The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django; and possibly other products allow remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade keystoneUpgrade cinderUpgrade nova | Jul 30, 2024 | Apr 3, 2013 |
| Freebsd | — | Upgrade py26-djangoUpgrade py27-django | Dec 10, 2025 | Feb 24, 2013 |
| Gentoo Linux | — | Upgrade app-emulation/emul-linux-x86-baselibs.Upgrade dev-libs/libxml2. | Oct 30, 2017 | Apr 2, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 19, 2013 |
| Suse | — | Upgrade openstack-swift-docUpgrade python-quantumUpgrade python-cinderUpgrade openstack-swift-accountUpgrade openstack-dashboardUpgrade openstack-cinder-testUpgrade openstack-quantum-testUpgrade openstack-nova-vncproxyUpgrade openstack-nova-schedulerUpgrade python-novaUpgrade openstack-swift-objectUpgrade openstack-dashboard-testUpgrade openstack-keystoneUpgrade python-swiftUpgrade openstack-swift-containerUpgrade openstack-swiftUpgrade openstack-keystone-testUpgrade openstack-cinder-apiUpgrade python-horizonUpgrade python-cinderclientUpgrade openstack-swift-proxyUpgrade python-keystoneUpgrade openstack-nova-testUpgrade openstack-cinder-docUpgrade openstack-glance-testUpgrade openstack-nova-volumeUpgrade python-django_openstack_authUpgrade openstack-quantumUpgrade openstack-cinder-volumeUpgrade openstack-cinderUpgrade python-cinderclient-testUpgrade openstack-glance-docUpgrade openstack-nova-certUpgrade openstack-nova-apiUpgrade openstack-nova-objectstoreUpgrade openstack-cinder-schedulerUpgrade python-keystoneclientUpgrade python-keystoneclient-testUpgrade openstack-keystone-docUpgrade openstack-novaUpgrade openstack-nova-docUpgrade openstack-quantum-docUpgrade openstack-glanceUpgrade python-cinderclient-docUpgrade openstack-swift-testUpgrade openstack-nova-novncproxyUpgrade python-glanceUpgrade openstack-quickstartUpgrade openstack-nova-computeUpgrade openstack-nova-networkUpgrade python-keystoneclient-doc | Dec 12, 2013 | Apr 2, 2013 |
| Ubuntu | — | Upgrade python-djangoUpgrade python-keystoneUpgrade python-cinderUpgrade python-nova | Nov 8, 2024 | Apr 3, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub