Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-7319

No fix known EPSS <1%CVSS 5.0

An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied.

Published 2024-08-02 · CVE record · OSV

Products: Red Hat OpenStack Platform 13 (Queens), Red Hat OpenStack Platform 16.1, Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 17.0

Fixed upstream

EcosystemPackageFixed in
PyPIopenstack-heatno fix

Distro releases

ReleasePackageFixed in
Debian 12heatno fix
Debian 13heatno fix
Debian 14heatno fix
Ubuntu 16.04 LTSheatno fix
Ubuntu 18.04 LTSheatno fix
Ubuntu 20.04 LTSheatno fix
Ubuntu 22.04 LTSheatno fix
Ubuntu 24.04 LTSheatno fix
Ubuntu 25.10heatno fix
Ubuntu 26.04 LTSheatno fix
Ubuntu 26.10heatno fix