Skip to content
OpenAdvisories
Medium RHSA-2026:39812 1 CVE

Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0 (openstack-glance) security update

Published Jul 16, 2026 · Updated Aug 14, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · OpenStack 18 openstack:18.0::el9 openstack-glance 1:26.1.1-18.0.20260422134725.c2ac316.el9ost
Red Hat · OpenStack 18 openstack:18.0::el9 python3-glance 1:26.1.1-18.0.20260422134725.c2ac316.el9ost

Vulnerabilities 1

  • Medium 5.0
    CVE-2026-34881

    OpenStack Glance is affected by Server-Side Request Forgery (SSRF)

    OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only glance image import func…

    OpenStack Glance glance glance Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2440353
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2440358
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2440368
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39812.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-34881
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-34881
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-34881
  • article
    https://bugs.launchpad.net/glance/+bug/2138602