RHSA-2024:5113: Important: Red Hat OpenStack Platform 16.1.9 (openstack-nova) security update

Published Aug 8, 2024
·
Updated

Important: Red Hat OpenStack Platform 16.1.9 (openstack-nova) security update

Other sources

OpenStack Compute (codename Nova) is open source software designed<br>to provision and manage large networks of virtual machines,creating a<br>redundant and scalable cloud computing platform. It gives you the software,<br>control panels, and APIs required to orchestrate a cloud, including running<br>instances, managing networks, and controlling access through users and<br>projects.OpenStack Compute strives to be both hardware and hypervisor<br>agnostic, currently supporting a variety of standard hardware<br>configurations and seven major hypervisors.<br>Security Fix(es):<br><li> Regression VMDK/qcow arbitrary file access (CVE-2024-40767)</li> For more details about the security issue(s), including the impact, a CVSS<br>score, acknowledgments, and other related information, refer to the CVE<br>page listed in the References section.

Red Hat

Affected Software

14 affected componentsFixes available
redhat/openstack-nova<20.4.1-1.20221005193235.el8
20.4.1-1.20221005193235.el8
redhat/openstack-nova-api<20.4.1-1.20221005193235.el8
20.4.1-1.20221005193235.el8
redhat/openstack-nova-common<20.4.1-1.20221005193235.el8
20.4.1-1.20221005193235.el8
redhat/openstack-nova-compute<20.4.1-1.20221005193235.el8
20.4.1-1.20221005193235.el8
redhat/openstack-nova-conductor<20.4.1-1.20221005193235.el8
20.4.1-1.20221005193235.el8
redhat/openstack-nova-console<20.4.1-1.20221005193235.el8
20.4.1-1.20221005193235.el8
redhat/openstack-nova-migration<20.4.1-1.20221005193235.el8
20.4.1-1.20221005193235.el8
redhat/openstack-nova-novncproxy<20.4.1-1.20221005193235.el8
20.4.1-1.20221005193235.el8
redhat/openstack-nova-scheduler<20.4.1-1.20221005193235.el8
20.4.1-1.20221005193235.el8
redhat/openstack-nova-serialproxy<20.4.1-1.20221005193235.el8
20.4.1-1.20221005193235.el8
redhat/openstack-nova-spicehtml5proxy<20.4.1-1.20221005193235.el8
20.4.1-1.20221005193235.el8
redhat/python3-nova<20.4.1-1.20221005193235.el8
20.4.1-1.20221005193235.el8
Red Hat Red Hat OpenStack
Red Hat Red Hat OpenStack for IBM Power

Remediation

Event History

Aug 8, 2024
Advisory Published
via Red Hat·07:22 AM
Aug 24, 2024
Advisory Published
via Red Hat·03:22 PM
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of RHSA-2024:5113?

The severity of RHSA-2024:5113 is classified as important.

2

How do I fix RHSA-2024:5113?

To fix RHSA-2024:5113, update the affected packages to version 20.4.1-1.20221005193235.el8.

3

What packages are affected by RHSA-2024:5113?

Affected packages include openstack-nova, openstack-nova-api, openstack-nova-common, and several others.

4

What is OpenStack Compute in relation to RHSA-2024:5113?

OpenStack Compute, also known as Nova, is software designed to provision and manage large networks of virtual machines.

5

When was RHSA-2024:5113 issued?

RHSA-2024:5113 was issued as a security update for Red Hat OpenStack Platform 16.1.9.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203