Skip to content
OpenAdvisories
Medium RHSA-2014:0580 1 CVE

Red Hat Security Advisory: openstack-keystone security and bug fix update

Published Sep 15, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · OpenStack 4 openstack:4::el6 openstack-keystone 0:2013.2.3-4.el6ost
Red Hat · OpenStack 4 openstack:4::el6 openstack-keystone-doc 0:2013.2.3-4.el6ost
Red Hat · OpenStack 4 openstack:4::el6 python-keystone 0:2013.2.3-4.el6ost

Vulnerabilities 1

  • Medium 6.5
    CVE-2014-2237

    OpenStack Identity (Keystone) Trustee token revocations does not work with memcache backend

    The memcache token backend in OpenStack Identity (Keystone) 2013.1 through 2.013.1.4, 2013.2 through 2013.2.2, and icehouse before icehouse-3, when issuing a trust token with impersonation enabled, does not include this token in the trustee's token-index-list…

    keystone keystone Debian PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1071434
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1083415
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1085933
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0580.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-2237
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-2237
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-2237