Red Hat Security Advisory: openstack-packstack security and bug fix update

Fixed packages 1

Vulnerabilities 1

• Medium 6.1
  CVE-2013-1815

  Packstack: red hat openstack: packstack: unauthorized system modification via insecure answer file creation

  A flaw was found in PackStack. This vulnerability allows a local user to modify deployed systems by changing the answer file, which is created in insecure directories such as /tmp or the current working directory. This insecure file creation could lead to una…

  Red Hat OpenStack Folsom for RHEL 6 Red Hat OpenStack Platform 4 Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse) Linux
  Apr 10, 2013

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=865347
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=886603
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=888725
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=892247
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=893107
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=894733
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=896618
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=903502
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=903545
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=903813
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=905081
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=905368
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=905842
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=908695
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=908771
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=908837
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=908838
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=908846
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=908900
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=910089
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=910210
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=911626
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=912006
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=912702
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=912745
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=912768
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=915382
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=917904
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0671.json
• report
  https://access.redhat.com/security/cve/CVE-2013-1815
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-1815
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-1815