.0.2-3.17.1.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-tempest-12.2.1~a0~dev177-4.9.1.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch"
        },
        "product_reference": "python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-waitress-1.4.3-3.3.1.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch"
        },
        "product_reference": "python-waitress-1.4.3-3.3.1.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rabbitmq-server-3.4.4-3.16.1.s390x as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x"
        },
        "product_reference": "rabbitmq-server-3.4.4-3.16.1.s390x",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rabbitmq-server-3.4.4-3.16.1.x86_64 as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64"
        },
        "product_reference": "rabbitmq-server-3.4.4-3.16.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rabbitmq-server-plugins-3.4.4-3.16.1.s390x as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x"
        },
        "product_reference": "rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rabbitmq-server-plugins-3.4.4-3.16.1.x86_64 as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64"
        },
        "product_reference": "rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch"
        },
        "product_reference": "release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x"
        },
        "product_reference": "ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64 as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64"
        },
        "product_reference": "ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x"
        },
        "product_reference": "ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64 as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64"
        },
        "product_reference": "ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x"
        },
        "product_reference": "ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64 as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64"
        },
        "product_reference": "ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x"
        },
        "product_reference": "ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64 as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64"
        },
        "product_reference": "ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "zookeeper-server-3.4.10-6.1.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        },
        "product_reference": "zookeeper-server-3.4.10-6.1.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-1000246",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-1000246"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across encryptions in the IDP server, resulting in weak encryption of data.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-1000246",
          "url": "https://www.suse.com/security/cve/CVE-2017-1000246"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1068612 for CVE-2017-1000246",
          "url": "https://bugzilla.suse.com/1068612"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-1000246"
    },
    {
      "cve": "CVE-2017-4965",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-4965"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ management UI are vulnerable to XSS attacks.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-4965",
          "url": "https://www.suse.com/security/cve/CVE-2017-4965"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1037777 for CVE-2017-4965",
          "url": "https://bugzilla.suse.com/1037777"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-4965"
    },
    {
      "cve": "CVE-2017-4967",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-4967"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ management UI are vulnerable to XSS attacks.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-4967",
          "url": "https://www.suse.com/security/cve/CVE-2017-4967"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1037777 for CVE-2017-4967",
          "url": "https://bugzilla.suse.com/1037777"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-4967"
    },
    {
      "cve": "CVE-2018-1000115",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-1000115"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UDP support of the memcached server that can result in denial of service via network flood (traffic amplification of 1:50,000 has been reported by reliable sources). This attack appear to be exploitable via network connectivity to port 11211 UDP. This vulnerability appears to have been fixed in 1.5.6 due to the disabling of the UDP protocol by default.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-1000115",
          "url": "https://www.suse.com/security/cve/CVE-2018-1000115"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1083903 for CVE-2018-1000115",
          "url": "https://bugzilla.suse.com/1083903"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-1000115"
    },
    {
      "cve": "CVE-2019-0201",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-0201"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. ZooKeeper\u0027s getACL() command doesn\u0027t check any permission when retrieves the ACLs of the requested node and returns all information contained in the ACL Id field as plaintext string. DigestAuthenticationProvider overloads the Id field with the hash value that is used for user authentication. As a consequence, if Digest Authentication is in use, the unsalted hash value will be disclosed by getACL() request for unauthenticated or unprivileged users.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-0201",
          "url": "https://www.suse.com/security/cve/CVE-2019-0201"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1135773 for CVE-2019-0201",
          "url": "https://bugzilla.suse.com/1135773"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-0201"
    },
    {
      "cve": "CVE-2019-11596",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11596"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In memcached before 1.5.14, a NULL pointer dereference was found in the \"lru mode\" and \"lru temp_ttl\" commands. This causes a denial of service when parsing crafted lru command messages in process_lru_command in memcached.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11596",
          "url": "https://www.suse.com/security/cve/CVE-2019-11596"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1133817 for CVE-2019-11596",
          "url": "https://bugzilla.suse.com/1133817"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-11596"
    },
    {
      "cve": "CVE-2019-15026",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-15026"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "memcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str in memcached.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-15026",
          "url": "https://www.suse.com/security/cve/CVE-2019-15026"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1149110 for CVE-2019-15026",
          "url": "https://bugzilla.suse.com/1149110"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-15026"
    },
    {
      "cve": "CVE-2019-15043",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-15043"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-15043",
          "url": "https://www.suse.com/security/cve/CVE-2019-15043"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1148383 for CVE-2019-15043",
          "url": "https://bugzilla.suse.com/1148383"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-15043"
    },
    {
      "cve": "CVE-2019-16785",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-16785"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Waitress through version 1.3.1 implemented a \"MAY\" part of the RFC7230 which states: \"Although the line terminator for the start-line and header fields is the sequence CRLF, a recipient MAY recognize a single LF as a line terminator and ignore any preceding CR.\" Unfortunately if a front-end server does not parse header fields with an LF the same way as it does those with a CRLF it can lead to the front-end and the back-end server parsing the same HTTP message in two different ways. This can lead to a potential for HTTP request smuggling/splitting whereby Waitress may see two requests while the front-end server only sees a single HTTP message. This issue is fixed in Waitress 1.4.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-16785",
          "url": "https://www.suse.com/security/cve/CVE-2019-16785"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1161088 for CVE-2019-16785",
          "url": "https://bugzilla.suse.com/1161088"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-16785"
    },
    {
