Skip to content
OpenAdvisories
Medium RHSA-2019:0593 1 CVE

Red Hat Security Advisory: openstack-octavia security update

Published Sep 13, 2024 · Updated Aug 1, 2026

Ecosystem: Red Hat

Fixed packages 11

ReleasePackageFixed in
Red Hat · OpenStack 14 openstack:14::el7 openstack-octavia 0:3.0.2-0.20181219195054.ec4c88e.el7ost
Red Hat · OpenStack 14 openstack:14::el7 openstack-octavia-amphora-agent 0:3.0.2-0.20181219195054.ec4c88e.el7ost
Red Hat · OpenStack 14 openstack:14::el7 openstack-octavia-api 0:3.0.2-0.20181219195054.ec4c88e.el7ost
Red Hat · OpenStack 14 openstack:14::el7 openstack-octavia-common 0:3.0.2-0.20181219195054.ec4c88e.el7ost
Red Hat · OpenStack 14 openstack:14::el7 openstack-octavia-debuginfo 0:3.0.2-0.20181219195054.ec4c88e.el7ost
Red Hat · OpenStack 14 openstack:14::el7 openstack-octavia-diskimage-create 0:3.0.2-0.20181219195054.ec4c88e.el7ost
Red Hat · OpenStack 14 openstack:14::el7 openstack-octavia-health-manager 0:3.0.2-0.20181219195054.ec4c88e.el7ost
Red Hat · OpenStack 14 openstack:14::el7 openstack-octavia-housekeeping 0:3.0.2-0.20181219195054.ec4c88e.el7ost
Red Hat · OpenStack 14 openstack:14::el7 openstack-octavia-worker 0:3.0.2-0.20181219195054.ec4c88e.el7ost
Red Hat · OpenStack 14 openstack:14::el7 python-octavia 0:3.0.2-0.20181219195054.ec4c88e.el7ost
Red Hat · OpenStack 14 openstack:14::el7 python-octavia-tests-golang 0:3.0.2-0.20181219195054.ec4c88e.el7ost

Vulnerabilities 1

  • Medium 5.5
    CVE-2018-16856

    Openstack Octavia allows Insertion of Sensitive Information into Log File

    In a default Red Hat Openstack Platform Director installation, openstack-octavia before versions openstack-octavia 2.0.2-5 and openstack-octavia-3.0.1-0.20181009115732 creates log files that are readable by all users. Sensitive information such as private key…

    [UNKNOWN] openstack-octavia octavia octavia Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1547449
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1633019
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1634986
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1649165
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1672299
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0593.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-16856
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-16856
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-16856