{"id":"CVE-2015-3156","aliases":["DEBIAN-CVE-2015-3156","EUVD-2022-3323","GHSA-98c8-36p9-gw66","PYSEC-2026-1053","SUSE-SU-2016:0739-1","UBUNTU-CVE-2015-3156"],"status":"published","title":"Openstack DBaaS (Trove) Improper Link Resolution Before File Access","description":"The _write_config function in trove/guestagent/datastore/experimental/mongodb/service.py, reset_configuration function in trove/guestagent/datastore/experimental/postgresql/service/config.py, write_config function in trove/guestagent/datastore/experimental/redis/service.py, _write_mycnf function in trove/guestagent/datastore/mysql/service.py, InnoBackupEx::_run_prepare function in trove/guestagent/strategies/restore/mysql_impl.py, InnoBackupEx::cmd function in trove/guestagent/strategies/backup/mysql_impl.py, MySQLDump::cmd in trove/guestagent/strategies/backup/mysql_impl.py, InnoBackupExIncremental::cmd function in trove/guestagent/strategies/backup/mysql_impl.py, _get_actual_db_status function in trove/guestagent/datastore/experimental/cassandra/system.py and trove/guestagent/datastore/experimental/cassandra/service.py, and multiple class CbBackup methods in trove/guestagent/strategies/backup/experimental/couchbase_impl.py in Openstack DBaaS (aka Trove) as packaged in Openstack before 2015.1.0 (aka Kilo) allows local users to write to configuration files via a symlink attack on a temporary file.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00463,"percentile":0.40333,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-59"],"published":"2016-03-14T10:34:41Z","modified":"2026-09-09T07:00:44Z","fixes":[{"ecosystem":"PyPI","package":"trove","fixed_in":["4.0.0a0"],"sources":["ghsa","osv"]},{"ecosystem":"SUSE:OpenStack Cloud 5","package":"openstack-trove","fixed_in":["2014.2.4.juno-15.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 5","package":"openstack-trove-doc","fixed_in":["2014.2.4.juno-15.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0a0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:18.0.0-2","1:19.0.0-1","1:19.0.0-2","1:19.0.0-3","1:19.0.0-4","1:19.0.0~rc1-1","1:20.0.0-1","1:20.0.0-2","1:20.0.0~rc1-1","1:21.0.0~rc1-1","1:21.0.1-1","1:21.0.1-2","1:22.0.0-1","1:22.0.0-2","1:22.0.0-3","1:22.0.0-4","1:22.0.0~rc1-1","1:22.0.0~rc1-2","1:23.0.0-1","1:23.0.0-2","1:23.0.0~rc1-1","1:23.0.0~rc1-2","1:24.0.0-1","1:24.0.0-2","1:24.0.0~rc1-1","1:24.0.0~rc1-2","1:25.0.0-1","1:25.0.0~rc1-1","1:25.0.0~rc1-2","1:25.0.0~rc1-3","1:25.1.0-1"]},{"source":"osv","ecosystem":"Debian:13","package":"openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:23.0.0-2","1:24.0.0-1","1:24.0.0-2","1:24.0.0~rc1-1","1:24.0.0~rc1-2","1:25.0.0-1","1:25.0.0~rc1-1","1:25.0.0~rc1-2","1:25.0.0~rc1-3","1:25.1.0-1"]},{"source":"osv","ecosystem":"Debian:14","package":"openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:23.0.0-2","1:24.0.0-1","1:24.0.0-2","1:24.0.0~rc1-1","1:24.0.0~rc1-2","1:25.0.0-1","1:25.0.0~rc1-1","1:25.0.0~rc1-2","1:25.0.0~rc1-3","1:25.1.0-1"]},{"source":"osv","ecosystem":"PyPI","package":"trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0a0"}]}],"versions":["0.0"]},{"source":"osv","ecosystem":"PyPI","package":"trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0a0"}]}],"versions":["0.0"]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2014.2.4.juno-15.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"openstack-trove-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2014.2.4.juno-15.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.0.0-0ubuntu1","1:5.0.0~b1-0ubuntu1","1:5.0.0~b2-0ubuntu1","1:5.0.0~rc1-0ubuntu1","1:5.0.0-0ubuntu1","1:5.1.0-0ubuntu1","1:5.1.1-0ubuntu1","1:5.1.1-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:8.0.0-0ubuntu1","1:9.0.0~b3-0ubuntu1","1:9.0.0~rc1-0ubuntu1","1:9.0.0-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:12.0.0-0ubuntu1","1:13.0.0~b1~git2019121815.5472d8a5-0ubuntu1","1:13.0.0~b2~git2020021315.2d301d0a-0ubuntu1","1:13.0.0~b3~git2020032626.3cdcfac3-0ubuntu1","1:13.0.0~b3~git2020041014.8c3df10a-0ubuntu1","1:13.0.0-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:16.0.0-0ubuntu1","2:16.0.0-0ubuntu2","2:16.0.0+git2021120910.be86b791-0ubuntu1","2:16.0.0+git2022030314.39322f5a-0ubuntu1","2:17.0.0-0ubuntu1","2:17.0.0-0ubuntu1.1"]}],"products":[{"vendor":"openstack","product":"trove"}],"references":[{"url":"https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/mysql/service.py#L790","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/mysql_impl.py#L110","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/cassandra/service.py#L230","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/mysql_impl.py#L55","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://bugs.launchpad.net/trove/+bug/1398195","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","VDB