Skip to content
OpenAdvisories
Medium RHSA-2016:0366 1 CVE

Red Hat Security Advisory: openstack-nova security update

Published Sep 13, 2024 · Updated Oct 8, 2026

Ecosystem: Red Hat

Fixed packages 15

ReleasePackageFixed in
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova 0:2014.1.5-29.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-api 0:2014.1.5-29.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-cells 0:2014.1.5-29.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-cert 0:2014.1.5-29.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-common 0:2014.1.5-29.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-compute 0:2014.1.5-29.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-conductor 0:2014.1.5-29.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-console 0:2014.1.5-29.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-doc 0:2014.1.5-29.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-network 0:2014.1.5-29.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-novncproxy 0:2014.1.5-29.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-objectstore 0:2014.1.5-29.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-scheduler 0:2014.1.5-29.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-nova-serialproxy 0:2014.1.5-29.el6ost
Red Hat · OpenStack 5 openstack:5::el6 python-nova 0:2014.1.5-29.el6ost

Vulnerabilities 1

  • Medium 5.3
    CVE-2016-2140

    OpenStack Nova host data access through resize/migration

    The libvirt driver in OpenStack Compute (Nova) before 2015.1.4 (kilo) and 12.0.x before 12.0.3 (liberty), when using raw storage and use_cow_images is set to false, allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an eph…

    nova nova nova Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1313454
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0366.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-2140
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2140
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2140
  • article
    http://seclists.org/oss-sec/2016/q1/563