Description
A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenStack | openstack-tripleo-heat-templates | Newton, Ocata, Pike and possibly older | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | tripleo-heat-templates | No fix yet | — |
| Ubuntu 16.04 LTS | tripleo-heat-templates | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenStack 12 | openstack-tripleo-heat-templates | 7.0.9-8.el7ost | RHSA-2018:0602 |
| Red Hat OpenStack 11 | openstack-tripleo-heat-templates | 6.2.12-2.el7ost | RHSA-2018:1627 |
| Red Hat OpenStack 11 | puppet-tripleo | 6.5.10-3.el7ost | RHSA-2018:1627 |
| Red Hat OpenStack 10 | openstack-tripleo-heat-templates | 5.3.10-1.el7ost | RHSA-2018:1593 |
| Red Hat OpenStack 10 | puppet-tripleo | 5.6.8-6.el7ost | RHSA-2018:1593 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | tripleo-heat-templates | < 7.0.6 | 7.0.6 | GHSA-w8gx-hhcx-px6w |
Advisories 3
- RHSA-2018:1593 Red Hat Security Advisory: Red Hat OpenStack Platform director security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2018:1627 Red Hat Security Advisory: Red Hat OpenStack Platform director security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2018:0602 Red Hat Security Advisory: openstack-tripleo-common and openstack-tripleo-heat-templates update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- RHSA-2018:1593 vendor-advisory
- RHSA-2018:1627 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1489360
- https://bugs.launchpad.net/tripleo/+bug/1720787
- RHSA-2018:0602 vendor-advisory