Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · OpenStack 16 openstack:16.2::el8 | openstack-neutron | 1:15.3.5-2.20230216175503.el8ost |
| Red Hat · OpenStack 16 openstack:16.2::el8 | openstack-neutron-common | 1:15.3.5-2.20230216175503.el8ost |
| Red Hat · OpenStack 16 openstack:16.2::el8 | openstack-neutron-linuxbridge | 1:15.3.5-2.20230216175503.el8ost |
| Red Hat · OpenStack 16 openstack:16.2::el8 | openstack-neutron-macvtap-agent | 1:15.3.5-2.20230216175503.el8ost |
| Red Hat · OpenStack 16 openstack:16.2::el8 | openstack-neutron-metering-agent | 1:15.3.5-2.20230216175503.el8ost |
| Red Hat · OpenStack 16 openstack:16.2::el8 | openstack-neutron-ml2 | 1:15.3.5-2.20230216175503.el8ost |
| Red Hat · OpenStack 16 openstack:16.2::el8 | openstack-neutron-openvswitch | 1:15.3.5-2.20230216175503.el8ost |
| Red Hat · OpenStack 16 openstack:16.2::el8 | openstack-neutron-rpc-server | 1:15.3.5-2.20230216175503.el8ost |
| Red Hat · OpenStack 16 openstack:16.2::el8 | openstack-neutron-sriov-nic-agent | 1:15.3.5-2.20230216175503.el8ost |
| Red Hat · OpenStack 16 openstack:16.2::el8 | python3-neutron | 1:15.3.5-2.20230216175503.el8ost |
Vulnerabilities 1
-
Medium 4.3
Openstack-neutron: unrestricted creation of security groups (fix for cve-2022-3277)
An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a mal…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2219790
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2222270
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4283.json
-
report
https://access.redhat.com/security/cve/CVE-2023-3637
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-3637
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-3637