Skip to content
OpenAdvisories
Critical RHSA-2017:1595 1 CVE

Red Hat Security Advisory: openstack-nova and python-novaclient security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated Oct 8, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · OpenStack 10 openstack:10::el7 openstack-nova 1:14.0.6-2.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-nova-api 1:14.0.6-2.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-nova-cells 1:14.0.6-2.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-nova-cert 1:14.0.6-2.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-nova-common 1:14.0.6-2.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-nova-compute 1:14.0.6-2.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-nova-conductor 1:14.0.6-2.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-nova-console 1:14.0.6-2.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-nova-migration 1:14.0.6-2.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-nova-network 1:14.0.6-2.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-nova-novncproxy 1:14.0.6-2.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-nova-placement-api 1:14.0.6-2.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-nova-scheduler 1:14.0.6-2.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-nova-serialproxy 1:14.0.6-2.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-nova-spicehtml5proxy 1:14.0.6-2.el7ost
Red Hat · OpenStack 10 openstack:10::el7 python-nova 1:14.0.6-2.el7ost
Red Hat · OpenStack 10 openstack:10::el7 python-nova-tests 1:14.0.6-2.el7ost
Red Hat · OpenStack 10 openstack:10::el7 python-novaclient 1:6.0.0-3.el7ost

Vulnerabilities 1

  • Critical 9.8
    CVE-2017-7214

    OpenStack Nova logs sensitive context from notification exceptions

    An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwor…

    nova nova Debian PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1420880
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1421265
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1429924
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1431802
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1434844
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1436266
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1448002
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1454629
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1454630
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1595.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-7214
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-7214
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-7214