Improper access control in Ignition - CVE-2022-1706
Published: May 20, 2022
Vulnerability identifier: #VU63493
CSH Severity: Low
CVSS v4: 6.7 [CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N]
CVE-ID: CVE-2022-1706
CWE-ID: CWE-284
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to improper access restrictions in ignition configs. A remote user on the local network can bypass implemented security restrictions and obtain sensitive information.
Affected software
Ignition
Oracle Linux
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Desktop
openSUSE Leap
Fedora
toolbox (Red Hat package)
python-ifaddr (Red Hat package)
python-wcwidth (Red Hat package)
python-iso8601 (Red Hat package)
python-zake (Red Hat package)
python-sqlparse (Red Hat package)
rust-bootupd (Red Hat package)
python-oslo-metrics (Red Hat package)
python-logutils (Red Hat package)
python-colorama (Red Hat package)
python-greenlet (Red Hat package)
python-zipp (Red Hat package)
python-tempita (Red Hat package)
python-msgpack (Red Hat package)
python-prometheus_client (Red Hat package)
python-repoze-lru (Red Hat package)
python-simplegeneric (Red Hat package)
python-dataclasses (Red Hat package)
python-pint (Red Hat package)
python-wsme (Red Hat package)
python-scciclient (Red Hat package)
python-voluptuous (Red Hat package)
python-migrate (Red Hat package)
python-fasteners (Red Hat package)
butane (Red Hat package)
coreos-installer (Red Hat package)
python-pyrsistent (Red Hat package)
console-login-helper-messages (Red Hat package)
python-zeroconf (Red Hat package)
python-hardware (Red Hat package)
python-openstacksdk (Red Hat package)
containernetworking-plugins (Red Hat package)
python-funcsigs (Red Hat package)
python-yappi (Red Hat package)
python-editor (Red Hat package)
libsodium (Red Hat package)
python-flask (Red Hat package)
runc (Red Hat package)
python-dogpile-cache (Red Hat package)
slirp4netns (Red Hat package)
python-rfc3986 (Red Hat package)
python-retrying (Red Hat package)
python-jsonpath-rw (Red Hat package)
python-vine (Red Hat package)
python-pynacl (Red Hat package)
python-pecan (Red Hat package)
python-warlock (Red Hat package)
python-requestsexceptions (Red Hat package)
python-appdirs (Red Hat package)
crun (Red Hat package)
python-alembic (Red Hat package)
python-oslo-upgradecheck (Red Hat package)
skopeo (Red Hat package)
python-pyperclip (Red Hat package)
python-os-service-types (Red Hat package)
python-importlib-metadata (Red Hat package)
python-webob (Red Hat package)
fuse-overlayfs (Red Hat package)
python-pycdlib (Red Hat package)
python-wrapt (Red Hat package)
python-six (Red Hat package)
containers-common (Red Hat package)
buildah (Red Hat package)
cri-o (Red Hat package)
cri-tools (Red Hat package)
python-memcached (Red Hat package)
python-waitress (Red Hat package)
python-paste-deploy (Red Hat package)
python-werkzeug (Red Hat package)
python-webtest (Red Hat package)
python-soupsieve (Red Hat package)
conmon (Red Hat package)
haproxy (Red Hat package)
pyparsing (Red Hat package)
python-SecretStorage (Red Hat package)
python-munch (Red Hat package)
python-futurist (Red Hat package)
python-routes (Red Hat package)
kata-containers (Red Hat package)
python-automaton (Red Hat package)
python-debtcollector (Red Hat package)
python-osc-lib (Red Hat package)
python-amqp (Red Hat package)
python-oslo-versionedobjects (Red Hat package)
python-os-traits (Red Hat package)
python-kazoo (Red Hat package)
python-oslo-service (Red Hat package)
python-oslo-cache (Red Hat package)
python-construct (Red Hat package)
python-tooz (Red Hat package)
python-proliantutils (Red Hat package)
ignition (Red Hat package)
ignition
ignition-dracut-grub2
ignition-debuginfo
openvswitch2.17 (Red Hat package)
container-selinux (Red Hat package)
python-cachetools (Red Hat package)
python-pycadf (Red Hat package)
python-ironic-prometheus-exporter (Red Hat package)
python-bcrypt (Red Hat package)
python-jsonschema (Red Hat package)
python-statsd (Red Hat package)
python-paste (Red Hat package)
python-redis (Red Hat package)
python-singledispatch (Red Hat package)
python-osprofiler (Red Hat package)
python-stevedore (Red Hat package)
python-glanceclient (Red Hat package)
