Skip to content
OpenAdvisories
Medium RHSA-2021:3488 1 CVE

Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (openstack-neutron) security update

Published Sep 13, 2024 · Updated Oct 14, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · OpenStack 16 openstack:16.2::el8 openstack-neutron 1:15.3.5-2.20210608154813.el8ost.3
Red Hat · OpenStack 16 openstack:16.2::el8 openstack-neutron-common 1:15.3.5-2.20210608154813.el8ost.3
Red Hat · OpenStack 16 openstack:16.2::el8 openstack-neutron-linuxbridge 1:15.3.5-2.20210608154813.el8ost.3
Red Hat · OpenStack 16 openstack:16.2::el8 openstack-neutron-macvtap-agent 1:15.3.5-2.20210608154813.el8ost.3
Red Hat · OpenStack 16 openstack:16.2::el8 openstack-neutron-metering-agent 1:15.3.5-2.20210608154813.el8ost.3
Red Hat · OpenStack 16 openstack:16.2::el8 openstack-neutron-ml2 1:15.3.5-2.20210608154813.el8ost.3
Red Hat · OpenStack 16 openstack:16.2::el8 openstack-neutron-openvswitch 1:15.3.5-2.20210608154813.el8ost.3
Red Hat · OpenStack 16 openstack:16.2::el8 openstack-neutron-rpc-server 1:15.3.5-2.20210608154813.el8ost.3
Red Hat · OpenStack 16 openstack:16.2::el8 openstack-neutron-sriov-nic-agent 1:15.3.5-2.20210608154813.el8ost.3
Red Hat · OpenStack 16 openstack:16.2::el8 python3-neutron 1:15.3.5-2.20210608154813.el8ost.3

Vulnerabilities 1

  • Medium 6.5
    CVE-2021-40085

    OpenStack Neutron vulnerable to authenticated attackers reconfiguring dnsmasq via crafted extra_dhcp_opts value

    An issue was discovered in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. Authenticated attackers can reconfigure dnsmasq via a crafted extra_dhcp_opts value.

    neutron neutron neutron Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1916701
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1929829
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1938966
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1970051
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1979572
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1998052
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3488.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-40085
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-40085
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-40085
  • article
    https://security.openstack.org/ossa/OSSA-2021-005.html