CVE-2014-3801 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3801): OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 and 2014.1, when creating the stack for a template using a provider template, allows remote authenticated users to obtain the provider template URL via the resource-type-list. Maintainer(s), is this the correct package? The version numbering does not appear to match. Please advise, thanks.
I don't have heat packaged at all. This is invalid.