Red Hat Security Advisory

RHSA-2014:0580

openstack-keystone security and bug fix update

Released 2014-05-29 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 4.0 openstack-keystone-2013.2.3-4.el6ost, openstack-keystone-doc-2013.2.3-4.el6ost, python-keystone-2013.2.3-4.el6ost

Fixes 1 record

TI-2014-01770 CVE-2014-2237 · GHSA-23x9-8hxr-978c

The memcache token backend in OpenStack Identity (Keystone) 2013.1 through 2.013.1.4…

LOW 26

The memcache token backend in OpenStack Identity (Keystone) 2013.1 through 2.013.1.4, 2013.2 through 2013.2.2, and icehouse before icehouse-3, when issuing a trust token with impersonation enabled, does not include this…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01367 Published 2014-04-01 Fixed in 8.0.0a0 CWE-264