{"id":"CVE-2019-17134","aliases":["DEBIAN-CVE-2019-17134","EUVD-2022-5091","GHSA-r4v4-3jj7-jc29","PYSEC-2026-433","RHSA-2019:3743","RHSA-2019:3788","RHSA-2020:0721","SUSE-SU-2019:3068-1"],"status":"published","title":"OpenStack Octavia Amphora-Agent not requiring Client-Certificate","description":"Amphora Images in OpenStack Octavia \u003e=0.10.0 \u003c2.1.2, \u003e=3.0.0 \u003c3.2.0, \u003e=4.0.0 \u003c4.1.0 allows anyone with access to the management network to bypass client-certificate based authentication and retrieve information or issue configuration commands via simple HTTP requests to the Agent on port https/9443, because the cmd/agent.py gunicorn cert_reqs option is True but is supposed to be ssl.CERT_REQUIRED.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02316,"percentile":0.83545,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-287"],"published":"2019-10-08T17:14:37Z","modified":"2026-10-24T10:30:28Z","fixes":[{"ecosystem":"PyPI","package":"octavia","fixed_in":["2.1.2","3.2.0","4.1.0"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"octavia","fixed_in":["4.0.0-6"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"octavia","fixed_in":["4.0.0-6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"octavia","fixed_in":["4.0.0-6"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-octavia","fixed_in":["0:3.1.0-3.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-octavia-amphora-agent","fixed_in":["0:3.1.0-3.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-octavia-api","fixed_in":["0:3.1.0-3.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-octavia-common","fixed_in":["0:3.1.0-3.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-octavia-debuginfo","fixed_in":["0:3.1.0-3.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-octavia-diskimage-create","fixed_in":["0:3.1.0-3.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-octavia-health-manager","fixed_in":["0:3.1.0-3.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-octavia-housekeeping","fixed_in":["0:3.1.0-3.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"openstack-octavia-worker","fixed_in":["0:3.1.0-3.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python-octavia","fixed_in":["0:3.1.0-3.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:14::el7","package":"python-octavia-tests-golang","fixed_in":["0:3.1.0-3.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-octavia","fixed_in":["0:2.1.2-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-octavia-amphora-agent","fixed_in":["0:2.1.2-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-octavia-api","fixed_in":["0:2.1.2-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-octavia-common","fixed_in":["0:2.1.2-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-octavia-debuginfo","fixed_in":["0:2.1.2-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-octavia-diskimage-create","fixed_in":["0:2.1.2-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-octavia-health-manager","fixed_in":["0:2.1.2-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-octavia-housekeeping","fixed_in":["0:2.1.2-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"openstack-octavia-worker","fixed_in":["0:2.1.2-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"python-octavia","fixed_in":["0:2.1.2-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:13::el7","package":"python-octavia-tests-golang","fixed_in":["0:2.1.2-1.el7ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:15::el8","package":"openstack-octavia","fixed_in":["0:4.1.2-0.20200114080449.5a71643.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:15::el8","package":"openstack-octavia-amphora-agent","fixed_in":["0:4.1.2-0.20200114080449.5a71643.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:15::el8","package":"openstack-octavia-api","fixed_in":["0:4.1.2-0.20200114080449.5a71643.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:15::el8","package":"openstack-octavia-common","fixed_in":["0:4.1.2-0.20200114080449.5a71643.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:15::el8","package":"openstack-octavia-diskimage-create","fixed_in":["0:4.1.2-0.20200114080449.5a71643.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:15::el8","package":"openstack-octavia-health-manager","fixed_in":["0:4.1.2-0.20200114080449.5a71643.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:15::el8","package":"openstack-octavia-housekeeping","fixed_in":["0:4.1.2-0.20200114080449.5a71643.