{"id":"RHSA-2018:2331","summary":"Red Hat Security Advisory: Red Hat OpenStack Platform 12.0 director security and bug fix update","modified":"2026-06-29T10:21:35Z","published":"2024-09-13T16:52:13Z","upstream":["CVE-2018-1000115"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:2331"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/#moderate"},{"type":"ARTICLE","url":"https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/12/html/release_notes/"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1470033"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1477663"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1488058"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1502860"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1504052"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1506038"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1508867"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1511988"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1513497"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1513502"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1518605"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1518662"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1520453"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1527205"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1528632"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1533204"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1533271"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1533511"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534442"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1537606"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1539961"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1547146"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1547539"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1549139"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1550934"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1551182"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1552759"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1556720"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1557328"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1558679"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1559151"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1559920"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1560937"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1562148"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1570147"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1571435"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1571646"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1571744"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1572353"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1572667"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573583"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573791"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573808"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1576751"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1579023"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1582597"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1582645"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1583792"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1583858"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1584279"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1584374"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1584396"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1584403"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1584404"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1584411"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1584416"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1584417"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1584754"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1585189"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1585362"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1586155"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1589951"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1590030"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1590031"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1590033"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1590368"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1590586"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1590607"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1590612"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1590613"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1590953"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1591782"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1592418"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1592963"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1592967"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1596760"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1597313"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1597972"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1599410"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1599883"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1600038"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601348"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1607143"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608450"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2331.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2018-1000115"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2018-1000115"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000115"}],"affected":[{"package":{"name":"instack-undercloud","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/instack-undercloud"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.12-1.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"openstack-tripleo-common","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/openstack-tripleo-common"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.13-3.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"openstack-tripleo-common-container-base","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/openstack-tripleo-common-container-base"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.13-3.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"openstack-tripleo-common-containers","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/openstack-tripleo-common-containers"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.13-3.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"openstack-tripleo-common-devtools","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/openstack-tripleo-common-devtools"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.13-3.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"openstack-tripleo-heat-templates","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/openstack-tripleo-heat-templates"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.12-8.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"openstack-tripleo-image-elements","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/openstack-tripleo-image-elements"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.5-1.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"openstack-tripleo-puppet-elements","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/openstack-tripleo-puppet-elements"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.7-1.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"os-net-config","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/os-net-config"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.6-1.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"puppet-aodh","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/puppet-aodh"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.4.0-2.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"puppet-ceilometer","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/puppet-ceilometer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.5.0-2.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"puppet-ceph","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/puppet-ceph"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-2.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"puppet-cinder","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/puppet-cinder"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.5.0-4.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"puppet-glance","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/puppet-glance"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.5.0-2.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"puppet-heat","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/puppet-heat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.5.0-2.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"puppet-ironic","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/puppet-ironic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.5.0-2.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"puppet-keystone","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/puppet-keystone"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.4.0-2.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"puppet-manila","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/puppet-manila"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.4.0-4.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"puppet-mistral","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/puppet-mistral"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.4.0-2.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"puppet-neutron","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/puppet-neutron"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.5.0-2.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"puppet-nova","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/puppet-nova"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.5.0-4.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"puppet-panko","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/puppet-panko"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.5.0-2.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"puppet-tripleo","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/puppet-tripleo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.12-8.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"puppet-trove","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/puppet-trove"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.4.0-2.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"python-novajoin","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/python-novajoin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.17-3.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"python-os-brick","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/python-os-brick"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.5-2.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}},{"package":{"name":"python-tripleoclient","ecosystem":"Red Hat:openstack:12::el7","purl":"pkg:rpm/redhat/python-tripleoclient"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.10-3.el7ost"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2018:2331.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}]}