Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.6 (tripleo-ansible) security update
An update for tripleo-ansible is now available for Red Hat OpenStack Platform 16.1 (Train). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-31918US | high7.5 | — | ||
A flaw was found in tripleo-ansible version as shipped in Red Hat Openstack 16.1. The Ansible log file is readable to all users during stack update and creation. The highest threat… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/errata/RHSA-2021:2119self
- https://access.redhat.com/security/updates/classification/#importantexternal
- 1899404external
- 1905973external
- 1908266external
- 1911891external
- 1916162external
- 1917891external
Behebungen (4)
- Behobentripleo-ansible-0:0.5.1-1.20210323173506.el8ost.noarch as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2119 - Behobentripleo-ansible-0:0.5.1-1.20210323173506.el8ost.src as a component of Red Hat OpenStack Platform 16.1
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2119 - Workaroundtripleo-ansible-0:0.5.1-1.20210323173506.el8ost.noarch as a component of Red Hat OpenStack Platform 16.1
This vulnerability can be resolved by manually adjusting the file permissions. Run the following command: chmod o-r /var/lib/mistral/overcloud/ansible.log
- Workaroundtripleo-ansible-0:0.5.1-1.20210323173506.el8ost.src as a component of Red Hat OpenStack Platform 16.1
This vulnerability can be resolved by manually adjusting the file permissions. Run the following command: chmod o-r /var/lib/mistral/overcloud/ansible.log
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan