Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · OpenStack 10 openstack:10::el7 | openstack-ceilometer | 1:7.1.1-9.el7ost |
| Red Hat · OpenStack 10 openstack:10::el7 | openstack-ceilometer-api | 1:7.1.1-9.el7ost |
| Red Hat · OpenStack 10 openstack:10::el7 | openstack-ceilometer-central | 1:7.1.1-9.el7ost |
| Red Hat · OpenStack 10 openstack:10::el7 | openstack-ceilometer-collector | 1:7.1.1-9.el7ost |
| Red Hat · OpenStack 10 openstack:10::el7 | openstack-ceilometer-common | 1:7.1.1-9.el7ost |
| Red Hat · OpenStack 10 openstack:10::el7 | openstack-ceilometer-compute | 1:7.1.1-9.el7ost |
| Red Hat · OpenStack 10 openstack:10::el7 | openstack-ceilometer-ipmi | 1:7.1.1-9.el7ost |
| Red Hat · OpenStack 10 openstack:10::el7 | openstack-ceilometer-notification | 1:7.1.1-9.el7ost |
| Red Hat · OpenStack 10 openstack:10::el7 | openstack-ceilometer-polling | 1:7.1.1-9.el7ost |
| Red Hat · OpenStack 10 openstack:10::el7 | python-ceilometer | 1:7.1.1-9.el7ost |
| Red Hat · OpenStack 10 openstack:10::el7 | python-ceilometer-tests | 1:7.1.1-9.el7ost |
Vulnerabilities 1
-
Medium 4.0
Ceilometer Prints Sensitive Configuration Data to Log
A vulnerability was found in ceilometer before version 12.0.0.0rc1. An Information Exposure in ceilometer-agent prints sensitive configuration data to log files without DEBUG logging being activated.
References
-
article
https://access.redhat.com/security/updates/classification/#low
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1677389
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0919.json
-
report
https://access.redhat.com/security/cve/CVE-2019-3830
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-3830
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-3830