Skip to content
OpenAdvisories
Medium RHSA-2019:0916 1 CVE

Red Hat Security Advisory: Red Hat Enterprise Linux OpenStack Platform security update

Published Sep 13, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 17

ReleasePackageFixed in
Red Hat · OpenStack 10 openstack:10::el7 openstack-neutron 1:9.4.1-40.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-neutron-bigswitch-agent 2:9.42.14-1.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-neutron-bigswitch-lldp 2:9.42.14-1.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-neutron-common 1:9.4.1-40.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-neutron-lbaas 1:9.2.2-8.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-neutron-linuxbridge 1:9.4.1-40.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-neutron-macvtap-agent 1:9.4.1-40.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-neutron-metering-agent 1:9.4.1-40.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-neutron-ml2 1:9.4.1-40.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-neutron-openvswitch 1:9.4.1-40.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-neutron-rpc-server 1:9.4.1-40.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-neutron-sriov-nic-agent 1:9.4.1-40.el7ost
Red Hat · OpenStack 10 openstack:10::el7 python-networking-bigswitch 2:9.42.14-1.el7ost
Red Hat · OpenStack 10 openstack:10::el7 python-neutron 1:9.4.1-40.el7ost
Red Hat · OpenStack 10 openstack:10::el7 python-neutron-lbaas 1:9.2.2-8.el7ost
Red Hat · OpenStack 10 openstack:10::el7 python-neutron-lbaas-tests 1:9.2.2-8.el7ost
Red Hat · OpenStack 10 openstack:10::el7 python-neutron-tests 1:9.4.1-40.el7ost

Vulnerabilities 1

  • Medium 6.5
    CVE-2019-9735

    OpenStack Neutron's unsupported dport option prevents applying security groups

    An issue was discovered in the iptables firewall module in OpenStack Neutron before 10.0.8, 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By setting a destination port in a security group rule along with a protocol that doesn't support that …

    neutron neutron neutron Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1578844
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1637463
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1656398
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1656443
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1665239
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1666666
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1684242
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1684533
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1690387
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1690745
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0916.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-9735
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-9735
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-9735
  • article
    https://seclists.org/oss-sec/2019/q1/183