Skip to content
OpenAdvisories
Unscored RHSA-2015:2673 1 CVE

Red Hat Security Advisory: openstack-nova security and bug fix advisory

Published Sep 13, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · OpenStack 7 openstack:7::el7 openstack-nova 0:2015.1.2-7.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-nova-api 0:2015.1.2-7.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-nova-cells 0:2015.1.2-7.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-nova-cert 0:2015.1.2-7.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-nova-common 0:2015.1.2-7.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-nova-compute 0:2015.1.2-7.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-nova-conductor 0:2015.1.2-7.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-nova-console 0:2015.1.2-7.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-nova-doc 0:2015.1.2-7.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-nova-network 0:2015.1.2-7.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-nova-novncproxy 0:2015.1.2-7.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-nova-objectstore 0:2015.1.2-7.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-nova-scheduler 0:2015.1.2-7.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-nova-serialproxy 0:2015.1.2-7.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-nova-spicehtml5proxy 0:2015.1.2-7.el7ost
Red Hat · OpenStack 7 openstack:7::el7 python-nova 0:2015.1.2-7.el7ost
Red Hat · OpenStack 7 openstack:7::el7 python-novaclient 1:2.23.0-2.el7ost
Red Hat · OpenStack 7 openstack:7::el7 python-novaclient-doc 1:2.23.0-2.el7ost

Vulnerabilities 1

  • Medium —
    CVE-2015-7713

    OpenStack Compute (Nova) allows remote attackers to bypass intended restriction

    OpenStack Compute (Nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) do not properly apply security group changes, which allows remote attackers to bypass intended restriction by leveraging an instance that was running when the change was made.

    nova nova nova Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1249751
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1261100
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1268051
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1269119
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1273466
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1274054
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1274875
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1275937
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2673.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-7713
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-7713
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-7713