Red Hat Security Advisory: python-keystoneclient security and bug fix update

Fixed packages 2

Vulnerabilities 1

• Medium 5.9
  CVE-2014-7144

  OpenStack keystonemiddleware does not verify certificate

  OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote a…

  python-keystoneclient python-keystoneclient python-keystonemiddleware keystonemiddleware Debian Ubuntu PyPI
  Oct 2, 2014

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1141933
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1143808
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1783.json
• report
  https://access.redhat.com/security/cve/CVE-2014-7144
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-7144
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-7144