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:15::el8","package":"openstack-octavia-worker","fixed_in":["0:4.1.2-0.20200114080449.5a71643.el8ost"],"sources":["osv"]},{"ecosystem":"Red Hat:openstack:15::el8","package":"python3-octavia","fixed_in":["0:4.1.2-0.20200114080449.5a71643.el8ost"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.10.0"},{"fixed":"2.1.2"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.2.0"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.1.0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-6"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-6"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-6"}]}]},{"source":"osv","ecosystem":"PyPI","package":"octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.10.0"},{"fixed":"2.1.2"}]}],"versions":["0.10.0","1.0.0","1.0.0.0b1","1.0.0.0b2","1.0.0.0b3","1.0.0.0rc1","1.0.0.0rc2","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","2.0.0","2.0.0.0b1","2.0.0.0b2","2.0.0.0b3","2.0.0.0rc1","2.0.0.0rc2","2.0.1","2.0.2","2.0.3","2.0.4","2.1.0","2.1.1"]},{"source":"osv","ecosystem":"PyPI","package":"octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.2.0"}]}],"versions":["3.0.0","3.0.1","3.0.2","3.1.0","3.1.1"]},{"source":"osv","ecosystem":"PyPI","package":"octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.1.0"}]}],"versions":["4.0.0","4.0.1"]},{"source":"osv","ecosystem":"PyPI","package":"octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.10.0"},{"fixed":"2.1.2"},{"introduced":"3.0.0"},{"fixed":"3.2.0"},{"introduced":"4.0.0"},{"fixed":"4.1.0"}]}],"versions":["0.10.0","1.0.0","1.0.0.0b1","1.0.0.0b2","1.0.0.0b3","1.0.0.0rc1","1.0.0.0rc2","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","2.0.0","2.0.0.0b1","2.0.0.0b2","2.0.0.0b3","2.0.0.0rc1","2.0.0.0rc2","2.0.1","2.0.2","2.0.3","2.0.4","2.1.0","2.1.1","3.0.0","3.0.1","3.0.2","3.1.0","3.1.1","4.0.0","4.0.1"]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-3.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-octavia-amphora-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-3.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-octavia-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-3.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-octavia-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-3.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-octavia-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-3.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-octavia-diskimage-create","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-3.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-octavia-health-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-3.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-octavia-housekeeping","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-3.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"openstack-octavia-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-3.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-3.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"python-octavia-tests-golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-3.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-octavia-amphora-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-octavia-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-octavia-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-octavia-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-octavia-diskimage-create","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-octavia-health-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-octavia-housekeeping","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"openstack-octavia-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"python-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"python-octavia-tests-golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-1.el7ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:15::el8","package":"openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.2-0.20200114080449.5a71643.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:15::el8","package":"openstack-octavia-amphora-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.2-0.20200114080449.5a71643.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:15::el8","package":"openstack-octavia-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.2-0.20200114080449.5a71643.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:15::el8","package":"openstack-octavia-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.2-0.20200114080449.5a71643.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:15::el8","package":"openstack-octavia-diskimage-create","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.2-0.20200114080449.5a71643.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:15::el8","package":"openstack-octavia-health-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.2-0.20200114080449.5a71643.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:15::el8","package":"openstack-octavia-housekeeping","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.2-0.20200114080449.5a71643.