Upstream information

CVE-2020-25032 at MITRE

Description

An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v2 Scores
  National Vulnerability Database
Base Score 5
Vector AV:N/AC:L/Au:N/C:P/I:N/A:N
Access Vector Network
Access Complexity Low
Authentication None
Confidentiality Impact Partial
Integrity Impact None
Availability Impact None
CVSS v3 Scores
  National Vulnerability Database SUSE
Base Score 7.5 6.8
Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Access Vector Network Network
Access Complexity Low High
Privileges Required None None
User Interaction None None
Scope Unchanged Changed
Confidentiality Impact High High
Integrity Impact None None
Availability Impact None None
CVSSv3 Version 3.1 3.1
SUSE Bugzilla entry: 1175986 [RESOLVED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
HPE Helion Openstack 8
  • ansible >= 2.9.14-3.15.1
  • ardana-ansible >= 8.0+git.1596735237.54109b1-3.77.1
  • ardana-cinder >= 8.0+git.1596129856.263f430-3.43.1
  • ardana-glance >= 8.0+git.1593631779.76fa9b7-3.24.1
  • ardana-mq >= 8.0+git.1593618123.678c32b-3.26.1
  • ardana-nova >= 8.0+git.1601298847.dd01585-3.42.1
  • ardana-osconfig >= 8.0+git.1595885113.93abcbc-3.49.1
  • documentation-hpe-helion-openstack-installation >= 8.20201007-1.29.1
  • documentation-hpe-helion-openstack-operations >= 8.20201007-1.29.1
  • documentation-hpe-helion-openstack-opsconsole >= 8.20201007-1.29.1
  • documentation-hpe-helion-openstack-planning >= 8.20201007-1.29.1
  • documentation-hpe-helion-openstack-security >= 8.20201007-1.29.1
  • documentation-hpe-helion-openstack-user >= 8.20201007-1.29.1
  • grafana >= 6.7.4-4.12.1
  • grafana-natel-discrete-panel >= 0.0.9-3.3.6
  • openstack-cinder >= 11.2.3~dev29-3.28.2
  • openstack-cinder-api >= 11.2.3~dev29-3.28.2
  • openstack-cinder-backup >= 11.2.3~dev29-3.28.2
  • openstack-cinder-doc >= 11.2.3~dev29-3.28.1
  • openstack-cinder-scheduler >= 11.2.3~dev29-3.28.2
  • openstack-cinder-volume >= 11.2.3~dev29-3.28.2
  • openstack-monasca-installer >= 20190923_16.32-3.15.1
  • openstack-neutron >= 11.0.9~dev69-3.37.2
  • openstack-neutron-dhcp-agent >= 11.0.9~dev69-3.37.2
  • openstack-neutron-doc >= 11.0.9~dev69-3.37.1
  • openstack-neutron-ha-tool >= 11.0.9~dev69-3.37.2
  • openstack-neutron-l3-agent >= 11.0.9~dev69-3.37.2
  • openstack-neutron-linuxbridge-agent >= 11.0.9~dev69-3.37.2
  • openstack-neutron-macvtap-agent >= 11.0.9~dev69-3.37.2
  • openstack-neutron-metadata-agent >= 11.0.9~dev69-3.37.2
  • openstack-neutron-metering-agent >= 11.0.9~dev69-3.37.2
  • openstack-neutron-openvswitch-agent >= 11.0.9~dev69-3.37.2
  • openstack-neutron-server >= 11.0.9~dev69-3.37.2
  • openstack-nova >= 16.1.9~dev76-3.39.2
  • openstack-nova-api >= 16.1.9~dev76-3.39.2
  • openstack-nova-cells >= 16.1.9~dev76-3.39.2
  • openstack-nova-compute >= 16.1.9~dev76-3.39.2
