Skip to content
OpenAdvisories
Medium RHSA-2018:0314 1 CVE

Red Hat Security Advisory: openstack-nova security and bug fix update

Published Sep 13, 2024 · Updated Aug 1, 2026

Fixed packages 17

ReleasePackageFixed in
Red Hat · OpenStack 11 openstack:11::el7 openstack-nova 1:15.0.8-5.el7ost
Red Hat · OpenStack 11 openstack:11::el7 openstack-nova-api 1:15.0.8-5.el7ost
Red Hat · OpenStack 11 openstack:11::el7 openstack-nova-cells 1:15.0.8-5.el7ost
Red Hat · OpenStack 11 openstack:11::el7 openstack-nova-cert 1:15.0.8-5.el7ost
Red Hat · OpenStack 11 openstack:11::el7 openstack-nova-common 1:15.0.8-5.el7ost
Red Hat · OpenStack 11 openstack:11::el7 openstack-nova-compute 1:15.0.8-5.el7ost
Red Hat · OpenStack 11 openstack:11::el7 openstack-nova-conductor 1:15.0.8-5.el7ost
Red Hat · OpenStack 11 openstack:11::el7 openstack-nova-console 1:15.0.8-5.el7ost
Red Hat · OpenStack 11 openstack:11::el7 openstack-nova-migration 1:15.0.8-5.el7ost
Red Hat · OpenStack 11 openstack:11::el7 openstack-nova-network 1:15.0.8-5.el7ost
Red Hat · OpenStack 11 openstack:11::el7 openstack-nova-novncproxy 1:15.0.8-5.el7ost
Red Hat · OpenStack 11 openstack:11::el7 openstack-nova-placement-api 1:15.0.8-5.el7ost
Red Hat · OpenStack 11 openstack:11::el7 openstack-nova-scheduler 1:15.0.8-5.el7ost
Red Hat · OpenStack 11 openstack:11::el7 openstack-nova-serialproxy 1:15.0.8-5.el7ost
Red Hat · OpenStack 11 openstack:11::el7 openstack-nova-spicehtml5proxy 1:15.0.8-5.el7ost
Red Hat · OpenStack 11 openstack:11::el7 python-nova 1:15.0.8-5.el7ost
Red Hat · OpenStack 11 openstack:11::el7 python-nova-tests 1:15.0.8-5.el7ost

Vulnerabilities 1

  • Medium 6.5

    OpenStack Nova Filter Scheduler Bypass

    In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters (for example, the ImagePropertiesFilter or the IsolatedHo…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1508539
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1511153
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1527643
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1528453
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1530365
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1533164
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1537045
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0314.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-16239
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-16239
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-16239