      "cve": "CVE-2019-16786",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-16786"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Waitress through version 1.3.1 would parse the Transfer-Encoding header and only look for a single string value, if that value was not chunked it would fall through and use the Content-Length header instead. According to the HTTP standard Transfer-Encoding should be a comma separated list, with the inner-most encoding first, followed by any further transfer codings, ending with chunked. Requests sent with: \"Transfer-Encoding: gzip, chunked\" would incorrectly get ignored, and the request would use a Content-Length header instead to determine the body size of the HTTP message. This could allow for Waitress to treat a single request as multiple requests in the case of HTTP pipelining. This issue is fixed in Waitress 1.4.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-16786",
          "url": "https://www.suse.com/security/cve/CVE-2019-16786"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1161089 for CVE-2019-16786",
          "url": "https://bugzilla.suse.com/1161089"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-16786"
    },
    {
      "cve": "CVE-2019-16789",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-16789"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Waitress through version 1.4.0, if a proxy server is used in front of waitress, an invalid request may be sent by an attacker that bypasses the front-end and is parsed differently by waitress leading to a potential for HTTP request smuggling. Specially crafted requests containing special whitespace characters in the Transfer-Encoding header would get parsed by Waitress as being a chunked request, but a front-end server would use the Content-Length instead as the Transfer-Encoding header is considered invalid due to containing invalid characters. If a front-end server does HTTP pipelining to a backend Waitress server this could lead to HTTP request splitting which may lead to potential cache poisoning or unexpected information disclosure. This issue is fixed in Waitress 1.4.1 through more strict HTTP field validation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-16789",
          "url": "https://www.suse.com/security/cve/CVE-2019-16789"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1160790 for CVE-2019-16789",
          "url": "https://bugzilla.suse.com/1160790"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-16789"
    },
    {
      "cve": "CVE-2019-16792",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-16792"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Waitress through version 1.3.1 allows request smuggling by sending the Content-Length header twice. Waitress would header fold a double Content-Length header and due to being unable to cast the now comma separated value to an integer would set the Content-Length to 0 internally. If two Content-Length headers are sent in a single request, Waitress would treat the request as having no body, thereby treating the body of the request as a new request in HTTP pipelining. This issue is fixed in Waitress 1.4.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-16792",
          "url": "https://www.suse.com/security/cve/CVE-2019-16792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1161670 for CVE-2019-16792",
          "url": "https://bugzilla.suse.com/1161670"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-16792"
    },
    {
      "cve": "CVE-2019-16865",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-16865"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very large amounts of memory or take an extremely long period of time to process the image.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-16865",
          "url": "https://www.suse.com/security/cve/CVE-2019-16865"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1153191 for CVE-2019-16865",
          "url": "https://bugzilla.suse.com/1153191"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-16865"
    },
    {
      "cve": "CVE-2019-18874",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-18874"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-18874",
          "url": "https://www.suse.com/security/cve/CVE-2019-18874"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156525 for CVE-2019-18874",
          "url": "https://bugzilla.suse.com/1156525"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-18874"
    },
    {
      "cve": "CVE-2019-19844",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19844"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address (that is equal to an existing user\u0027s email address after case transformation of Unicode characters) would allow an attacker to be sent a password reset token for the matched user account. (One mitigation in the new releases is to send password reset tokens only to the registered user email address.)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19844",
          "url": "https://www.suse.com/security/cve/CVE-2019-19844"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1159447 for CVE-2019-19844",
          "url": "https://bugzilla.suse.com/1159447"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19844"
    },
    {
      "cve": "CVE-2019-19911",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19911"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows running 32-bit Python, this results in an OverflowError or MemoryError due to the 2 GB limit. However, on Linux running 64-bit Python this results in the process being terminated by the OOM killer.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19911",
          "url": "https://www.suse.com/security/cve/CVE-2019-19911"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1160192 for CVE-2019-19911",
          "url": "https://bugzilla.suse.com/1160192"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-19911"
    },
    {
      "cve": "CVE-2019-3498",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-3498"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, an Improper Neutralization of Special Elements in Output Used by a Downstream Component issue exists in django.views.defaults.page_not_found(), leading to content spoofing (in a 404 error page) if a user fails to recognize that a crafted URL has malicious content.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-3498",
          "url": "https://www.suse.com/security/cve/CVE-2019-3498"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1120932 for CVE-2019-3498",
          "url": "https://bugzilla.suse.com/1120932"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1139945 for CVE-2019-3498",
          "url": "https://bugzilla.suse.com/1139945"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-3498"
    },
    {
      "cve": "CVE-2019-3828",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-3828"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specified destination in the local ansible controller host, by not restricting an absolute path.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-3828",
          "url": "https://www.suse.com/security/cve/CVE-2019-3828"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1126503 for CVE-2019-3828",
          "url": "https://bugzilla.suse.com/1126503"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1164137 for CVE-2019-3828",
          "url": "https://bugzilla.suse.com/1164137"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-3828"
    },
    {
      "cve": "CVE-2020-10663",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-10663"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar to CVE-2013-0269, but does not rely on poor garbage-collection behavior within Ruby. Specifically, use of JSON parsing methods can lead to creation of a malicious object within the interpreter, with adverse effects that are application-dependent.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-10663",
          "url": "https://www.suse.com/security/cve/CVE-2020-10663"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1167244 for CVE-2020-10663",
          "url": "https://bugzilla.suse.com/1167244"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1171517 for CVE-2020-10663",
          "url": "https://bugzilla.suse.com/1171517"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-10663"
    },
    {
      "cve": "CVE-2020-10743",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-10743"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "It was discovered that OpenShift Container Platform\u0027s (OCP) distribution of Kibana could open in an iframe, which made it possible to intercept and manipulate requests. This flaw allows an attacker to trick a user into performing arbitrary actions in OCP\u0027s distribution of Kibana, such as clickjacking.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-10743",
