Lucene search

K
redhatRedHatRHSA-2015:0831
HistoryApr 16, 2015 - 12:00 a.m.

(RHSA-2015:0831) Important: openstack-packstack and openstack-puppet-modules update

2015-04-1600:00:00
access.redhat.com
14

EPSS

0.021

Percentile

89.1%

PackStack is a command-line utility for deploying OpenStack on existing
servers over an SSH connection. Deployment options are provided either
interactively, using the command line, or non-interactively by means of a
text file containing a set of preconfigured values for OpenStack
parameters. PackStack is suitable for deploying proof-of-concept
installations.

It was discovered that the puppet manifests, as provided with the
openstack-puppet-modules package, would configure the pcsd daemon with a
known default password. If this password was not changed and an attacker
was able to gain access to pcsd, they could potentially run shell
commands as root. (CVE-2015-1842)

This issue was discovered by Alessandro Vozza of Red Hat.

This update also adds the following enhancement:

  • If OpenStack Networking (neutron) is enabled, Packstack now displays a
    warning if the Network Manager service is active on hosts. (BZ#1117115)

All openstack-packstack and openstack-puppet-modules users are advised to
upgrade to these updated packages, which corrects this issue and adds
this enhancement.

EPSS

0.021

Percentile

89.1%