Skip to content
OpenAdvisories
Unscored RHSA-2015:1206 1 CVE

Red Hat Security Advisory: openstack-cinder security and bug fix update

Published Sep 15, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 9

ReleasePackageFixed in
Red Hat · OpenStack 5 openstack:5::el6 openstack-cinder 0:2014.1.4-1.1.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-cinder-doc 0:2014.1.4-1.1.el6ost
Red Hat · OpenStack 5 openstack:5::el6 python-cinder 0:2014.1.4-1.1.el6ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-cinder 0:2014.1.4-1.1.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-cinder-doc 0:2014.1.4-1.1.el7ost
Red Hat · OpenStack 5 openstack:5::el7 python-cinder 0:2014.1.4-1.1.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-cinder 0:2014.2.3-3.1.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-cinder-doc 0:2014.2.3-3.1.el7ost
Red Hat · OpenStack 6 openstack:6::el7 python-cinder 0:2014.2.3-3.1.el7ost

Vulnerabilities 1

  • Medium —
    CVE-2015-1851

    OpenStack Cinder file disclosure in image convert

    OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before 2014.2.4 (juno), and 2015.1.x before 2015.1.1 (kilo) allows remote authenticated users to read arbitrary files via a crafted qcow2 signature in an image to the upload-to-image command.

    cinder cinder Debian PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1231817
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1206.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-1851
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-1851
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-1851