CVE-2013-2255
Fixed in a distro release EPSS <1%
HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates.
Products: OpenStack Keystone, OpenStack Compute
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | cinder | 7.0.0a0 |
| PyPI | keystone | 8.0.0a0 |
| PyPI | neutron | 7.0.0a0 |
| PyPI | python-keystoneclient | 0.4.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | keystone | 2014.1-1 |
| Debian 13 | keystone | 2014.1-1 |
| Debian 14 | keystone | 2014.1-1 |