          "url": "https://www.suse.com/security/cve/CVE-2020-10743"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1171909 for CVE-2020-10743",
          "url": "https://bugzilla.suse.com/1171909"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.9,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "low"
        }
      ],
      "title": "CVE-2020-10743"
    },
    {
      "cve": "CVE-2020-11076",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-11076"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Puma (RubyGem) before 4.3.4 and 3.12.5, an attacker could smuggle an HTTP response, by using an invalid transfer-encoding header. The problem has been fixed in Puma 3.12.5 and Puma 4.3.4.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-11076",
          "url": "https://www.suse.com/security/cve/CVE-2020-11076"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1172175 for CVE-2020-11076",
          "url": "https://bugzilla.suse.com/1172175"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1172176 for CVE-2020-11076",
          "url": "https://bugzilla.suse.com/1172176"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-11076"
    },
    {
      "cve": "CVE-2020-11077",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-11077"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Puma (RubyGem) before 4.3.5 and 3.12.6, a client could smuggle a request through a proxy, causing the proxy to send a response back to another unknown client. If the proxy uses persistent connections and the client adds another request in via HTTP pipelining, the proxy may mistake it as the first request\u0027s body. Puma, however, would see it as two requests, and when processing the second request, send back a response that the proxy does not expect. If the proxy has reused the persistent connection to Puma to send another request for a different client, the second response from the first client will be sent to the second client. This is a similar but different vulnerability from CVE-2020-11076. The problem has been fixed in Puma 3.12.6 and Puma 4.3.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-11077",
          "url": "https://www.suse.com/security/cve/CVE-2020-11077"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1172175 for CVE-2020-11077",
          "url": "https://bugzilla.suse.com/1172175"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1172176 for CVE-2020-11077",
          "url": "https://bugzilla.suse.com/1172176"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-11077"
    },
    {
      "cve": "CVE-2020-12052",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-12052"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Grafana version \u003c 6.7.3 is vulnerable for annotation popup XSS.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-12052",
          "url": "https://www.suse.com/security/cve/CVE-2020-12052"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1170657 for CVE-2020-12052",
          "url": "https://bugzilla.suse.com/1170657"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-12052"
    },
    {
      "cve": "CVE-2020-13254",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-13254"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collision, and potential data leakage.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-13254",
          "url": "https://www.suse.com/security/cve/CVE-2020-13254"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1172166 for CVE-2020-13254",
          "url": "https://bugzilla.suse.com/1172166"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1172167 for CVE-2020-13254",
          "url": "https://bugzilla.suse.com/1172167"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-13254"
    },
    {
      "cve": "CVE-2020-13379",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-13379"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue. This vulnerability allows any unauthenticated user/client to make Grafana send HTTP requests to any URL and return its result to the user/client. This can be used to gain information about the network that Grafana is running on. Furthermore, passing invalid URL objects could be used for DOS\u0027ing Grafana via SegFault.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-13379",
          "url": "https://www.suse.com/security/cve/CVE-2020-13379"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1172409 for CVE-2020-13379",
          "url": "https://bugzilla.suse.com/1172409"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-13379"
    },
    {
      "cve": "CVE-2020-13596",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-13596"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. Query parameters generated by the Django admin ForeignKeyRawIdWidget were not properly URL encoded, leading to a possibility of an XSS attack.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-13596",
          "url": "https://www.suse.com/security/cve/CVE-2020-13596"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1172166 for CVE-2020-13596",
          "url": "https://bugzilla.suse.com/1172166"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1172167 for CVE-2020-13596",
          "url": "https://bugzilla.suse.com/1172167"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-13596"
    },
    {
      "cve": "CVE-2020-5247",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-5247"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Puma (RubyGem) before 4.3.2 and before 3.12.3, if an application using Puma allows untrusted input in a response header, an attacker can use newline characters (i.e. `CR`, `LF` or`/r`, `/n`) to end the header and inject malicious content, such as additional headers or an entirely new response body. This vulnerability is known as HTTP Response Splitting. While not an attack in itself, response splitting is a vector for several other attacks, such as cross-site scripting (XSS). This is related to CVE-2019-16254, which fixed this vulnerability for the WEBrick Ruby web server. This has been fixed in versions 4.3.2 and 3.12.3 by checking all headers for line endings and rejecting headers with those characters.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-5247",
          "url": "https://www.suse.com/security/cve/CVE-2020-5247"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1165402 for CVE-2020-5247",
          "url": "https://bugzilla.suse.com/1165402"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1165524 for CVE-2020-5247",
          "url": "https://bugzilla.suse.com/1165524"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-5247"
    },
    {
      "cve": "CVE-2020-5312",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-5312"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-5312",
          "url": "https://www.suse.com/security/cve/CVE-2020-5312"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1160152 for CVE-2020-5312",
          "url": "https://bugzilla.suse.com/1160152"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-5312"
    },
    {
      "cve": "CVE-2020-5313",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-5313"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-5313",
          "url": "https://www.suse.com/security/cve/CVE-2020-5313"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1160153 for CVE-2020-5313",
          "url": "https://bugzilla.suse.com/1160153"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "important"
        }
      ],
      "title": "CVE-2020-5313"
    },
    {
      "cve": "CVE-2020-5390",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-5390"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping (XSW). The signature information and the node/object that is signed can be in different places and thus the signature verification will succeed, but the wrong data will be used. This specifically affects the verification of assertion that have been signed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-5390",
          "url": "https://www.suse.com/security/cve/CVE-2020-5390"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1160851 for CVE-2020-5390",
          "url": "https://bugzilla.suse.com/1160851"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-5390"
    },
    {
      "cve": "CVE-2020-8151",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-8151"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "There is a possible information disclosure issue in Active Resource \u003cv5.1.1 that could allow an attacker to create specially crafted requests to access data in an unexpected way and possibly leak information.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
          "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
          "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
          "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