python-cliff (Red Hat package)
python-oslo-policy (Red Hat package)
python-swiftclient (Red Hat package)
criu (Red Hat package)
python-simplejson (Red Hat package)
python-sushy-oem-idrac (Red Hat package)
podman (Red Hat package)
python-oslo-context (Red Hat package)
python-sushy (Red Hat package)
python-oslo-serialization (Red Hat package)
python-keystoneclient (Red Hat package)
libslirp (Red Hat package)
python-decorator (Red Hat package)
pysnmp (Red Hat package)
python-keystoneauth1 (Red Hat package)
python-oslo-middleware (Red Hat package)
python-oslo-concurrency (Red Hat package)
python-oslo-log (Red Hat package)
python-pexpect (Red Hat package)
python-kombu (Red Hat package)
python-beautifulsoup4 (Red Hat package)
atomic-openshift-service-idler (Red Hat package)
openshift-kuryr (Red Hat package)
openshift-ansible (Red Hat package)
openshift (Red Hat package)
openshift-clients (Red Hat package)
python-oslo-utils (Red Hat package)
python-oslo-i18n (Red Hat package)
python-ironic-lib (Red Hat package)
rust-afterburn (Red Hat package)
python-pbr (Red Hat package)
python-tenacity (Red Hat package)
python-oslo-rootwrap (Red Hat package)
python-dracclient (Red Hat package)
python-cinderclient (Red Hat package)
openstack-ironic-python-agent (Red Hat package)
python-oslo-config (Red Hat package)
python-oslo-db (Red Hat package)
python-keystonemiddleware (Red Hat package)
openstack-ironic-inspector (Red Hat package)
python-oslo-messaging (Red Hat package)
systemd-presets-common-SUSE
openstack-ironic (Red Hat package)
python-packaging (Red Hat package)
python-keyring (Red Hat package)
ovn22.03 (Red Hat package)
ovn22.06 (Red Hat package)
Red Hat OpenShift Container Platform
Oracle Linux
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Desktop
openSUSE Leap
Fedora
toolbox (Red Hat package)
python-ifaddr (Red Hat package)
python-wcwidth (Red Hat package)
python-iso8601 (Red Hat package)
python-zake (Red Hat package)
python-sqlparse (Red Hat package)
rust-bootupd (Red Hat package)
python-oslo-metrics (Red Hat package)
python-logutils (Red Hat package)
python-colorama (Red Hat package)
python-greenlet (Red Hat package)
python-zipp (Red Hat package)
python-tempita (Red Hat package)
python-msgpack (Red Hat package)
python-prometheus_client (Red Hat package)
python-repoze-lru (Red Hat package)
python-simplegeneric (Red Hat package)
python-dataclasses (Red Hat package)
python-pint (Red Hat package)
python-wsme (Red Hat package)
python-scciclient (Red Hat package)
python-voluptuous (Red Hat package)
python-migrate (Red Hat package)
python-fasteners (Red Hat package)
butane (Red Hat package)
coreos-installer (Red Hat package)
python-pyrsistent (Red Hat package)
console-login-helper-messages (Red Hat package)
python-zeroconf (Red Hat package)
python-hardware (Red Hat package)
python-openstacksdk (Red Hat package)
containernetworking-plugins (Red Hat package)
python-funcsigs (Red Hat package)
python-yappi (Red Hat package)
python-editor (Red Hat package)
libsodium (Red Hat package)
python-flask (Red Hat package)
runc (Red Hat package)
python-dogpile-cache (Red Hat package)
slirp4netns (Red Hat package)
python-rfc3986 (Red Hat package)
python-retrying (Red Hat package)
python-jsonpath-rw (Red Hat package)
python-vine (Red Hat package)
python-pynacl (Red Hat package)
python-pecan (Red Hat package)
python-warlock (Red Hat package)
python-requestsexceptions (Red Hat package)
python-appdirs (Red Hat package)
crun (Red Hat package)
python-alembic (Red Hat package)
python-oslo-upgradecheck (Red Hat package)
skopeo (Red Hat package)
python-pyperclip (Red Hat package)
python-os-service-types (Red Hat package)
python-importlib-metadata (Red Hat package)
python-webob (Red Hat package)
fuse-overlayfs (Red Hat package)
python-pycdlib (Red Hat package)
python-wrapt (Red Hat package)
python-six (Red Hat package)
containers-common (Red Hat package)
buildah (Red Hat package)
cri-o (Red Hat package)
cri-tools (Red Hat package)
python-memcached (Red Hat package)
python-waitress (Red Hat package)
python-paste-deploy (Red Hat package)
python-werkzeug (Red Hat package)
python-webtest (Red Hat package)
python-soupsieve (Red Hat package)
conmon (Red Hat package)
haproxy (Red Hat package)
