Skip to content
OpenAdvisories
Medium RHSA-2017:2687 1 CVE

Red Hat Security Advisory: instack-undercloud security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Openstack-director 8 openstack-director:8::el7 instack-undercloud 0:2.2.7-10.el7ost

Vulnerabilities 1

  • Medium 6.4
    CVE-2017-7549

    instack-undercloud vulnerable to symlink attack on tmp files

    A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temp…

    Red Hat instack-undercloud instack instack-undercloud PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1324894
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1477403
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2687.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-7549
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-7549
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-7549