Red Hat Security Advisory

RHSA-2014:0112

openstack-nova security and bug fix update

Released 2014-01-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 3.0 openstack-nova-2013.1.4-4.el6ost, openstack-nova-api-2013.1.4-4.el6ost, openstack-nova-cells-2013.1.4-4.el6ost +10

Fixes 2 records

TI-2013-05440 CVE-2013-6491 · GHSA-36gw-3xf6-9pvq

The python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not…

LOW 24

The python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not enforce SSL connections when qpid_protocol is set to ssl, which allows remote attackers to obtain sensitive information by sniffin…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01884 Published 2014-02-02 Fixed CWE-310

TI-2013-03913 CVE-2013-4463 · GHSA-5644-2v3h-5w4x

OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly verify the virtual…

LOW 11

OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service (host file system disk consumption) via a compressed…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00372 Published 2014-02-06 Partial fix · 12.0.0a0 CWE-399