pyparsing (Red Hat package)
python-SecretStorage (Red Hat package)
python-munch (Red Hat package)
python-futurist (Red Hat package)
python-routes (Red Hat package)
kata-containers (Red Hat package)
python-automaton (Red Hat package)
python-debtcollector (Red Hat package)
python-osc-lib (Red Hat package)
python-amqp (Red Hat package)
python-oslo-versionedobjects (Red Hat package)
python-os-traits (Red Hat package)
python-kazoo (Red Hat package)
python-oslo-service (Red Hat package)
python-oslo-cache (Red Hat package)
python-construct (Red Hat package)
python-tooz (Red Hat package)
python-proliantutils (Red Hat package)
ignition (Red Hat package)
ignition
ignition-dracut-grub2
ignition-debuginfo
openvswitch2.17 (Red Hat package)
container-selinux (Red Hat package)
python-cachetools (Red Hat package)
python-pycadf (Red Hat package)
python-ironic-prometheus-exporter (Red Hat package)
python-bcrypt (Red Hat package)
python-jsonschema (Red Hat package)
python-statsd (Red Hat package)
python-paste (Red Hat package)
python-redis (Red Hat package)
python-singledispatch (Red Hat package)
python-osprofiler (Red Hat package)
python-stevedore (Red Hat package)
python-glanceclient (Red Hat package)
python-cliff (Red Hat package)
python-oslo-policy (Red Hat package)
python-swiftclient (Red Hat package)
criu (Red Hat package)
python-simplejson (Red Hat package)
python-sushy-oem-idrac (Red Hat package)
podman (Red Hat package)
python-oslo-context (Red Hat package)
python-sushy (Red Hat package)
python-oslo-serialization (Red Hat package)
python-keystoneclient (Red Hat package)
libslirp (Red Hat package)
python-decorator (Red Hat package)
pysnmp (Red Hat package)
python-keystoneauth1 (Red Hat package)
python-oslo-middleware (Red Hat package)
python-oslo-concurrency (Red Hat package)
python-oslo-log (Red Hat package)
python-pexpect (Red Hat package)
python-kombu (Red Hat package)
python-beautifulsoup4 (Red Hat package)
atomic-openshift-service-idler (Red Hat package)
openshift-kuryr (Red Hat package)
openshift-ansible (Red Hat package)
openshift (Red Hat package)
openshift-clients (Red Hat package)
python-oslo-utils (Red Hat package)
python-oslo-i18n (Red Hat package)
python-ironic-lib (Red Hat package)
rust-afterburn (Red Hat package)
python-pbr (Red Hat package)
python-tenacity (Red Hat package)
python-oslo-rootwrap (Red Hat package)
python-dracclient (Red Hat package)
python-cinderclient (Red Hat package)
openstack-ironic-python-agent (Red Hat package)
python-oslo-config (Red Hat package)
python-oslo-db (Red Hat package)
python-keystonemiddleware (Red Hat package)
openstack-ironic-inspector (Red Hat package)
python-oslo-messaging (Red Hat package)
systemd-presets-common-SUSE
openstack-ironic (Red Hat package)
python-packaging (Red Hat package)
python-keyring (Red Hat package)
ovn22.03 (Red Hat package)
ovn22.06 (Red Hat package)
Red Hat OpenShift Container Platform
How to mitigate CVE-2022-1706
Install updates from vendor's website.
Ignition - update to 2.14.0
toolbox (Red Hat package) - update to 0.0.9-1.rhaos4.11.el8
python-ifaddr (Red Hat package) - update to 0.1.6-6.el8
python-wcwidth (Red Hat package) - update to 0.1.7-15.el8
python-iso8601 (Red Hat package) - update to 0.1.12-9.el8
python-zake (Red Hat package) - update to 0.2.2-19.el8
python-sqlparse (Red Hat package) - update to 0.2.4-10.el8
rust-bootupd (Red Hat package) - update to 0.2.5-3.rhaos4.11.el8
python-oslo-metrics (Red Hat package) - update to 0.3.0-0.20220216012738.43eee50.el8
python-logutils (Red Hat package) - update to 0.3.5-7.1.el8
python-colorama (Red Hat package) - update to 0.4.1-2.el8
python-greenlet (Red Hat package) - update to 0.4.14-6.el8
python-zipp (Red Hat package) - update to 0.5.1-3.el8
python-tempita (Red Hat package) - update to 0.5.1-25.el8
python-msgpack (Red Hat package) - update to 0.6.2-2.el8
python-prometheus_client (Red Hat package) - update to 0.7.1-3.el8
python-repoze-lru (Red Hat package) - update to 0.7-7.el8
python-simplegeneric (Red Hat package) - update to 0.8.1-18.el8
python-dataclasses (Red Hat package) - update to 0.8-3.el8
python-pint (Red Hat package) - update to 0.10.1-3.el8
python-wsme (Red Hat package) - update to 0.11.0-0.20220216004816.80bda90.el8
