Red Hat Security Advisory: openstack-nova security and bug fix advisory
🔗 CVE IDs covered (1)
📋 Description
CVE-2015-7713 — openstack-nova: network security group changes are not applied to running instances
🎯 Affected products25
- OpenStack 7.0 Tools for RHEL 7
- Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
- openstack-nova-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
- openstack-nova-0:2015.1.2-7.el7ost.src as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
- openstack-nova-api-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
- openstack-nova-cells-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
- openstack-nova-cert-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
- openstack-nova-common-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
- openstack-nova-compute-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
- openstack-nova-conductor-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
- openstack-nova-console-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
- openstack-nova-doc-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
- openstack-nova-network-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
- openstack-nova-novncproxy-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
- openstack-nova-objectstore-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
- openstack-nova-scheduler-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
- openstack-nova-serialproxy-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
- openstack-nova-spicehtml5proxy-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
- python-nova-0:2015.1.2-7.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
- python-novaclient-1:2.23.0-2.el7ost.noarch as a component of OpenStack 7.0 Tools for RHEL 7
- python-novaclient-1:2.23.0-2.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
- python-novaclient-1:2.23.0-2.el7ost.src as a component of OpenStack 7.0 Tools for RHEL 7
- python-novaclient-1:2.23.0-2.el7ost.src as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
- python-novaclient-doc-1:2.23.0-2.el7ost.noarch as a component of OpenStack 7.0 Tools for RHEL 7
- python-novaclient-doc-1:2.23.0-2.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
✅ Remediation
Before applying this update, ensure all previously released errata relevant to your system have been applied. Red Hat Enterprise Linux OpenStack Platform 7 runs on Red Hat Enterprise Linux 7.2. The Red Hat Enterprise Linux OpenStack Platform 7 Release Notes contain the following: * An explanation of the way in which the provided components interact to form a working cloud computing environment. * Technology Previews, Recommended Practices, and Known Issues. * The channels required for Red Hat Enterprise Linux OpenStack Platform 7, including which channels need to be enabled and disabled. The Release Notes are available at: https://access.redhat.com/documentation/en/red-hat-enterprise-linux-openstack-platform/version-7/release-notes/ This update is available through 'yum update' on systems registered through Red Hat Subscription Manager. For more information about Red Hat Subscription Manager, see: https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html
🔗 References (11)
- selfhttps://access.redhat.com/errata/RHSA-2015:2673
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1249751
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1261100
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1268051
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1269119
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1273466
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274054
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1274875
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1275937
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2673.json