Issued:
2024-07-09
Updated:
2024-07-09

RHSA-2024:4425 - Critical: Red Hat OpenStack Platform 16.1.9 security update

Synopsis

Critical: Red Hat OpenStack Platform 16.1.9 security update

Type/Severity

Security Advisory Critical

Topic

An update for openstack-cinder, openstack-glance, and openstack-nova is now available for Red Hat OpenStack Platform 16.1 (Train).

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Cinder is the replacement of nova-volume in Folsom and beyond, use d for block storage.

OpenStack Image Service (code-named Glance) provides discovery,registration, and delivery services for virtual disk images. The Image Service API server provides a standard REST interface for querying information about virtual disk images stored in a variety of back-end stores, including OpenStack Object Storage. Clients can register new virtual disk images with the Image Service, query for information on publicly available disk images, and use the Image Service's client library for streaming virtual disk images.

OpenStack Compute (codename Nova) is open source software designed to provision and manage large networks of virtual machines,creating a redundant and scalable cloud computing platform. It gives you the software, control panels, and APIs required to orchestrate a cloud, including running instances, managing networks, and controlling access through users and projects.OpenStack Compute strives to be both hardware and hypervisor agnostic, currently supporting a variety of standard hardware configurations and seven major hypervisors.

Security Fix(es):

  • malicious qcow2/vmdk images (2024-emu CVE-2024-32498)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

ProductVersionArch
Red Hat OpenStack16.1x86_64
Red Hat OpenStack for IBM Power16.1ppc64le
Cinderlib16.1x86_64
Cinderlib for IBM Power LE16.1ppc64le

Updated Packages

  • openstack-nova-novncproxy-20.4.1-1.20221005193234.el8ost.noarch.rpm
  • openstack-cinder-15.4.0-1.20230510003503.el8ost.src.rpm
  • openstack-nova-compute-20.4.1-1.20221005193234.el8ost.noarch.rpm
  • openstack-cinder-15.4.0-1.20230510003503.el8ost.noarch.rpm
  • openstack-nova-conductor-20.4.1-1.20221005193234.el8ost.noarch.rpm
  • python3-cinder-15.4.0-1.20230510003503.el8ost.noarch.rpm
  • python3-glance-19.0.4-1.20230310213451.el8ost.noarch.rpm
  • openstack-nova-20.4.1-1.20221005193234.el8ost.noarch.rpm
  • python3-nova-20.4.1-1.20221005193234.el8ost.noarch.rpm
  • openstack-nova-common-20.4.1-1.20221005193234.el8ost.noarch.rpm
  • openstack-glance-19.0.4-1.20230310213451.el8ost.noarch.rpm
  • openstack-nova-console-20.4.1-1.20221005193234.el8ost.noarch.rpm
  • openstack-glance-19.0.4-1.20230310213451.el8ost.src.rpm
  • openstack-nova-spicehtml5proxy-20.4.1-1.20221005193234.el8ost.noarch.rpm
  • openstack-nova-20.4.1-1.20221005193234.el8ost.src.rpm
  • openstack-nova-scheduler-20.4.1-1.20221005193234.el8ost.noarch.rpm
  • openstack-nova-serialproxy-20.4.1-1.20221005193234.el8ost.noarch.rpm
  • openstack-nova-api-20.4.1-1.20221005193234.el8ost.noarch.rpm
  • openstack-nova-migration-20.4.1-1.20221005193234.el8ost.noarch.rpm

Fixes

CVEs

References

Additional information