OLOSSA-2015-0023

OLOSSA-2015-0023 - openstack-neutron security update

Type:SECURITY
Impact:MODERATE
Release Date:2015-03-13

Description


[2014.1.3-12]
- Fix hostname regex pattern rhbz#1166074 (CVE-2014-7821)

[2014.1.3-11]
- Fix neutron-netns-cleanup broken because of backport rhbz#1160350
- Fix neutron-dhcp-agent restart to reload dnsmasqs rhbz#1162108
- allow delete_port to work when there are multiple floating ips
rhbz#1163470

[2014.1.3-10]
- Revert to 755 permissions for /var/lib/neutron since dnsmasq drops
'neutron' user and runs as 'nobody' by default, rhbz#1163759

[2014.1.3-9]
- Made /var/log/neutron and /var/lib/neutron permissions more strict
(0755 -> 0750) since those directories may contain sensitive data,
rhbz#1149688


Related CVEs


CVE-2014-7821

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 6 (x86_64) openstack-neutron-2014.1.3-12.el6.src.rpmff2e18a3cceb369336299dcedce210fdf30b27b7066da46db17d55eb30570384-ol6_x86_64_openstack10
openstack-neutron-2014.1.3-12.el6.noarch.rpm5f75a17daa649164409070f994cc71f0896301a243d26257a198c615bd1fc36c-ol6_x86_64_openstack10
openstack-neutron-bigswitch-2014.1.3-12.el6.noarch.rpm158969deb64fce0af6344b9d20e17cc016e8312e22c492b2eee5110ea14b6923-ol6_x86_64_openstack10
openstack-neutron-brocade-2014.1.3-12.el6.noarch.rpm5e5a3250b2b290d9562650b955ff6eabb2ab537e07c440fed4a55bbe84e94ac1-ol6_x86_64_openstack10
openstack-neutron-cisco-2014.1.3-12.el6.noarch.rpm48d8a1a5874bcd2eee90f299cfa366f50a825ad918ca9cdf1943067d42b9176b-ol6_x86_64_openstack10
openstack-neutron-hyperv-2014.1.3-12.el6.noarch.rpm9b1aa6dc07598052200334147f563c62987d0e65906a4036672bf1d896215287-ol6_x86_64_openstack10
openstack-neutron-ibm-2014.1.3-12.el6.noarch.rpm63ba73f3bf5c33116c16789ab62bcd78eca9a1fd976157b2ec129d656ecde6f8-ol6_x86_64_openstack10
openstack-neutron-linuxbridge-2014.1.3-12.el6.noarch.rpm1a1a502500867a3e96135bbc45b022f1d6fc81f178d9933bc05ce8432a6a2fbc-ol6_x86_64_openstack10
openstack-neutron-mellanox-2014.1.3-12.el6.noarch.rpm1b9ece0d7493b42f7a0120403b0ab9ccf2cc29b5adb46efb52dd4fc911df5d2b-ol6_x86_64_openstack10
openstack-neutron-metaplugin-2014.1.3-12.el6.noarch.rpm863775ad992005e976492757c110c1296eabe4418f97b46dee1b8ba15e59f0bf-ol6_x86_64_openstack10
openstack-neutron-metering-agent-2014.1.3-12.el6.noarch.rpmf1bd80862fa75e249b44366dc2df429d828a992d4b6172a461bfc946ac3261bc-ol6_x86_64_openstack10
openstack-neutron-midonet-2014.1.3-12.el6.noarch.rpmd2e89f1d9a4183a9efe72324da4ed47ae05956a4899aca068644cd1982de5229-ol6_x86_64_openstack10
openstack-neutron-ml2-2014.1.3-12.el6.noarch.rpm9bedc881f0e28430cfd69d33b5a313d05d7d5b38d97f96991a94de90cf3d3b52-ol6_x86_64_openstack10
openstack-neutron-nec-2014.1.3-12.el6.noarch.rpm71117748f216624f72594f96a6d316edcf6c791580996545d463e4302dcb017f-ol6_x86_64_openstack10
openstack-neutron-nuage-2014.1.3-12.el6.noarch.rpmccb1f0477370b42bbb9c20109b8ca8897c9e1aecdcbcc507bee81a91ed963b47-ol6_x86_64_openstack10
openstack-neutron-ofagent-2014.1.3-12.el6.noarch.rpmf7a286319d5c3b9515b02a94c5c199a8ea4591fcae9af2505d3c176afaea80de-ol6_x86_64_openstack10
openstack-neutron-oneconvergence-nvsd-2014.1.3-12.el6.noarch.rpm6ae4e39a64449ea840f19779f2830dcd53de883578dc7a9934e6b223effdeffc-ol6_x86_64_openstack10
openstack-neutron-openvswitch-2014.1.3-12.el6.noarch.rpm7b26baa12f005d6bd15a9932d56bdc35f8c4ee14b9c80d6341f4f96e38d2569d-ol6_x86_64_openstack10
openstack-neutron-plumgrid-2014.1.3-12.el6.noarch.rpm65200d1d7df5623f9eff2cebd4633760aeb21aa6fc46823fa894912a1c4c6bc6-ol6_x86_64_openstack10
openstack-neutron-ryu-2014.1.3-12.el6.noarch.rpm0bc44dc2cdcfc01a09eda17f7b248bb60cbb0d65aecef4281d86a94270fd168c-ol6_x86_64_openstack10
openstack-neutron-vmware-2014.1.3-12.el6.noarch.rpmff4bf9031c709655ee481fa2cd936d0b2371bd80f1a4c97adbfeaf41c7b175d6-ol6_x86_64_openstack10
openstack-neutron-vpn-agent-2014.1.3-12.el6.noarch.rpmb0774409979e6e2d0ecdeb094580be6692aa3e8a5da1b60e7e6bad1274422b0f-ol6_x86_64_openstack10
python-neutron-2014.1.3-12.el6.noarch.rpme70765de890e9477438616dc2389ee60ecd128118707526d815289b6653d3be9-ol6_x86_64_openstack10



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete