Vulnerability of OpenStack Glance: vulnerability of x-image-meta-status

Synthesis of the vulnerability

A vulnerability in x-image-meta-status of OpenStack Glance was announced.

Vulnerable products: RHEL, Ubuntu.

Severity of this weakness: 2/4.

Creation date: 16/10/2015.

Références of this bulletin: CVE-2015-5251, RHSA-2015:1897-01, USN-3446-1, VIGILANCE-VUL-18120.

Description of the vulnerability

A vulnerability in x-image-meta-status of OpenStack Glance was announced.
Full bulletin, software filtering, emails, fixes, ... (Request your free trial)

This security bulletin impacts software or systems such as RHEL, Ubuntu.

Our Vigil@nce team determined that the severity of this cybersecurity announce is medium.

The trust level is of type confirmed by the editor, with an origin of document.

An attacker with a expert ability can exploit this vulnerability alert.

Solutions for this threat

RHEL OpenStack: new openstack-glance packages.
New packages are available:
RHEL 6: openstack-glance 2014.1.5-3.el6ost
RHEL 7: openstack-glance 2014.1.5-3.el7ost, openstack-glance 2014.2.3-3.el7ost, openstack-glance 2015.1.1-3.el7ost

Ubuntu: new glance-common packages.
New packages are available:
Ubuntu 14.04 LTS: glance-common 1:2014.1.5-0ubuntu1.1
Full bulletin, software filtering, emails, fixes, ... (Request your free trial)

Computer vulnerabilities tracking service

Vigil@nce provides a software vulnerability bulletin. The Vigil@nce team tracks computer vulnerabilities impacting systems and applications.