Skip to content
OpenAdvisories
Medium RHSA-2017:1243 1 CVE

Red Hat Security Advisory: openstack-heat security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated Aug 8, 2026

Ecosystem: Red Hat

Fixed packages 7

ReleasePackageFixed in
Red Hat · OpenStack 10 openstack:10::el7 openstack-heat 1:7.0.2-4.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-heat-api 1:7.0.2-4.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-heat-api-cfn 1:7.0.2-4.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-heat-api-cloudwatch 1:7.0.2-4.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-heat-common 1:7.0.2-4.el7ost
Red Hat · OpenStack 10 openstack:10::el7 openstack-heat-engine 1:7.0.2-4.el7ost
Red Hat · OpenStack 10 openstack:10::el7 python-heat-tests 1:7.0.2-4.el7ost

Vulnerabilities 1

  • Medium 5.9
    CVE-2017-2621

    An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a se…

    Red Hat openstack-heat

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1420990
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1424578
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1424886
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1428632
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1428877
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1431258
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1243.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-2621
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-2621
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-2621