[RHSA-2018:2710-01] Moderate: openstack-neutron security update

[Security announcements for all Red Hat products and services.]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

=====================================================================
                   Red Hat Security Advisory

Synopsis:          Moderate: openstack-neutron security update
Advisory ID:       RHSA-2018:2710-01
Product:           Red Hat Enterprise Linux OpenStack Platform
Advisory URL:      https://access.redhat.com/errata/RHSA-2018:2710
Issue date:        2018-09-17
CVE Names:         CVE-2018-14635 
=====================================================================

1. Summary:

An update for openstack-neutron is now available for Red Hat OpenStack
Platform 13.0 (Queens).

Red Hat Product Security has rated this update as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat OpenStack Platform 13.0 - noarch

3. Description:

OpenStack Networking (neutron) is a pluggable, scalable, and API-driven
system that provisions networking services to virtual machines. Its main
function is to manage connectivity to and from virtual machines.

Security Fix(es):

* openstack-neutron: A router interface out of subnet IP range results in a
denial of service (CVE-2018-14635)

For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

5. Bugs fixed (https://bugzilla.redhat.com/):

1607822 - CVE-2018-14635 openstack-neutron: A router interface out of subnet IP range results in a denial of service

6. Package List:

Red Hat OpenStack Platform 13.0:

Source:
openstack-neutron-12.0.3-5.el7ost.src.rpm

noarch:
openstack-neutron-12.0.3-5.el7ost.noarch.rpm
openstack-neutron-common-12.0.3-5.el7ost.noarch.rpm
openstack-neutron-linuxbridge-12.0.3-5.el7ost.noarch.rpm
openstack-neutron-macvtap-agent-12.0.3-5.el7ost.noarch.rpm
openstack-neutron-metering-agent-12.0.3-5.el7ost.noarch.rpm
openstack-neutron-ml2-12.0.3-5.el7ost.noarch.rpm
openstack-neutron-openvswitch-12.0.3-5.el7ost.noarch.rpm
openstack-neutron-rpc-server-12.0.3-5.el7ost.noarch.rpm
openstack-neutron-sriov-nic-agent-12.0.3-5.el7ost.noarch.rpm
python-neutron-12.0.3-5.el7ost.noarch.rpm

These packages are GPG signed by Red Hat for security.  Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2018-14635
https://access.redhat.com/security/updates/classification/#moderate

8. Contact:

The Red Hat security contact is <secalert at redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2018 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=1B82
-----END PGP SIGNATURE-----