Skip to content
OpenAdvisories
Unscored RHSA-2014:0090 2 CVEs

Red Hat Security Advisory: openstack-heat security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · OpenStack 4 openstack:4::el6 openstack-heat 0:2013.2.1-4.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-heat-api 0:2013.2.1-4.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-heat-api-cfn 0:2013.2.1-4.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-heat-api-cloudwatch 0:2013.2.1-4.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-heat-common 0:2013.2.1-4.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-heat-engine 0:2013.2.1-4.el6ost

Vulnerabilities 2

  • Unscored —
    CVE-2013-6426

    The cloudformation-compatible API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before iceh…

    heat Debian
  • Unscored —
    CVE-2013-6428

    The ReST API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before icehouse-2 allows remote …

    heat Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux_OpenStack_Platform/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1039141
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1039144
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1046326
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1048335
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0090.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-6426
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-6426
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-6426
  • report
    https://access.redhat.com/security/cve/CVE-2013-6428
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-6428
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-6428