          "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
          "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
          "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
          "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
          "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
          "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
          "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
          "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
          "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
          "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
          "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
          "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
          "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
          "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
          "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
          "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
          "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
          "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
          "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-8151",
          "url": "https://www.suse.com/security/cve/CVE-2020-8151"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1171560 for CVE-2020-8151",
          "url": "https://bugzilla.suse.com/1171560"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 7:ansible-2.2.3.0-12.2.noarch",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.s390x",
            "SUSE OpenStack Cloud 7:crowbar-core-branding-upstream-4.0+git.1580209654.1d112d31f-9.66.5.x86_64",
            "SUSE OpenStack Cloud 7:crowbar-ha-4.0+git.1585316203.d6ad2c8-4.52.4.noarch",
            "SUSE OpenStack Cloud 7:crowbar-openstack-4.0+git.1589804581.9972163f0-9.71.4.noarch",
            "SUSE OpenStack Cloud 7:grafana-4.6.5-1.14.1.x86_64",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.s390x",
            "SUSE OpenStack Cloud 7:keepalived-2.0.19-1.8.1.x86_64",
            "SUSE OpenStack Cloud 7:kibana-4.6.3-5.1.x86_64",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.s390x",
            "SUSE OpenStack Cloud 7:memcached-1.5.17-3.6.1.x86_64",
            "SUSE OpenStack Cloud 7:monasca-installer-20180608_12.47-12.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-dashboard-theme-SUSE-2016.2-5.12.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-api-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-data-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-doc-3.0.1~dev30-4.12.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-scheduler-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-manila-share-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:openstack-neutron-fwaas-doc-9.0.2~dev5-4.9.4.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cells-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-cert-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-compute-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-conductor-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-console-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-consoleauth-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-doc-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-novncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-placement-api-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-scheduler-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-serialproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-nova-vncproxy-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:openstack-tempest-test-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-Django-1.8.19-3.23.1.noarch",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.s390x",
            "SUSE OpenStack Cloud 7:python-Pillow-2.8.1-4.12.1.x86_64",
            "SUSE OpenStack Cloud 7:python-manila-3.0.1~dev30-4.12.2.noarch",
            "SUSE OpenStack Cloud 7:python-neutron-fwaas-9.0.2~dev5-4.9.3.noarch",
            "SUSE OpenStack Cloud 7:python-nova-14.0.11~dev13-4.40.2.noarch",
            "SUSE OpenStack Cloud 7:python-psql2mysql-0.5.0+git.1589351878.4ef877c-1.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.s390x",
            "SUSE OpenStack Cloud 7:python-psutil-1.2.1-21.1.x86_64",
            "SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.1.noarch",
            "SUSE OpenStack Cloud 7:python-pysaml2-4.0.2-3.17.1.noarch",
            "SUSE OpenStack Cloud 7:python-tempest-12.2.1~a0~dev177-4.9.1.noarch",
            "SUSE OpenStack Cloud 7:python-waitress-1.4.3-3.3.1.noarch",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.s390x",
            "SUSE OpenStack Cloud 7:rabbitmq-server-plugins-3.4.4-3.16.1.x86_64",
            "SUSE OpenStack Cloud 7:release-notes-suse-openstack-cloud-7.20180803-3.18.3.noarch",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-activeresource-4.0.0-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-crowbar-client-3.9.2-7.20.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-json-1_7-1.7.7-3.3.1.x86_64",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.s390x",
            "SUSE OpenStack Cloud 7:ruby2.1-rubygem-puma-2.16.0-4.6.1.x86_64",
            "SUSE OpenStack Cloud 7:zookeeper-server-3.4.10-6.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-07-29T14:31:35Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-8151"
    }
  ]
}

{
  "bids": {
    "bid": {
      "bidNumber": "98394"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-4965"
    }
  },
  "description": "Pivotal RabbitMQ\u548cRabbitMQ for PCF\u90fd\u662f\u7f8e\u56fdPivotal Software\u516c\u53f8\u7684\u4ea7\u54c1\u3002\u524d\u8005\u662f\u4e00\u5957\u5b9e\u73b0\u4e86\u9ad8\u7ea7\u6d88\u606f\u961f\u5217\u534f\u8bae\uff08AMQP\uff09\u7684\u5f00\u6e90\u6d88\u606f\u4ee3\u7406\u8f6f\u4ef6\uff0c\u540e\u8005\u662f\u4e00\u6b3e\u5f00\u6e90\u7684\u7528\u4e8e\u652f\u6301\u57fa\u4e8e\u5168\u5c40\u6570\u636e\u4f20\u9001\u548c\u9ad8\u5bb9\u91cf\u7684\u6570\u636e\u76d1\u6d4b\u7684\u6d88\u606f\u670d\u52a1\u5668\u3002\r\n\r\nPivotal RabbitMQ\u548cPivotal RabbitMQ for PCF\u4e2d\u5b58\u5728\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u8fc7\u6ee4\u7528\u6237\u63d0\u4ea4\u7684\u8f93\u5165\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u6d4f\u89c8\u5668\u4e2d\u6267\u884c\u4efb\u610f\u7684\u811a\u672c\u4ee3\u7801\u3002",
  "discovererName": "GE Digital Security Team and by Brandon Williams from Early Warning",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u5382\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u8865\u4e01\u4ee5\u4fee\u590d\u8be5\u6f0f\u6d1e\uff1a\r\nhttp://www.pivota.com",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-08190",
  "openTime": "2017-06-05",
  "patchDescription": "Pivotal RabbitMQ\u548cRabbitMQ for PCF\u90fd\u662f\u7f8e\u56fdPivotal Software\u516c\u53f8\u7684\u4ea7\u54c1\u3002\u524d\u8005\u662f\u4e00\u5957\u5b9e\u73b0\u4e86\u9ad8\u7ea7\u6d88\u606f\u961f\u5217\u534f\u8bae\uff08AMQP\uff09\u7684\u5f00\u6e90\u6d88\u606f\u4ee3\u7406\u8f6f\u4ef6\uff0c\u540e\u8005\u662f\u4e00\u6b3e\u5f00\u6e90\u7684\u7528\u4e8e\u652f\u6301\u57fa\u4e8e\u5168\u5c40\u6570\u636e\u4f20\u9001\u548c\u9ad8\u5bb9\u91cf\u7684\u6570\u636e\u76d1\u6d4b\u7684\u6d88\u606f\u670d\u52a1\u5668\u3002\r\n\r\nPivotal RabbitMQ\u548cPivotal RabbitMQ for PCF\u4e2d\u5b58\u5728\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u8fc7\u6ee4\u7528\u6237\u63d0\u4ea4\u7684\u8f93\u5165\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u6d4f\u89c8\u5668\u4e2d\u6267\u884c\u4efb\u610f\u7684\u811a\u672c\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Pivotal RabbitMQ\u4ea7\u54c1\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Pivotal RabbitMQ for PCF 1.6.12",
      "Pivotal RabbitMQ for PCF 1.6.4",
      "Pivotal RabbitMQ for PCF 1.6.3",
      "Pivotal RabbitMQ for PCF 1.6.2",
      "Pivotal RabbitMQ for PCF 1.6.1",
      "Pivotal RabbitMQ for PCF 1.6",
      "Pivotal RabbitMQ for PCF 1.5.20",
      "Pivotal RabbitMQ for PCF 1.5",
      "Pivotal RabbitMQ 3.6.6",
      "Pivotal RabbitMQ 3.6",
      "Pivotal RabbitMQ 3.5",
      "Pivotal RabbitMQ 3.4",
      "Pivotal RabbitMQ for PCF 1.7.7",
      "Pivotal RabbitMQ for PCF  1.7"
    ]
  },
  "referenceLink": "http://www.securityfocus.com/bid/98394",
  "serverity": "\u9ad8",
  "submitTime": "2017-05-20",
  "title": "Pivotal RabbitMQ\u4ea7\u54c1\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e"
