(RHSA-2015:1929) Important: openstack-ironic-discoverd security update

2015-10-2219:34:24

access.redhat.com

0.007 Low

EPSS

Percentile

79.6%

JSON

Ironic provides bare metal provisioning for OpenStack nodes.

It was discovered that enabling debug mode in openstack-ironic-discoverd
also enables debug mode in the underlying Flask framework. If errors are
encountered while Flask is in debug mode, a user experiencing an error may
be able to access the debug console (effectively, a command shell).
(CVE-2015-5306)

All openstack-ironic-discoverd users are advised to upgrade to these
updated packages, which correct this issue.

OSVersionArchitecturePackageVersionFilename
RedHat7noarchopenstack-ironic-discoverd-ramdisk< 1.1.0-8.el7ostopenstack-ironic-discoverd-ramdisk-1.1.0-8.el7ost.noarch.rpm
RedHat7noarchopenstack-ironic-discoverd< 1.1.0-8.el7ostopenstack-ironic-discoverd-1.1.0-8.el7ost.noarch.rpm
RedHat7srcopenstack-ironic-discoverd< 1.1.0-8.el7ostopenstack-ironic-discoverd-1.1.0-8.el7ost.src.rpm
RedHat7noarchpython-ironic-discoverd< 1.1.0-8.el7ostpython-ironic-discoverd-1.1.0-8.el7ost.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	7	noarch	openstack-ironic-discoverd-ramdisk	< 1.1.0-8.el7ost	openstack-ironic-discoverd-ramdisk-1.1.0-8.el7ost.noarch.rpm
RedHat	7	noarch	openstack-ironic-discoverd	< 1.1.0-8.el7ost	openstack-ironic-discoverd-1.1.0-8.el7ost.noarch.rpm
RedHat	7	src	openstack-ironic-discoverd	< 1.1.0-8.el7ost	openstack-ironic-discoverd-1.1.0-8.el7ost.src.rpm
RedHat	7	noarch	python-ironic-discoverd	< 1.1.0-8.el7ost	python-ironic-discoverd-1.1.0-8.el7ost.noarch.rpm

0.007 Low

EPSS

Percentile

79.6%

JSON

Related for RHSA-2015:1929