—

PYSEC-2018-102

Quick fix

PYSEC-2018-102 — tripleo-heat-templates: upgrade to the fixed version with the command below.

pip install --upgrade 'tripleo-heat-templates>=8.0.3'

Details

A vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40. When deployed using Director using default configuration, Opendaylight in RHOSP13 is configured with easily guessable default credentials.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/tripleo-heat-templates

Introduced in: 0Fixed in: 8.0.3

Fixpip install --upgrade 'tripleo-heat-templates>=8.0.3'

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10898[REPORT]
https://access.redhat.com/errata/RHSA-2018:2214[ADVISORY]