Openstack Havana vulnerabilities

• openstack compute, grizzly, havana +1 more +3 more OpenStack Nova Live migration can leak root disk into ephemeral storage CVE-2013-7130 Fix available 7.1 HighFebruary 6, 2014
• openstack folsom, grizzly, havana +2 more OpenStack Nova denial of service through compressed disk images CVE-2013-4463 Fix available 2.1 LowFebruary 6, 2014
• openstack havana OpenStack Nova Router metadata queries are not restricted by tenant CVE-2013-6419 Fix available 5.0 MediumJanuary 7, 2014
• openstack folsom, grizzly, havana +1 more +3 more OpenStack Nova uses insecure keystone middleware tmpdir by default CVE-2013-2030 Fix available 2.1 LowDecember 27, 2013
• openstack folsom, grizzly, havana +2 more OpenStack Compute Nova Improper Access Control CVE-2013-4497 Fix available 6.4 MediumNovember 5, 2013
• openstack grizzly, havana +1 more OpenStack Identity Keystone Privilege Escalation vulnerability CVE-2013-4477 Fix available 3.3 LowNovember 2, 2013
• openstack folsom, grizzly, havana +2 more OpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 image CVE-2013-4469 Fix available 1.9 LowNovember 2, 2013
• openstack compute, havana +1 more OpenStack Compute (Nova) vulnerable to denial of service via XML Entity Expansion attack CVE-2013-4179 Fix available 4.3 MediumSeptember 16, 2013
• openstack folsom, grizzly, havana +1 more +3 more OpenStack Swift allows authenticated users to cause a denial of service CVE-2013-4155 Fix available 4.0 MediumAugust 12, 2013
• openstack folsom, grizzly, havana +1 more +3 more OpenStack Swift Unchecked user input in XML responses CVE-2013-2161 Fix available 7.5 HighAugust 12, 2013
• openstack folsom, grizzly, havana +2 more OpenStack Compute (Nova) does not verify the virtual size of a QCOW2 image CVE-2013-2096 Fix available 2.1 LowJuly 9, 2013