Comment # 36 on bug 1111657 from Swamp Workflow Management

SUSE-SU-2020:0792-1: An update that solves one vulnerability and has 6 fixes is
now available.

Category: security (moderate)
Bug References: 1055478,1070737,1101820,1111657,1138748,1149792,981848
CVE References: CVE-2018-10903
Sources used:
SUSE OpenStack Cloud Crowbar 8 (src):    python-cffi-1.11.2-5.11.1,
python-cryptography-2.1.4-7.28.2, python-xattr-0.7.5-6.3.2
SUSE OpenStack Cloud 8 (src):    python-cffi-1.11.2-5.11.1,
python-cryptography-2.1.4-7.28.2, python-xattr-0.7.5-6.3.2
SUSE OpenStack Cloud 7 (src):    python-cffi-1.11.2-5.11.1,
python-cryptography-2.1.4-7.28.2, python-xattr-0.7.5-6.3.2
SUSE Linux Enterprise Server for SAP 12-SP3 (src):   
python-cffi-1.11.2-5.11.1, python-cryptography-2.1.4-7.28.2,
python-xattr-0.7.5-6.3.2
SUSE Linux Enterprise Server for SAP 12-SP2 (src):   
python-cffi-1.11.2-5.11.1, python-cryptography-2.1.4-7.28.2,
python-xattr-0.7.5-6.3.2
SUSE Linux Enterprise Server 12-SP5 (src):    python-cffi-1.11.2-5.11.1,
python-cryptography-2.1.4-7.28.2, python-xattr-0.7.5-6.3.2
SUSE Linux Enterprise Server 12-SP4 (src):    python-cffi-1.11.2-5.11.1,
python-cryptography-2.1.4-7.28.2, python-xattr-0.7.5-6.3.2
SUSE Linux Enterprise Server 12-SP3-LTSS (src):    python-cffi-1.11.2-5.11.1,
python-cryptography-2.1.4-7.28.2, python-xattr-0.7.5-6.3.2
SUSE Linux Enterprise Server 12-SP3-BCL (src):    python-cffi-1.11.2-5.11.1,
python-cryptography-2.1.4-7.28.2, python-xattr-0.7.5-6.3.2
SUSE Linux Enterprise Server 12-SP2-LTSS (src):    python-cffi-1.11.2-5.11.1,
python-cryptography-2.1.4-7.28.2, python-xattr-0.7.5-6.3.2
SUSE Linux Enterprise Server 12-SP2-BCL (src):    python-cffi-1.11.2-5.11.1,
python-cryptography-2.1.4-7.28.2, python-xattr-0.7.5-6.3.2
SUSE Enterprise Storage 5 (src):    python-cffi-1.11.2-5.11.1,
python-cryptography-2.1.4-7.28.2, python-xattr-0.7.5-6.3.2
SUSE CaaS Platform 3.0 (src):    python-cffi-1.11.2-5.11.1,
python-cryptography-2.1.4-7.28.2
HPE Helion Openstack 8 (src):    python-cffi-1.11.2-5.11.1,
python-cryptography-2.1.4-7.28.2, python-xattr-0.7.5-6.3.2

NOTE: This line indicates an update has been released for the listed
product(s). At times this might be only a partial fix. If you have questions
please reach out to maintenance coordination.