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:15::el8","package":"openstack-octavia-worker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.2-0.20200114080449.5a71643.el8ost"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:15::el8","package":"python3-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.2-0.20200114080449.5a71643.el8ost"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-db","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1572311426.a6dc2fd-3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1573069087.15ffd1c-3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1572019823.6650494-3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ardana-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0+git.1572618171.4460843-3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.1~dev21-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.0+git.1553459627.948e8cc-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1.1~dev28-3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.6~dev8-3.16.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-neutron-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1~dev476-3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-neutron-lbaas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.1~dev16-3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2.4~dev22-3.16.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.1~dev3-3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.2~dev14-3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-psutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.6-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"release-notes-suse-openstack-cloud","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20191025-3.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.1~dev21-3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.8~dev8-3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.1~dev22-3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.3~dev23-3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1.1~dev28-3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-magnum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1~dev28-4.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.3.1~dev15-3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-monasca-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2~dev3-3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.6~dev8-6.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2.4~dev22-3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.1~dev3-4.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"venv-openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.2~dev14-3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"crowbar-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0+git.1573825081.b1caf60f1-3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"crowbar-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0+git.1573754820.dd036ef77-3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"crowbar-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0+git.1572871359.50fc6087-14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.1~dev21-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-heat-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.0+git.1553459627.948e8cc-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1.1~dev28-3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.6~dev8-3.16.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-neutron-gbp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1~dev476-3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-neutron-lbaas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.1~dev16-3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2.4~dev22-3.16.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.1~dev3-3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.2~dev14-3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-psutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.6-3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"release-notes-suse-openstack-cloud","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20191025-3.15.1"}]}],"bundled":2}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"opendev","product":"octavia"}],"references":[{"url":"https://storyboard.openstack.org/#%21/story/2006660","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://review.opendev.org/686547","tags":["x_refsource_MISC","x_transferred","Mailing List","Patch","Third Party Advisory","fix","web"]},{"url":"https://review.opendev.org/686546","tags":["x_refsource_MISC","x_transferred","Mailing List","Patch","Third Party Advisory","fix","web"]},{"url":"https://review.opendev.org/686545","tags":["x_refsource_MISC","x_transferred","Mailing List","Patch","Third Party Advisory","fix","web"]},{"url":"https://review.opendev.org/686544","tags":["x_refsource_MISC","x_transferred","Mailing List","Patch","Third Party Advisory","fix","web"]},{"url":"https://review.opendev.org/686543","tags":["x_refsource_MISC","x_transferred","Mailing List","Patch","Third Party Advisory","fix","web"]},{"url":"https://review.opendev.org/686541","tags":["x_refsource_MISC","x_transferred","Mailing List","Patch","Third Party Advisory","fix","web"]},{"url":"https://security.openstack.org/ossa/OSSA-2019-005.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix","web","article"]},{"url":"https://usn.ubuntu.com/4153-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3743","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3788","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0721","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17134","tags":["advisory"]},{"url":"https://storyboard.openstack.org/#!/story/2006660","tags":["web"]},{"url":"https://github.com/openstack/octavia/commit/1725517d1d209f26b2275306d83e49c099dcbe1a","tags":["web"]},{"url":"https://github.com/openstack/octavia/commit/2976a7f0f109e17930db8a61136526ead44ea7e5","tags":["web"]},{"url":"https://github.com/openstack/octavia/commit/624ff08f27bcb73788663cbe6d35cbe29c537844","tags":["web"]},{"url":"https://github.com/openstack/octavia/commit/89a2f6e0136ad49d928eb65b4cf555af2a2b8ab1","tags":["web"]},{"url":"https://github.com/openstack/octavia/commit/b0c2cd7b4c835c391cfedf12cf9f9ff8a0aabd17","tags":["web"]},{"url":"https://github.com/openstack/octavia/commit/c2fdffc3b748f8007c72e52df257e38756923b40","tags":["web"]},{"url":"https://github.com/advisories/GHSA-r4v4-3jj7-jc29","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-17134","tags":["advisory"]},{"url":"https://github.com/openstack/octavia","tags":["package"]},{"url":"https://pypi.org/project/octavia","tags":["package"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1761307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1762807","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3743.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-17134","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17134","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1712448","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760178","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3788.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1749344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1772209","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0721.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193068-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1153304","tags":["report"]},{"url":"https://bugzilla.suse.com/1155942","tags":["report"]},{"url":"https://bugzilla.suse.com/1156525","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18874","tags":["web"]},{"url":"https://bugzilla.suse.com/SOC-10094","tags":["report"]},{"url":"https://bugzilla.suse.com/SOC-10133","tags":["report"]},{"url":"https://bugzilla.suse.com/SOC-10289","tags":["report"]},{"url":"https://bugzilla.suse.com/SOC-10495","tags":["report"]},{"url":"https://bugzilla.suse.com/SOC-10510","tags":["report"]},{"url":"https://bugzilla.suse.com/SOC-10761","tags":["report"]},{"url":"https://bugzilla.suse.com/SOC-10887","tags":["report"]},{"url":"https://bugzilla.suse.com/SOC-10899","tags":["report"]},{"url":"https://bugzilla.suse.com/SOC-10902","tags":["report"]},{"url":"https://bugzilla.suse.com/SOC-10906","tags":["report"]},{"url":"https://bugzilla.suse.com/SOC-10934","tags":["report"]},{"url":"https://bugzilla.suse.com/SOC-9140","tags":["report"]},{"url":"https://bugzilla.suse.com/SOC-9172","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2019-17134","description":"Amphora Images in OpenStack Octavia \u003e=0.10.0 \u003c2.1.2, \u003e=3.0.0 \u003c3.2.0, \u003e=4.0.0 \u003c4.1.0 allows anyone with access to the management network to bypass client-certificate based authentication and retrieve information or issue configuration commands via simple HTTP requests to the Agent on port https/9443, because the cmd/agent.py gunicorn cert_reqs option is True but is supposed to be ssl.CERT_REQUIRED.","status":"published","published":"2019-10-08T17:14:37Z","modified":"2024-08-05T01:33:17.047Z","updated_at":"2026-11-02T14:20:24.678649Z"}],"euvd":[{"id":"EUVD-2022-5091","description":"Amphora Images in OpenStack Octavia \u003e=0.10.0 \u003c2.1.2, \u003e=3.0.0 \u003c3.2.0, \u003e=4.0.0 \u003c4.1.0 allows anyone with access to the management network to bypass client-certificate based authentication and retrieve information or issue configuration commands via simple HTTP requests to the Agent on port https/9443, because the cmd/agent.py gunicorn cert_reqs option is True but is supposed to be ssl.CERT_REQUIRED.","status":"published","published":"2019-10-08T17:14:37Z","modified":"2024-08-05T01:33:17Z","updated_at":"2026-11-03T02:40:30.328063Z"}],"ghsa":[{"id":"GHSA-r4v4-3jj7-jc29","title":"OpenStack Octavia Amphora-Agent not requiring Client-Certificate","description":"Amphora Images in OpenStack Octavia \u003e=0.10.0 \u003c2.1.2, \u003e=3.0.0 \u003c3.2.0, \u003e=4.0.0 \u003c4.1.0 allows anyone with access to the management network to bypass client-certificate based authentication and retrieve information or issue configuration commands via simple HTTP requests to the Agent on port https/9443, because the `cmd/agent.py` gunicorn cert_reqs option is True but is supposed to be ssl.CERT_REQUIRED.","status":"published","published":"2022-05-24T16:58:03Z","modified":"2024-05-02T13:13:04Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:37:48.08826Z"}],"nvd":[{"id":"CVE-2019-17134","description":"Amphora