Please Install the Updated Packages.

Liping Mao discovered that OpenStack Neutron did not properly handle requests for a large number of allowed address pairs. A remote authenticated attacker could exploit this to cause a denial of service. (CVE-2014-3555) Zhi Kun Liu discovered that OpenStack Neutron incorrectly filtered certain tokens. An attacker could possibly use this issue to obtain authentication tokens used in REST requests. (CVE-2014-4615)

neutron on Ubuntu 14.04 LTS

• https://lists.ubuntu.com/archives/ubuntu-security-announce/2014-August/002631.html

---

Updated on 2015-03-25