Skip to content
OpenAdvisories
Medium RHSA-2014:0368 2 CVEs

Red Hat Security Advisory: openstack-keystone security update

Published Sep 15, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · OpenStack 3 openstack:3::el6 openstack-keystone 0:2013.1.5-2.el6ost
Red Hat · OpenStack 3 openstack:3::el6 openstack-keystone-doc 0:2013.1.5-2.el6ost
Red Hat · OpenStack 3 openstack:3::el6 python-keystone 0:2013.1.5-2.el6ost

Vulnerabilities 2

  • Medium 6.5
    CVE-2014-2237

    OpenStack Identity (Keystone) Trustee token revocations does not work with memcache backend

    The memcache token backend in OpenStack Identity (Keystone) 2013.1 through 2.013.1.4, 2013.2 through 2013.2.2, and icehouse before icehouse-3, when issuing a trust token with impersonation enabled, does not include this token in the trustee's token-index-list…

    keystone keystone Debian PyPI
  • Unscored —
    CVE-2013-6391

    The ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse before icehouse-2 does not retur…

    keystone Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1039164
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1071434
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0368.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-6391
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-6391
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-6391
  • report
    https://access.redhat.com/security/cve/CVE-2014-2237
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-2237
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-2237