Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Red Hat OpenStack Platform 10 RHSA-2018:2102-01 Moderate Info Exposure

red hat
Calendar Grey June 28, 2018
Scroller Redhat
The latest security update for Red Hat OpenStack Platform 10 targets potential vulnerabilities related to data leakage. Noteworthy improvements entail.
An update is now available for Red Hat OpenStack Platform 10.0 (Newton) for RHEL 7

Solution

Before applying this update, ensure all previously released errata relevant to your system have been applied.

Red Hat OpenStack Platform 10 runs on Red Hat Enterprise Linux 7.4.

The Red Hat OpenStack Platform 10 Release Notes contain the following: * An explanation of the way in which the provided components interact to form a working cloud computing environment. * Technology Previews, Recommended Practices, and Known Issues. * The channels required for Red Hat OpenStack Platform 10, including which channels need to be enabled and disabled.

The Release Notes are available at: ged/release-notes

This update is available through 'yum update' on systems registered through Red Hat Subscription Manager. For more information about Red Hat Subscription Manager, see:

nt/1/html/RHSM/index.html

Summary

Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service (IaaS) cloud running on commonly available physical hardware.
Security Fix(es):
* dpdk: Information exposure in unchecked guest physical to host virtual address translations (CVE-2018-1059)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
The CVE-2018-1059 issue was discovered by Maxime Coquelin (Red Hat).

Topics%20covered

Topics Covered

security advisory moderate bug fix info exposure cloud infrastructure Red Hat OpenStack RHEL 7

References

https://access.redhat.com/security/cve/CVE-2018-1059 https://access.redhat.com/security/updates/classification/#moderate

Package List

Red Hat OpenStack Platform 10.0:
Source: openstack-selinux-0.8.14-5.el7ost.src.rpm openvswitch-2.9.0-19.el7fdp.1.src.rpm
noarch: openstack-selinux-0.8.14-5.el7ost.noarch.rpm python-openvswitch-2.9.0-19.el7fdp.1.noarch.rpm
x86_64: openvswitch-2.9.0-19.el7fdp.1.x86_64.rpm openvswitch-debuginfo-2.9.0-19.el7fdp.1.x86_64.rpm openvswitch-devel-2.9.0-19.el7fdp.1.x86_64.rpm openvswitch-ovn-central-2.9.0-19.el7fdp.1.x86_64.rpm openvswitch-ovn-common-2.9.0-19.el7fdp.1.x86_64.rpm openvswitch-ovn-host-2.9.0-19.el7fdp.1.x86_64.rpm openvswitch-ovn-vtep-2.9.0-19.el7fdp.1.x86_64.rpm
OpenStack 10.0 Tools for RHEL 7:
noarch: openvswitch-test-2.9.0-19.el7fdp.1.noarch.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/


Severity
medium
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2018:2102-01
Product: Red Hat Enterprise Linux OpenStack Platform
Advisory URL: https://access.redhat.com/errata/RHSA-2018:2102
Issue date: 2018-06-27

Topic

An update is now available for Red Hat OpenStack Platform 10.0 (Newton) forRHEL 7.Red Hat Product Security has rated this update as having a security impactof Moderate. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.

Topics%20covered

Topics Covered

security advisory moderate bug fix info exposure cloud infrastructure Red Hat OpenStack RHEL 7

Relevant Releases Architectures

OpenStack 10.0 Tools for RHEL 7 - noarch

Red Hat OpenStack Platform 10.0 - noarch, x86_64

Bugs Fixed

1540017 - ovs-vswitchd systemd process timesout in environments with large (200G) hugepages

1540158 - RHOS10.z OVS 1802 update

1540164 - RHOS10.z 1802 Rebase OVS with branch-2.6

1540175 - RHOS10.z 1802 Rebase DPDK with LTS branch

1542107 - Live migration fails on OSPd10 DPDK env because of selinux denied

1544298 - CVE-2018-1059 dpdk: Information exposure in unchecked guest physical to host virtual address translations

1546198 - [RFE] ovs-stats metrics list to add to collectd

1549893 - Issue with pCPUs for PMDs not running 100% in user space, but a relatively high amount of time in kernel space

1550124 - "upcall_cb failure: ukey installation fails" message in OVS DPDK

1550398 - failed to start vhost interface after updating ovs to 2.9 in osp10

1551682 - ovs-vswitchd segfaults after any instance is spawned on numa 1 socket

1553812 - Update openvswitch 2.6 to use stable DPDK 16.11.5

1556662 - vhostuser interface link is down sometimes unexpectedly

1561939 - Backport from master OVS for "LACP: check active partner sys id"

1572510 - OSP10: Support for dpdkvhostuserclient mode

1579905 - Update OSP10 to OVS 2.9 -19 Fast Datapath build 18.04

1583750 - openvswitch-2.9.0-19.el7fdp installs /var/log/openvswitch with permissions 0755 [openstack-10]

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.