Red Hat Security Advisory: openstack-tripleo-common and openstack-tripleo-heat-templates update

Fixed packages 1

Vulnerabilities 1

• Medium 6.3
  CVE-2017-12155

  Openstack tripleo-heat-templates unauthenticated file access

  A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as tho…

  OpenStack openstack-tripleo-heat-templates tripleo-heat-templates tripleo-heat-templates Ubuntu PyPI
  Dec 12, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1301534
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1433534
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1489360
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1507888
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1508601
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1519765
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1523272
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1523707
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1528755
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1533097
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1533468
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1533875
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1537725
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1538828
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1538875
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1539090
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1542537
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1543641
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1546234
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1546807
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1547955
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1551137
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1551461
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552466
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1558639
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0602.json
• report
  https://access.redhat.com/security/cve/CVE-2017-12155
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-12155
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-12155