  • openstack-nova-conductor >= 16.1.9~dev76-3.39.2
  • openstack-nova-console >= 16.1.9~dev76-3.39.2
  • openstack-nova-consoleauth >= 16.1.9~dev76-3.39.2
  • openstack-nova-doc >= 16.1.9~dev76-3.39.1
  • openstack-nova-novncproxy >= 16.1.9~dev76-3.39.2
  • openstack-nova-placement-api >= 16.1.9~dev76-3.39.2
  • openstack-nova-scheduler >= 16.1.9~dev76-3.39.2
  • openstack-nova-serialproxy >= 16.1.9~dev76-3.39.2
  • openstack-nova-vncproxy >= 16.1.9~dev76-3.39.2
  • python-Django >= 1.11.29-3.19.2
  • python-Flask-Cors >= 3.0.3-3.3.1
  • python-Pillow >= 4.2.1-3.9.2
  • python-ardana-packager >= 0.0.3-7.7.2
  • python-cinder >= 11.2.3~dev29-3.28.2
  • python-keystoneclient >= 3.13.1-3.3.2
  • python-keystoneclient-doc >= 3.13.1-3.3.2
  • python-keystonemiddleware >= 4.17.1-5.3.1
  • python-kombu >= 4.1.0-3.7.1
  • python-neutron >= 11.0.9~dev69-3.37.2
  • python-nova >= 16.1.9~dev76-3.39.2
  • python-urllib3 >= 1.22-5.12.1
  • release-notes-hpe-helion-openstack >= 8.20200922-3.23.1
  • storm >= 1.2.3-3.6.1
  • storm-nimbus >= 1.2.3-3.6.1
  • storm-supervisor >= 1.2.3-3.6.1
  • venv-openstack-aodh-x86_64 >= 5.1.1~dev7-12.28.1
  • venv-openstack-barbican-x86_64 >= 5.0.2~dev3-12.29.1
  • venv-openstack-ceilometer-x86_64 >= 9.0.8~dev7-12.26.1
  • venv-openstack-cinder-x86_64 >= 11.2.3~dev29-14.30.1
  • venv-openstack-designate-x86_64 >= 5.0.3~dev7-12.27.1
  • venv-openstack-freezer-x86_64 >= 5.0.0.0~xrc2~dev2-10.24.1
  • venv-openstack-glance-x86_64 >= 15.0.3~dev3-12.27.1
  • venv-openstack-heat-x86_64 >= 9.0.8~dev22-12.29.1
  • venv-openstack-horizon-hpe-x86_64 >= 12.0.5~dev3-14.32.1
  • venv-openstack-ironic-x86_64 >= 9.1.8~dev8-12.29.1
  • venv-openstack-keystone-x86_64 >= 12.0.4~dev11-11.30.1
  • venv-openstack-magnum-x86_64 >= 5.0.2_5.0.2_5.0.2~dev31-11.28.1
  • venv-openstack-manila-x86_64 >= 5.1.1~dev5-12.33.1
  • venv-openstack-monasca-ceilometer-x86_64 >= 1.5.1_1.5.1_1.5.1~dev3-8.24.1
  • venv-openstack-monasca-x86_64 >= 2.2.2~dev1-11.24.1
  • venv-openstack-murano-x86_64 >= 4.0.2~dev2-12.24.1
  • venv-openstack-neutron-x86_64 >= 11.0.9~dev69-13.32.1
  • venv-openstack-nova-x86_64 >= 16.1.9~dev76-11.30.1
  • venv-openstack-octavia-x86_64 >= 1.0.6~dev3-12.29.1
  • venv-openstack-sahara-x86_64 >= 7.0.5~dev4-11.28.1
  • venv-openstack-swift-x86_64 >= 2.15.2_2.15.2_2.15.2~dev32-11.21.1
  • venv-openstack-trove-x86_64 >= 8.0.2~dev2-11.28.1
Patchnames:
HPE-Helion-OpenStack-8-2020-3309
SUSE OpenStack Cloud 8
  • ansible >= 2.9.14-3.15.1
  • ardana-ansible >= 8.0+git.1596735237.54109b1-3.77.1
  • ardana-cinder >= 8.0+git.1596129856.263f430-3.43.1
  • ardana-glance >= 8.0+git.1593631779.76fa9b7-3.24.1
  • ardana-mq >= 8.0+git.1593618123.678c32b-3.26.1
  • ardana-nova >= 8.0+git.1601298847.dd01585-3.42.1
  • ardana-osconfig >= 8.0+git.1595885113.93abcbc-3.49.1
