{"id":"SUSE-SU-2017:2628-1","aliases":[],"status":"published","title":"Security update for openstack-glance","description":"This update for openstack-glance fixes the following issues:\n\n- Restrict image_location metadata \n  When `show_multiple_locations` is enabled in Glance, any user can\n  rewrite the metadata information for locations, causing a security\n  breach. (bsc#1023507)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2017-10-02T18:06:53Z","modified":"2017-10-02T18:06:53Z","fixes":[{"ecosystem":"SUSE:OpenStack Cloud 7","package":"openstack-glance","fixed_in":["13.0.1~a0~dev6-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"openstack-glance-doc","fixed_in":["13.0.1~a0~dev6-4.3.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.1~a0~dev6-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"openstack-glance-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.1~a0~dev6-4.3.4"}]}]}],"references":[{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172628-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1023507","tags":["report"]}],"sources":{"osv":[{"id":"SUSE-SU-2017:2628-1","title":"Security update for openstack-glance","description":"This update for openstack-glance fixes the following issues:\n\n- Restrict image_location metadata \n  When `show_multiple_locations` is enabled in Glance, any user can\n  rewrite the metadata information for locations, causing a security\n  breach. (bsc#1023507)\n","status":"published","published":"2017-10-02T18:06:53Z","modified":"2017-10-02T18:06:53Z","updated_at":"2026-11-02T15:53:44.209561Z"}]}}