Red Hat Security AdvisoryRHSA-2015:1685
python-keystoneclient security update
Released 2015-08-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6 python-keystoneclient-1:0.9.0-6.el6ost, python-keystoneclient-doc-1:0.9.0-6.el6ost
- Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7 python-keystoneclient-1:0.9.0-6.el7ost, python-keystoneclient-doc-1:0.9.0-6.el7ost
Fixes 1 record
Priority LOW 24
The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02244 · Published 2015-04-17 · Partial fix · 1.6.0, 1.4.0 CWE-17
