Red Hat Security Advisory: RHOSP 17.1.4 (openstack-tripleo-common and python-tripleoclient) security update

Fixed packages 7

Vulnerabilities 1

• High 8.1
  CVE-2024-8007

  Openstack-tripleo-common: rhosp director disables tls verification for registry mirrors

  A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mir…

  Red Hat Red Hat OpenStack Platform 16.2 Red Hat OpenStack Platform 16.1 Red Hat OpenStack Platform 17.1 for RHEL 9
  Aug 21, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2213408
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2251692
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2259470
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2272202
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2279328
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2292699
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2295391
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2301634
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2303654
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2305975
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2307955
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2308677
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2320103
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9990.json
• report
  https://access.redhat.com/security/cve/CVE-2024-8007
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-8007
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-8007