Red Hat Security Advisory: openstack-nova security and bug fix update

Fixed packages 12

Vulnerabilities 2

• Medium 6.5
  CVE-2012-5625

  Openstack nova: information leak in libvirt lvm-backed instances

  OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which allows attackers to obtain sensitive information by reading t…

  Red Hat Red Hat OpenStack Platform 16.2 Red Hat OpenStack Platform 18.0 Red Hat OpenStack Platform 17.1 PyPI
  Dec 26, 2012
• Unscored —
  CVE-2013-0208

  The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote authe…

  nova Debian
  Feb 13, 2013

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=856263
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=881810
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=884293
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=887303
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=902629
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0208.json
• report
  https://access.redhat.com/security/cve/CVE-2012-5625
• advisory
  https://www.cve.org/CVERecord?id=CVE-2012-5625
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2012-5625
• article
  http://osvdb.org/88419
• article
  http://rhn.redhat.com/errata/RHSA-2013-0208.html
• article
  http://www.openwall.com/lists/oss-security/2012/12/11/5
• article
  http://www.securityfocus.com/bid/56904
• article
  http://www.ubuntu.com/usn/USN-1663-1
• article
  https://bugs.launchpad.net/nova/+bug/1070539
• article
  https://github.com/openstack/nova/commit/9d2ea970422591f8cdc394001be9a2deca499a5f
• article
  https://github.com/openstack/nova/commit/a99a802e008eed18e39fc1d98170edc495cbd354
• article
  https://launchpad.net/nova/folsom/2012.2.2
• report
  https://access.redhat.com/security/cve/CVE-2013-0208
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-0208
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-0208