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:broadcom:rabbitmq_server:3.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "755456D9-7249-4092-970C-230729E2F856",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:rabbitmq_server:3.4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "74804A09-A266-45F3-BB54-73892AD1D22D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:rabbitmq_server:3.4.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "08DE4A7C-EEA5-46E5-8604-041B721DC3E0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:rabbitmq_server:3.4.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "83206370-1606-4D4C-94F2-6B21885ADB6E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:rabbitmq_server:3.4.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "36AA89DA-AE78-409B-B4FF-B743490F76C9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:rabbitmq_server:3.5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "90973C7F-E63D-4C00-BB6A-DA2F796697E0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:rabbitmq_server:3.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "F451B7B3-9272-4184-B18A-87ED6B3D2756",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:rabbitmq_server:3.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "A9166D68-CC18-4F53-9DA6-FA10B93E7702",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:rabbitmq_server:3.5.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "BE205B46-5ACF-44B9-877A-FDC67AA7079F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:rabbitmq_server:3.5.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "1D0FDB23-6A99-4783-871A-CD25E20F044D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:broadcom:rabbitmq_server:3.6.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "5A315D37-F74F-4EF2-9F47-9639BEBEAB05",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:3.5.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "0DE6A4B2-0445-470B-B18C-2CFEB2A52455",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:3.5.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "0B52805C-6F10-4BCD-AA74-3E0C0FF5E3C2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:3.5.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "5FE2FBE9-5D35-4273-8B83-A400D3A0136D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:3.6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "B11709F3-3F1C-4FC2-9F2D-87951EC04308",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:3.6.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "32F9F3F6-B1AF-423F-9F96-4329589B323A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:3.6.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "AECBDFAA-198F-4A47-835A-4E17C090DF02",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:3.6.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "D879D6FD-39D7-4589-8DE7-C8DAAE6F165E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:3.6.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "CE842A15-D676-4E00-AAD7-1088CE122876",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:3.6.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "F40845F9-00D8-44F0-8B2E-60094A3D37CE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:3.6.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "3772B181-64DB-43AA-99C1-21378CF91E51",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.0:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "0DA89B77-6455-40CD-931E-BB07CD9A3166",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.1:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "52350E43-4AB5-45ED-AC31-CC948DB87631",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.2:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "42856F22-74CD-4278-8EAA-2C6582A7E658",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.3:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "F1C7EE64-A51B-4D02-AAC4-20F4D3FCB110",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.4:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "B0D8589A-B843-4130-8CC8-3D4C464CDB4D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.5:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "62016F87-0B15-4D1B-A2AB-FC4769F95DB7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.6:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "7DF99EF7-AFCB-4CA5-8F28-ABC9118612CE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.7:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "2D9F3D8B-DDB3-4175-AAD7-8F952E9A7D2C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.8:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "C5125B26-63EE-4FE8-97A1-DC6E11757ACA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.9:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "6AF3BAA0-0AEA-4B96-9C91-E51789844A39",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.10:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "DD5F0850-F34B-4E79-A46D-B74F2E90C43A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.11:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "DF23DD7D-16B4-408C-A825-C79487D79A0F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.12:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "E792D92E-07A1-4E48-90CB-5EC7C99E0AF0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.13:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "B873D04B-704B-468D-A2B1-8E04653806F3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.14:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "13C9004B-590A-45F0-8AA9-713928A8F5F2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.15:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "F22B84B3-438E-4E08-A02D-4A85C0C561B6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.17:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "501A5F31-6DBA-4E90-8BAD-E1DFD0967D0F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.18:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "3E99B39C-21AF-4F75-8D96-9B69F48C2A39",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.19:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "0CFACCBF-6C53-4A7F-AC0F-8A2D03E6D6EE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.0:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "3C6E80B6-857B-4D53-B107-8667EFCCE0EA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.1:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "95C7294C-C9D3-40F8-B3C9-40424D5FC124",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.2:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "66F85747-11AA-4133-B553-3C31152F0781",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.3:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "B425D53C-5713-401E-BE30-BCDE54F65857",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.4:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "758D57BA-3EA6-4036-8BDD-5BA2AAE25F77",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.5:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "036437B9-1A7F-4C60-B9FE-B38173BC6FAB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.6:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "408D457F-4DE5-4280-8379-083DA78ECF00",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.7:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "C9D2B08D-9779-4E80-BAB6-870F81F24F7E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.8:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "90F47590-6640-494F-8A93-A9AC70459DD5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.9:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "5D1F88E0-4047-4ADE-A898-88FE6358D659",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.10:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "8647C50B-41CB-45CE-89E7-BB4B2759DE40",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.12:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "4960386C-07D9-4367-945C-278595DB6C0A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.13:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "A49DCDFA-4D98-4AEC-91A1-612B85DDFB04",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.14:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "4FEB47ED-5D35-4151-B087-8324339DE5FE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.15:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "65A513AD-9236-42D7-9D04-F318A5815640",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.16:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "6647F298-1B11-46D8-B68A-6B284BB1F7AD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.7.0:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "9997C9C6-4918-4B74-92E4-012B58278DEC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.7.2:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "F6DB5A36-22F9-4A2C-9ED0-68D1434B06D0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.7.3:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "33C0370F-77A5-4A51-ABF2-21793CD57043",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.7.4:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "4C3C0A88-66F6-46D5-9A79-BEFB654979D6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.7.5:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "1EC26CD6-172D-4DBE-8B23-59491E4765E1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.7.6:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "669EA6CA-3F6C-4151-986D-173F1375B32B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.7.7:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "69960839-7C03-4542-80D3-5C71795F8159",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.7.8:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "82CA3E75-AFD0-486A-9EFA-71A8CA780632",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.7.9:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "921374B4-B99F-4863-99D8-9FD938EF8EF0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.7.10:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "C5344CFC-3100-4407-93E4-65594C3741B5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.7.13:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "06B09408-573D-47A8-BC84-724DD88976E4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:pivotal_software:rabbitmq:1.7.14:*:*:*:*:pivotal_cloud_foundry:*:*",
