RHSA-2026:39812

Details:

OpenStack Image Service (code-named Glance) provides discovery, registration, and delivery services for virtual disk images. The Image Service API server provides a standard REST interface for querying information about virtual disk images stored in a variety of back-end stores, including OpenStack Object Storage. Clients can register new virtual disk images with the Image Service, query for information on publicly available disk images, and use the Image Service's client library for streaming virtual disk images.

Security Fix(es):

• openstack-glance: OpenStack Glance – Unvalidated URI Fetch in OVF Processing (SSRF) ()

• openstack-glance: OpenStack Glance – Redirect Validation Bypass in glance-download Import (SSRF) ()

• OpenStack Glance: Server-Side Request Forgery leading to unauthorized internal network access (CVE-2026-34881)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.