Skip to content
OpenAdvisories
Medium RHSA-2015:1639 1 CVE

Red Hat Security Advisory: openstack-glance security update

Published Sep 13, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · OpenStack 7 openstack:7::el7 openstack-glance 0:2015.1.0-6.el7ost.1
Red Hat · OpenStack 7 openstack:7::el7 openstack-glance-doc 0:2015.1.0-6.el7ost.1
Red Hat · OpenStack 7 openstack:7::el7 python-glance 0:2015.1.0-6.el7ost.1

Vulnerabilities 1

  • Medium 6.5
    CVE-2015-5163

    OpenStack Image Service (Glance) allows remote authenticated users to read arbitrary file

    The import task action in OpenStack Image Service (Glance) 2015.1.x before 2015.1.2 (kilo), when using the V2 API, allows remote authenticated users to read arbitrary files via a crafted backing file for a qcow2 image.

    glance glance Debian PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1252378
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1639.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-5163
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5163
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5163