Skip to content
OpenAdvisories
High RHSA-2013:1200 1 CVE

Red Hat Security Advisory: python-glanceclient security update

Published Sep 15, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · OpenStack 3 openstack:3::el6 python-glanceclient 1:0.9.0-2.el6ost

Vulnerabilities 1

  • High 7.5
    CVE-2013-4111

    python-glanceclient vulnerable to SSL server spoofing due to unverified X.509 certificate

    The Python client library for Glance (python-glanceclient) before 0.10.0 does not properly check the preverify_ok value, which prevents the server hostname from being verified with a domain name in the subject's Common Name (CN) or subjectAltName field of the…

    python-glanceclient python-glanceclient Debian PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=989738
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1200.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-4111
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4111
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4111