Skip to content
OpenAdvisories
Medium RHSA-2019:0567 1 CVE

Red Hat Security Advisory: openstack-octavia security and bug fix update

Published Sep 13, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 11

ReleasePackageFixed in
Red Hat · OpenStack 13 openstack:13::el7 openstack-octavia 0:2.0.3-2.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-octavia-amphora-agent 0:2.0.3-2.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-octavia-api 0:2.0.3-2.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-octavia-common 0:2.0.3-2.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-octavia-debuginfo 0:2.0.3-2.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-octavia-diskimage-create 0:2.0.3-2.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-octavia-health-manager 0:2.0.3-2.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-octavia-housekeeping 0:2.0.3-2.el7ost
Red Hat · OpenStack 13 openstack:13::el7 openstack-octavia-worker 0:2.0.3-2.el7ost
Red Hat · OpenStack 13 openstack:13::el7 python-octavia 0:2.0.3-2.el7ost
Red Hat · OpenStack 13 openstack:13::el7 python-octavia-tests-golang 0:2.0.3-2.el7ost

Vulnerabilities 1

  • Medium 5.5
    CVE-2018-16856

    Openstack Octavia allows Insertion of Sensitive Information into Log File

    In a default Red Hat Openstack Platform Director installation, openstack-octavia before versions openstack-octavia 2.0.2-5 and openstack-octavia-3.0.1-0.20181009115732 creates log files that are readable by all users. Sensitive information such as private key…

    [UNKNOWN] openstack-octavia octavia octavia Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1547478
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1571636
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1582145
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1607276
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1649165
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1669078
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1670170
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1672370
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0567.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-16856
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-16856
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-16856