RHSA-2015:0246High

Red Hat Security Advisory: openstack-glance security update

Published
February 19, 2015
Last Modified
October 8, 2026

🔗 CVE IDs covered (1)

CVE-2014-9493 →

📋 Description

CVE-2014-9493 — openstack-glance: unrestricted path traversal flaw

🎯 Affected products15

  • Red Hat Enterprise Linux OpenStack Platform 4.0
  • Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6
  • Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7
  • openstack-glance-0:2013.2.4-3.el6ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 4.0
  • openstack-glance-0:2013.2.4-3.el6ost.src as a component of Red Hat Enterprise Linux OpenStack Platform 4.0
  • openstack-glance-0:2014.1.3-4.el6ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6
  • openstack-glance-0:2014.1.3-4.el6ost.src as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6
  • openstack-glance-0:2014.1.3-4.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7
  • openstack-glance-0:2014.1.3-4.el7ost.src as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7
  • openstack-glance-doc-0:2013.2.4-3.el6ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 4.0
  • openstack-glance-doc-0:2014.1.3-4.el6ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6
  • openstack-glance-doc-0:2014.1.3-4.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7
  • python-glance-0:2013.2.4-3.el6ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 4.0
  • python-glance-0:2014.1.3-4.el6ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6
  • python-glance-0:2014.1.3-4.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258 Workaround: diff --git a/etc/policy.json b/etc/policy.json index 325f00b..a797f12 100644 --- a/etc/policy.json +++ b/etc/policy.json @@ -13,9 +13,9 @@ "download_image": "", "upload_image": "", - "delete_image_location": "", - "get_image_location": "", - "set_image_location": "", + "delete_image_location": "role:admin", + "get_image_location": "role:admin", + "set_image_location": "role:admin", "add_member": "", "delete_member": "",

🔗 References (4)