Skip to content
OpenAdvisories
Unscored RHSA-2014:1337 1 CVE

Red Hat Security Advisory: openstack-glance security and bug fix update

Published Sep 15, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · OpenStack 5 openstack:5::el7 openstack-glance 0:2014.1.2-3.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-glance-doc 0:2014.1.2-3.el7ost
Red Hat · OpenStack 5 openstack:5::el7 python-glance 0:2014.1.2-3.el7ost

Vulnerabilities 1

  • Medium —
    CVE-2014-5356

    OpenStack Glance improper validation of the image_size_cap configuration option

    OpenStack Image Registry and Delivery Service (Glance) before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the image_size_cap configuration option, which allows remote authenticated users to cause …

    glance glance glance Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1055550
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1130622
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1131770
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1337.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-5356
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-5356
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-5356