Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

OpenStack 14.0 RHSA-2019-3743-01 Security Update for Octavia Moderate

red hat
Calendar Grey November 6, 2019
Dist Redhat Esm H88
A new patch for openstack-octavia has been released on Red Hat OpenStack Platform 14.0, indicating a moderate level of security concern.
An update for openstack-octavia is now available for Red Hat OpenStack Platform 14.0 (Rocky). Red Hat Product Security has rated this update as having a security impact of Moder...

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Summary

The OpenStack Load Balancing service (openstack-octavia) provides a Load Balancing-as-a-Service (LBaaS) version 2 implementation for Red Hat OpenStack platform director based installations.
Security Fix(es):
* openstack-octavia: amphora-agent not requiring client certificate (CVE-2019-17134)
For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.

Topics%20covered

Topics Covered

security advisory moderate security fix load balancing Red Hat OpenStack client certificate openstack-octavia

References

https://access.redhat.com/security/cve/CVE-2019-17134 https://access.redhat.com/security/updates/classification/#moderate

Package List

Red Hat OpenStack Platform 14.0:
Source: openstack-octavia-3.1.0-3.el7ost.src.rpm
noarch: openstack-octavia-amphora-agent-3.1.0-3.el7ost.noarch.rpm openstack-octavia-api-3.1.0-3.el7ost.noarch.rpm openstack-octavia-common-3.1.0-3.el7ost.noarch.rpm openstack-octavia-diskimage-create-3.1.0-3.el7ost.noarch.rpm openstack-octavia-health-manager-3.1.0-3.el7ost.noarch.rpm openstack-octavia-housekeeping-3.1.0-3.el7ost.noarch.rpm openstack-octavia-worker-3.1.0-3.el7ost.noarch.rpm python-octavia-3.1.0-3.el7ost.noarch.rpm
ppc64le: openstack-octavia-debuginfo-3.1.0-3.el7ost.ppc64le.rpm python-octavia-tests-golang-3.1.0-3.el7ost.ppc64le.rpm
x86_64: openstack-octavia-debuginfo-3.1.0-3.el7ost.x86_64.rpm python-octavia-tests-golang-3.1.0-3.el7ost.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/


Advisory ID: RHSA-2019:3743-01
Product: Red Hat Enterprise Linux OpenStack Platform
Advisory URL: https://access.redhat.com/errata/RHSA-2019:3743
Issue date: 2019-11-06

Topic

An update for openstack-octavia is now available for Red Hat OpenStack Platform 14.0 (Rocky).

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link in the References section.

Topics%20covered

Topics Covered

security advisory moderate security fix load balancing Red Hat OpenStack client certificate openstack-octavia

Relevant Releases Architectures

Red Hat OpenStack Platform 14.0 - noarch, ppc64le, x86_64

Bugs Fixed

1761307 - CVE-2019-17134 openstack-octavia: amphora-agent not requiring client certificate

1762807 - Rebase openstack-octavia to 3.2.0

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here