Images in OpenStack Octavia \u003e=0.10.0 \u003c2.1.2, \u003e=3.0.0 \u003c3.2.0, \u003e=4.0.0 \u003c4.1.0 allows anyone with access to the management network to bypass client-certificate based authentication and retrieve information or issue configuration commands via simple HTTP requests to the Agent on port https/9443, because the cmd/agent.py gunicorn cert_reqs option is True but is supposed to be ssl.CERT_REQUIRED.","status":"published","published":"2019-10-08T18:15:14.153Z","modified":"2026-06-17T02:23:22.637Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:05:31.019577Z"}],"osv":[{"id":"CVE-2019-17134","description":"Amphora Images in OpenStack Octavia \u003e=0.10.0 \u003c2.1.2, \u003e=3.0.0 \u003c3.2.0, \u003e=4.0.0 \u003c4.1.0 allows anyone with access to the management network to bypass client-certificate based authentication and retrieve information or issue configuration commands via simple HTTP requests to the Agent on port https/9443, because the cmd/agent.py gunicorn cert_reqs option is True but is supposed to be ssl.CERT_REQUIRED.","status":"published","published":"2019-10-08T18:15:14.153Z","modified":"2026-10-24T10:30:28.210872825Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:44:11.673963Z"},{"id":"DEBIAN-CVE-2019-17134","description":"Amphora Images in OpenStack Octavia \u003e=0.10.0 \u003c2.1.2, \u003e=3.0.0 \u003c3.2.0, \u003e=4.0.0 \u003c4.1.0 allows anyone with access to the management network to bypass client-certificate based authentication and retrieve information or issue configuration commands via simple HTTP requests to the Agent on port https/9443, because the cmd/agent.py gunicorn cert_reqs option is True but is supposed to be ssl.CERT_REQUIRED.","status":"published","published":"2019-10-08T18:15:14.153Z","modified":"2026-09-21T07:03:07.127994156Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:45:31.867036Z"},{"id":"GHSA-r4v4-3jj7-jc29","title":"OpenStack Octavia Amphora-Agent not requiring Client-Certificate","description":"Amphora Images in OpenStack Octavia \u003e=0.10.0 \u003c2.1.2, \u003e=3.0.0 \u003c3.2.0, \u003e=4.0.0 \u003c4.1.0 allows anyone with access to the management network to bypass client-certificate based authentication and retrieve information or issue configuration commands via simple HTTP requests to the Agent on port https/9443, because the `cmd/agent.py` gunicorn cert_reqs option is True but is supposed to be ssl.CERT_REQUIRED.","status":"published","published":"2022-05-24T16:58:03Z","modified":"2026-06-29T12:26:18.123247975Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T15:46:55.480549Z"},{"id":"PYSEC-2026-433","title":"OpenStack Octavia Amphora-Agent not requiring Client-Certificate","description":"Amphora Images in OpenStack Octavia \u003e=0.10.0 \u003c2.1.2, \u003e=3.0.0 \u003c3.2.0, \u003e=4.0.0 \u003c4.1.0 allows anyone with access to the management network to bypass client-certificate based authentication and retrieve information or issue configuration commands via simple HTTP requests to the Agent on port https/9443, because the `cmd/agent.py` gunicorn cert_reqs option is True but is supposed to be ssl.CERT_REQUIRED.","status":"published","published":"2026-06-29T11:50:32.761316Z","modified":"2026-07-02T13:00:04.969634207Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:52:57.671918Z"},{"id":"RHSA-2019:3743","title":"Red Hat Security Advisory: openstack-octavia security update","status":"published","published":"2024-09-13T16:13:30Z","modified":"2026-08-08T10:01:40Z","cvss":[{"version":"3.0","score":6.7,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2019:3788","title":"Red Hat Security Advisory: openstack-octavia security and bug fix update","status":"published","published":"2024-09-13T16:14:13Z","modified":"2026-08-08T10:01:40Z","cvss":[{"version":"3.0","score":6.7,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:0721","title":"Red Hat Security Advisory: openstack-octavia security update","status":"published","published":"2024-09-13T16:16:40Z","modified":"2026-08-08T10:01:43Z","cvss":[{"version":"3.0","score":6.7,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"SUSE-SU-2019:3068-1","title":"Security update for ardana-db, ardana-keystone, ardana-neutron, ardana-nova, crowbar-core, crowbar-openstack, crowbar-ui, openstack-barbican, openstack-heat-templates, openstack-keystone, openstack-neutron, openstack-neutron-gbp, openstack-neutron-lbaas, openstack-nova, openstack-octavia, openstack-sahara, python-psutil, release-notes-suse-openstack-cloud","description":"This update for ardana-db, ardana-keystone, ardana-neutron, ardana-nova, crowbar-core, crowbar-openstack, crowbar-ui, openstack-barbican, openstack-heat-templates, openstack-keystone, openstack-neutron, openstack-neutron-gbp, openstack-neutron-lbaas, openstack-nova, openstack-octavia, openstack-sahara, python-psutil, release-notes-suse-openstack-cloud fixes the following issues:\n\nSecurity fix for openstack-octavia:\n\n- CVE-2019-17134: Fixed an issue where Octavia Amphora-Agent not requiring Client-Certificate (bsc#1153304).