Skip to content
OpenAdvisories
High RHSA-2020:3708 1 CVE

Red Hat Security Advisory: openstack-nova security update

Published Sep 13, 2024 · Updated Oct 8, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · OpenStack 13 openstack:13::el7 openstack-nova 1:17.0.13-24.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-nova-api 1:17.0.13-24.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-nova-cells 1:17.0.13-24.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-nova-common 1:17.0.13-24.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-nova-compute 1:17.0.13-24.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-nova-conductor 1:17.0.13-24.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-nova-console 1:17.0.13-24.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-nova-migration 1:17.0.13-24.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-nova-network 1:17.0.13-24.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-nova-novncproxy 1:17.0.13-24.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-nova-placement-api 1:17.0.13-24.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-nova-scheduler 1:17.0.13-24.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-nova-serialproxy 1:17.0.13-24.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-nova-spicehtml5proxy 1:17.0.13-24.el7ost
Red Hat · OpenStack 13 openstack:13::el7 python-nova 1:17.0.13-24.el7ost
Red Hat · OpenStack 13 openstack:13::el7 python-nova-tests 1:17.0.13-24.el7ost

Vulnerabilities 1

  • High 8.3
    CVE-2020-17376

    OpenStack Nova Live migration fails to update persistent domain XML

    An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1, and 21.0.0. By performing a soft reboot of an instance that has previously undergone live migration, a user may gain access to destination h…

    nova nova nova Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1869426
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3708.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-17376
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-17376
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-17376
  • article
    https://bugs.launchpad.net/nova/+bug/1890501