Created openstack-keystone tracking bugs for this issue:

Affects: openstack-rdo [bug 1608595]

This issue has been addressed in the following products:

  Red Hat OpenStack Platform 12.0 (Pike)

Via RHSA-2018:2523 https://access.redhat.com/errata/RHSA-2018:2523

This issue has been addressed in the following products:

  Red Hat OpenStack Platform 13.0 (Queens)

Via RHSA-2018:2533 https://access.redhat.com/errata/RHSA-2018:2533

This issue has been addressed in the following products:

  Red Hat OpenStack Platform 10.0 (Newton)

Via RHSA-2018:2543 https://access.redhat.com/errata/RHSA-2018:2543

Hi,

From above link, I see that fix for this vulnerability is available for pike, ocata and queens release of openstack. Is there any plan to fix this for kilo release?

Thanks,
Suraj

Hello Suraj,

Analysis of this flaw found that it was not reproducable on versions of OpenStack older than Ocata (RHOS 10).
I have reviewed and clarified this by ensuring all editions are marked as not affected below RHOS 10.
RHOS 7 had been listed as WONTFIX instead of not affected, given RHOS 7 is EOL. I have updated this to be listed also as not affected to further clarify that this flaw was not reproducable on RHOS 7 (Kilo).
 
In general, if you require any fixes for EOL Red Hat products, you will need to open a support case under your organisation's Red Hat support agreement to explore the possibility of backported fixes under an extended support agreement. Fixes for EOL products (such as RHOS 7) can be investigated and shipped under these circumstances only.

Best Regards,
James

Thanks James for the update.