REDHAT-BUG-1216073: Low severity Openstack Trove vulnerability
Michael Scherer of Red Hat reported multiple issues in OpenStack Trove where temporary files are used in an insecure way in different modules:
trove: MongoDB datastore module in guestagent insecure /tmp file usage in writeconfig() https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/mongodb/service.py#L176
trove: PostgreSQL datastore module in guestagent insecure /tmp file usage in resetconfiguration() https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/postgresql/service/config.py#L70
trove: Redis datastore module in guestagent insecure /tmp file usage in writeconfig() https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/redis/service.py#L236
trove: MySQL datastore module in guestagent insecure /tmp file usage in writemycnf() https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/mysql/service.py#L790
trove: MySQL restore strategy in guestagent insecure /tmp file usage in InnoBackupEx::runprepare() https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/restore/mysqlimpl.py#L194
trove: MySQL backup strategy in guestagent insecure /tmp file usage in InnoBackupEx::cmd() https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/mysqlimpl.py#L55
trove: MySQL backup strategy in guestagent insecure /tmp file usage in MySQLDump::cmd() https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/mysqlimpl.py#L36
trove: MySQL backup strategy in guestagent insecure /tmp file usage in InnoBackupExIncremental::cmd() https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/mysqlimpl.py#L110
trove: Cassandra datastore module insecure /tmp file usage in getactualdbstatus() https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/cassandra/system.py#L33 https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/cassandra/service.py#L230
trove: Couchbase backup strategy insecure /tmp file usage in multiple class CbBackup methods https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/experimental/couchbaseimpl.py#L30
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1216073?
The severity of REDHAT-BUG-1216073 is considered high due to insecure temporary file usage in OpenStack Trove.
How do I fix REDHAT-BUG-1216073?
To fix REDHAT-BUG-1216073, update OpenStack Trove to the latest version where the insecure file handling has been addressed.
Which components are affected by REDHAT-BUG-1216073?
The components affected by REDHAT-BUG-1216073 include the MongoDB, PostgreSQL, and Redis datastore modules in OpenStack Trove.
What vulnerability does REDHAT-BUG-1216073 address?
REDHAT-BUG-1216073 addresses vulnerabilities related to the insecure handling of temporary files in OpenStack Trove.
Who reported REDHAT-BUG-1216073?
REDHAT-BUG-1216073 was reported by Michael Scherer of Red Hat.