Red Hat Security AdvisoryRHSA-2013:0657
openstack-nova security, bug fix, and enhancement update
Released 2013-03-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- OpenStack Folsom openstack-nova-2012.2.3-4.el6ost, openstack-nova-api-2012.2.3-4.el6ost, openstack-nova-cert-2012.2.3-4.el6ost +9
Fixes 2 records
Priority LOW 30
The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via an XML external entity…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04507 · Published 2013-04-03 · Partial fix · 1.3.6, 1.4.4 CWE-200
Priority LOW 30
The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django; and possibly other products allow remote at…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04771 · Published 2013-04-03 · Partial fix · 1.3.6, 1.4.4 CWE-119
