Red Hat Security AdvisoryRHSA-2016:0018
openstack-nova security update
Released 2016-01-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7 openstack-nova-2014.1.5-15.el7ost, openstack-nova-api-2014.1.5-15.el7ost, openstack-nova-cells-2014.1.5-15.el7ost +12
- Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7 openstack-nova-2014.2.3-48.el7ost, openstack-nova-api-2014.2.3-48.el7ost, openstack-nova-cells-2014.2.3-48.el7ost +12
- Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7 openstack-nova-2015.1.2-13.el7ost, openstack-nova-api-2015.1.2-13.el7ost, openstack-nova-cells-2015.1.2-13.el7ost +13
Fixes 1 record
Priority LOW 20
OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read arbitrary files by ov…
CVSS 3.0LOW 3.5· Network · Low privileges · No interaction · EPSS 0.01803 · Published 2016-01-12 · Fixed CWE-200