  • documentation-suse-openstack-cloud-installation >= 8.20201007-1.29.1
  • documentation-suse-openstack-cloud-operations >= 8.20201007-1.29.1
  • documentation-suse-openstack-cloud-opsconsole >= 8.20201007-1.29.1
  • documentation-suse-openstack-cloud-planning >= 8.20201007-1.29.1
  • documentation-suse-openstack-cloud-security >= 8.20201007-1.29.1
  • documentation-suse-openstack-cloud-supplement >= 8.20201007-1.29.1
  • documentation-suse-openstack-cloud-upstream-admin >= 8.20201007-1.29.1
  • documentation-suse-openstack-cloud-upstream-user >= 8.20201007-1.29.1
  • documentation-suse-openstack-cloud-user >= 8.20201007-1.29.1
  • grafana >= 6.7.4-4.12.1
  • grafana-natel-discrete-panel >= 0.0.9-3.3.6
  • openstack-cinder >= 11.2.3~dev29-3.28.2
  • openstack-cinder-api >= 11.2.3~dev29-3.28.2
  • openstack-cinder-backup >= 11.2.3~dev29-3.28.2
  • openstack-cinder-doc >= 11.2.3~dev29-3.28.1
  • openstack-cinder-scheduler >= 11.2.3~dev29-3.28.2
  • openstack-cinder-volume >= 11.2.3~dev29-3.28.2
  • openstack-monasca-installer >= 20190923_16.32-3.15.1
  • openstack-neutron >= 11.0.9~dev69-3.37.2
  • openstack-neutron-dhcp-agent >= 11.0.9~dev69-3.37.2
  • openstack-neutron-doc >= 11.0.9~dev69-3.37.1
  • openstack-neutron-ha-tool >= 11.0.9~dev69-3.37.2
  • openstack-neutron-l3-agent >= 11.0.9~dev69-3.37.2
  • openstack-neutron-linuxbridge-agent >= 11.0.9~dev69-3.37.2
  • openstack-neutron-macvtap-agent >= 11.0.9~dev69-3.37.2
  • openstack-neutron-metadata-agent >= 11.0.9~dev69-3.37.2
  • openstack-neutron-metering-agent >= 11.0.9~dev69-3.37.2
  • openstack-neutron-openvswitch-agent >= 11.0.9~dev69-3.37.2
  • openstack-neutron-server >= 11.0.9~dev69-3.37.2
  • openstack-nova >= 16.1.9~dev76-3.39.2
  • openstack-nova-api >= 16.1.9~dev76-3.39.2
  • openstack-nova-cells >= 16.1.9~dev76-3.39.2
  • openstack-nova-compute >= 16.1.9~dev76-3.39.2
  • openstack-nova-conductor >= 16.1.9~dev76-3.39.2
  • openstack-nova-console >= 16.1.9~dev76-3.39.2
  • openstack-nova-consoleauth >= 16.1.9~dev76-3.39.2
  • openstack-nova-doc >= 16.1.9~dev76-3.39.1
  • openstack-nova-novncproxy >= 16.1.9~dev76-3.39.2
  • openstack-nova-placement-api >= 16.1.9~dev76-3.39.2
  • openstack-nova-scheduler >= 16.1.9~dev76-3.39.2
  • openstack-nova-serialproxy >= 16.1.9~dev76-3.39.2
  • openstack-nova-vncproxy >= 16.1.9~dev76-3.39.2
  • python-Django >= 1.11.29-3.19.2
  • python-Flask-Cors >= 3.0.3-3.3.1
  • python-Pillow >= 4.2.1-3.9.2
  • python-ardana-packager >= 0.0.3-7.7.2
  • python-cinder >= 11.2.3~dev29-3.28.2
  • python-keystoneclient >= 3.13.1-3.3.2
  • python-keystoneclient-doc >= 3.13.1-3.3.2
  • python-keystonemiddleware >= 4.17.1-5.3.1
  • python-kombu >= 4.1.0-3.7.1
  • python-neutron >= 11.0.9~dev69-3.37.2
  • python-nova >= 16.1.9~dev76-3.39.2
  • python-straight-plugin >= 1.5.0-1.3.1
