Red Hat Security Advisory

RHSA-2015:1639

openstack-glance security update

Released 2015-08-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7 openstack-glance-2015.1.0-6.el7ost.1, openstack-glance-doc-2015.1.0-6.el7ost.1, python-glance-2015.1.0-6.el7ost.1

Fixes 1 record

TI-2015-04331 CVE-2015-5163 · GHSA-q73f-vjc2-3gqf

The import task action in OpenStack Image Service (Glance) 2015.1.x before 2015.1.2…

LOW 20

The import task action in OpenStack Image Service (Glance) 2015.1.x before 2015.1.2 (kilo), when using the V2 API, allows remote authenticated users to read arbitrary files via a crafted backing file for a qcow2 image.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01499 Published 2015-08-19 Fixed in 2015.1.2 CWE-200