Skip to content
OpenAdvisories
High RHSA-2020:3704 1 CVE

Red Hat Security Advisory: openstack-nova security update

Published Sep 13, 2024 · Updated Oct 8, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · OpenStack 16 openstack:16::el8 openstack-nova 1:20.1.2-0.20200401205215.28324e6.el8ost
Red Hat · OpenStack 16 openstack:16::el8 openstack-nova-api 1:20.1.2-0.20200401205215.28324e6.el8ost
Red Hat · OpenStack 16 openstack:16::el8 openstack-nova-common 1:20.1.2-0.20200401205215.28324e6.el8ost
Red Hat · OpenStack 16 openstack:16::el8 openstack-nova-compute 1:20.1.2-0.20200401205215.28324e6.el8ost
Red Hat · OpenStack 16 openstack:16::el8 openstack-nova-conductor 1:20.1.2-0.20200401205215.28324e6.el8ost
Red Hat · OpenStack 16 openstack:16::el8 openstack-nova-console 1:20.1.2-0.20200401205215.28324e6.el8ost
Red Hat · OpenStack 16 openstack:16::el8 openstack-nova-migration 1:20.1.2-0.20200401205215.28324e6.el8ost
Red Hat · OpenStack 16 openstack:16::el8 openstack-nova-novncproxy 1:20.1.2-0.20200401205215.28324e6.el8ost
Red Hat · OpenStack 16 openstack:16::el8 openstack-nova-scheduler 1:20.1.2-0.20200401205215.28324e6.el8ost
Red Hat · OpenStack 16 openstack:16::el8 openstack-nova-serialproxy 1:20.1.2-0.20200401205215.28324e6.el8ost
Red Hat · OpenStack 16 openstack:16::el8 openstack-nova-spicehtml5proxy 1:20.1.2-0.20200401205215.28324e6.el8ost
Red Hat · OpenStack 16 openstack:16::el8 python3-nova 1:20.1.2-0.20200401205215.28324e6.el8ost

Vulnerabilities 1

  • High 8.3
    CVE-2020-17376

    OpenStack Nova Live migration fails to update persistent domain XML

    An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1, and 21.0.0. By performing a soft reboot of an instance that has previously undergone live migration, a user may gain access to destination h…

    nova nova nova Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1869426
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3704.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-17376
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-17376
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-17376
  • article
    https://bugs.launchpad.net/nova/+bug/1890501