Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (openstack-tripleo-heat-templates and python-yaql) security update
Heat templates for TripleO YAQL library has a out of the box large set of commonly used functions. Security Fix(es): * OpenStack Murano Component Information Leakage (CVE-2024-29156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.
AI Analysis
Technical Summary
CVE-2024-29156 is an information leakage vulnerability in the OpenStack Murano component, related to the YAQL library and TripleO heat templates in Red Hat OpenStack Platform 17.1. The vulnerability is classified under CWE-200 (Information Exposure). Red Hat has released a security advisory (RHSA-2024:1930) providing updated packages for openstack-tripleo-heat-templates and python-yaql to address this issue. The advisory rates the impact as Important and recommends applying the update available for Red Hat OpenStack Platform 17.1 on RHEL 8 x86_64.
Potential Impact
The vulnerability allows unauthorized information leakage from the OpenStack Murano component, potentially exposing sensitive data. This could aid attackers in further reconnaissance or exploitation efforts. The severity is rated as Important by Red Hat, indicating a high impact on confidentiality but no direct indication of remote code execution or system compromise from the provided data.
Mitigation Recommendations
Red Hat has released updated packages for openstack-tripleo-heat-templates and python-yaql as part of Red Hat OpenStack Platform 17.1 (Wallaby) to fix this vulnerability. Users should apply the security update as detailed in Red Hat advisory RHSA-2024:1930 and the update instructions at https://access.redhat.com/articles/11258. No additional mitigation steps are specified or required beyond applying the official update.
Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (openstack-tripleo-heat-templates and python-yaql) security update
Description
Heat templates for TripleO YAQL library has a out of the box large set of commonly used functions. Security Fix(es): * OpenStack Murano Component Information Leakage (CVE-2024-29156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.
Affected software
pkg:rpm/redhat/openstack-tripleo-heat-templatesRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2024-29156 is an information leakage vulnerability in the OpenStack Murano component, related to the YAQL library and TripleO heat templates in Red Hat OpenStack Platform 17.1. The vulnerability is classified under CWE-200 (Information Exposure). Red Hat has released a security advisory (RHSA-2024:1930) providing updated packages for openstack-tripleo-heat-templates and python-yaql to address this issue. The advisory rates the impact as Important and recommends applying the update available for Red Hat OpenStack Platform 17.1 on RHEL 8 x86_64.
Potential Impact
The vulnerability allows unauthorized information leakage from the OpenStack Murano component, potentially exposing sensitive data. This could aid attackers in further reconnaissance or exploitation efforts. The severity is rated as Important by Red Hat, indicating a high impact on confidentiality but no direct indication of remote code execution or system compromise from the provided data.
Mitigation Recommendations
Red Hat has released updated packages for openstack-tripleo-heat-templates and python-yaql as part of Red Hat OpenStack Platform 17.1 (Wallaby) to fix this vulnerability. Users should apply the security update as detailed in Red Hat advisory RHSA-2024:1930 and the update instructions at https://access.redhat.com/articles/11258. No additional mitigation steps are specified or required beyond applying the official update.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2024:1930
- Cve Count
- 1
Threat ID: 6a6cf802bf32cb7a342b5078
Added to database: 07/31/2026, 19:31:14 UTC
Last enriched: 07/31/2026, 19:33:20 UTC
Last updated: 09/11/2026, 22:06:27 UTC
Views: 53
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.