Red Hat Security Advisory

RHSA-2013:1198

openstack-cinder security update

Released 2013-09-03 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 3.0 openstack-cinder-2013.1.3-2.el6ost, openstack-cinder-doc-2013.1.3-2.el6ost, python-cinder-2013.1.3-2.el6ost

Fixes 2 records

TI-2013-03674 CVE-2013-4202 · GHSA-mfg4-9xf4-f45q

The (1) backup (api/contrib/backups.py) and (2) volume transfer…

LOW 25

The (1) backup (api/contrib/backups.py) and (2) volume transfer (contrib/volume_transfer.py) APIs in OpenStack Cinder Grizzly 2013.1.3 and earlier allows remote attackers to cause a denial of service (resource consumptio…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02626 Published 2013-09-16 Partial fix · 7.0.0a0 CWE-399

TI-2013-03656 CVE-2013-4183 · GHSA-q3rw-wcj6-8cjf

The clear_volume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through…

LOW 11

The clear_volume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through 2013.1.2 does not properly clear data when deleting a snapshot, which allows local users to obtain sensitive information via unspec…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00406 Published 2013-09-16 Partial fix · 7.0.0a0 CWE-200