(RHSA-2020:4283) Moderate: openstack-cinder security update

OpenStack Block Storage (cinder) manages block storage mounting and the
presentation of such mounted block storage to instances. The backend
physical storage can consist of local disks, or Fiber Channel, iSCSI, and
NFS mounts attached to Compute nodes. In addition, Block Storage supports
volume backups, and snapshots for temporary save and restore operations.
Programmatic management is available via Block Storage’s API.

Security Fix(es):

• Improper handling of ScaleIO backend credentials (CVE-2020-10755)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.

For more information about the bug fixes and enhancements included with this update, see the “Technical Notes” section of the Release Notes linked in the References section.