(RHSA-2019:3788) Moderate: openstack-octavia security and bug fix update

2019-11-0712:47:59

access.redhat.com

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

0.002

Percentile

61.1%

JSON

The OpenStack Load Balancing service (openstack-octavia) provides a Load Balancing-as-a-Service (LBaaS) version 2 implementation for Red Hat OpenStack platform director based installations.

Security Fix(es):

openstack-octavia: amphora-agent not requiring client certificate (CVE-2019-17134)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

[Backport request]Add failover logging to show the amphora details. (BZ#1743476)

OSVersionArchitecturePackageVersionFilename
RedHat7noarchpython-octavia< 2.1.2-1.el7ostpython-octavia-2.1.2-1.el7ost.noarch.rpm
RedHat7ppc64leopenstack-octavia-debuginfo< 2.1.2-1.el7ostopenstack-octavia-debuginfo-2.1.2-1.el7ost.ppc64le.rpm
RedHat7noarchopenstack-octavia-health-manager< 2.1.2-1.el7ostopenstack-octavia-health-manager-2.1.2-1.el7ost.noarch.rpm
RedHat7noarchopenstack-octavia-amphora-agent< 2.1.2-1.el7ostopenstack-octavia-amphora-agent-2.1.2-1.el7ost.noarch.rpm
RedHat7noarchopenstack-octavia-housekeeping< 2.1.2-1.el7ostopenstack-octavia-housekeeping-2.1.2-1.el7ost.noarch.rpm
RedHat7noarchopenstack-octavia-api< 2.1.2-1.el7ostopenstack-octavia-api-2.1.2-1.el7ost.noarch.rpm
RedHat7x86_64openstack-octavia-debuginfo< 2.1.2-1.el7ostopenstack-octavia-debuginfo-2.1.2-1.el7ost.x86_64.rpm
RedHat7ppc64lepython-octavia-tests-golang< 2.1.2-1.el7ostpython-octavia-tests-golang-2.1.2-1.el7ost.ppc64le.rpm
RedHat7x86_64python-octavia-tests-golang< 2.1.2-1.el7ostpython-octavia-tests-golang-2.1.2-1.el7ost.x86_64.rpm
RedHat7noarchopenstack-octavia-diskimage-create< 2.1.2-1.el7ostopenstack-octavia-diskimage-create-2.1.2-1.el7ost.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	7	noarch	python-octavia	< 2.1.2-1.el7ost	python-octavia-2.1.2-1.el7ost.noarch.rpm
RedHat	7	ppc64le	openstack-octavia-debuginfo	< 2.1.2-1.el7ost	openstack-octavia-debuginfo-2.1.2-1.el7ost.ppc64le.rpm
RedHat	7	noarch	openstack-octavia-health-manager	< 2.1.2-1.el7ost	openstack-octavia-health-manager-2.1.2-1.el7ost.noarch.rpm
RedHat	7	noarch	openstack-octavia-amphora-agent	< 2.1.2-1.el7ost	openstack-octavia-amphora-agent-2.1.2-1.el7ost.noarch.rpm
RedHat	7	noarch	openstack-octavia-housekeeping	< 2.1.2-1.el7ost	openstack-octavia-housekeeping-2.1.2-1.el7ost.noarch.rpm
RedHat	7	noarch	openstack-octavia-api	< 2.1.2-1.el7ost	openstack-octavia-api-2.1.2-1.el7ost.noarch.rpm
RedHat	7	x86_64	openstack-octavia-debuginfo	< 2.1.2-1.el7ost	openstack-octavia-debuginfo-2.1.2-1.el7ost.x86_64.rpm
RedHat	7	ppc64le	python-octavia-tests-golang	< 2.1.2-1.el7ost	python-octavia-tests-golang-2.1.2-1.el7ost.ppc64le.rpm
RedHat	7	x86_64	python-octavia-tests-golang	< 2.1.2-1.el7ost	python-octavia-tests-golang-2.1.2-1.el7ost.x86_64.rpm
RedHat	7	noarch	openstack-octavia-diskimage-create	< 2.1.2-1.el7ost	openstack-octavia-diskimage-create-2.1.2-1.el7ost.noarch.rpm