Red Hat Security Advisory

RHSA-2024:2770

Red Hat OpenStack Platform 17.1 (tripleo-ansible and openstack-tripleo-heat-templates) security update

Released 2024-05-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 17.1 openstack-tripleo-heat-templates-14.3.1-17.1.20231103003762.el8ost, tripleo-ansible-3.3.1-17.1.20231101233754.el8ost

Fixes 1 record

TI-2023-06147 CVE-2023-6725 · GHSA-pv5w-g537-v27f

Tripleo-ansible: bind keys are world readable

LOW 26

An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00201 Published 2024-03-15 Partial fix · 14.3.1-17.1.20231103003762.el8ost, 3.3.1-17.1.20231101233754.el8ost +2 CWE-1220