Red Hat Security Advisory

RHSA-2016:0013

openstack-nova security and bug fix advisory

Released 2016-01-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7 openstack-nova-2014.2.3-42.el7ost, openstack-nova-api-2014.2.3-42.el7ost, openstack-nova-cells-2014.2.3-42.el7ost +12

Fixes 1 record

TI-2015-06409 CVE-2015-7713 · GHSA-67rh-9p29-vrxr

OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do…

LOW 29

OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance tha…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.037 Published 2015-10-29 Fixed in 2014.2.4, 2015.1.2 CWE-254