  • python-urllib3 >= 1.22-5.12.1
  • release-notes-suse-openstack-cloud >= 8.20200922-3.23.1
  • storm >= 1.2.3-3.6.1
  • storm-nimbus >= 1.2.3-3.6.1
  • storm-supervisor >= 1.2.3-3.6.1
  • venv-openstack-aodh-x86_64 >= 5.1.1~dev7-12.28.1
  • venv-openstack-barbican-x86_64 >= 5.0.2~dev3-12.29.1
  • venv-openstack-ceilometer-x86_64 >= 9.0.8~dev7-12.26.1
  • venv-openstack-cinder-x86_64 >= 11.2.3~dev29-14.30.1
  • venv-openstack-designate-x86_64 >= 5.0.3~dev7-12.27.1
  • venv-openstack-freezer-x86_64 >= 5.0.0.0~xrc2~dev2-10.24.1
  • venv-openstack-glance-x86_64 >= 15.0.3~dev3-12.27.1
  • venv-openstack-heat-x86_64 >= 9.0.8~dev22-12.29.1
  • venv-openstack-horizon-x86_64 >= 12.0.5~dev3-14.32.1
  • venv-openstack-ironic-x86_64 >= 9.1.8~dev8-12.29.1
  • venv-openstack-keystone-x86_64 >= 12.0.4~dev11-11.30.1
  • venv-openstack-magnum-x86_64 >= 5.0.2_5.0.2_5.0.2~dev31-11.28.1
  • venv-openstack-manila-x86_64 >= 5.1.1~dev5-12.33.1
  • venv-openstack-monasca-ceilometer-x86_64 >= 1.5.1_1.5.1_1.5.1~dev3-8.24.1
  • venv-openstack-monasca-x86_64 >= 2.2.2~dev1-11.24.1
  • venv-openstack-murano-x86_64 >= 4.0.2~dev2-12.24.1
  • venv-openstack-neutron-x86_64 >= 11.0.9~dev69-13.32.1
  • venv-openstack-nova-x86_64 >= 16.1.9~dev76-11.30.1
  • venv-openstack-octavia-x86_64 >= 1.0.6~dev3-12.29.1
  • venv-openstack-sahara-x86_64 >= 7.0.5~dev4-11.28.1
  • venv-openstack-swift-x86_64 >= 2.15.2_2.15.2_2.15.2~dev32-11.21.1
  • venv-openstack-trove-x86_64 >= 8.0.2~dev2-11.28.1
Patchnames:
SUSE-OpenStack-Cloud-8-2020-3309
SUSE OpenStack Cloud 9
  • ardana-ansible >= 9.0+git.1596813072.110811d-3.25.2
  • ardana-cinder >= 9.0+git.1596129576.0b3d3ce-3.13.2
  • ardana-cobbler >= 9.0+git.1588258487.3acf8ad-3.16.2
  • ardana-installer-ui >= 9.0+git.1569535129.ca87ef0-3.13.2
  • ardana-opsconsole-ui >= 9.0+git.1566593422.813e56c-4.13.2
  • ardana-osconfig >= 9.0+git.1597427032.a062830-3.19.2
  • grafana >= 6.7.4-3.17.1
  • grafana-natel-discrete-panel >= 0.0.9-4.3.3
  • openstack-cinder >= 13.0.10~dev16-3.25.3
  • openstack-cinder-api >= 13.0.10~dev16-3.25.3
  • openstack-cinder-backup >= 13.0.10~dev16-3.25.3
  • openstack-cinder-scheduler >= 13.0.10~dev16-3.25.3
  • openstack-cinder-volume >= 13.0.10~dev16-3.25.3
  • openstack-dashboard >= 14.1.1~dev7-3.18.3
  • openstack-ironic >= 11.1.5~dev16-3.22.3
  • openstack-ironic-api >= 11.1.5~dev16-3.22.3
  • openstack-ironic-conductor >= 11.1.5~dev16-3.22.3
  • openstack-ironic-python-agent >= 3.3.4~dev5-3.16.2
  • openstack-manila >= 7.4.2~dev54-4.27.3
  • openstack-manila-api >= 7.4.2~dev54-4.27.3
  • openstack-manila-data >= 7.4.2~dev54-4.27.3
  • openstack-manila-scheduler >= 7.4.2~dev54-4.27.3
  • openstack-manila-share >= 7.4.2~dev54-4.27.3
  • openstack-neutron >= 13.0.8~dev95-3.28.3
  • openstack-neutron-dhcp-agent >= 13.0.8~dev95-3.28.3
  • openstack-neutron-ha-tool >= 13.0.8~dev95-3.28.3
  • openstack-neutron-l3-agent >= 13.0.8~dev95-3.28.3
  • openstack-neutron-linuxbridge-agent >= 13.0.8~dev95-3.28.3
  • openstack-neutron-macvtap-agent >= 13.0.8~dev95-3.28.3
  • openstack-neutron-metadata-agent >= 13.0.8~dev95-3.28.3
  • openstack-neutron-metering-agent >= 13.0.8~dev95-3.28.3
  • openstack-neutron-openvswitch-agent >= 13.0.8~dev95-3.28.3
  • openstack-neutron-server >= 13.0.8~dev95-3.28.3
  • openstack-nova >= 18.3.1~dev54-3.28.3
  • openstack-nova-api >= 18.3.1~dev54-3.28.3
  • openstack-nova-cells >= 18.3.1~dev54-3.28.3
  • openstack-nova-compute >= 18.3.1~dev54-3.28.3
  • openstack-nova-conductor >= 18.3.1~dev54-3.28.3
  • openstack-nova-console >= 18.3.1~dev54-3.28.3
  • openstack-nova-novncproxy >= 18.3.1~dev54-3.28.3
  • openstack-nova-placement-api >= 18.3.1~dev54-3.28.3
  • openstack-nova-scheduler >= 18.3.1~dev54-3.28.3
  • openstack-nova-serialproxy >= 18.3.1~dev54-3.28.3
  • openstack-nova-vncproxy >= 18.3.1~dev54-3.28.3
  • python-Flask-Cors >= 3.0.3-4.3.2
  • python-cinder >= 13.0.10~dev16-3.25.3
  • python-horizon >= 14.1.1~dev7-3.18.3
  • python-ironic >= 11.1.5~dev16-3.22.3
  • python-manila >= 7.4.2~dev54-4.27.3
  • python-neutron >= 13.0.8~dev95-3.28.3
  • python-nova >= 18.3.1~dev54-3.28.3
  • python-openstack_auth >= 14.1.1~dev7-3.18.3
  • storm >= 1.2.3-3.3.4
  • storm-nimbus >= 1.2.3-3.3.4
  • storm-supervisor >= 1.2.3-3.3.4
  • venv-openstack-cinder-x86_64 >= 13.0.10~dev16-3.22.3
  • venv-openstack-horizon-x86_64 >= 14.1.1~dev7-4.21.3
  • venv-openstack-ironic-x86_64 >= 11.1.5~dev16-4.17.2
  • venv-openstack-manila-x86_64 >= 7.4.2~dev54-3.23.2
  • venv-openstack-neutron-x86_64 >= 13.0.8~dev95-6.21.3
  • venv-openstack-nova-x86_64 >= 18.3.1~dev54-3.21.2
Patchnames:
SUSE-OpenStack-Cloud-9-2020-2876
SUSE OpenStack Cloud Crowbar 8
  • ansible >= 2.9.14-3.15.1
  • crowbar-core >= 5.0+git.1600432272.b3ad722f0-3.44.1
  • crowbar-core-branding-upstream >= 5.0+git.1600432272.b3ad722f0-3.44.1
  • crowbar-openstack >= 5.0+git.1599037158.5c4d07480-4.43.1
  • documentation-suse-openstack-cloud-deployment >= 8.20201007-1.29.1
  • documentation-suse-openstack-cloud-supplement >= 8.20201007-1.29.1
  • documentation-suse-openstack-cloud-upstream-admin >= 8.20201007-1.29.1
  • documentation-suse-openstack-cloud-upstream-user >= 8.20201007-1.29.1
  • grafana >= 6.7.4-4.12.1
  • grafana-natel-discrete-panel >= 0.0.9-3.3.6
  • openstack-cinder >= 11.2.3~dev29-3.28.2
  • openstack-cinder-api >= 11.2.3~dev29-3.28.2
  • openstack-cinder-backup >= 11.2.3~dev29-3.28.2
  • openstack-cinder-doc >= 11.2.3~dev29-3.28.1
  • openstack-cinder-scheduler >= 11.2.3~dev29-3.28.2
  • openstack-cinder-volume >= 11.2.3~dev29-3.28.2
  • openstack-monasca-installer >= 20190923_16.32-3.15.1
  • openstack-neutron >= 11.0.9~dev69-3.37.2
  • openstack-neutron-dhcp-agent >= 11.0.9~dev69-3.37.2
  • openstack-neutron-doc >= 11.0.9~dev69-3.37.1
  • openstack-neutron-ha-tool >= 11.0.9~dev69-3.37.2
  • openstack-neutron-l3-agent >= 11.0.9~dev69-3.37.2
  • openstack-neutron-linuxbridge-agent >= 11.0.9~dev69-3.37.2
  • openstack-neutron-macvtap-agent >= 11.0.9~dev69-3.37.2
  • openstack-neutron-metadata-agent >= 11.0.9~dev69-3.37.2
  • openstack-neutron-metering-agent >= 11.0.9~dev69-3.37.2
  • openstack-neutron-openvswitch-agent >= 11.0.9~dev69-3.37.2
  • openstack-neutron-server >= 11.0.9~dev69-3.37.2
  • openstack-nova >= 16.1.9~dev76-3.39.2
  • openstack-nova-api >= 16.1.9~dev76-3.39.2
  • openstack-nova-cells >= 16.1.9~dev76-3.39.2
  • openstack-nova-compute >= 16.1.9~dev76-3.39.2
  • openstack-nova-conductor >= 16.1.9~dev76-3.39.2
  • openstack-nova-console >= 16.1.9~dev76-3.39.2
  • openstack-nova-consoleauth >= 16.1.9~dev76-3.39.2
  • openstack-nova-doc >= 16.1.9~dev76-3.39.1
  • openstack-nova-novncproxy >= 16.1.9~dev76-3.39.2
  • openstack-nova-placement-api >= 16.1.9~dev76-3.39.2
  • openstack-nova-scheduler >= 16.1.9~dev76-3.39.2
  • openstack-nova-serialproxy >= 16.1.9~dev76-3.39.2
  • openstack-nova-vncproxy >= 16.1.9~dev76-3.39.2
  • python-Django >= 1.11.29-3.19.2
  • python-Pillow >= 4.2.1-3.9.2
  • python-cinder >= 11.2.3~dev29-3.28.2
  • python-keystoneclient >= 3.13.1-3.3.2
  • python-keystoneclient-doc >= 3.13.1-3.3.2
  • python-keystonemiddleware >= 4.17.1-5.3.1
  • python-kombu >= 4.1.0-3.7.1
  • python-neutron >= 11.0.9~dev69-3.37.2
  • python-nova >= 16.1.9~dev76-3.39.2
  • python-straight-plugin >= 1.5.0-1.3.1
  • python-urllib3 >= 1.22-5.12.1
  • release-notes-suse-openstack-cloud >= 8.20200922-3.23.1
  • ruby2.1-rubygem-crowbar-client >= 3.9.3-1.1
  • storm >= 1.2.3-3.6.1
  • storm-nimbus >= 1.2.3-3.6.1
  • storm-supervisor >= 1.2.3-3.6.1
Patchnames:
SUSE-OpenStack-Cloud-Crowbar-8-2020-3309
SUSE OpenStack Cloud Crowbar 9
  • crowbar-core >= 6.0+git.1598519900.770074aa7-3.28.4
  • crowbar-core-branding-upstream >= 6.0+git.1598519900.770074aa7-3.28.4
  • grafana >= 6.7.4-3.17.1
  • grafana-natel-discrete-panel >= 0.0.9-4.3.3
  • openstack-cinder >= 13.0.10~dev16-3.25.3
  • openstack-cinder-api >= 13.0.10~dev16-3.25.3
  • openstack-cinder-backup >= 13.0.10~dev16-3.25.3
  • openstack-cinder-scheduler >= 13.0.10~dev16-3.25.3
  • openstack-cinder-volume >= 13.0.10~dev16-3.25.3
  • openstack-dashboard >= 14.1.1~dev7-3.18.3
  • openstack-ironic >= 11.1.5~dev16-3.22.3
  • openstack-ironic-api >= 11.1.5~dev16-3.22.3
  • openstack-ironic-conductor >= 11.1.5~dev16-3.22.3
  • openstack-ironic-python-agent >= 3.3.4~dev5-3.16.2
  • openstack-manila >= 7.4.2~dev54-4.27.3
  • openstack-manila-api >= 7.4.2~dev54-4.27.3
  • openstack-manila-data >= 7.4.2~dev54-4.27.3
