Skip to content
OpenAdvisories
Medium RHSA-2014:0229 1 CVE

Red Hat Security Advisory: openstack-glance security and bug fix update

Published Sep 15, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · OpenStack 4 openstack:4::el6 openstack-glance 0:2013.2.2-2.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-glance-doc 0:2013.2.2-2.el6ost
Red Hat · OpenStack 4 openstack:4::el6 python-glance 0:2013.2.2-2.el6ost

Vulnerabilities 1

  • Medium 6.2
    CVE-2014-1948

    OpenStack Glance sensitive information disclosure via logs

    OpenStack Image Registry and Delivery Service (Glance) 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when authentication fails and WARNING level logging is enabled, which allows local users to ob…

    glance glance Debian PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1064589
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1065313
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0229.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-1948
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-1948
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-1948