Skip to content
OpenAdvisories
High RHSA-2024:0216 1 CVE

Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (openstack-tripleo-common) security update

Published Sep 16, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · OpenStack 17 openstack:17.1::el9 openstack-tripleo-common 0:15.4.1-17.1.20230927010819.el9ost
Red Hat · OpenStack 17 openstack:17.1::el9 openstack-tripleo-common-container-base 0:15.4.1-17.1.20230927010819.el9ost
Red Hat · OpenStack 17 openstack:17.1::el9 openstack-tripleo-common-containers 0:15.4.1-17.1.20230927010819.el9ost
Red Hat · OpenStack 17 openstack:17.1::el9 openstack-tripleo-common-devtools 0:15.4.1-17.1.20230927010819.el9ost
Red Hat · OpenStack 17 openstack:17.1::el9 python3-tripleo-common 0:15.4.1-17.1.20230927010819.el9ost

Vulnerabilities 1

  • High 8.8
    CVE-2022-38060

    OpenStack Kolla sudo privilege escalation vulnerability

    A privilege escalation vulnerability exists in the sudo functionality of OpenStack Kolla git master 05194e7618. A misconfiguration in /etc/sudoers within a container can lead to increased privileges.

    OpenStack OpenStack kolla PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2124758
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2233560
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2234820
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0216.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-38060
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-38060
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-38060
  • article
    https://bugs.launchpad.net/bugs/1985784