Skip to content
OpenAdvisories
Medium RHSA-2018:0241 1 CVE

Red Hat Security Advisory: openstack-nova security and bug fix update

Published Sep 13, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova 1:16.0.2-9.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-api 1:16.0.2-9.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-cells 1:16.0.2-9.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-common 1:16.0.2-9.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-compute 1:16.0.2-9.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-conductor 1:16.0.2-9.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-console 1:16.0.2-9.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-migration 1:16.0.2-9.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-network 1:16.0.2-9.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-novncproxy 1:16.0.2-9.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-placement-api 1:16.0.2-9.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-scheduler 1:16.0.2-9.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-serialproxy 1:16.0.2-9.el7ost
Red Hat · OpenStack 12 openstack:12::el7 openstack-nova-spicehtml5proxy 1:16.0.2-9.el7ost
Red Hat · OpenStack 12 openstack:12::el7 python-nova 1:16.0.2-9.el7ost
Red Hat · OpenStack 12 openstack:12::el7 python-nova-tests 1:16.0.2-9.el7ost

Vulnerabilities 1

  • Medium 6.5
    CVE-2017-16239

    OpenStack Nova Filter Scheduler Bypass

    In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters (for example, the ImagePropertiesFilter or the IsolatedHo…

    nova nova nova Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1508539
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1518879
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1527644
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1533161
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0241.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-16239
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-16239
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-16239