python-scciclient (Red Hat package) - update to 0.11.1-0.20220216020832.a84332b.el8
python-voluptuous (Red Hat package) - update to 0.11.7-3.el8
python-migrate (Red Hat package) - update to 0.13.0-2.el8
python-fasteners (Red Hat package) - update to 0.14.1-21.el8
butane (Red Hat package) - update to 0.15.0-1.rhaos4.11.el8
coreos-installer (Red Hat package) - update to 0.15.0-2.rhaos4.11.el8
python-pyrsistent (Red Hat package) - update to 0.16.0-4.el8
console-login-helper-messages (Red Hat package) - update to 0.20.3-2.rhaos4.11.el8
python-zeroconf (Red Hat package) - update to 0.24.4-2.el8
python-hardware (Red Hat package) - update to 0.29.0-0.20220216015636.7662a1d.el8
python-openstacksdk (Red Hat package) - update to 0.61.0-0.20220509201549.26c9bc2.el8
containernetworking-plugins (Red Hat package) - update to 1.0.1-5.rhaos4.11.el8
python-funcsigs (Red Hat package) - update to 1.0.2-17.el8
python-yappi (Red Hat package) - update to 1.0-3.el8
python-editor (Red Hat package) - update to 1.0.4-5.el8
libsodium (Red Hat package) - update to 1.0.16-5.el8
python-flask (Red Hat package) - update to 1.1.1-2.el8
runc (Red Hat package) - update to 1.1.2-1.rhaos4.11.el8
python-dogpile-cache (Red Hat package) - update to 1.1.2-2.el8
slirp4netns (Red Hat package) - update to 1.1.8-1.rhaos4.11.el8
python-rfc3986 (Red Hat package) - update to 1.2.0-6.el8
python-retrying (Red Hat package) - update to 1.2.3-22.el8
python-jsonpath-rw (Red Hat package) - update to 1.2.3-23.el8
python-vine (Red Hat package) - update to 1.3.0-5.el8
python-pynacl (Red Hat package) - update to 1.3.0-6.el8
python-pecan (Red Hat package) - update to 1.3.2-10.el8
python-warlock (Red Hat package) - update to 1.3.3-2.el8
python-requestsexceptions (Red Hat package) - update to 1.4.0-0.20220215231659.d7ac0ff.el8
python-appdirs (Red Hat package) - update to 1.4.0-8.el8
crun (Red Hat package) - update to 1.4.2-1.rhaos4.11.el8
python-alembic (Red Hat package) - update to 1.4.2-6.el8
python-oslo-upgradecheck (Red Hat package) - update to 1.5.0-0.20220509195112.1559e03.el8
skopeo (Red Hat package) - update to 1.5.2-3.rhaos4.11.el8
python-pyperclip (Red Hat package) - update to 1.6.4-7.el8
python-os-service-types (Red Hat package) - update to 1.7.0-0.20220215231659.0b2f473.el8
python-importlib-metadata (Red Hat package) - update to 1.7.0-2.el8
python-webob (Red Hat package) - update to 1.8.5-5.el8
fuse-overlayfs (Red Hat package) - update to 1.9-1.rhaos4.11.el8
python-pycdlib (Red Hat package) - update to 1.11.0-4.el8
python-wrapt (Red Hat package) - update to 1.11.2-4.el8
python-six (Red Hat package) - update to 1.15.0-3.el8
containers-common (Red Hat package) - update to 1-21.rhaos4.11.el8
buildah (Red Hat package) - update to 1.23.4-2.el8
cri-o (Red Hat package) - update to 1.24.1-11.rhaos4.11.gitb0d2ef3.el8
cri-tools (Red Hat package) - update to 1.24.2-4.1.el8
python-memcached (Red Hat package) - update to 1.58-12.el8
python-waitress (Red Hat package) - update to 2.0.0-2.el8
python-paste-deploy (Red Hat package) - update to 2.0.1-5.el8
python-werkzeug (Red Hat package) - update to 2.0.3-1.el8
python-webtest (Red Hat package) - update to 2.0.33-5.el8
python-soupsieve (Red Hat package) - update to 2.1.0-2.el8
conmon (Red Hat package) - update to 2.1.2-2.rhaos4.11.el8
haproxy (Red Hat package) - update to 2.2.24-1.el8
pyparsing (Red Hat package) - update to 2.3.1-2.el8
python-SecretStorage (Red Hat package) - update to 2.3.1-9.el8
python-munch (Red Hat package) - update to 2.3.2-7.el8
python-futurist (Red Hat package) - update to 2.4.1-0.20220509215250.159d752.el8
python-routes (Red Hat package) - update to 2.4.1-12.el8
kata-containers (Red Hat package) - update to 2.4.2-1.el8
python-automaton (Red Hat package) - update to 2.5.0-0.20220509195848.aaca110.el8
python-debtcollector (Red Hat package) - update to 2.5.0-0.20220509211533.a6b46c5.el8
python-osc-lib (Red Hat package) - update to 2.5.0-0.20220509211843.78d276e.el8
python-amqp (Red Hat package) - update to 2.5.2-8.el8
python-oslo-versionedobjects (Red Hat package) - update to 2.6.0-0.20220509202736.25d34d6.el8
python-os-traits (Red Hat package) - update to 2.7.0-0.20220509205801.3d1dbf0.el8
python-kazoo (Red Hat package) - update to 2.7.0-2.el8
