RHBA-2018:2130 - Bug Fix Advisory

Topic

Updated packages that resolve various issues are now available for Red Hat
Enterprise Linux OpenStack Platform 7.0 director for RHEL 7.

Description

Red Hat OpenStack Platform director provides the facilities for deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
based on Red Hat OpenStack Platform.

Changes to the openstack-tripleo-heat-templates component:

• Redis on the overcloud was not password protected, which could allow an attacker access to Redis data. This fix adds password protection to the Redis service on the overcloud. (BZ#1500239)
• The OpenStack Compute (nova) VNC server used a hardcoded value (0.0.0.0), which allowed access on all active interface. This fix allows you to change the value through the director's Heat template collection. (BZ#1350422)

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat Enterprise Linux OpenStack Platform 7 runs on Red Hat Enterprise
Linux 7.4.

The Red Hat Enterprise Linux OpenStack Platform 7 Release Notes contain the
following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat Enterprise Linux OpenStack Platform 7,

including which channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-enterprise-linux-openstack-platform/7/paged/release-notes

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack 7 x86_64

Fixes

• BZ - 1350422 - [OSP7] Backport of Bug #1416994 (nova vnc server listens on all active interfaces)

CVEs

(none)

References

(none)