The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) attack.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade keystoneUpgrade python-django | Jul 30, 2024 | Apr 3, 2013 |
| Freebsd | — | Upgrade py26-djangoUpgrade py27-django | Dec 10, 2025 | Feb 24, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 19, 2013 |
| Suse | — | Upgrade openstack-nova-volumeUpgrade openstack-quantum-testUpgrade openstack-swift-objectUpgrade openstack-keystoneUpgrade openstack-swiftUpgrade python-quantumUpgrade python-keystoneUpgrade python-cinderclientUpgrade openstack-nova-schedulerUpgrade openstack-glance-testUpgrade openstack-swift-docUpgrade openstack-dashboard-testUpgrade python-swiftUpgrade python-novaUpgrade openstack-nova-vncproxyUpgrade openstack-cinder-docUpgrade openstack-keystone-testUpgrade python-cinderUpgrade openstack-quickstartUpgrade openstack-nova-testUpgrade openstack-swift-containerUpgrade python-horizonUpgrade openstack-dashboardUpgrade openstack-cinder-apiUpgrade openstack-cinder-testUpgrade openstack-swift-accountUpgrade python-django_openstack_authUpgrade openstack-quantum-docUpgrade openstack-swift-proxyUpgrade python-keystoneclient-docUpgrade openstack-cinder-schedulerUpgrade openstack-quantumUpgrade openstack-keystone-docUpgrade openstack-nova-apiUpgrade openstack-cinderUpgrade openstack-swift-testUpgrade python-keystoneclientUpgrade openstack-nova-novncproxyUpgrade openstack-glanceUpgrade openstack-nova-objectstoreUpgrade python-djangoUpgrade python-cinderclient-testUpgrade python-keystoneclient-testUpgrade openstack-nova-certUpgrade openstack-cinder-volumeUpgrade openstack-novaUpgrade openstack-glance-docUpgrade openstack-nova-docUpgrade python-cinderclient-docUpgrade python-glanceUpgrade openstack-nova-networkUpgrade openstack-nova-compute | Dec 12, 2013 | Apr 2, 2013 |
| Ubuntu | — | Upgrade python-djangoUpgrade python-keystone | Nov 8, 2024 | Apr 3, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub