Red Hat Security Advisory

RHSA-2016:0440

openstack-heat bug fix and security advisory

Released 2016-03-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6 openstack-heat-2014.1.5-7.el6ost, openstack-heat-api-2014.1.5-7.el6ost, openstack-heat-api-cfn-2014.1.5-7.el6ost +3

Fixes 1 record

TI-2015-04450 CVE-2015-5295 · GHSA-2w55-prvj-mgc2

The template-validate command in OpenStack Orchestration API (Heat) before 2015.1.3…

LOW 30

The template-validate command in OpenStack Orchestration API (Heat) before 2015.1.3 (kilo) and 5.0.x before 5.0.1 (liberty) allows remote authenticated users to cause a denial of service (memory consumption) or determine…

CVSS 3.0MEDIUM 5.4 Network Low privileges No interaction EPSS 0.02928 Published 2016-01-20 Partial fix CWE-119