Synopsis

Moderate: openstack-neutron security update

Type/Severity

Security Advisory: Moderate

Topic

An update for openstack-neutron is now available for Red Hat OpenStack Platform 12.0 (Pike).

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

OpenStack Networking (neutron) is a pluggable, scalable, and API-driven system that provisions networking services to virtual machines. Its main function is to manage connectivity to and from virtual machines.

Security Fix(es):

• openstack-neutron: A router interface out of subnet IP range results in a denial of service (CVE-2018-14635)
  

For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenStack 12 x86_64
• Red Hat OpenStack for IBM Power 12 ppc64le

Fixes

• BZ - 1530131 - test_create_update_port_with_dns_domain failed with KeyError: 'dns_domain'
• BZ - 1539638 - neutron tempest scenario "test_from_legacy_to_ha" fails
• BZ - 1607822 - CVE-2018-14635 openstack-neutron: A router interface out of subnet IP range results in a denial of service

CVEs

• CVE-2018-14635

References

• https://access.redhat.com/security/updates/classification/#moderate

Red Hat OpenStack 12

SRPM
openstack-neutron-11.0.4-6.el7ost.src.rpm	SHA-256: 830a075af8e0f55c4798462d872c6c6bb25e9d9cae26c35b208bfe4d2633055e
x86_64
openstack-neutron-11.0.4-6.el7ost.noarch.rpm	SHA-256: 9f7beac7978ecc48a2ea629ff8228a5f5c8b4246d7d08b92e525cbc18327e857
openstack-neutron-common-11.0.4-6.el7ost.noarch.rpm	SHA-256: 0a82bcf94eb4209589dfdfa0be2450fb7f79dd63ce967cfd9769e3be9c99e63f
openstack-neutron-linuxbridge-11.0.4-6.el7ost.noarch.rpm	SHA-256: 157c1591225febc37de9ad97a43db86c85fb8d994301fcb7aec7baf7ab8e3289
openstack-neutron-macvtap-agent-11.0.4-6.el7ost.noarch.rpm	SHA-256: be8dec80c3ab784c84ae81bab8ddca0ac16ed9ad026947043d84be9f29b8e495
openstack-neutron-metering-agent-11.0.4-6.el7ost.noarch.rpm	SHA-256: b0a4a5fd7c9e4a9abdcd9a6fa829425aa5249ea5ea7d62828f60ce4461042418
openstack-neutron-ml2-11.0.4-6.el7ost.noarch.rpm	SHA-256: 68442d95374d1877ae0c26a5abfbb90700a165d7c9afc646ada365b56644c32f
openstack-neutron-openvswitch-11.0.4-6.el7ost.noarch.rpm	SHA-256: af2062bc2f2d69517a202c6ba2237fd820a45db1024dd6414b5f9a01da34c23c
openstack-neutron-rpc-server-11.0.4-6.el7ost.noarch.rpm	SHA-256: 4714a95b9eb523b9edddc1cd8358ce5e0aca8668703502d2030ac16c1b2c82b6
openstack-neutron-sriov-nic-agent-11.0.4-6.el7ost.noarch.rpm	SHA-256: 9877b600b439a9ebf3f63f014ed03f3304600b3b5b73dc458909487fc379ea1b
python-neutron-11.0.4-6.el7ost.noarch.rpm	SHA-256: 4ad5d9e3761e445bd855024547e063d0df9fa9ebe5585723f93a9dc87265f716
python-neutron-tests-11.0.4-6.el7ost.noarch.rpm	SHA-256: 5bc8d35cd2992652e363d7d6128f5fe3b639b8efe81b33ef0d990f84d090271a

Red Hat OpenStack for IBM Power 12

SRPM
openstack-neutron-11.0.4-6.el7ost.src.rpm	SHA-256: 830a075af8e0f55c4798462d872c6c6bb25e9d9cae26c35b208bfe4d2633055e
ppc64le
openstack-neutron-11.0.4-6.el7ost.noarch.rpm	SHA-256: 9f7beac7978ecc48a2ea629ff8228a5f5c8b4246d7d08b92e525cbc18327e857
openstack-neutron-common-11.0.4-6.el7ost.noarch.rpm	SHA-256: 0a82bcf94eb4209589dfdfa0be2450fb7f79dd63ce967cfd9769e3be9c99e63f
openstack-neutron-linuxbridge-11.0.4-6.el7ost.noarch.rpm	SHA-256: 157c1591225febc37de9ad97a43db86c85fb8d994301fcb7aec7baf7ab8e3289
openstack-neutron-macvtap-agent-11.0.4-6.el7ost.noarch.rpm	SHA-256: be8dec80c3ab784c84ae81bab8ddca0ac16ed9ad026947043d84be9f29b8e495
openstack-neutron-metering-agent-11.0.4-6.el7ost.noarch.rpm	SHA-256: b0a4a5fd7c9e4a9abdcd9a6fa829425aa5249ea5ea7d62828f60ce4461042418
openstack-neutron-ml2-11.0.4-6.el7ost.noarch.rpm	SHA-256: 68442d95374d1877ae0c26a5abfbb90700a165d7c9afc646ada365b56644c32f
openstack-neutron-openvswitch-11.0.4-6.el7ost.noarch.rpm	SHA-256: af2062bc2f2d69517a202c6ba2237fd820a45db1024dd6414b5f9a01da34c23c
openstack-neutron-rpc-server-11.0.4-6.el7ost.noarch.rpm	SHA-256: 4714a95b9eb523b9edddc1cd8358ce5e0aca8668703502d2030ac16c1b2c82b6
openstack-neutron-sriov-nic-agent-11.0.4-6.el7ost.noarch.rpm	SHA-256: 9877b600b439a9ebf3f63f014ed03f3304600b3b5b73dc458909487fc379ea1b
python-neutron-11.0.4-6.el7ost.noarch.rpm	SHA-256: 4ad5d9e3761e445bd855024547e063d0df9fa9ebe5585723f93a9dc87265f716
python-neutron-tests-11.0.4-6.el7ost.noarch.rpm	SHA-256: 5bc8d35cd2992652e363d7d6128f5fe3b639b8efe81b33ef0d990f84d090271a