\n\nSecurity fix for python-psutil:\n\n- CVE-2019-18874: Fixed a double-free vulnerability occured during converting system data into a \n  Python object (bsc#1155089).\n  \n  \n- Update to version 9.0+git.1572311426.a6dc2fd:\n  * Align Crowbar and Ardana MariaDB configs (SOC-10094)\n\n- Update to version 9.0+git.1573069087.15ffd1c:\n  * enable debug and insecure_debug on demand (SOC-10934)\n\n- Update to version 9.0+git.1572019823.6650494:\n  * Correctly setup ardana_notify_... fact (SOC-10902)\n\n- Update to version 9.0+git.1572618171.4460843:\n  * Update gerrit FQDN in .gitreview (SOC-9140)\n\n- Update to version 6.0+git.1573825081.b1caf60f1:\n  * Update the testsuite for new upgrade method (SOC-10761)\n  * upgrade: cold start nova before live migration (SOC-10761)\n\n- Update to version 6.0+git.1573131992.3c660b413:\n  * [upgrade] Call finalize_nodes_upgrade at the very end (bsc#1155942)\n\n- Update to version 6.0+git.1573051151.3495e0e94:\n  * Allow enabling bpdu-forwarding on OVS bridges (SOC-9172)\n\n\n\n- Update to version 6.0+git.1573754820.dd036ef77:\n  * neutron: use octavia-api admin VIP URI for lbaasv2 (SOC-10906)\n  * octavia: handle certificate ownership in barclamp (SOC-10906)\n  * octavia: add SSL support to octavia-api (SOC-10906)\n\n- Update to version 6.0+git.1573174019.9965ae9b8:\n  * designate: change default configuration (SOC-10899)\n\n- Update to version 6.0+git.1572855359.8efafea01:\n  * Make sure the input file with ssh key exists (SOC-10133)\n\n- Update to version 6.0+git.1572636244.e12406629:\n  * Change order of Octavia to 102 (SOC-10289)\n\n- Update to version 6.0+git.1572470261.49c0affe1:\n  * designate: move keystone resource lookup to convergence (SOC-10887)\n\n- Update to version 1.3.0+git.1572871359.50fc6087:\n  * Add title for XEN compute nodes precheck (SOC-10495)\n\n- Update to version barbican-7.0.1.dev21:\n  * Fix duplicate paths in secret hrefs\n  * Fix the bug of pep8 and building api-guide\n  * OpenDev Migration Patch\n\n- Update to version barbican-7.0.1.dev21:\n  * Fix duplicate paths in secret hrefs\n  * Fix the bug of pep8 and building api-guide\n  * OpenDev Migration Patch\n- remove 0001-Fix-duplicate-paths-in-secret-hrefs.patch as it had landed upstream\n\n- Replace openstack.org git:// URLs with https:// \n\n- Update to version keystone-14.1.1.dev28:\n  * Allows to use application credentials through group membership\n\n- Update to version keystone-14.1.1.dev28:\n  * Allows to use application credentials through group membership\n\n- Update to version neutron-13.0.6.dev8:\n  * Retry creating iptables managers and adding metering rules\n\n- Update to version neutron-13.0.6.dev6:\n  * Increase timeout when waiting for dnsmasq enablement\n\n- Update to version neutron-13.0.6.dev4:\n  * Log OVS firewall conjunction creation\n\n- Update to version neutron-13.0.6.dev8:\n  * Retry creating iptables managers and adding metering rules\n\n- Update to version neutron-13.0.6.dev6:\n  * Increase timeout when waiting for dnsmasq enablement\n\n- Update to version neutron-13.0.6.dev4:\n  * Log OVS firewall conjunction creation\n\n- Update to version group-based-policy-5.0.1.dev476:\n  * Provide a control knob to use the internal EP interface\n  * Send port notifications when host\\_route is getting updated\n\n- Update to version group-based-policy-5.0.1.dev473:\n  * Fix pep8 failures seen on submitted patches\n\n- Update to version neutron-lbaas-13.0.1.dev16:\n  * 'lbaas delete l7 rule' Parameter Passing Error\n\n- Update to version neutron-lbaas-13.0.1.dev16:\n  * 'lbaas delete l7 rule' Parameter Passing Error\n\n- Update to version nova-18.2.4.dev22:\n  * Revert 'openstack server create' to 'nova boot' in nova docs\n  * doc: fix and clarify --block-device usage in user docs\n\n- Update to version nova-18.2.4.dev20:\n  * Avoid error 500 on shelve task\\_state race\n\n- Update to version nova-18.2.4.dev19:\n  * libvirt: Ignore volume exceptions during post\\_live\\_migration\n\n- Update to version nova-18.2.4.dev22:\n  * Revert 'openstack server create' to 'nova boot' in nova docs\n  * doc: fix and clarify --block-device usage in user docs\n\n- Update to version nova-18.2.4.dev20:\n  * Avoid error 500 on shelve task\\_state race\n\n- Update to version nova-18.2.4.dev19:\n  * libvirt: Ignore volume exceptions during post\\_live\\_migration\n\n- Update to version octavia-3.2.1.dev3:\n  * Improve the error message for bad pkcs12 bundles\n\n- Update to version octavia-3.2.1.dev2:\n  * ipvsadm '--exact' arg to ensure outputs are ints\n\n- Update to version sahara-9.0.2.dev14:\n  * Fixing image creation\n  * Check MariaDB installation\n\n- Update to version sahara-9.0.2.dev14:\n  * Fixing image creation\n  * Check MariaDB installation\n\n- Update to version 9.20191025:\n  * support OpenID Connect (SOC-10510)\n","status":"published","published":"2019-11-26T11:21:25Z","modified":"2026-02-04T04:08:21.69186Z","updated_at":"2026-11-02T15:53:47.06185Z"}]}}