Issued:
2017-06-19
Updated:
2017-06-19

RHSA-2017:1508 - Moderate: openstack-nova security, bug fix, and enhancement update

Synopsis

Moderate: openstack-nova security, bug fix, and enhancement update

Type/Severity

Security Advisory Moderate

Topic

An update for openstack-nova is now available for Red Hat OpenStack Platform 9.0 (Mitaka).

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

OpenStack Compute (nova) launches and schedules large networks of virtual machines, creating a redundant and scalable cloud computing platform. Compute provides the software, control panels, and APIs required to orchestrate a cloud, including running virtual machine instances and controlling access through users and projects.

The following packages have been upgraded to a later upstream version: openstack-nova (13.1.4). (BZ#1454627, BZ#1454628)

Security Fix(es):

  • An information exposure issue was discovered in OpenStack Compute's exception_wrapper.py. Legacy notification exception contexts appearing in ERROR-level logs could include sensitive information such as account passwords and authorization tokens. (CVE-2017-7214)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

ProductVersionArch
Red Hat OpenStack9x86_64

Updated Packages

  • openstack-nova-cells-13.1.4-1.el7ost.noarch.rpm
  • openstack-nova-compute-13.1.4-1.el7ost.noarch.rpm
  • python-nova-13.1.4-1.el7ost.noarch.rpm
  • openstack-nova-spicehtml5proxy-13.1.4-1.el7ost.noarch.rpm
  • openstack-nova-scheduler-13.1.4-1.el7ost.noarch.rpm
  • openstack-nova-console-13.1.4-1.el7ost.noarch.rpm
  • openstack-nova-network-13.1.4-1.el7ost.noarch.rpm
  • python-nova-tests-13.1.4-1.el7ost.noarch.rpm
  • openstack-nova-migration-13.1.4-1.el7ost.noarch.rpm
  • openstack-nova-13.1.4-1.el7ost.src.rpm
  • openstack-nova-api-13.1.4-1.el7ost.noarch.rpm
  • openstack-nova-13.1.4-1.el7ost.noarch.rpm
  • openstack-nova-conductor-13.1.4-1.el7ost.noarch.rpm
  • openstack-nova-serialproxy-13.1.4-1.el7ost.noarch.rpm
  • openstack-nova-cert-13.1.4-1.el7ost.noarch.rpm
  • openstack-nova-novncproxy-13.1.4-1.el7ost.noarch.rpm
  • openstack-nova-common-13.1.4-1.el7ost.noarch.rpm

Fixes

CVEs

References

Additional information