Skip to content
OpenAdvisories
Unscored RHSA-2015:1897 2 CVEs

Red Hat Security Advisory: openstack-glance security update

Published Sep 13, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · OpenStack 5 openstack:5::el6 openstack-glance 0:2014.1.5-3.el6ost
Red Hat · OpenStack 5 openstack:5::el6 openstack-glance-doc 0:2014.1.5-3.el6ost
Red Hat · OpenStack 5 openstack:5::el6 python-glance 0:2014.1.5-3.el6ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-glance 0:2014.1.5-3.el7ost
Red Hat · OpenStack 5 openstack:5::el7 openstack-glance-doc 0:2014.1.5-3.el7ost
Red Hat · OpenStack 5 openstack:5::el7 python-glance 0:2014.1.5-3.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-glance 0:2014.2.3-3.el7ost
Red Hat · OpenStack 6 openstack:6::el7 openstack-glance-doc 0:2014.2.3-3.el7ost
Red Hat · OpenStack 6 openstack:6::el7 python-glance 0:2014.2.3-3.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-glance 0:2015.1.1-3.el7ost
Red Hat · OpenStack 7 openstack:7::el7 openstack-glance-doc 0:2015.1.1-3.el7ost
Red Hat · OpenStack 7 openstack:7::el7 python-glance 0:2015.1.1-3.el7ost

Vulnerabilities 2

  • Medium —
    CVE-2015-5251

    OpenStack Image Service (Glance) allows remote authenticated users to bypass access restrictions

    OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allow remote authenticated users to change the status of their images and bypass access restrictions via the HTTP x-image-meta-status header to images/*.

    glance glance glance Debian Ubuntu PyPI
  • Medium —
    CVE-2015-5286

    OpenStack Image Service (Glance) allows remote authenticated users to bypass storage quota, cause denial of service

    OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption) by deleting images that are being uploaded using a token…

    glance glance glance Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1263511
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1267516
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1897.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-5251
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5251
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5251
  • report
    https://access.redhat.com/security/cve/CVE-2015-5286
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5286
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5286