Skip to content
OpenAdvisories
Medium RHSA-2019:1683 1 CVE

Red Hat Security Advisory: openstack-tripleo-common security and bug fix update

Published Sep 13, 2024 · Updated Aug 8, 2026

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · OpenStack 14 openstack:14::el7 openstack-tripleo-common 0:9.5.0-5.el7ost
Red Hat · OpenStack 14 openstack:14::el7 openstack-tripleo-common-container-base 0:9.5.0-5.el7ost
Red Hat · OpenStack 14 openstack:14::el7 openstack-tripleo-common-containers 0:9.5.0-5.el7ost
Red Hat · OpenStack 14 openstack:14::el7 openstack-tripleo-common-devtools 0:9.5.0-5.el7ost
Red Hat · OpenStack 14 openstack:14::el7 python2-tripleo-common 0:9.5.0-5.el7ost

Vulnerabilities 1

  • Medium 5.5
    CVE-2019-3895

    Openstack Octavia Access Control Vulnerability

    An access-control flaw was found in the Octavia service when the cloud platform was deployed using Red Hat OpenStack Platform Director. An attacker could cause new amphorae to run based on any arbitrary image. This meant that a remote attacker could upload a …

    Red Hat openstack-tripleo-common octavia octavia Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1667894
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1694608
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1700760
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1683.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-3895
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-3895
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-3895
  • article
    https://bugs.launchpad.net/tripleo/+bug/1830607
  • article
    https://github.com/openstack/tripleo-common/commit/e7c5eab712e0f70ecbc6d225d4766e0fe0f3f884