Lucene search

K
redhatRedHatRHSA-2015:2685
HistoryDec 21, 2015 - 7:03 p.m.

(RHSA-2015:2685) Important: openstack-ironic-discoverd security update

2015-12-2119:03:53
access.redhat.com
13

EPSS

0.007

Percentile

79.5%

OpenStack Bare Metal (ironic) is a tool used to provision bare metal
(as opposed to virtual) machines. It leverages common technologies such
as PXE boot and IPMI to cover a wide range of hardware. It also supports
pluggable drivers to allow added, vendor-specific functionality.

It was discovered that enabling debug mode in openstack-ironic-discoverd
also enabled debug mode in the underlying Flask framework. If errors were
encountered while Flask was in debug mode, a user experiencing an error
might be able to access the debug console (effectively, a command shell).
(CVE-2015-5306)

Please note that this package is a Technology Preview and should not be
used in production.

All openstack-ironic-discoverd users are advised to upgrade to these
updated packages, which correct this issue.