python-oslo-service (Red Hat package) - update to 2.8.0-0.20220509203713.6552b9a.el8
python-oslo-cache (Red Hat package) - update to 2.8.1-0.20220216000746.40946a9.el8
python-construct (Red Hat package) - update to 2.10.56-2.el8
python-tooz (Red Hat package) - update to 2.11.1-0.20220509215238.96f91b9.el8
python-proliantutils (Red Hat package) - update to 2.13.2-0.20220509214147.8c7b6b1.el8
ignition (Red Hat package) - addressed in versions 2.14.0-1.el9, 2.14.0-3.rhaos4.11.el8
ignition - addressed in versions 2.14.0-1.fc34, 2.14.0-1.fc35, 2.14.0-1.fc36
ignition-dracut-grub2 - addressed in versions 2.14.0-150300.4.7.1, 2.14.0-150300.6.7.1
ignition-debuginfo - addressed in versions 2.14.0-150300.4.7.1, 2.14.0-150300.6.7.1
ignition - addressed in versions 2.14.0-150300.4.7.1, 2.14.0-150300.6.7.1
openvswitch2.17 (Red Hat package) - update to 2.17.0-22.el8fdp
container-selinux (Red Hat package) - update to 2.188.0-1.rhaos4.11.el8
python-cachetools (Red Hat package) - update to 3.1.0-3.el8
python-pycadf (Red Hat package) - update to 3.1.1-0.20220215232623.4179996.el8
python-ironic-prometheus-exporter (Red Hat package) - update to 3.1.1-0.20220324125409.db1a824.el8
python-bcrypt (Red Hat package) - update to 3.1.6-3.el8
python-jsonschema (Red Hat package) - update to 3.2.0-6.el8
python-statsd (Red Hat package) - update to 3.2.1-17.el8
python-paste (Red Hat package) - update to 3.2.4-2.el8
python-redis (Red Hat package) - update to 3.3.8-2.el8
python-singledispatch (Red Hat package) - update to 3.4.0.3-19.el8
python-osprofiler (Red Hat package) - update to 3.4.3-0.20220509214403.3286301.el8
python-stevedore (Red Hat package) - update to 3.5.0-0.20220509195112.442f157.el8
python-glanceclient (Red Hat package) - update to 3.6.0-0.20220509212414.626c500.el8
python-cliff (Red Hat package) - update to 3.10.1-0.20220509200732.a04a48f.el8
python-oslo-policy (Red Hat package) - update to 3.12.1-0.20220509221328.9673a74.el8
python-swiftclient (Red Hat package) - update to 3.13.1-0.20220509204112.4989d94.el8
criu (Red Hat package) - update to 3.15-4.rhaos4.11.el8
python-simplejson (Red Hat package) - update to 3.17.0-2.el8
python-sushy-oem-idrac (Red Hat package) - update to 4.0.0-0.20220324125409.7b75e6e.el8
podman (Red Hat package) - update to 4.0.2-6.rhaos4.11.el8
python-oslo-context (Red Hat package) - update to 4.1.0-0.20220509205437.3400cc2.el8
python-sushy (Red Hat package) - update to 4.1.1-0.20220302175405.c769149.el8
python-oslo-serialization (Red Hat package) - update to 4.3.0-0.20220509195921.6910f75.el8
python-keystoneclient (Red Hat package) - update to 4.4.0-0.20220509200759.100253d.el8
libslirp (Red Hat package) - update to 4.4.0-2.rhaos4.11.el8
python-decorator (Red Hat package) - update to 4.4.0-6.el8
pysnmp (Red Hat package) - update to 4.4.8-3.el8
python-keystoneauth1 (Red Hat package) - update to 4.5.0-0.20220509213157.8da0a63.el8
python-oslo-middleware (Red Hat package) - update to 4.5.1-0.20220509203328.2f72b30.el8
python-oslo-concurrency (Red Hat package) - update to 4.5.1-0.20220509221157.145f060.el8
python-oslo-log (Red Hat package) - update to 4.6.0-0.20220216002407.41c8807.el8
python-pexpect (Red Hat package) - update to 4.6-3.el8
python-kombu (Red Hat package) - update to 4.6.6-8.el8
python-beautifulsoup4 (Red Hat package) - update to 4.9.3-2.el8
Red Hat OpenShift Container Platform - update to 4.11.0
atomic-openshift-service-idler (Red Hat package) - update to 4.11.0-202206222028.p0.g39cfc66.assembly.stream.el8
openshift-kuryr (Red Hat package) - update to 4.11.0-202206232036.p0.g66c0cec.assembly.stream.el8
openshift-ansible (Red Hat package) - update to 4.11.0-202206240216.p0.g9de1722.assembly.stream.el8
openshift (Red Hat package) - update to 4.11.0-202207082037.p0.g9546431.assembly.stream.el8
openshift-clients (Red Hat package) - update to 4.11.0-202207291716.p0.g7075089.assembly.stream.el8
python-oslo-utils (Red Hat package) - update to 4.13.0-0.20220509213520.de4429f.el8
python-oslo-i18n (Red Hat package) - update to 5.1.0-0.20220216011159.b031d17.el8
python-ironic-lib (Red Hat package) - update to 5.1.1-0.20220225151335.e205816.el8
rust-afterburn (Red Hat package) - update to 5.3.0-1.rhaos4.11.el8
python-pbr (Red Hat package) - update to 5.5.1-2.el8
python-tenacity (Red Hat package) - update to 6.2.0-2.el8
python-oslo-rootwrap (Red Hat package) - update to 6.3.1-0.20220509204453.1b1b960.el8
python-dracclient (Red Hat package) - update to 8.0.0-0.20220509201613.9c7499c.el8
python-cinderclient (Red Hat package) - update to 8.3.0-0.20220509212734.ee59b68.el8
openstack-ironic-python-agent (Red Hat package) - update to 8.6.1-0.20220623075054.1d50c23.el8
python-oslo-config (Red Hat package) - update to 8.8.0-0.20220509202553.64c82a0.el8
python-oslo-db (Red Hat package) - update to 9.1.0-0.20220216003829.be2cc6a.el8
python-keystonemiddleware (Red Hat package) - update to 9.4.0-0.20220509211054.8a05709.el8
openstack-ironic-inspector (Red Hat package) - update to 10.12.1-0.20220513095437.6dd37e5.el8
python-oslo-messaging (Red Hat package) - update to 12.13.0-0.20220509210748.2d090b5.el8
systemd-presets-common-SUSE - update to 15-150100.8.17.1
openstack-ironic (Red Hat package) - update to 20.2.1-0.20220628175043.b5ed57a.el8
python-packaging (Red Hat package) - update to 20.4-2.el8
python-keyring (Red Hat package) - update to 21.0.0-2.el8
ovn22.03 (Red Hat package) - update to 22.03.0-37.el8fdp
ovn22.06 (Red Hat package) - update to 22.06.0-27.el8fdp
toolbox (Red Hat package) - update to 0.0.9-1.rhaos4.11.el8
python-ifaddr (Red Hat package) - update to 0.1.6-6.el8
python-wcwidth (Red Hat package) - update to 0.1.7-15.el8
python-iso8601 (Red Hat package) - update to 0.1.12-9.el8
python-zake (Red Hat package) - update to 0.2.2-19.el8
python-sqlparse (Red Hat package) - update to 0.2.4-10.el8
rust-bootupd (Red Hat package) - update to 0.2.5-3.rhaos4.11.el8
python-oslo-metrics (Red Hat package) - update to 0.3.0-0.20220216012738.43eee50.el8
python-logutils (Red Hat package) - update to 0.3.5-7.1.el8
python-colorama (Red Hat package) - update to 0.4.1-2.el8
python-greenlet (Red Hat package) - update to 0.4.14-6.el8
python-zipp (Red Hat package) - update to 0.5.1-3.el8
python-tempita (Red Hat package) - update to 0.5.1-25.el8
python-msgpack (Red Hat package) - update to 0.6.2-2.el8
python-prometheus_client (Red Hat package) - update to 0.7.1-3.el8
python-repoze-lru (Red Hat package) - update to 0.7-7.el8
python-simplegeneric (Red Hat package) - update to 0.8.1-18.el8
python-dataclasses (Red Hat package) - update to 0.8-3.el8
python-pint (Red Hat package) - update to 0.10.1-3.el8
python-wsme (Red Hat package) - update to 0.11.0-0.20220216004816.80bda90.el8
python-scciclient (Red Hat package) - update to 0.11.1-0.20220216020832.a84332b.el8
python-voluptuous (Red Hat package) - update to 0.11.7-3.el8
python-migrate (Red Hat package) - update to 0.13.0-2.el8
python-fasteners (Red Hat package) - update to 0.14.1-21.el8
butane (Red Hat package) - update to 0.15.0-1.rhaos4.11.el8
coreos-installer (Red Hat package) - update to 0.15.0-2.rhaos4.11.el8
python-pyrsistent (Red Hat package) - update to 0.16.0-4.el8
console-login-helper-messages (Red Hat package) - update to 0.20.3-2.rhaos4.11.el8
python-zeroconf (Red Hat package) - update to 0.24.4-2.el8
python-hardware (Red Hat package) - update to 0.29.0-0.20220216015636.7662a1d.el8
python-openstacksdk (Red Hat package) - update to 0.61.0-0.20220509201549.26c9bc2.el8
containernetworking-plugins (Red Hat package) - update to 1.0.1-5.rhaos4.11.el8
python-funcsigs (Red Hat package) - update to 1.0.2-17.el8
python-yappi (Red Hat package) - update to 1.0-3.el8
python-editor (Red Hat package) - update to 1.0.4-5.el8
libsodium (Red Hat package) - update to 1.0.16-5.el8
python-flask (Red Hat package) - update to 1.1.1-2.el8
runc (Red Hat package) - update to 1.1.2-1.rhaos4.11.el8
python-dogpile-cache (Red Hat package) - update to 1.1.2-2.el8
slirp4netns (Red Hat package) - update to 1.1.8-1.rhaos4.11.el8
python-rfc3986 (Red Hat package) - update to 1.2.0-6.el8
python-retrying (Red Hat package) - update to 1.2.3-22.el8
python-jsonpath-rw (Red Hat package) - update to 1.2.3-23.el8
python-vine (Red Hat package) - update to 1.3.0-5.el8
python-pynacl (Red Hat package) - update to 1.3.0-6.el8
python-pecan (Red Hat package) - update to 1.3.2-10.el8
python-warlock (Red Hat package) - update to 1.3.3-2.el8
python-requestsexceptions (Red Hat package) - update to 1.4.0-0.20220215231659.d7ac0ff.el8
python-appdirs (Red Hat package) - update to 1.4.0-8.el8
crun (Red Hat package) - update to 1.4.2-1.rhaos4.11.el8
python-alembic (Red Hat package) - update to 1.4.2-6.el8
python-oslo-upgradecheck (Red Hat package) - update to 1.5.0-0.20220509195112.1559e03.el8
skopeo (Red Hat package) - update to 1.5.2-3.rhaos4.11.el8
python-pyperclip (Red Hat package) - update to 1.6.4-7.el8
python-os-service-types (Red Hat package) - update to 1.7.0-0.20220215231659.0b2f473.el8
python-importlib-metadata (Red Hat package) - update to 1.7.0-2.el8
python-webob (Red Hat package) - update to 1.8.5-5.el8
fuse-overlayfs (Red Hat package) - update to 1.9-1.rhaos4.11.el8
python-pycdlib (Red Hat package) - update to 1.11.0-4.el8
python-wrapt (Red Hat package) - update to 1.11.2-4.el8
python-six (Red Hat package) - update to 1.15.0-3.el8
containers-common (Red Hat package) - update to 1-21.rhaos4.11.el8
buildah (Red Hat package) - update to 1.23.4-2.el8
cri-o (Red Hat package) - update to 1.24.1-11.rhaos4.11.gitb0d2ef3.el8
cri-tools (Red Hat package) - update to 1.24.2-4.1.el8
python-memcached (Red Hat package) - update to 1.58-12.el8
python-waitress (Red Hat package) - update to 2.0.0-2.el8
python-paste-deploy (Red Hat package) - update to 2.0.1-5.el8
python-werkzeug (Red Hat package) - update to 2.0.3-1.el8
python-webtest (Red Hat package) - update to 2.0.33-5.el8
python-soupsieve (Red Hat package) - update to 2.1.0-2.el8
conmon (Red Hat package) - update to 2.1.2-2.rhaos4.11.el8
haproxy (Red Hat package) - update to 2.2.24-1.el8
pyparsing (Red Hat package) - update to 2.3.1-2.el8
python-SecretStorage (Red Hat package) - update to 2.3.1-9.el8
python-munch (Red Hat package) - update to 2.3.2-7.el8
python-futurist (Red Hat package) - update to 2.4.1-0.20220509215250.159d752.el8
python-routes (Red Hat package) - update to 2.4.1-12.el8
kata-containers (Red Hat package) - update to 2.4.2-1.el8
python-automaton (Red Hat package) - update to 2.5.0-0.20220509195848.aaca110.el8
python-debtcollector (Red Hat package) - update to 2.5.0-0.20220509211533.a6b46c5.el8
python-osc-lib (Red Hat package) - update to 2.5.0-0.20220509211843.78d276e.el8
python-amqp (Red Hat package) - update to 2.5.2-8.el8
python-oslo-versionedobjects (Red Hat package) - update to 2.6.0-0.20220509202736.25d34d6.el8
python-os-traits (Red Hat package) - update to 2.7.0-0.20220509205801.3d1dbf0.el8
python-kazoo (Red Hat package) - update to 2.7.0-2.el8
python-oslo-service (Red Hat package) - update to 2.8.0-0.20220509203713.6552b9a.el8
python-oslo-cache (Red Hat package) - update to 2.8.1-0.20220216000746.40946a9.el8
python-construct (Red Hat package) - update to 2.10.56-2.el8
python-tooz (Red Hat package) - update to 2.11.1-0.20220509215238.96f91b9.el8
python-proliantutils (Red Hat package) - update to 2.13.2-0.20220509214147.8c7b6b1.el8
ignition (Red Hat package) - addressed in versions 2.14.0-1.el9, 2.14.0-3.rhaos4.11.el8
ignition - addressed in versions 2.14.0-1.fc34, 2.14.0-1.fc35, 2.14.0-1.fc36
ignition-dracut-grub2 - addressed in versions 2.14.0-150300.4.7.1, 2.14.0-150300.6.7.1
ignition-debuginfo - addressed in versions 2.14.0-150300.4.7.1, 2.14.0-150300.6.7.1
ignition - addressed in versions 2.14.0-150300.4.7.1, 2.14.0-150300.6.7.1
openvswitch2.17 (Red Hat package) - update to 2.17.0-22.el8fdp
container-selinux (Red Hat package) - update to 2.188.0-1.rhaos4.11.el8
python-cachetools (Red Hat package) - update to 3.1.0-3.el8
python-pycadf (Red Hat package) - update to 3.1.1-0.20220215232623.4179996.el8
python-ironic-prometheus-exporter (Red Hat package) - update to 3.1.1-0.20220324125409.db1a824.el8
python-bcrypt (Red Hat package) - update to 3.1.6-3.el8
python-jsonschema (Red Hat package) - update to 3.2.0-6.el8
python-statsd (Red Hat package) - update to 3.2.1-17.el8
python-paste (Red Hat package) - update to 3.2.4-2.el8
python-redis (Red Hat package) - update to 3.3.8-2.el8
python-singledispatch (Red Hat package) - update to 3.4.0.3-19.el8
python-osprofiler (Red Hat package) - update to 3.4.3-0.20220509214403.3286301.el8
python-stevedore (Red Hat package) - update to 3.5.0-0.20220509195112.442f157.el8
python-glanceclient (Red Hat package) - update to 3.6.0-0.20220509212414.626c500.el8
python-cliff (Red Hat package) - update to 3.10.1-0.20220509200732.a04a48f.el8
python-oslo-policy (Red Hat package) - update to 3.12.1-0.20220509221328.9673a74.el8
python-swiftclient (Red Hat package) - update to 3.13.1-0.20220509204112.4989d94.el8
criu (Red Hat package) - update to 3.15-4.rhaos4.11.el8
python-simplejson (Red Hat package) - update to 3.17.0-2.el8
python-sushy-oem-idrac (Red Hat package) - update to 4.0.0-0.20220324125409.7b75e6e.el8
podman (Red Hat package) - update to 4.0.2-6.rhaos4.11.el8
python-oslo-context (Red Hat package) - update to 4.1.0-0.20220509205437.3400cc2.el8
python-sushy (Red Hat package) - update to 4.1.1-0.20220302175405.c769149.el8
python-oslo-serialization (Red Hat package) - update to 4.3.0-0.20220509195921.6910f75.el8
python-keystoneclient (Red Hat package) - update to 4.4.0-0.20220509200759.100253d.el8
libslirp (Red Hat package) - update to 4.4.0-2.rhaos4.11.el8
python-decorator (Red Hat package) - update to 4.4.0-6.el8
pysnmp (Red Hat package) - update to 4.4.8-3.el8
python-keystoneauth1 (Red Hat package) - update to 4.5.0-0.20220509213157.8da0a63.el8
python-oslo-middleware (Red Hat package) - update to 4.5.1-0.20220509203328.2f72b30.el8
python-oslo-concurrency (Red Hat package) - update to 4.5.1-0.20220509221157.145f060.el8
python-oslo-log (Red Hat package) - update to 4.6.0-0.20220216002407.41c8807.el8
python-pexpect (Red Hat package) - update to 4.6-3.el8
python-kombu (Red Hat package) - update to 4.6.6-8.el8
python-beautifulsoup4 (Red Hat package) - update to 4.9.3-2.el8
Red Hat OpenShift Container Platform - update to 4.11.0
atomic-openshift-service-idler (Red Hat package) - update to 4.11.0-202206222028.p0.g39cfc66.assembly.stream.el8
openshift-kuryr (Red Hat package) - update to 4.11.0-202206232036.p0.g66c0cec.assembly.stream.el8
openshift-ansible (Red Hat package) - update to 4.11.0-202206240216.p0.g9de1722.assembly.stream.el8
openshift (Red Hat package) - update to 4.11.0-202207082037.p0.g9546431.assembly.stream.el8
openshift-clients (Red Hat package) - update to 4.11.0-202207291716.p0.g7075089.assembly.stream.el8
python-oslo-utils (Red Hat package) - update to 4.13.0-0.20220509213520.de4429f.el8
python-oslo-i18n (Red Hat package) - update to 5.1.0-0.20220216011159.b031d17.el8
python-ironic-lib (Red Hat package) - update to 5.1.1-0.20220225151335.e205816.el8
rust-afterburn (Red Hat package) - update to 5.3.0-1.rhaos4.11.el8
python-pbr (Red Hat package) - update to 5.5.1-2.el8
python-tenacity (Red Hat package) - update to 6.2.0-2.el8
python-oslo-rootwrap (Red Hat package) - update to 6.3.1-0.20220509204453.1b1b960.el8
python-dracclient (Red Hat package) - update to 8.0.0-0.20220509201613.9c7499c.el8
python-cinderclient (Red Hat package) - update to 8.3.0-0.20220509212734.ee59b68.el8
openstack-ironic-python-agent (Red Hat package) - update to 8.6.1-0.20220623075054.1d50c23.el8
python-oslo-config (Red Hat package) - update to 8.8.0-0.20220509202553.64c82a0.el8
python-oslo-db (Red Hat package) - update to 9.1.0-0.20220216003829.be2cc6a.el8
python-keystonemiddleware (Red Hat package) - update to 9.4.0-0.20220509211054.8a05709.el8
openstack-ironic-inspector (Red Hat package) - update to 10.12.1-0.20220513095437.6dd37e5.el8
python-oslo-messaging (Red Hat package) - update to 12.13.0-0.20220509210748.2d090b5.el8
systemd-presets-common-SUSE - update to 15-150100.8.17.1
openstack-ironic (Red Hat package) - update to 20.2.1-0.20220628175043.b5ed57a.el8
python-packaging (Red Hat package) - update to 20.4-2.el8
python-keyring (Red Hat package) - update to 21.0.0-2.el8
ovn22.03 (Red Hat package) - update to 22.03.0-37.el8fdp
ovn22.06 (Red Hat package) - update to 22.06.0-27.el8fdp
External References
Related Security Bulletins
- Improper access control in CoreOS Ignition
- SUSE update for ignition
- SUSE update for ignition
- Multiple vulnerabilities in OpenShift Container Platform 4.11
- SUSE update for systemd-presets-common-SUSE
- Multiple vulnerabilities in OpenShift Container Platform 4.11
- Red Hat Enterprise Linux 9 update for ignition
- Multiple vulnerabilities in Oracle Linux
- Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.11 packages
- Fedora 36 update for ignition
- Fedora 35 update for ignition
- Fedora 34 update for ignition