Skip to content
OpenAdvisories
High RHSA-2016:1378 1 CVE

Red Hat Security Advisory: openstack-ironic security update

Published Sep 13, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · OpenStack 8 openstack:8::el7 openstack-ironic 1:4.2.5-1.el7ost
Red Hat · OpenStack 8 openstack:8::el7 openstack-ironic-api 1:4.2.5-1.el7ost
Red Hat · OpenStack 8 openstack:8::el7 openstack-ironic-common 1:4.2.5-1.el7ost
Red Hat · OpenStack 8 openstack:8::el7 openstack-ironic-conductor 1:4.2.5-1.el7ost

Vulnerabilities 1

  • High 7.5
    CVE-2016-4985

    OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor

    The ironic-api service in OpenStack Ironic before 4.2.5 (Liberty) and 5.x before 5.1.2 (Mitaka) allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node…

    ironic ironic ironic Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1346193
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1378.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-4985
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-4985
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-4985