Read the docs
Red Hat Security Advisory

RHSA-2014:0366

openstack-nova security and bug fix update

Released 2014-04-03 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 3 records

TI-2013-05849 CVE-2013-7130 · GHSA-99rx-9x8v-9j8p

The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver…

Priority LOW 36

The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not properly create all expect…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.02438 Published 2014-02-06 Fixed in 12.0.0a0 CWE-200
TI-2013-03945 CVE-2013-4497 · GHSA-27q4-38qf-m25h

The XenAPI backend in OpenStack Compute (Nova) Folsom, Grizzly, and Havana before 2013.2…

Priority LOW 32

The XenAPI backend in OpenStack Compute (Nova) Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups (1) when resizing an image or (2) during live migration, which allows remote attackers to b…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01823 Published 2013-11-05 Partial fix · 12.0.0a0 CWE-264
TI-2013-05789 CVE-2013-7048 · GHSA-grp5-h379-j75x

OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses…

Priority LOW 17

OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and mo…

CVSS 2.0LOW 3.3 Local No auth Interaction — EPSS 0.00479 Published 2014-01-23 Fixed in 12.0.0a0 CWE-264