drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Fehlerhafte Zugriffsrechte in python-paunch
Name: |
Fehlerhafte Zugriffsrechte in python-paunch |
|
ID: |
RHSA-2020:3410-01 |
|
Distribution: |
Red Hat |
|
Plattformen: |
Red Hat OpenStack Platform |
|
Datum: |
Di, 11. August 2020, 16:39 |
|
Referenzen: |
https://access.redhat.com/security/cve/CVE-2020-10731 |
|
Applikationen: |
python-paunch |
|
Originalnachricht |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
===================================================================== Red Hat Security Advisory
Synopsis: Important: python-paunch and openstack-tripleo-heat-templates security update Advisory ID: RHSA-2020:3410-01 Product: Red Hat OpenStack Platform Advisory URL: https://access.redhat.com/errata/RHSA-2020:3410 Issue date: 2020-08-11 CVE Names: CVE-2020-10731 =====================================================================
1. Summary:
An update for python-paunch and openstack-tripleo-heat-templates is now available for Red Hat OpenStack Platform 15 (Stein).
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
2. Relevant releases/architectures:
Red Hat OpenStack Platform 15.0 - noarch
3. Description:
Library and utility to launch and manage containers using YAML based configuration data.
openstack-tripleo-heat-templates is a collection of OpenStack Orchestration templates and tools (codename heat), which can be used to help deploy OpenStack.
Security Fix(es):
* EMBARGOED CVE-2020-10731 openstack-tripleo-heat-templates: No sVirt protection for OSP16 VMs due to disabled SELinux (CVE-2020-10731)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.
4. Solution:
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
5. Bugs fixed (https://bugzilla.redhat.com/):
1831544 - CVE-2020-10731 openstack-tripleo-heat-templates: No sVirt protection for OSP16 VMs due to disabled SELinux
6. Package List:
Red Hat OpenStack Platform 15.0:
Source: openstack-tripleo-heat-templates-10.6.3-0.20200113185561.cf467ea.el8ost.src.rpm python-paunch-4.5.3-0.20200108190460.3c38fe6.el8ost.src.rpm
noarch: openstack-tripleo-heat-templates-10.6.3-0.20200113185561.cf467ea.el8ost.noarch.rp m paunch-services-4.5.3-0.20200108190460.3c38fe6.el8ost.noarch.rpm python3-paunch-4.5.3-0.20200108190460.3c38fe6.el8ost.noarch.rpm
Red Hat OpenStack Platform 15.0:
Source: python-paunch-4.5.3-0.20200108190460.3c38fe6.el8ost.src.rpm
noarch: paunch-services-4.5.3-0.20200108190460.3c38fe6.el8ost.noarch.rpm python3-paunch-4.5.3-0.20200108190460.3c38fe6.el8ost.noarch.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/
7. References:
https://access.redhat.com/security/cve/CVE-2020-10731 https://access.redhat.com/security/updates/classification/#important
8. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/
Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIVAwUBXzKcPtzjgjWX9erEAQhiSQ/+J73kDJXXJod+edJ0FSpK+iJmHrTSQ3jn JddREm86VgZu2NL6UIddh8DyXHireAaZjFK2z87dKf2q6UGrgQN3YemzRxALzqgq 6jSn35RT3+580NPdJ4bHRVSqC/SEI/LKAVXI6p7NmQte7HM71ajb62jIrSgXxQMd kS2Z+ZlJb+6b+2ThduDJJQr/JcGySYWzEQ7TxhzTfkmf700TkcUH+9NOUQVnIQ6X /y0nl1fKAXIuxnbxDsekkWl6od3TDyC1fgCgz06eryBujL2fpf1SyTCgKDUNxXXI 7cj07af75iMwT2gTirXTGFKUGOgZmysIiCcl4jTOYm/YdXZaESDdJJbQLjzL+bXp 1/ma+hy/ISUhIJf11EfV6Y8j7zRRDDVJVUR8Ocru+qyUwG0OyWHsvylmLoPmLBR0 c+p7zCQmBshRw/EeZIpYeHzQxnR0JJSiUpAfJKO/4pYSgFJjfsvCBoJR8fzlQa34 7YmRimVUaXGx1PyuSnrALrguupoxAVgmN2Pf6K5EmyE6zoVt0H4XRC4wFoRLYlLL sO9hkg5k8NstTI3zNfdT0wgDyYNBW1KZ/TSMb5TGGlpqY3XiZsDNyYzmrvmkTodw ApCZJQj1PcgZyIrqwEdQcTa8NqJ2T/PLX4JKr5b5KI4CiCYIoSrRvhTG01nTE4V+ 0Fz/QDPaUPA= =suQ1 -----END PGP SIGNATURE-----
-- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce
|
|
|
|