Skip to content
OpenAdvisories
High RHSA-2015:2650 2 CVEs

Red Hat Security Advisory: Red Hat Enterprise Linux OpenStack Platform 7 director update

Published Sep 15, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · Openstack-director 7 openstack-director:7::el7 openstack-tripleo-heat-templates 0:0.8.6-94.el7ost
Red Hat · Openstack-director 7 openstack-director:7::el7 python-rdomanager-oscplugin 0:0.0.10-22.el7ost

Vulnerabilities 2

  • High 7.5
    CVE-2015-5303

    OpenStack TripleO Heat templates spoof metadata requests

    The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the default value of the NeutronMetadataProxySharedSecret param…

    tripleo-heat-templates tripleo-heat-templates Ubuntu PyPI
  • Unscored —
    CVE-2015-5329

    The TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform 7.0, do not…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en/red-hat-enterprise-linux-openstack-platform/version-7/release-notes
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1231885
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1241434
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1245737
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1252083
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1259084
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1260776
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1261863
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1262425
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1265714
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1266910
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1267558
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1267855
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1268415
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1271692
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1272297
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1272347
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1272357
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1275324
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1275812
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1281460
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1281777
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1284914
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1285079
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1285363
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1285485
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1287624
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1290582
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1290796
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2650.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-5303
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5303
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5303
  • report
    https://access.redhat.com/security/cve/CVE-2015-5329
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5329
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5329