Red Hat Security AdvisoryRHSA-2015:1897
openstack-glance security update
Released 2015-10-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6 openstack-glance-2014.1.5-3.el6ost, openstack-glance-doc-2014.1.5-3.el6ost, python-glance-2014.1.5-3.el6ost
- Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7 openstack-glance-2014.1.5-3.el7ost, openstack-glance-doc-2014.1.5-3.el7ost, python-glance-2014.1.5-3.el7ost
- Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7 openstack-glance-2014.2.3-3.el7ost, openstack-glance-doc-2014.2.3-3.el7ost, python-glance-2014.2.3-3.el7ost
- Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7 openstack-glance-2015.1.1-3.el7ost, openstack-glance-doc-2015.1.1-3.el7ost, python-glance-2015.1.1-3.el7ost
Fixes 2 records
Priority LOW 35
OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting image…
CVSS 2.0MEDIUM 6.8· Network · Low privileges · Interaction — · EPSS 0.02462 · Published 2015-10-26 · Fixed in 2014.2.4, 2015.1.2 CWE-264
Priority LOW 29
OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allow remote authenticated users to change the status of their images and bypass access restrictions via the HTTP x-image-meta-s…
CVSS 2.0MEDIUM 5.5· Network · Low privileges · Interaction — · EPSS 0.02052 · Published 2015-10-26 · Fixed in 2014.2.4, 2015.1.2 CWE-264
