(RHSA-2019:0567) Moderate: openstack-octavia security and bug fix update

2019-03-1413:24:40

access.redhat.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

53.8%

JSON

The OpenStack Load Balancing service (openstack-octavia) provides a Load Balancing-as-a-Service (LBaaS) version 2 implementation for Red Hat OpenStack platform director based installations.

Security Fix(es):

openstack-octavia: Private keys written to world-readable log files (CVE-2018-16856)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

This feature is “community support” and not supported by Red Hat per RHOSP SLA. (BZ#1671022)

OSVersionArchitecturePackageVersionFilename
RedHat7noarchopenstack-octavia-amphora-agent< 2.0.3-2.el7ostopenstack-octavia-amphora-agent-2.0.3-2.el7ost.noarch.rpm
RedHat7noarchpython-octavia< 2.0.3-2.el7ostpython-octavia-2.0.3-2.el7ost.noarch.rpm
RedHat7noarchopenstack-octavia-worker< 2.0.3-2.el7ostopenstack-octavia-worker-2.0.3-2.el7ost.noarch.rpm
RedHat7x86_64openstack-octavia-debuginfo< 2.0.3-2.el7ostopenstack-octavia-debuginfo-2.0.3-2.el7ost.x86_64.rpm
RedHat7noarchopenstack-octavia-diskimage-create< 2.0.3-2.el7ostopenstack-octavia-diskimage-create-2.0.3-2.el7ost.noarch.rpm
RedHat7noarchopenstack-octavia-health-manager< 2.0.3-2.el7ostopenstack-octavia-health-manager-2.0.3-2.el7ost.noarch.rpm
RedHat7noarchopenstack-octavia-housekeeping< 2.0.3-2.el7ostopenstack-octavia-housekeeping-2.0.3-2.el7ost.noarch.rpm
RedHat7ppc64leopenstack-octavia-debuginfo< 2.0.3-2.el7ostopenstack-octavia-debuginfo-2.0.3-2.el7ost.ppc64le.rpm
RedHat7ppc64lepython-octavia-tests-golang< 2.0.3-2.el7ostpython-octavia-tests-golang-2.0.3-2.el7ost.ppc64le.rpm
RedHat7noarchopenstack-octavia-api< 2.0.3-2.el7ostopenstack-octavia-api-2.0.3-2.el7ost.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	7	noarch	openstack-octavia-amphora-agent	< 2.0.3-2.el7ost	openstack-octavia-amphora-agent-2.0.3-2.el7ost.noarch.rpm
RedHat	7	noarch	python-octavia	< 2.0.3-2.el7ost	python-octavia-2.0.3-2.el7ost.noarch.rpm
RedHat	7	noarch	openstack-octavia-worker	< 2.0.3-2.el7ost	openstack-octavia-worker-2.0.3-2.el7ost.noarch.rpm
RedHat	7	x86_64	openstack-octavia-debuginfo	< 2.0.3-2.el7ost	openstack-octavia-debuginfo-2.0.3-2.el7ost.x86_64.rpm
RedHat	7	noarch	openstack-octavia-diskimage-create	< 2.0.3-2.el7ost	openstack-octavia-diskimage-create-2.0.3-2.el7ost.noarch.rpm
RedHat	7	noarch	openstack-octavia-health-manager	< 2.0.3-2.el7ost	openstack-octavia-health-manager-2.0.3-2.el7ost.noarch.rpm
RedHat	7	noarch	openstack-octavia-housekeeping	< 2.0.3-2.el7ost	openstack-octavia-housekeeping-2.0.3-2.el7ost.noarch.rpm
RedHat	7	ppc64le	openstack-octavia-debuginfo	< 2.0.3-2.el7ost	openstack-octavia-debuginfo-2.0.3-2.el7ost.ppc64le.rpm
RedHat	7	ppc64le	python-octavia-tests-golang	< 2.0.3-2.el7ost	python-octavia-tests-golang-2.0.3-2.el7ost.ppc64le.rpm
RedHat	7	noarch	openstack-octavia-api	< 2.0.3-2.el7ost	openstack-octavia-api-2.0.3-2.el7ost.noarch.rpm