Skip to content
OpenAdvisories
Unscored RHSA-2013:0657 2 CVEs

Red Hat Security Advisory: openstack-nova security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · OpenStack 2 openstack:2::el6 openstack-nova 0:2012.2.3-4.el6ost
Red Hat · OpenStack 2 openstack:2::el6 openstack-nova-api 0:2012.2.3-4.el6ost
Red Hat · OpenStack 2 openstack:2::el6 openstack-nova-cert 0:2012.2.3-4.el6ost
Red Hat · OpenStack 2 openstack:2::el6 openstack-nova-common 0:2012.2.3-4.el6ost
Red Hat · OpenStack 2 openstack:2::el6 openstack-nova-compute 0:2012.2.3-4.el6ost
Red Hat · OpenStack 2 openstack:2::el6 openstack-nova-console 0:2012.2.3-4.el6ost
Red Hat · OpenStack 2 openstack:2::el6 openstack-nova-doc 0:2012.2.3-4.el6ost
Red Hat · OpenStack 2 openstack:2::el6 openstack-nova-network 0:2012.2.3-4.el6ost
Red Hat · OpenStack 2 openstack:2::el6 openstack-nova-objectstore 0:2012.2.3-4.el6ost
Red Hat · OpenStack 2 openstack:2::el6 openstack-nova-scheduler 0:2012.2.3-4.el6ost
Red Hat · OpenStack 2 openstack:2::el6 openstack-nova-volume 0:2012.2.3-4.el6ost
Red Hat · OpenStack 2 openstack:2::el6 python-nova 0:2012.2.3-4.el6ost

Vulnerabilities 2

  • Medium —
    CVE-2013-1664

    XML Entity Expansion (XEE) in Django

    The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django; and possibly other products allow remote attackers to cause a denial of service (r…

    django nova keystone cinder Debian PyPI
  • Medium —
    CVE-2013-1665

    XML External Entity (XXE) in Django

    The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an ent…

    python-django django keystone Debian PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://rhn.redhat.com/errata/RHSA-2013-0658.html
  • article
    https://rhn.redhat.com/errata/RHBA-2013-0618.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=889868
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=890512
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=891347
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=891420
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=902409
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=905113
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=906783
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=907178
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=908373
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=910224
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=911103
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=912384
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=912982
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=913613
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=913808
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=914759
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=916241
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0657.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-1664
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1664
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1664
  • report
    https://access.redhat.com/security/cve/CVE-2013-1665
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1665
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1665