Skip to content
OpenAdvisories
Low RHSA-2014:0578 1 CVE

Red Hat Security Advisory: openstack-nova security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 14

ReleasePackageFixed in
Red Hat · OpenStack 4 openstack:4::el6 openstack-nova 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-nova-api 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-nova-cells 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-nova-cert 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-nova-common 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-nova-compute 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-nova-conductor 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-nova-console 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-nova-doc 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-nova-network 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-nova-novncproxy 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-nova-objectstore 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-nova-scheduler 0:2013.2.3-7.el6ost
Red Hat · OpenStack 4 openstack:4::el6 python-nova 0:2013.2.3-7.el6ost

Vulnerabilities 1

  • Low 3.1
    CVE-2014-0134

    OpenStack Nova host data leak to vm instance in rescue mode

    The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set to false, allows remote authenticated users to read certain compute host files by overwriting …

    nova nova Debian PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1022627
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1060772
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1069429
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1069432
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1071469
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1077017
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1078002
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1081001
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1085005
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1089070
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0578.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-0134
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0134
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0134