              "matchCriteriaId": "ADF54631-875A-45C4-9C0A-4836AB1F8309",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ management UI are vulnerable to XSS attacks."
    },
    {
      "lang": "es",
      "value": "Se detect\u00f3 un problema en estas versiones de RabbitMQ de Pivotal: todas las versiones 3.4.x, todas las versiones 3.5.x y versiones 3.6.x anteriores a 3.6.9; y en estas versiones de RabbitMQ de Pivotal para PCF: todas las versiones 1.5.x, versiones 1.6.x anteriores a 1.6.18 y versiones 1.7.x anteriores a 1.7.15. Varios formularios en la interfaz de usuario de administraci\u00f3n de RabbitMQ son vulnerables a los ataques de tipo XSS."
    }
  ],
  "id": "CVE-2017-4965",
  "lastModified": "2025-04-20T01:37:25.860",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 6.1,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "privilegesRequired": "NONE",
          "scope": "CHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 2.7,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2017-06-13T06:29:00.457",
  "references": [
    {
      "source": "security_alert@emc.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/98394"
    },
    {
      "source": "security_alert@emc.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html"
    },
    {
      "source": "security_alert@emc.com",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ],
      "url": "https://pivotal.io/security/cve-2017-4965"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/98394"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ],
      "url": "https://pivotal.io/security/cve-2017-4965"
    }
  ],
  "sourceIdentifier": "security_alert@emc.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2017-4965",
    "description": "An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ management UI are vulnerable to XSS attacks.",
    "id": "GSD-2017-4965",
    "references": [
      "https://www.suse.com/security/cve/CVE-2017-4965.html",
      "https://security.archlinux.org/CVE-2017-4965"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2017-4965"
      ],
      "details": "An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ management UI are vulnerable to XSS attacks.",
      "id": "GSD-2017-4965",
      "modified": "2023-12-13T01:21:02.769931Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secure@dell.com",
        "ID": "CVE-2017-4965",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Pivotal RabbitMQ",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "Pivotal RabbitMQ"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ management UI are vulnerable to XSS attacks."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "XSS vulnerabilities in RabbitMQ management UI"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "98394",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/98394"
          },
          {
            "name": "https://pivotal.io/security/cve-2017-4965",
            "refsource": "CONFIRM",
            "url": "https://pivotal.io/security/cve-2017-4965"
          },
          {
            "name": "[debian-lts-announce] 20210719 [SECURITY] [DLA 2710-1] rabbitmq-server security update",
            "refsource": "MLIST",
            "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:3.6.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:3.6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:3.5.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:3.5.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:3.6.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:3.6.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:3.6.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:3.6.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:3.5.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:3.6.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:rabbitmq:3.5.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:rabbitmq:3.5.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:rabbitmq:3.4.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:rabbitmq:3.5.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:rabbitmq:3.5.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:rabbitmq:3.4.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:rabbitmq:3.4.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:rabbitmq:3.4.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:rabbitmq:3.4.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:rabbitmq:3.5.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:vmware:rabbitmq:3.6.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.0:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.0:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.1:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.1:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.17:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.7.6:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.8:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.15:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.9:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.7.5:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.4:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.6:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.7:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.3:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.5:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.6:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.7.7:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.2:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.11:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.2:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.7.0:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.7.10:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.7.14:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.13:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.14:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.15:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.12:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.18:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.10:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.7.4:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.5:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.8:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.4:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.7.8:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.9:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.7:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.7.3:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.19:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.12:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.13:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.14:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.6.16:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.3:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.5.10:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.7.2:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.7.9:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:pivotal_software:rabbitmq:1.7.13:*:*:*:*:pivotal_cloud_foundry:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@dell.com",
          "ID": "CVE-2017-4965"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ management UI are vulnerable to XSS attacks."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-79"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://pivotal.io/security/cve-2017-4965",
              "refsource": "CONFIRM",
              "tags": [
                "Mitigation",
                "Vendor Advisory"
              ],
              "url": "https://pivotal.io/security/cve-2017-4965"
