Synopsis

Moderate: openstack-neutron security, bug fix, and enhancement update

Type/Severity

Security Advisory: Moderate

Topic

Updated openstack-neutron packages that fix one security issue, several
bugs, and add multiple enhancements are now available for Red Hat
Enterprise Linux OpenStack Platform 5.0 for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having Moderate security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.

Description

OpenStack Networking (neutron) is a pluggable, scalable, and API-driven
system that provisions networking services to virtual machines. Its main
function is to manage connectivity to and from virtual machines. As of Red
Hat Enterprise Linux OpenStack Platform 4.0, 'neutron' replaces 'quantum'
as the core component of OpenStack Networking.

It was discovered that unprivileged users could in some cases reset
admin-only network attributes to their default values. This could lead to
unexpected behavior or in some cases result in a denial of service.
(CVE-2014-6414)

The openstack-neutron packages have been upgraded to upstream version
2014.1.3, which provides a number of bug fixes and enhancements over the
previous version. (BZ#1149753)

All openstack-neutron users are advised to upgrade to these updated
packages, which correct these issues and add these enhancements.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the
Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenStack 5.0 for RHEL 6 x86_64

Fixes

• BZ - RHSA-2014:1785 - CVE-2014-6414 openstack-neutron: Admin-only network attributes may be reset to defaults by non-privileged users
• BZ - RHSA-2014:1785 - Remove dnsmasq version warning for dhcp-agent on RHEL
• BZ - RHSA-2014:1785 - Rebase openstack-neutron to 2014.1.3
• BZ - RHSA-2014:1785 - [RFE][neutron]: Config option to control visibility of cisco-policy-profile resources for tenants
• BZ - RHSA-2014:1785 - [RFE][neutron]: Ability to assign cisco nw profile to multi-tenants in single request
• BZ - RHSA-2014:1785 - l3-agent error : Executable not found: conntrack (filter match = conntrack)

CVEs

• CVE-2014-6414

References

• http://www.redhat.com/security/updates/classification/#normal

Red Hat OpenStack 5.0 for RHEL 6

SRPM
openstack-neutron-2014.1.3-8.el6ost.src.rpm	SHA-256: 5e28eda442dbc6bf717717999bde2b539622a7a4b363a3f6b6bc957cf18d3333
python-neutronclient-2.3.4-3.el6ost.src.rpm	SHA-256: 5ea9e31a5a5138e27e0208af221fa587e0492d3772b4be0fbfd76ba5eb015865
x86_64
openstack-neutron-2014.1.3-8.el6ost.noarch.rpm	SHA-256: 5335529cada6dd5af17bc11b9872d31ecdb252ac3b450dbf2afa326a5293be7a
openstack-neutron-bigswitch-2014.1.3-8.el6ost.noarch.rpm	SHA-256: a4c063b4eb1e371d1b28464747d4792264bd1a984ba284835676a22cea9a3470
openstack-neutron-brocade-2014.1.3-8.el6ost.noarch.rpm	SHA-256: 1c647c969d3863f91e692b091e176872cb19b8d632c7a7ba968d7e43bac7bc81
openstack-neutron-cisco-2014.1.3-8.el6ost.noarch.rpm	SHA-256: 2c95f53be89d1b2b12eb47a9368d8534e6e040283c919f8044a5232b2e499cf2
openstack-neutron-embrane-2014.1.3-8.el6ost.noarch.rpm	SHA-256: 9fe669e495ea3cdf288cd41bc133edbcf2c15087cfca5b1b856ab526345478ea
openstack-neutron-hyperv-2014.1.3-8.el6ost.noarch.rpm	SHA-256: bd3d5beb3ecd1d9e7fd2ce21c7025884b0deefed7efff08bfb412d9ab02afd88
openstack-neutron-ibm-2014.1.3-8.el6ost.noarch.rpm	SHA-256: fc0194c96307a0ab8abe30c1ff049559d7b9ffd4cb12641a3026e0643470fe0b
openstack-neutron-linuxbridge-2014.1.3-8.el6ost.noarch.rpm	SHA-256: f252c5c734f80fbefd64e00894cbe4fd454e0fae64ae888165a051260bd58471
openstack-neutron-mellanox-2014.1.3-8.el6ost.noarch.rpm	SHA-256: 54eeaa49195e4f9857f7794a632af20139b2878ca946cc242b09d44479a52253
openstack-neutron-metaplugin-2014.1.3-8.el6ost.noarch.rpm	SHA-256: 2837e8c64804b08c9f710511d391f16a4078bafe43d308ceeb73b16022246ae1
openstack-neutron-metering-agent-2014.1.3-8.el6ost.noarch.rpm	SHA-256: 80898201272f863ab0eeed686f6b224d166554cb65e1c99b48f89f35cc544f56
openstack-neutron-midonet-2014.1.3-8.el6ost.noarch.rpm	SHA-256: 21322c9dcea55064bef72593bfb56f6323f7b614b74ea08a9364ebbf290e989e
openstack-neutron-ml2-2014.1.3-8.el6ost.noarch.rpm	SHA-256: 59eb847d86be0f14c8804615fe9a0c7e8496c3bad50b1f9340a9e9f6bda71c53
openstack-neutron-nec-2014.1.3-8.el6ost.noarch.rpm	SHA-256: 1b6fae7c50d9a31ad727c04cc8ac368800a37f3bd99bfbef7e7c97b0a02f11ab
openstack-neutron-nuage-2014.1.3-8.el6ost.noarch.rpm	SHA-256: 1fed92b87410fb184dd67e0bbc2727bc85ca53e10ab9a998a0f5771ab11d8fef
openstack-neutron-ofagent-2014.1.3-8.el6ost.noarch.rpm	SHA-256: 5f8603800f2baa8eea13783cb7e065284e0f59b1f5ae5b8fb48bd11e34783374
openstack-neutron-oneconvergence-nvsd-2014.1.3-8.el6ost.noarch.rpm	SHA-256: 4dd214ee98efcaa1b261d53989cf144780a2ed6ac75401ff55c576e8ff2292ff
openstack-neutron-openvswitch-2014.1.3-8.el6ost.noarch.rpm	SHA-256: 98c3b259de831bb3f1ab41c0f64a4ffdd26dd50226d2cfa928f5a27af5651def
openstack-neutron-plumgrid-2014.1.3-8.el6ost.noarch.rpm	SHA-256: b2a27b12b39ea2c7461d09f3eb11f488b0877f57964f05f3d1e6de4521d53b21
openstack-neutron-ryu-2014.1.3-8.el6ost.noarch.rpm	SHA-256: 2b2b9d34c8f4aa67748188447393fb3a2cb3794feefb0deaaa332290f8321bb7
openstack-neutron-vmware-2014.1.3-8.el6ost.noarch.rpm	SHA-256: 90f04f21498b30c90b9646fdace5e1cbe1605ac5dd0daf7fd4e286c060e9b8f5
openstack-neutron-vpn-agent-2014.1.3-8.el6ost.noarch.rpm	SHA-256: 0cac0cb14b627d46b433e4bcf6227344666d2f2aed991dd4aac24b33079080a5
python-neutron-2014.1.3-8.el6ost.noarch.rpm	SHA-256: f524f7c89e62384a13e1224025f5df42e8a13d39f3f853394cb31e362f7f1cb9
python-neutronclient-2.3.4-3.el6ost.noarch.rpm	SHA-256: ff574d7032c164d818fa4b762f889b4ed783d38a9e9ed8a27e3acef3aa440dc7