SUSE-SU-2017:2628-1
- Source
- https://www.suse.com/support/update/announcement/2017/suse-su-20172628-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2017:2628-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2017:2628-1
- Published
- 2017-10-02T18:06:53Z
- Modified
- 2017-10-02T18:06:53Z
- Summary
- Security update for openstack-glance
- Details
-
This update for openstack-glance fixes the following issues:
- Restrict image_location metadata
When
show_multiple_locationsis enabled in Glance, any user can rewrite the metadata information for locations, causing a security breach. (bsc#1023507)
- Restrict image_location metadata
When
- References
Affected packages
SUSE:OpenStack Cloud 7 / openstack-glance
Package
- Name
- openstack-glance
- Purl
- pkg:rpm/suse/openstack-glance&distro=SUSE%20OpenStack%20Cloud%207
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed13.0.1~a0~dev6-4.3.1
Ecosystem specific
{
"binaries": [
{
"openstack-glance": "13.0.1~a0~dev6-4.3.1",
"openstack-glance-api": "13.0.1~a0~dev6-4.3.1",
"openstack-glance-doc": "13.0.1~a0~dev6-4.3.4",
"openstack-glance-glare": "13.0.1~a0~dev6-4.3.1",
"openstack-glance-registry": "13.0.1~a0~dev6-4.3.1",
"python-glance": "13.0.1~a0~dev6-4.3.1"
}
]
}
SUSE:OpenStack Cloud 7 / openstack-glance-doc
Package
- Name
- openstack-glance-doc
- Purl
- pkg:rpm/suse/openstack-glance-doc&distro=SUSE%20OpenStack%20Cloud%207
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed13.0.1~a0~dev6-4.3.4
Ecosystem specific
{
"binaries": [
{
"openstack-glance": "13.0.1~a0~dev6-4.3.1",
"openstack-glance-api": "13.0.1~a0~dev6-4.3.1",
"openstack-glance-doc": "13.0.1~a0~dev6-4.3.4",
"openstack-glance-glare": "13.0.1~a0~dev6-4.3.1",
"openstack-glance-registry": "13.0.1~a0~dev6-4.3.1",
"python-glance": "13.0.1~a0~dev6-4.3.1"
}
]
}