            },
            {
              "name": "98394",
              "refsource": "BID",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securityfocus.com/bid/98394"
            },
            {
              "name": "[debian-lts-announce] 20210719 [SECURITY] [DLA 2710-1] rabbitmq-server security update",
              "refsource": "MLIST",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": true
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 2.8,
          "impactScore": 2.7
        }
      },
      "lastModifiedDate": "2022-05-15T14:13Z",
      "publishedDate": "2017-06-13T06:29Z"
    }
  }
}

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201706-0533",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.9,
        "vendor": "pivotal",
        "version": "3.6.6"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "pivotal",
        "version": "1.5.19"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "pivotal",
        "version": "1.5.7"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "pivotal",
        "version": "1.6.15"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "pivotal",
        "version": "1.5.3"
      },
      {
        "model": "rabbitmq server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "broadcom",
        "version": "3.4.0"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "9.0"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "3.6.0"
      },
      {
        "model": "rabbitmq server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "broadcom",
        "version": "3.4.4"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.7.4"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.5.8"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.6.3"
      },
      {
        "model": "rabbitmq server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "broadcom",
        "version": "3.4.2"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.5.0"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.6.6"
      },
      {
        "model": "rabbitmq server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "broadcom",
        "version": "3.5.6"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.5.13"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.6.12"
      },
      {
        "model": "rabbitmq server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "broadcom",
        "version": "3.6.7"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.6.9"
      },
      {
        "model": "rabbitmq server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "broadcom",
        "version": "3.5.2"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "3.6.3"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.6.0"
      },
      {
        "model": "rabbitmq server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "broadcom",
        "version": "3.4.1"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.5.14"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "3.5.5"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.7.10"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.7.14"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "3.5.7"
      },
      {
        "model": "rabbitmq server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "broadcom",
        "version": "3.5.0"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.5.10"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.7.6"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.5.11"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.5.2"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.7.9"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.5.4"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.5.5"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.5.6"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.6.1"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "3.5.4"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "3.6.5"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.5.17"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.7.5"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.5.1"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.6.4"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.6.8"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.5.9"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.6.10"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.5.15"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.6.14"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.6.7"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.7.7"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.7.13"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.7.2"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "3.6.2"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.5.18"
      },
      {
        "model": "rabbitmq server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "broadcom",
        "version": "3.5.3"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.6.2"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.5.12"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.6.5"
      },
      {
        "model": "rabbitmq server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "broadcom",
        "version": "3.5.1"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "3.6.4"
      },
      {
        "model": "rabbitmq server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "broadcom",
        "version": "3.4.3"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.6.13"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.7.8"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.7.0"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.7.3"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "3.6.1"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "pivotal",
        "version": "1.6.16"
      },
      {
        "model": "rabbitmq",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "pivotal",
        "version": "1.7.x"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "pivotal",
        "version": "3.4.x"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "pivotal",
        "version": "for pcf 1.6.18"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "pivotal",
        "version": "for pcf 1.5.x"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "pivotal",
        "version": "3.5.x"
      },
      {
        "model": "rabbitmq",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "pivotal",
        "version": "3.6.x"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "pivotal",
        "version": "for pcf 1.7.15"
      },
      {
        "model": "rabbitmq",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "pivotal",
        "version": "1.6.x"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "pivotal",
        "version": "3.6.9"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "pivotal",
        "version": "3.4.3"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "pivotal",
        "version": "3.6.7"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "pivotal",
        "version": "3.4.1"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "pivotal",
        "version": "3.4.2"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "pivotal",
        "version": "3.4.0"
      },
      {
        "model": "rabbitmq for pcf",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "pivotal",
        "version": "1.7.7"
      },
      {
        "model": "rabbitmq for pcf",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "pivotal",
        "version": "1.7"
      },
      {
        "model": "rabbitmq for pcf",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "pivotal",
        "version": "1.6.12"
      },
      {
        "model": "rabbitmq for pcf",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "pivotal",
        "version": "1.6.4"
      },
      {
        "model": "rabbitmq for pcf",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "pivotal",
        "version": "1.6.3"
      },
      {
        "model": "rabbitmq for pcf",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "pivotal",
        "version": "1.6.2"
      },
      {
        "model": "rabbitmq for pcf",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "pivotal",
        "version": "1.6.1"
      },
      {
        "model": "rabbitmq for pcf",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "pivotal",
        "version": "1.6"
      },
      {
        "model": "rabbitmq for pcf",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "pivotal",
        "version": "1.5.20"
      },
      {
        "model": "rabbitmq for pcf",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "pivotal",
        "version": "1.5"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "pivotal",
        "version": "3.6"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "pivotal",
