Skip to content
OpenAdvisories
Medium RHSA-2017:1464 2 CVEs

Red Hat Security Advisory: openstack-heat security and bug fix update

Published Sep 13, 2024 · Updated Oct 8, 2026

Ecosystem: Red Hat

Fixed packages 7

ReleasePackageFixed in
Red Hat · OpenStack 9 openstack:9::el7 openstack-heat 1:6.1.0-3.el7ost
Red Hat · OpenStack 9 openstack:9::el7 openstack-heat-api 1:6.1.0-3.el7ost
Red Hat · OpenStack 9 openstack:9::el7 openstack-heat-api-cfn 1:6.1.0-3.el7ost
Red Hat · OpenStack 9 openstack:9::el7 openstack-heat-api-cloudwatch 1:6.1.0-3.el7ost
Red Hat · OpenStack 9 openstack:9::el7 openstack-heat-common 1:6.1.0-3.el7ost
Red Hat · OpenStack 9 openstack:9::el7 openstack-heat-engine 1:6.1.0-3.el7ost
Red Hat · OpenStack 9 openstack:9::el7 python-heat-tests 1:6.1.0-3.el7ost

Vulnerabilities 2

  • Medium 5.9
    CVE-2017-2621

    An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a se…

    Red Hat openstack-heat
  • Unscored —
    CVE-2016-9185

    In OpenStack Heat, by launching a new Heat stack with a local URL an authenticated user may conduct network discovery r…

    heat Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1391895
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1418159
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1420990
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1424586
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1424885
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1428879
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1464.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-9185
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-9185
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-9185
  • report
    https://access.redhat.com/security/cve/CVE-2017-2621
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-2621
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-2621