Entry","advisory","report","web"]},{"url":"https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/experimental/couchbase_impl.py#L30","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/mongodb/service.py#L176","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/mysql_impl.py#L36","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/restore/mysql_impl.py#L194","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1216073","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","VDB Entry","advisory","report","web"]},{"url":"https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/redis/service.py#L236","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3156","tags":["advisory"]},{"url":"https://github.com/openstack/trove/commit/61774984aa2bacfe89867fc39a402a6a4cfb8f33","tags":["web"]},{"url":"https://github.com/advisories/GHSA-98c8-36p9-gw66","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-3156","tags":["advisory"]},{"url":"https://github.com/openstack/trove","tags":["package"]},{"url":"https://pypi.org/project/trove","tags":["package"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160739-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/929535","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3156","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-3156","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1216073#c1","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3156","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-3156","description":"The _write_config function in trove/guestagent/datastore/experimental/mongodb/service.py, reset_configuration function in trove/guestagent/datastore/experimental/postgresql/service/config.py, write_config function in trove/guestagent/datastore/experimental/redis/service.py, _write_mycnf function in trove/guestagent/datastore/mysql/service.py, InnoBackupEx::_run_prepare function in trove/guestagent/strategies/restore/mysql_impl.py, InnoBackupEx::cmd function in trove/guestagent/strategies/backup/mysql_impl.py, MySQLDump::cmd in trove/guestagent/strategies/backup/mysql_impl.py, InnoBackupExIncremental::cmd function in trove/guestagent/strategies/backup/mysql_impl.py, _get_actual_db_status function in trove/guestagent/datastore/experimental/cassandra/system.py and trove/guestagent/datastore/experimental/cassandra/service.py, and multiple class CbBackup methods in trove/guestagent/strategies/backup/experimental/couchbase_impl.py in Openstack DBaaS (aka Trove) as packaged in Openstack before 2015.1.0 (aka Kilo) allows local users to write to configuration files via a symlink attack on a temporary file.","status":"published","published":"2017-08-11T21:00:00Z","modified":"2024-08-06T05:39:31.07Z","updated_at":"2026-11-02T14:35:42.331636Z"}],"euvd":[{"id":"EUVD-2022-3323","description":"The _write_config function in trove/guestagent/datastore/experimental/mongodb/service.py, reset_configuration function in trove/guestagent/datastore/experimental/postgresql/service/config.py, write_config function in trove/guestagent/datastore/experimental/redis/service.py, _write_mycnf function in trove/guestagent/datastore/mysql/service.py, InnoBackupEx::_run_prepare function in trove/guestagent/strategies/restore/mysql_impl.py, InnoBackupEx::cmd function in trove/guestagent/strategies/backup/mysql_impl.py, MySQLDump::cmd in trove/guestagent/strategies/backup/mysql_impl.py, InnoBackupExIncremental::cmd function in trove/guestagent/strategies/backup/mysql_impl.py, _get_actual_db_status function in trove/guestagent/datastore/experimental/cassandra/system.py and trove/guestagent/datastore/experimental/cassandra/service.py, and multiple class CbBackup methods in trove/guestagent/strategies/backup/experimental/couchbase_impl.py in Openstack DBaaS (aka Trove) as packaged in Openstack before 2015.1.0 (aka Kilo) allows local users to write to configuration files via a symlink attack on a temporary file.","status":"published","published":"2017-08-11T21:00:00Z","modified":"2024-08-06T05:39:31Z","updated_at":"2026-11-03T02:22:09.179399Z"}],"ghsa":[{"id":"GHSA-98c8-36p9-gw66","title":"Openstack DBaaS (Trove) Improper Link Resolution Before File Access ","description":"The `_write_config` function in `trove/guestagent/datastore/experimental/mongodb/service.py`, `reset_configuration` function in `trove/guestagent/datastore/experimental/postgresql/service/config.py`, `write_config` function in `trove/guestagent/datastore/experimental/redis/service.py`, `_write_mycnf` function in `trove/guestagent/datastore/mysql/service.py`, `InnoBackupEx::_run_prepare` function in `trove/guestagent/strategies/restore/mysql_impl.py`, `InnoBackupEx::cmd` function in `trove/guestagent/strategies/backup/mysql_impl.py`,`MySQLDump::cmd` in `trove/guestagent/strategies/backup/mysql_impl.py`, `InnoBackupExIncremental::cmd` function in `trove/guestagent/strategies/backup/mysql_impl.py`, `_get_actual_db_status` function in `trove/guestagent/datastore/experimental/cassandra/system.py` and `trove/guestagent/datastore/experimental/cassandra/service.py`, and multiple class CbBackup methods in `trove/guestagent/strategies/backup/experimental/couchbase_impl.py` in Openstack DBaaS (aka Trove) as packaged in Openstack before 2015.1.0 (aka Kilo) allows local users to write to configuration files via a symlink attack on a temporary file.","status":"published","published":"2022-05-17T01:57:31Z","modified":"2024-05-14T21:19:07Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:37:48.848211Z"}],"nvd":[{"id":"CVE-2015-3156","description":"The _write_config function in trove/guestagent/datastore/experimental/mongodb/service.py, reset_configuration function in trove/guestagent/datastore/experimental/postgresql/service/config.py, write_config function in trove/guestagent/datastore/experimental/redis/service.py, _write_mycnf function in trove/guestagent/datastore/mysql/service.py, InnoBackupEx::_run_prepare function in trove/guestagent/strategies/restore/mysql_impl.py, InnoBackupEx::cmd function in trove/guestagent/strategies/backup/mysql_impl.py, MySQLDump::cmd in trove/guestagent/strategies/backup/mysql_impl.py, InnoBackupExIncremental::cmd function in trove/guestagent/strategies/backup/mysql_impl.py, _get_actual_db_status function in trove/guestagent/datastore/experimental/cassandra/system.py and trove/guestagent/datastore/experimental/cassandra/service.py, and multiple class CbBackup methods in trove/guestagent/strategies/backup/experimental/couchbase_impl.py in Openstack DBaaS (aka Trove) as packaged in Openstack before 2015.1.0 (aka Kilo) allows local users to write to configuration files via a symlink attack on a temporary file.","status":"published","published":"2017-08-11T21:29:00.26Z","modified":"2026-06-17T00:25:26.107Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:03:17.730372Z"}],"osv":[{"id":"CVE-2015-3156","description":"The _write_config function in trove/guestagent/datastore/experimental/mongodb/service.py, reset_configuration function in trove/guestagent/datastore/experimental/postgresql/service/config.py, write_config function in trove/guestagent/datastore/experimental/redis/service.py, _write_mycnf function in trove/guestagent/datastore/mysql/service.py, InnoBackupEx::_run_prepare function in trove/guestagent/strategies/restore/mysql_impl.py, InnoBackupEx::cmd function in trove/guestagent/strategies/backup/mysql_impl.py, MySQLDump::cmd in trove/guestagent/strategies/backup/mysql_impl.py, InnoBackupExIncremental::cmd function in trove/guestagent/strategies/backup/mysql_impl.py, _get_actual_db_status function in trove/guestagent/datastore/experimental/cassandra/system.py and trove/guestagent/datastore/experimental/cassandra/service.py, and multiple class CbBackup methods in trove/guestagent/strategies/backup/experimental/couchbase_impl.py in Openstack DBaaS (aka Trove) as packaged in Openstack before 2015.1.0 (aka Kilo) allows local users to write to configuration files via a symlink attack on a temporary file.","status":"published","published":"2017-08-11T21:29:00Z","modified":"2026-07-07T11:56:08.916749354Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DEBIAN-CVE-2015-3156","description":"The _write_config function in trove/guestagent/datastore/experimental/mongodb/service.py, reset_configuration function in trove/guestagent/datastore/experimental/postgresql/service/config.py, write_config function in trove/guestagent/datastore/experimental/redis/service.py, _write_mycnf function in trove/guestagent/datastore/mysql/service.py, InnoBackupEx::_run_prepare function in trove/guestagent/strategies/restore/mysql_impl.py, InnoBackupEx::cmd function in trove/guestagent/strategies/backup/mysql_impl.py, MySQLDump::cmd in trove/guestagent/strategies/backup/mysql_impl.py, InnoBackupExIncremental::cmd function in trove/guestagent/strategies/backup/mysql_impl.py, _get_actual_db_status function in trove/guestagent/datastore/experimental/cassandra/system.py and trove/guestagent/datastore/experimental/cassandra/service.py, and multiple class CbBackup methods in trove/guestagent/strategies/backup/experimental/couchbase_impl.py in Openstack DBaaS (aka Trove) as packaged in Openstack before 2015.1.0 (aka Kilo) allows local users to write to configuration files via a symlink attack on a temporary