Security update for openstack-neutron
SUSE Security Update: Security update for openstack-neutron
OpenStack Neutron has been updated to fix bugs and security issues:
Security issue fixed:
* CVE-2014-3555: openstack-neutron: Denial of Service in Neutron
allowed address pair
Bug Fixes and Enhancements:
* Fixed dhcp & gateway ip conflict in PLUMgrid plug-in
* Updated from global requirements
* Ensure routing key is specified in the address for a direct producer
* Improve handling of security group updates
* Ensure that session is rolled back on bulk creates
* Allow multiple DNS forwarders for dnsmasq
* Fix get_vif_port_by_id to only return relevant ports
* Remove explicit dependency on amqplib
* LBaaS add missing rootwrap filter for route
* NVP plugin:fix delete sec group when backend is out of sync
* Kill 'Skipping unknown group key: firewall_driver' log trace
* Added missing plugin .ini files to setup.cfg
* OVS lib defer apply doesn't handle concurrency
* Fixed floating IP logic in PLUMgrid plug-in
* tests/unit: Initialize core plugin in TestL3GwModeMixin
* Install SNAT rules for ipv4 only
* Optionally delete name spaces when they are no longer needed
* l2-population : send flooding entries when the last port goes down
* l2-population/lb/vxlan : ip neigh add command failed
* Fixes the Hyper-V agent individual ports metrics
* Call policy.init() once per API request
* Call _destroy_metadata_proxy from _destroy_router_name spaces
* ml2: gre, vxlan type driver can leak segment_id
Security Issues:
* CVE-2014-3555
Announcement ID: | SUSE-SU-2014:1034-1 |
Rating: | moderate |
References: | #887348 |
Affected Products: |
An update that fixes one vulnerability is now available. It includes one version update.
Description:
OpenStack Neutron has been updated to fix bugs and security issues:
Security issue fixed:
* CVE-2014-3555: openstack-neutron: Denial of Service in Neutron
allowed address pair
Bug Fixes and Enhancements:
* Fixed dhcp & gateway ip conflict in PLUMgrid plug-in
* Updated from global requirements
* Ensure routing key is specified in the address for a direct producer
* Improve handling of security group updates
* Ensure that session is rolled back on bulk creates
* Allow multiple DNS forwarders for dnsmasq
* Fix get_vif_port_by_id to only return relevant ports
* Remove explicit dependency on amqplib
* LBaaS add missing rootwrap filter for route
* NVP plugin:fix delete sec group when backend is out of sync
* Kill 'Skipping unknown group key: firewall_driver' log trace
* Added missing plugin .ini files to setup.cfg
* OVS lib defer apply doesn't handle concurrency
* Fixed floating IP logic in PLUMgrid plug-in
* tests/unit: Initialize core plugin in TestL3GwModeMixin
* Install SNAT rules for ipv4 only
* Optionally delete name spaces when they are no longer needed
* l2-population : send flooding entries when the last port goes down
* l2-population/lb/vxlan : ip neigh add command failed
* Fixes the Hyper-V agent individual ports metrics
* Call policy.init() once per API request
* Call _destroy_metadata_proxy from _destroy_router_name spaces
* ml2: gre, vxlan type driver can leak segment_id
Security Issues:
* CVE-2014-3555
Patch Instructions:
To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- SUSE Cloud 3:
zypper in -t patch sleclo30sp3-openstack-neutron-9567
To bring your system up-to-date, use "zypper patch".
Package List:
- SUSE Cloud 3 (x86_64) [New Version: 2013.2.4.dev93.gf569afd]:
- openstack-neutron-2013.2.4.dev93.gf569afd-0.7.1
- openstack-neutron-dhcp-agent-2013.2.4.dev93.gf569afd-0.7.1
- openstack-neutron-ha-tool-2013.2.4.dev93.gf569afd-0.7.1
- openstack-neutron-l3-agent-2013.2.4.dev93.gf569afd-0.7.1
- openstack-neutron-lbaas-agent-2013.2.4.dev93.gf569afd-0.7.1
- openstack-neutron-linuxbridge-agent-2013.2.4.dev93.gf569afd-0.7.1
- openstack-neutron-metadata-agent-2013.2.4.dev93.gf569afd-0.7.1
- openstack-neutron-metering-agent-2013.2.4.dev93.gf569afd-0.7.1
- openstack-neutron-mlnx-agent-2013.2.4.dev93.gf569afd-0.7.1
- openstack-neutron-nec-agent-2013.2.4.dev93.gf569afd-0.7.1
- openstack-neutron-openvswitch-agent-2013.2.4.dev93.gf569afd-0.7.1
- openstack-neutron-plugin-cisco-2013.2.4.dev93.gf569afd-0.7.1
- openstack-neutron-ryu-agent-2013.2.4.dev93.gf569afd-0.7.1
- openstack-neutron-server-2013.2.4.dev93.gf569afd-0.7.1
- openstack-neutron-vmware-agent-2013.2.4.dev93.gf569afd-0.7.1
- openstack-neutron-vpn-agent-2013.2.4.dev93.gf569afd-0.7.1
- python-neutron-2013.2.4.dev93.gf569afd-0.7.1
- SUSE Cloud 3 (noarch) [New Version: 2013.2.4.dev93.gf569afd]:
- openstack-neutron-doc-2013.2.4.dev93.gf569afd-0.7.1
References:
- http://support.novell.com/security/cve/CVE-2014-3555.html
- https://bugzilla.novell.com/887348
- http://download.suse.com/patch/finder/?keywords=82fb0da16541b6f979190147212a9a2f