        "version": "3.5"
      },
      {
        "model": "rabbitmq",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "pivotal",
        "version": "3.4"
      },
      {
        "model": "rabbitmq for pcf",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "pivotal",
        "version": "1.7.15"
      },
      {
        "model": "rabbitmq for pcf",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "pivotal",
        "version": "1.6.18"
      },
      {
        "model": "rabbitmq",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "pivotal",
        "version": "3.6.9"
      }
    ],
    "sources": [
      {
        "db": "BID",
        "id": "98394"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-004861"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201705-1213"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-4965"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/a:pivotal_software:rabbitmq",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-004861"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "GE Digital Security Team and by Brandon Williams from Early Warning.",
    "sources": [
      {
        "db": "BID",
        "id": "98394"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201705-1213"
      }
    ],
    "trust": 0.9
  },
  "cve": "CVE-2017-4965",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 8.6,
            "id": "CVE-2017-4965",
            "impactScore": 2.9,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 1.9,
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "exploitabilityScore": 2.8,
            "id": "CVE-2017-4965",
            "impactScore": 2.7,
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "trust": 1.0,
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "None",
            "baseScore": 6.1,
            "baseSeverity": "Medium",
            "confidentialityImpact": "Low",
            "exploitabilityScore": null,
            "id": "CVE-2017-4965",
            "impactScore": null,
            "integrityImpact": "Low",
            "privilegesRequired": "None",
            "scope": "Changed",
            "trust": 0.8,
            "userInteraction": "Required",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2017-4965",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "NVD",
            "id": "CVE-2017-4965",
            "trust": 0.8,
            "value": "Medium"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201705-1213",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "VULMON",
            "id": "CVE-2017-4965",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2017-4965"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-004861"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201705-1213"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-4965"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ management UI are vulnerable to XSS attacks. Pivotal RabbitMQ Contains a cross-site scripting vulnerability.Information may be obtained and information may be altered. Pivotal RabbitMQ products are prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. \nAn attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2017-4965"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-004861"
      },
      {
        "db": "BID",
        "id": "98394"
      },
      {
        "db": "VULMON",
        "id": "CVE-2017-4965"
      }
    ],
    "trust": 1.98
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2017-4965",
        "trust": 2.8
      },
      {
        "db": "BID",
        "id": "98394",
        "trust": 2.0
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-004861",
        "trust": 0.8
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.2432",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201705-1213",
        "trust": 0.6
      },
      {
        "db": "VULMON",
        "id": "CVE-2017-4965",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2017-4965"
      },
      {
        "db": "BID",
        "id": "98394"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-004861"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201705-1213"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-4965"
      }
    ]
  },
  "id": "VAR-201706-0533",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VARIoT devices database",
        "id": null
      }
    ],
    "trust": 0.625
  },
  "last_update_date": "2025-04-20T20:10:58.079000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "CVE-2017-4965 and CVE-2017-4967: XSS vulnerabilities in RabbitMQ management UI",
        "trust": 0.8,
        "url": "https://pivotal.io/security/cve-2017-4965"
      },
      {
        "title": "Pivotal RabbitMQ  and Pivotal RabbitMQ for PCF Fixes for cross-site scripting vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=70557"
      },
      {
        "title": "Debian CVElist Bug Report Logs: CVE-2017-4965 CVE-2017-4966 CVE-2017-4967",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=6b6ae5ada791d0845be3b03f58e84470"
      },
      {
        "title": "Red Hat: CVE-2017-4965",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database\u0026qid=CVE-2017-4965"
      },
      {
        "title": "Arch Linux Issues: ",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=arch_linux_issues\u0026qid=CVE-2017-4965"
      },
      {
        "title": "Oracle Solaris Third Party Bulletins: Oracle Solaris Third Party Bulletin - April 2017",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=oracle_solaris_third_party_bulletins\u0026qid=a31bff03e9909229fd67996884614fdf"
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2017-4965"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-004861"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201705-1213"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-79",
        "trust": 1.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-004861"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-4965"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.0,
        "url": "https://pivotal.io/security/cve-2017-4965"
      },
      {
        "trust": 1.8,
        "url": "http://www.securityfocus.com/bid/98394"
      },
      {
        "trust": 1.6,
        "url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-4965"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2017-4965"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.2432"
      },
      {
        "trust": 0.3,
        "url": "http://pivotal.io/"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/79.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863586"
      },
      {
        "trust": 0.1,
        "url": "https://security.archlinux.org/cve-2017-4965"
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2017-4965"
      },
      {
        "db": "BID",
        "id": "98394"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-004861"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201705-1213"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-4965"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "VULMON",
        "id": "CVE-2017-4965"
      },
      {
        "db": "BID",
        "id": "98394"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-004861"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201705-1213"
      },
      {
        "db": "NVD",
        "id": "CVE-2017-4965"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2017-06-13T00:00:00",
        "db": "VULMON",
        "id": "CVE-2017-4965"
      },
      {
        "date": "2017-05-11T00:00:00",
        "db": "BID",
        "id": "98394"
      },
      {
        "date": "2017-07-10T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2017-004861"
      },
      {
        "date": "2017-05-11T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201705-1213"
      },
      {
        "date": "2017-06-13T06:29:00.457000",
        "db": "NVD",
        "id": "CVE-2017-4965"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2021-07-19T00:00:00",
        "db": "VULMON",
        "id": "CVE-2017-4965"
      },
      {
        "date": "2017-05-23T16:24:00",
        "db": "BID",
        "id": "98394"
      },
      {
        "date": "2017-07-10T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2017-004861"
      },
      {
        "date": "2022-03-18T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201705-1213"
      },
      {
        "date": "2025-04-20T01:37:25.860000",
        "db": "NVD",
        "id": "CVE-2017-4965"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201705-1213"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Pivotal RabbitMQ Vulnerable to cross-site scripting",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2017-004861"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "XSS",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201705-1213"
      }
    ],
    "trust": 0.6
  }
}