Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.
First Last Prev Next    This bug is not in your last search results.
Bug 1059514 - (CVE-2014-0040) CVE-2014-0040 OpenStack openstack-heat-templates: use of HTTP to download signing keys/code
CVE-2014-0040 OpenStack openstack-heat-templates: use of HTTP to download sig...
Status: CLOSED ERRATA
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
unspecified
All Linux
low Severity low
: ---
: ---
Assigned To: Red Hat Product Security
impact=low,public=20140109,reported=2...
: Security
Depends On: 1059525 1059526
Blocks: 1059524
  Show dependency tree / graph
 
Reported: 2014-01-29 22:53 EST by Kurt Seifried
Modified: 2016-04-26 17:07 EDT (History)
16 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2014-05-29 19:30:45 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)


External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2014:0579 normal SHIPPED_LIVE Low: openstack-heat-templates security update 2014-05-29 20:26:58 EDT

  None (edit)
Description Kurt Seifried 2014-01-29 22:53:21 EST 
There are a number of yum repositories that make connections via http (should 
be https). Also, signing keys can be downloaded over http instead of https. 

External reference:
https://bugs.launchpad.net/heat-templates/+bug/1267635
https://github.com/openstack/heat-templates/

Acknowledgements:

This issue was discovered by Grant Murphy of the Red Hat Product Security Team.
Comment 3 errata-xmlrpc 2014-05-29 16:34:30 EDT 
This issue has been addressed in following products:

  OpenStack 4 for RHEL 6

Via RHSA-2014:0579 https://rhn.redhat.com/errata/RHSA-2014-0579.html
Note You need to log in before you can comment on or make changes to this bug.
First Last Prev Next    This bug is not in your last search results.