Red Hat Security AdvisoryRHSA-2015:1206
openstack-cinder security and bug fix update
Released 2015-07-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6 openstack-cinder-2014.1.4-1.1.el6ost, openstack-cinder-doc-2014.1.4-1.1.el6ost, python-cinder-2014.1.4-1.1.el6ost
- Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7 openstack-cinder-2014.1.4-1.1.el7ost, openstack-cinder-doc-2014.1.4-1.1.el7ost, python-cinder-2014.1.4-1.1.el7ost
- Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7 openstack-cinder-2014.2.3-3.1.el7ost, openstack-cinder-doc-2014.2.3-3.1.el7ost, python-cinder-2014.2.3-3.1.el7ost
Fixes 1 record
Priority LOW 35
OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before 2014.2.4 (juno), and 2015.1.x before 2015.1.1 (kilo) allows remote authenticated users to read arbitrary files via a crafted qcow2 signature in an image to the…
CVSS 2.0MEDIUM 6.8· Network · Low privileges · Interaction — · EPSS 0.02621 · Published 2015-06-25 · Fixed in 7.0.0a0 CWE-200
