Description
A flaw was found in the nova_libvirt container provided by the Red Hat OpenStack Platform 16, where it does not have SELinux enabled. This flaw causes sVirt, an important isolation mechanism, to be disabled for all running virtual machines.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | nova_libvirt container provided by the Red Hat OpenStack Platform | 16 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenStack 16 | openstack-tripleo-heat-templates | 11.3.2-0.20200405044628.ec9970c.el8ost | RHSA-2020:3406, RHSA-2020:3199 |
| Red Hat OpenStack 16 | python-paunch +2 | 5.3.2-0.20200320172310.ebc49c4.el8ost | RHSA-2020:3406 |
| Red Hat OpenStack 15 | openstack-tripleo-heat-templates | 10.6.3-0.20200113185561.cf467ea.el8ost | RHSA-2020:3410 |
| Red Hat OpenStack 15 | python-paunch +2 | 4.5.3-0.20200108190460.3c38fe6.el8ost | RHSA-2020:3410 |
Advisories 3
- RHSA-2020:3406 Red Hat Security Advisory: python-paunch and openstack-tripleo-heat-templates security update Red Hat Security Advisories (RHSA) · Jun 27, 2026
- RHSA-2020:3410 Red Hat Security Advisory: python-paunch and openstack-tripleo-heat-templates security update Red Hat Security Advisories (RHSA) · Jun 27, 2026
- RHSA-2020:3199 Red Hat Security Advisory: openstack-tripleo-heat-templates security update Red Hat Security Advisories (RHSA) · Jun 27, 2026