Lucene search

RedHatRHSA-2024:1930

HistoryApr 22, 2024 - 12:56 a.m.

(RHSA-2024:1930) Important: Red Hat OpenStack Platform 17.1 (openstack-tripleo-heat-templates and python-yaql) security update

2024-04-2200:56:10

access.redhat.com

openstack

tripleo

security update

heat templates

python yaql

cve-2024-29156

information leakage

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.8%

JSON

Heat templates for TripleO

YAQL library has a out of the box large set of commonly used functions.

Security Fix(es):

OpenStack Murano Component Information Leakage (CVE-2024-29156)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8noarchopenstack-tripleo-heat-templates< 14.3.1-17.1.20231103003748.2.el8ostopenstack-tripleo-heat-templates-14.3.1-17.1.20231103003748.2.el8ost.noarch.rpm
RedHat8noarchpython3-yaql< 1.1.3-11.el8ostpython3-yaql-1.1.3-11.el8ost.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	8	noarch	openstack-tripleo-heat-templates	< 14.3.1-17.1.20231103003748.2.el8ost	openstack-tripleo-heat-templates-14.3.1-17.1.20231103003748.2.el8ost.noarch.rpm
RedHat	8	noarch	python3-yaql	< 1.1.3-11.el8ost	python3-yaql-1.1.3-11.el8ost.noarch.rpm