file.","status":"published","published":"2017-08-11T21:29:00.26Z","modified":"2026-09-09T07:00:44.020316473Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"GHSA-98c8-36p9-gw66","title":"Openstack DBaaS (Trove) Improper Link Resolution Before File Access ","description":"The `_write_config` function in `trove/guestagent/datastore/experimental/mongodb/service.py`, `reset_configuration` function in `trove/guestagent/datastore/experimental/postgresql/service/config.py`, `write_config` function in `trove/guestagent/datastore/experimental/redis/service.py`, `_write_mycnf` function in `trove/guestagent/datastore/mysql/service.py`, `InnoBackupEx::_run_prepare` function in `trove/guestagent/strategies/restore/mysql_impl.py`, `InnoBackupEx::cmd` function in `trove/guestagent/strategies/backup/mysql_impl.py`,`MySQLDump::cmd` in `trove/guestagent/strategies/backup/mysql_impl.py`, `InnoBackupExIncremental::cmd` function in `trove/guestagent/strategies/backup/mysql_impl.py`, `_get_actual_db_status` function in `trove/guestagent/datastore/experimental/cassandra/system.py` and `trove/guestagent/datastore/experimental/cassandra/service.py`, and multiple class CbBackup methods in `trove/guestagent/strategies/backup/experimental/couchbase_impl.py` in Openstack DBaaS (aka Trove) as packaged in Openstack before 2015.1.0 (aka Kilo) allows local users to write to configuration files via a symlink attack on a temporary file.","status":"published","published":"2022-05-17T01:57:31Z","modified":"2026-07-07T11:56:08.916749354Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T15:46:43.524801Z"},{"id":"PYSEC-2026-1053","title":"Openstack DBaaS (Trove) Improper Link Resolution Before File Access ","description":"The `_write_config` function in `trove/guestagent/datastore/experimental/mongodb/service.py`, `reset_configuration` function in `trove/guestagent/datastore/experimental/postgresql/service/config.py`, `write_config` function in `trove/guestagent/datastore/experimental/redis/service.py`, `_write_mycnf` function in `trove/guestagent/datastore/mysql/service.py`, `InnoBackupEx::_run_prepare` function in `trove/guestagent/strategies/restore/mysql_impl.py`, `InnoBackupEx::cmd` function in `trove/guestagent/strategies/backup/mysql_impl.py`,`MySQLDump::cmd` in `trove/guestagent/strategies/backup/mysql_impl.py`, `InnoBackupExIncremental::cmd` function in `trove/guestagent/strategies/backup/mysql_impl.py`, `_get_actual_db_status` function in `trove/guestagent/datastore/experimental/cassandra/system.py` and `trove/guestagent/datastore/experimental/cassandra/service.py`, and multiple class CbBackup methods in `trove/guestagent/strategies/backup/experimental/couchbase_impl.py` in Openstack DBaaS (aka Trove) as packaged in Openstack before 2015.1.0 (aka Kilo) allows local users to write to configuration files via a symlink attack on a temporary file.","status":"published","published":"2026-07-06T08:03:24.655833Z","modified":"2026-07-07T11:46:01.476215408Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:54.622769Z"},{"id":"UBUNTU-CVE-2015-3156","description":"The _write_config function in trove/guestagent/datastore/experimental/mongodb/service.py, reset_configuration function in trove/guestagent/datastore/experimental/postgresql/service/config.py, write_config function in trove/guestagent/datastore/experimental/redis/service.py, _write_mycnf function in trove/guestagent/datastore/mysql/service.py, InnoBackupEx::_run_prepare function in trove/guestagent/strategies/restore/mysql_impl.py, InnoBackupEx::cmd function in trove/guestagent/strategies/backup/mysql_impl.py, MySQLDump::cmd in trove/guestagent/strategies/backup/mysql_impl.py, InnoBackupExIncremental::cmd function in trove/guestagent/strategies/backup/mysql_impl.py, _get_actual_db_status function in trove/guestagent/datastore/experimental/cassandra/system.py and trove/guestagent/datastore/experimental/cassandra/service.py, and multiple class CbBackup methods in trove/guestagent/strategies/backup/experimental/couchbase_impl.py in Openstack DBaaS (aka Trove) as packaged in Openstack before 2015.1.0 (aka Kilo) allows local users to write to configuration files via a symlink attack on a temporary file.","status":"published","published":"2017-08-11T21:29:00Z","modified":"2025-10-24T04:45:21Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:10.045446Z"},{"id":"SUSE-SU-2016:0739-1","title":"Security update for openstack-trove","description":"\nThis update for openstack-trove fixes the following issues: \n\n- Fix multiple insecure /tmp file usage issues (bsc#929535, CVE-2015-3156).","status":"published","published":"2016-03-14T10:34:41Z","modified":"2026-02-04T02:33:38.310484Z","updated_at":"2026-11-02T15:53:43.030986Z"}]}}