Skip to content
OpenAdvisories
Medium RHSA-2019:0879 2 CVEs

Red Hat Security Advisory: openstack-neutron security update

Published Sep 13, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · OpenStack 14 openstack:14::el7 openstack-neutron 1:13.0.3-0.20190313155649.00b63be.el7ost
Red Hat · OpenStack 14 openstack:14::el7 openstack-neutron-common 1:13.0.3-0.20190313155649.00b63be.el7ost
Red Hat · OpenStack 14 openstack:14::el7 openstack-neutron-linuxbridge 1:13.0.3-0.20190313155649.00b63be.el7ost
Red Hat · OpenStack 14 openstack:14::el7 openstack-neutron-macvtap-agent 1:13.0.3-0.20190313155649.00b63be.el7ost
Red Hat · OpenStack 14 openstack:14::el7 openstack-neutron-metering-agent 1:13.0.3-0.20190313155649.00b63be.el7ost
Red Hat · OpenStack 14 openstack:14::el7 openstack-neutron-ml2 1:13.0.3-0.20190313155649.00b63be.el7ost
Red Hat · OpenStack 14 openstack:14::el7 openstack-neutron-openvswitch 1:13.0.3-0.20190313155649.00b63be.el7ost
Red Hat · OpenStack 14 openstack:14::el7 openstack-neutron-rpc-server 1:13.0.3-0.20190313155649.00b63be.el7ost
Red Hat · OpenStack 14 openstack:14::el7 openstack-neutron-sriov-nic-agent 1:13.0.3-0.20190313155649.00b63be.el7ost
Red Hat · OpenStack 14 openstack:14::el7 python-neutron 1:13.0.3-0.20190313155649.00b63be.el7ost

Vulnerabilities 2

  • Medium 6.5
    CVE-2019-10876

    OpenStack Neutron overlapping security group rules prevents compute node network configuration

    An issue was discovered in OpenStack Neutron 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By creating two security groups with separate/overlapping port ranges, an authenticated user may prevent Neutron from being able to configure networks…

    neutron neutron neutron Debian Ubuntu PyPI
  • Medium 6.5
    CVE-2019-9735

    OpenStack Neutron's unsupported dport option prevents applying security groups

    An issue was discovered in the iptables firewall module in OpenStack Neutron before 10.0.8, 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By setting a destination port in a security group rule along with a protocol that doesn't support that …

    neutron neutron neutron Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1690150
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1690745
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1695883
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0879.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-9735
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-9735
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-9735
  • article
    https://seclists.org/oss-sec/2019/q1/183
  • report
    https://access.redhat.com/security/cve/CVE-2019-10876
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-10876
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-10876