Red Hat Security Advisory

RHSA-2024:2736

openstack-tripleo-heat-templates and tripleo-ansible update

Released 2024-05-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 17.1 openstack-tripleo-heat-templates-14.3.1-17.1.20231103010840.el9ost, tripleo-ansible-3.3.1-17.1.20231101230831.el9ost

Fixes 1 record

TI-2023-06147 CVE-2023-6725 · GHSA-pv5w-g537-v27f

Tripleo-ansible: bind keys are world readable

LOW 26

An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00201 Published 2024-03-15 Partial fix · 14.3.1-17.1.20231103003762.el8ost, 3.3.1-17.1.20231101233754.el8ost +2 CWE-1220