Red Hat Security Advisory: Red Hat OpenStack Platform director security update

Fixed packages 2

Vulnerabilities 2

• Medium 6.3
  CVE-2017-12155

  Openstack tripleo-heat-templates unauthenticated file access

  A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as tho…

  OpenStack openstack-tripleo-heat-templates tripleo-heat-templates tripleo-heat-templates Ubuntu PyPI
  Dec 12, 2017
• Unscored —
  CVE-2018-1000115 Public exploit EPSS 88%

  Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vul…

  memcached memcached memcached Debian Ubuntu Alpine
  Mar 5, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1414549
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1489360
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1503896
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1514532
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1514842
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1517302
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1533602
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1534540
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1538753
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1541528
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1543883
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1544211
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1544802
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1545666
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1547091
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1547957
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1551182
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552980
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1559093
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568596
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568601
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1571840
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1576577
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1593.json
• report
  https://access.redhat.com/security/cve/CVE-2017-12155
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-12155
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-12155
• report
  https://access.redhat.com/security/cve/CVE-2018-1000115
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-1000115
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-1000115