Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.6 (tripleo-ansible) security update
An update for tripleo-ansible is now available for Red Hat OpenStack Platform 16.1 (Train). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-31918US | high7.5 | — | ||
A flaw was found in tripleo-ansible version as shipped in Red Hat Openstack 16.1. The Ansible log file is readable to all users during stack update and creation. The highest threat… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2021:2119self
- https://access.redhat.com/security/updates/classification/#importantexternal
- 1899404external
- 1905973external
- 1908266external
- 1911891external
- 1916162external
- 1917891external
remediations (4)
- Fixedtripleo-ansible-0:0.5.1-1.20210323173506.el8ost.noarch as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2119 - Fixedtripleo-ansible-0:0.5.1-1.20210323173506.el8ost.src as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2119 - Workaroundtripleo-ansible-0:0.5.1-1.20210323173506.el8ost.noarch as a component of Red Hat OpenStack Platform 16.1
This vulnerability can be resolved by manually adjusting the file permissions. Run the following command: chmod o-r /var/lib/mistral/overcloud/ansible.log
- Workaroundtripleo-ansible-0:0.5.1-1.20210323173506.el8ost.src as a component of Red Hat OpenStack Platform 16.1
This vulnerability can be resolved by manually adjusting the file permissions. Run the following command: chmod o-r /var/lib/mistral/overcloud/ansible.log
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan