Red Hat Security Advisory: Red Hat OpenStack Platform director security update

Fixed packages 2

Vulnerabilities 2

• Medium 6.3
  CVE-2017-12155

  Openstack tripleo-heat-templates unauthenticated file access

  A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as tho…

  OpenStack openstack-tripleo-heat-templates tripleo-heat-templates tripleo-heat-templates Ubuntu PyPI
  Dec 12, 2017
• Unscored —
  CVE-2018-1000115 Public exploit EPSS 88%

  Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vul…

  memcached memcached memcached Debian Ubuntu Alpine
  Mar 5, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1445766
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1471721
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1478274
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1489360
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1518009
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1524422
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1546799
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1547089
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1547956
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1548345
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1550167
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1551182
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1552245
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1567349
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1567365
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1571436
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1577957
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1627.json
• report
  https://access.redhat.com/security/cve/CVE-2017-12155
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-12155
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-12155
• report
  https://access.redhat.com/security/cve/CVE-2018-1000115
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-1000115
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-1000115