  • openstack-manila-scheduler >= 7.4.2~dev54-4.27.3
  • openstack-manila-share >= 7.4.2~dev54-4.27.3
  • openstack-neutron >= 13.0.8~dev95-3.28.3
  • openstack-neutron-dhcp-agent >= 13.0.8~dev95-3.28.3
  • openstack-neutron-ha-tool >= 13.0.8~dev95-3.28.3
  • openstack-neutron-l3-agent >= 13.0.8~dev95-3.28.3
  • openstack-neutron-linuxbridge-agent >= 13.0.8~dev95-3.28.3
  • openstack-neutron-macvtap-agent >= 13.0.8~dev95-3.28.3
  • openstack-neutron-metadata-agent >= 13.0.8~dev95-3.28.3
  • openstack-neutron-metering-agent >= 13.0.8~dev95-3.28.3
  • openstack-neutron-openvswitch-agent >= 13.0.8~dev95-3.28.3
  • openstack-neutron-server >= 13.0.8~dev95-3.28.3
  • openstack-nova >= 18.3.1~dev54-3.28.3
  • openstack-nova-api >= 18.3.1~dev54-3.28.3
  • openstack-nova-cells >= 18.3.1~dev54-3.28.3
  • openstack-nova-compute >= 18.3.1~dev54-3.28.3
  • openstack-nova-conductor >= 18.3.1~dev54-3.28.3
  • openstack-nova-console >= 18.3.1~dev54-3.28.3
  • openstack-nova-novncproxy >= 18.3.1~dev54-3.28.3
  • openstack-nova-placement-api >= 18.3.1~dev54-3.28.3
  • openstack-nova-scheduler >= 18.3.1~dev54-3.28.3
  • openstack-nova-serialproxy >= 18.3.1~dev54-3.28.3
  • openstack-nova-vncproxy >= 18.3.1~dev54-3.28.3
  • python-cinder >= 13.0.10~dev16-3.25.3
  • python-horizon >= 14.1.1~dev7-3.18.3
  • python-ironic >= 11.1.5~dev16-3.22.3
  • python-manila >= 7.4.2~dev54-4.27.3
  • python-neutron >= 13.0.8~dev95-3.28.3
  • python-nova >= 18.3.1~dev54-3.28.3
  • python-openstack_auth >= 14.1.1~dev7-3.18.3
  • ruby2.1-rubygem-crowbar-client >= 3.9.3-3.9.1
  • storm >= 1.2.3-3.3.4
  • storm-nimbus >= 1.2.3-3.3.4
  • storm-supervisor >= 1.2.3-3.3.4
Patchnames:
SUSE-OpenStack-Cloud-Crowbar-9-2020-2876
SUSE Package Hub 15 SP1
  • python2-Flask-Cors >= 3.0.7-bp151.2.3.1
  • python3-Flask-Cors >= 3.0.7-bp151.2.3.1
Patchnames:
openSUSE-2020-1415
SUSE Package Hub 15 SP2
  • python2-Flask-Cors >= 3.0.8-bp152.2.3.1
  • python3-Flask-Cors >= 3.0.8-bp152.2.3.1
Patchnames:
openSUSE-2020-1423
openSUSE-2020-1446
openSUSE Leap 15.1
  • python2-Flask-Cors >= 3.0.7-lp151.2.3.1
  • python3-Flask-Cors >= 3.0.7-lp151.2.3.1
Patchnames:
openSUSE-2020-1393
openSUSE Leap 15.2
  • python2-Flask-Cors >= 3.0.8-lp152.2.3.1
  • python3-Flask-Cors >= 3.0.8-lp152.2.3.1
Patchnames:
openSUSE-2020-1393
openSUSE Tumbleweed
  • python36-Flask-Cors >= 3.0.10-1.3
  • python38-Flask-Cors >= 3.0.10-1.3
  • python39-Flask-Cors >= 3.0.10-1.3
Patchnames:
openSUSE Tumbleweed GA python36-Flask-Cors-3.0.10-1.3


Status of this issue by product and package

Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification.

Product(s) Source package State
HPE Helion OpenStack 8 python-Flask-Cors Released
HPE Helion OpenStack Cloud 8 python-Flask-Cors Affected
SUSE OpenStack Cloud 8 python-Flask-Cors Released
SUSE OpenStack Cloud 9 python-Flask-Cors Released