Twenty Year Anniversary

Red Hat Security Advisory 2018-2721-01

Red Hat Security Advisory 2018-2721-01
Posted Sep 19, 2018
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2018-2721-01 - Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service cloud running on commonly available physical hardware. Issues addressed include an insecure download vulnerability.

tags | advisory
systems | linux, redhat
advisories | CVE-2018-10915, CVE-2018-14620, CVE-2018-14635
MD5 | 7df2d41c8aa1c15c17827a684786bddb

Red Hat Security Advisory 2018-2721-01

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

=====================================================================
Red Hat Security Advisory

Synopsis: Moderate: Red Hat Enterprise Linux OpenStack Platform security update
Advisory ID: RHSA-2018:2721-01
Product: Red Hat Enterprise Linux OpenStack Platform
Advisory URL: https://access.redhat.com/errata/RHSA-2018:2721
Issue date: 2018-09-17
CVE Names: CVE-2018-10915 CVE-2018-14620 CVE-2018-14635
=====================================================================

1. Summary:

An update is now available for Red Hat OpenStack Platform 13.0 (Queens).

Red Hat Product Security has rated this update as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.

2. Description:

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

Security Fix(es):

* openstack-rabbitmq-container: Insecure download of rabbitmq_clusterer
during docker build (CVE-2018-14620)

For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.

The Red Hat OpenStack Platform container images have been updated to
address security advisory/ies: RHSA-2018:2557, RHSA-2018:2710.

3. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing this update, the MariaDB server daemon (mysqld) will be
restarted automatically.

4. Bugs fixed (https://bugzilla.redhat.com/):

1624062 - Rebase openstack-containers to latest - OSP13
1626953 - CVE-2018-14620 openstack-rabbitmq-container: Insecure download of rabbitmq_clusterer during docker build

5. References:

https://access.redhat.com/security/cve/CVE-2018-10915
https://access.redhat.com/security/cve/CVE-2018-14620
https://access.redhat.com/security/cve/CVE-2018-14635
https://access.redhat.com/security/updates/classification/#moderate

6. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2018 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=B5fa
-----END PGP SIGNATURE-----

--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce

Comments (1)

RSS Feed Subscribe to this comment feed
allensmith2

there are lots of security service. from these Red Hat provide best quality security services. After reading your article properly I get some interesting ideas about this security. If you want more in details you may visit www.supportnumbers.net/toshiba-support/.

Comment by allensmith2
2018-09-19 06:41:54 UTC | Permalink | Reply
Login or Register to post a comment

File Archive:

December 2018

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Dec 1st
    11 Files
  • 2
    Dec 2nd
    1 Files
  • 3
    Dec 3rd
    18 Files
  • 4
    Dec 4th
    40 Files
  • 5
    Dec 5th
    16 Files
  • 6
    Dec 6th
    50 Files
  • 7
    Dec 7th
    12 Files
  • 8
    Dec 8th
    1 Files
  • 9
    Dec 9th
    1 Files
  • 10
    Dec 10th
    15 Files
  • 11
    Dec 11th
    30 Files
  • 12
    Dec 12th
    25 Files
  • 13
    Dec 13th
    0 Files
  • 14
    Dec 14th
    0 Files
  • 15
    Dec 15th
    0 Files
  • 16
    Dec 16th
    0 Files
  • 17
    Dec 17th
    0 Files
  • 18
    Dec 18th
    0 Files
  • 19
    Dec 19th
    0 Files
  • 20
    Dec 20th
    0 Files
  • 21
    Dec 21st
    0 Files
  • 22
    Dec 22nd
    0 Files
  • 23
    Dec 23rd
    0 Files
  • 24
    Dec 24th
    0 Files
  • 25
    Dec 25th
    0 Files
  • 26
    Dec 26th
    0 Files
  • 27
    Dec 27th
    0 Files
  • 28
    Dec 28th
    0 Files
  • 29
    Dec 29th
    0 Files
  • 30
    Dec 30th
    0 Files
  • 31
    Dec 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2018 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close