Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
etcd in Red Hat OpenStack Platform 17.1 Has a Security Flaw
published 1 year ago
Summary
The etcd database in Red Hat OpenStack Platform 17.1 has a security issue that could allow an attacker to execute arbitrary code on the system. This could happen if a user with proper permissions uses a malicious etcd patch. To fix this, update your system to the latest version of etcd.
What to do
- Update redhat etcd to version 0:3.4.26-9.1.el9ost.
- Update redhat etcd-debuginfo to version 0:3.4.26-9.1.el9ost.
- Update redhat etcd-debugsource to version 0:3.4.26-9.1.el9ost.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:openstack:17.1::el9 | redhat | etcd |
< 0:3.4.26-9.1.el9ost Fix: upgrade to 0:3.4.26-9.1.el9ost
|
| Red Hat:openstack:17.1::el9 | redhat | etcd-debuginfo |
< 0:3.4.26-9.1.el9ost Fix: upgrade to 0:3.4.26-9.1.el9ost
|
| Red Hat:openstack:17.1::el9 | redhat | etcd-debugsource |
< 0:3.4.26-9.1.el9ost Fix: upgrade to 0:3.4.26-9.1.el9ost
|
Original advisory text
Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (etcd) security update
References
- https://access.redhat.com/errata/RHSA-2025:1190 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2310528 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1190.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-34156 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-34156 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-34156 Vendor Advisory
- https://go.dev/cl/611239 Third Party Advisory
- https://go.dev/issue/69139 Third Party Advisory
- https://groups.google.com/g/golang-dev/c/S9POB9NCTdk Third Party Advisory
- https://pkg.go.dev/vuln/GO-2024-3106 Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published10 Feb 2025
Updated19 Apr 2026
First seen19 Apr 2026
Sources
RHSA-2025:1190 · OSV
Track software like this
Free during beta