Red Hat Security Advisory

RHSA-2024:9991

RHOSP 17.1.4 (openstack-tripleo-common and python-tripleoclient) security update

Released 2024-11-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 17.1 openstack-tripleo-common-15.4.1-17.1.20240911093743.e5b18f2.el8ost, openstack-tripleo-common-container-base-15.4.1-17.1.20240911093743.e5b18f2.el8ost, openstack-tripleo-common-containers-15.4.1-17.1.20240911093743.e5b18f2.el8ost +3

Fixes 1 record

TI-2024-07421 CVE-2024-8007 · GHSA-w89j-rfr2-3vwq

Openstack-tripleo-common: rhosp director disables tls verification for registry mirrors

LOW 35

A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00392 Published 2024-08-21 Partial fix · 15.4.1-17.1.20240911093743.e5b18f2.el8ost, 16.5.1-17.1.20240913093745.f3599d0.el8ost +2 CWE-295