Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · OpenStack 17 openstack:17.1::el8 | openstack-tripleo-common | 0:15.4.1-17.1.20240911093743.e5b18f2.el8ost |
| Red Hat · OpenStack 17 openstack:17.1::el8 | openstack-tripleo-common-container-base | 0:15.4.1-17.1.20240911093743.e5b18f2.el8ost |
| Red Hat · OpenStack 17 openstack:17.1::el8 | openstack-tripleo-common-containers | 0:15.4.1-17.1.20240911093743.e5b18f2.el8ost |
| Red Hat · OpenStack 17 openstack:17.1::el8 | python-tripleoclient | 0:16.5.1-17.1.20240913093745.f3599d0.el8ost |
| Red Hat · OpenStack 17 openstack:17.1::el8 | python3-tripleo-common | 0:15.4.1-17.1.20240911093743.e5b18f2.el8ost |
| Red Hat · OpenStack 17 openstack:17.1::el8 | python3-tripleoclient | 0:16.5.1-17.1.20240913093745.f3599d0.el8ost |
Vulnerabilities 1
-
High 8.1
Openstack-tripleo-common: rhosp director disables tls verification for registry mirrors
A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mir…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2258093
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2294406
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2305975
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9991.json
-
report
https://access.redhat.com/security/cve/CVE-2024-8007
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-8007
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-8007