RHSA-2026:94039 - Security Advisory

Topic

Updated packages that resolve security issues are now available for Red Hat OpenStack Platform 13.0 for Red Hat Enterprise Linux (RHEL) 7.

Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service (IaaS) cloud running on commonly available physical hardware.

Security Fix(es):

• Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling

in OpenStack Nova (CVE-2026-24708)

• OpenStack Nova: Resource allocation issue due to unstripped hint data in

server creation API (CVE-2026-46448)

• OpenStack Keystone: Privilege escalation through EC2 credential creation

(CVE-2026-33551)

• OpenStack Keystone: Privilege escalation via chained application credential impersonation and trust misuse (CVE-2026-43000)
• python-webob: Open redirect vulnerability leading to phishing and token theft (CVE-2026-54770)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenStack 13 - Extended Life Cycle Support 13 x86_64
• Red Hat OpenStack 13 for IBM Power - Extended Life Cycle Support 13 ppc64le
• Red Hat OpenStack 13 Director Deployment Tools - Extended Life Cycle Support 13 x86_64
• Red Hat OpenStack 13 Director Deployment Tools for IBM Power LE - Extended Life Cycle Support 13 ppc64le

Fixes

• BZ - 2430312 - CVE-2026-24708 openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova
• BZ - 2451037 - CVE-2026-33551 openstack-keystone: OpenStack Keystone: Privilege escalation through EC2 credential creation
• BZ - 2482826 - CVE-2026-43000 keystone: OpenStack Keystone: Privilege escalation via chained application credential impersonation and trust misuse
• BZ - 2489379 - CVE-2026-46448 openstack-nova: OpenStack Nova: Resource allocation issue due to unstripped hint data in server creation API
• BZ - 2520616 - CVE-2026-54770 webob: WebOb: Open redirect vulnerability leading to phishing and token theft

CVEs

• CVE-2026-24708
• CVE-2026-33551
• CVE-2026-43000
• CVE-2026-46448
• CVE-2026-54770

References

• https://access.redhat.com/security/updates/classification/#important