Red Hat Security Advisory

RHSA-2024:1930

Red Hat OpenStack Platform 17.1 (openstack-tripleo-heat-templates and python-yaql) security update

Released 2024-04-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 17.1 openstack-tripleo-heat-templates-14.3.1-17.1.20231103003748.2.el8ost, python-yaql-1.1.3-11.el8ost, python3-yaql-1.1.3-11.el8ost

Fixes 1 record

TI-2024-19325 CVE-2024-29156 · GHSA-mvf6-hwxh-7v76

In OpenStack Murano through 16.0.0, when YAQL before 3.0.0 is used, the Murano service's…

LOW 30

In OpenStack Murano through 16.0.0, when YAQL before 3.0.0 is used, the Murano service's MuranoPL extension to the YAQL language fails to sanitize the supplied environment, leading to potential leakage of sensitive servi…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00746 Published 2024-03-18 Partial fix · 3.0.0 CWE-116