Skip to content
OpenAdvisories
High RHSA-2024:0191 1 CVE

Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (openstack-tripleo-common) security update

Published Sep 16, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · OpenStack 17 openstack:17.1::el8 openstack-tripleo-common 0:15.4.1-17.1.20230927003755.el8ost
Red Hat · OpenStack 17 openstack:17.1::el8 openstack-tripleo-common-container-base 0:15.4.1-17.1.20230927003755.el8ost
Red Hat · OpenStack 17 openstack:17.1::el8 openstack-tripleo-common-containers 0:15.4.1-17.1.20230927003755.el8ost
Red Hat · OpenStack 17 openstack:17.1::el8 python3-tripleo-common 0:15.4.1-17.1.20230927003755.el8ost

Vulnerabilities 1

  • High 8.8
    CVE-2022-38060

    OpenStack Kolla sudo privilege escalation vulnerability

    A privilege escalation vulnerability exists in the sudo functionality of OpenStack Kolla git master 05194e7618. A misconfiguration in /etc/sudoers within a container can lead to increased privileges.

    OpenStack OpenStack kolla PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2124758
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0191.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-38060
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-38060
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-38060
  • article
    https://bugs.launchpad.net/bugs/1985784