CVE-2014-0042
Fixed in a distro release EPSS 1%
OpenStack Heat Templates (heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform 4.0, sets gpgcheck to 0 for certain templates, which disables GPG signature checking on downloaded packages and allows man-in-the-middle attackers to install arbitrary packages via unspecified vectors.
Products: redhat openstack
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openstack 4 | openstack-heat-templates | 0:0-0.3.20140407git.el6ost |