Red Hat Security Advisory: openstack-nova security update

Fixed packages 61

Vulnerabilities 2

• Medium —
  CVE-2015-3241

  OpenStack Nova instance migration process does not stop when instance is deleted

  OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, which allows remote authenticated users to cause a denial of service (disk, network, and other resource consumption) by r…

  nova nova nova Debian Ubuntu PyPI
  Sep 8, 2015
• Medium —
  CVE-2015-3280

  OpenStack Compute (nova) allows remote authenticated users to cause a denial of service

  OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances while in t…

  nova nova nova Debian Ubuntu PyPI
  Oct 26, 2015

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1232782
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1257942
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1898.json
• report
  https://access.redhat.com/security/cve/CVE-2015-3241
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-3241
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-3241
• report
  https://access.redhat.com/security/cve/CVE-2015-3280
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-3280
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-3280