SUSE-RU-2015:0462-1

Vulnerability from csaf_suse - Published: 2014-10-16 23:58 - Updated: 2026-09-20 11:57
Summary
Recommended update for crowbar-barclamp-nova_dashboard
Severity
Moderate
Notes
Title of the patch: Recommended update for crowbar-barclamp-nova_dashboard
Description of the patch: This update for crowbar-barclamp-nova_dashboard provides stability fixes from the upstream OpenStack project: * Use a host specific memcache key for django_compressor (bnc#894070) * Add Requires on crowbar-barclamp-openstack for the new crowbar-openstack cookbook. * Use helpers from new crowbar-openstack cookbook * Fix apache with HA not running until second chef-client run * Configure horizon before configuring the vhost for horizon in apache * Avoid races with HA on 'python manage.py syncdb' * Add dependency on crowbar-barclamp-openstack as Requires(post) and Requires to make sure the package is installed before the %post scriplet is executed (bnc#900887).
Patchnames: sleclo40sp3-crowbar-barclamp-nova_dashboard
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2014-3566
3.4 (Low)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE OpenStack Cloud 4:crowbar-barclamp-nova_dashboard-0:1.8+git.1410255987.ea30f00-0.11.1.noarch —
Vendor Fix
Threats
Impact moderate
References
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Recommended update for crowbar-barclamp-nova_dashboard",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThis update for crowbar-barclamp-nova_dashboard provides stability fixes \nfrom the upstream OpenStack project:\n\n    * Use a host specific memcache key for django_compressor (bnc#894070)\n    * Add Requires on crowbar-barclamp-openstack for the new\n      crowbar-openstack cookbook.\n    * Use helpers from new crowbar-openstack cookbook\n    * Fix apache with HA not running until second chef-client run\n    * Configure horizon before configuring the vhost for horizon in apache\n    * Avoid races with HA on \u0027python manage.py syncdb\u0027\n    * Add dependency on crowbar-barclamp-openstack as Requires(post) and\n      Requires to make sure the package is installed before the %post\n      scriplet is executed (bnc#900887).\n\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "sleclo40sp3-crowbar-barclamp-nova_dashboard",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-ru-2015_0462-1.json"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-RU-2015:0462-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2015-March/002741.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 894070",
        "url": "https://bugzilla.suse.com/894070"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 897815",
        "url": "https://bugzilla.suse.com/897815"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 900887",
        "url": "https://bugzilla.suse.com/900887"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 907044",
        "url": "https://bugzilla.suse.com/907044"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 913692",
        "url": "https://bugzilla.suse.com/913692"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-3566 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-3566/"
      }
    ],
    "title": "Recommended update for crowbar-barclamp-nova_dashboard",
    "tracking": {
      "current_release_date": "2026-09-20T11:57:35Z",
      "generator": {
        "date": "2014-10-16T23:58:10Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-RU-2015:0462-1",
      "initial_release_date": "2014-10-16T23:58:10Z",
      "revision_history": [
        {
          "date": "2014-10-16T23:58:10Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-15T08:45:29Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-20T11:57:35Z",
          "number": "3",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "crowbar-barclamp-nova_dashboard-0:1.8+git.1410255987.ea30f00-0.11.1.noarch",
                "product": {
                  "name": "crowbar-barclamp-nova_dashboard-0:1.8+git.1410255987.ea30f00-0.11.1.noarch",
                  "product_id": "crowbar-barclamp-nova_dashboard-0:1.8+git.1410255987.ea30f00-0.11.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/crowbar-barclamp-nova_dashboard@1.8+git.1410255987.ea30f00-0.11.1?arch=noarch\u0026upstream=crowbar-barclamp-nova_dashboard-0:1.8+git.1410255987.ea30f00-0.11.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE OpenStack Cloud 4",
                "product": {
                  "name": "SUSE OpenStack Cloud 4",
                  "product_id": "SUSE OpenStack Cloud 4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:cloud:4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "crowbar-barclamp-nova_dashboard-0:1.8+git.1410255987.ea30f00-0.11.1.noarch as component of SUSE OpenStack Cloud 4",
          "product_id": "SUSE OpenStack Cloud 4:crowbar-barclamp-nova_dashboard-0:1.8+git.1410255987.ea30f00-0.11.1.noarch"
        },
        "product_reference": "crowbar-barclamp-nova_dashboard-0:1.8+git.1410255987.ea30f00-0.11.1.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-3566",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-3566"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the \"POODLE\" issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE OpenStack Cloud 4:crowbar-barclamp-nova_dashboard-0:1.8+git.1410255987.ea30f00-0.11.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-3566",
          "url": "https://www.suse.com/security/cve/CVE-2014-3566"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1011293 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/1011293"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1031023 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/1031023"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1072727 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/1072727"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 901223 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/901223"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 901254 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/901254"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 901277 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/901277"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 901748 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/901748"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 901757 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/901757"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 901759 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/901759"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 901889 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/901889"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 901968 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/901968"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 902229 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/902229"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 902233 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/902233"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 902476 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/902476"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 903405 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/903405"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 903684 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/903684"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 904889 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/904889"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 905106 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/905106"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 914041 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/914041"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 957084 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/957084"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 994144 for CVE-2014-3566",
          "url": "https://bugzilla.suse.com/994144"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE OpenStack Cloud 4:crowbar-barclamp-nova_dashboard-0:1.8+git.1410255987.ea30f00-0.11.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.4,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE OpenStack Cloud 4:crowbar-barclamp-nova_dashboard-0:1.8+git.1410255987.ea30f00-0.11.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2014-10-16T23:58:10Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-3566"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.