Skip to content
OpenAdvisories
Medium RHSA-2017:2726 1 CVE

Red Hat Security Advisory: instack-undercloud security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · OpenStack 11 openstack:11::el7 instack-undercloud 0:6.1.0-3.el7ost

Vulnerabilities 1

  • Medium 6.4
    CVE-2017-7549

    instack-undercloud vulnerable to symlink attack on tmp files

    A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temp…

    Red Hat instack-undercloud instack instack-undercloud PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1477403
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1481793
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2726.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-7549
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-7549
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-7549