RHSA-2016:0266Medium

Red Hat Security Advisory: openstack-heat bug fix and security advisory

Published
February 18, 2016
Last Modified
July 31, 2026

🔗 CVE IDs covered (1)

CVE-2015-5295 →

📋 Description

CVE-2015-5295 — openstack-heat: Vulnerability in Heat template validation leading to DoS

🎯 Affected products7

  • Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
  • openstack-heat-0:2015.1.2-9.el7ost.src as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
  • openstack-heat-api-0:2015.1.2-9.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
  • openstack-heat-api-cfn-0:2015.1.2-9.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
  • openstack-heat-api-cloudwatch-0:2015.1.2-9.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
  • openstack-heat-common-0:2015.1.2-9.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
  • openstack-heat-engine-0:2015.1.2-9.el7ost.noarch as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7

✅ Remediation

Before applying this update, ensure all previously released errata relevant to your system have been applied. Red Hat Enterprise Linux OpenStack Platform 7 runs on Red Hat Enterprise Linux 7.2. The Red Hat Enterprise Linux OpenStack Platform 7 Release Notes contain the following: * An explanation of the way in which the provided components interact to form a working cloud computing environment. * Technology Previews, Recommended Practices, and Known Issues. * The channels required for Red Hat Enterprise Linux OpenStack Platform 7, including which channels need to be enabled and disabled. The Release Notes are available at: https://access.redhat.com/documentation/en/red-hat-enterprise-linux-openstack-platform/version-7/red-hat-enterprise-linux-openstack-platform-7-release-notes/release-notes This update is available through 'yum update' on systems registered through Red Hat Subscription Manager. For more information about Red Hat Subscription Manager, see: https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

🔗 References (17)