Inconsistent interpretation of HTTP requests in HAProxy - CVE-2023-25725

 

Inconsistent interpretation of HTTP requests in HAProxy - CVE-2023-25725

Published: February 16, 2023


Vulnerability identifier: #VU72334
CSH Severity: Medium
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-25725
CWE-ID: CWE-444
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform HTTP request smuggling attacks.

The vulnerability exists due to improper validation of HTTP/1 requests. A remote attacker can send a specially crafted HTTP request with empty fields, which could be used to truncate the list of HTTP headers and thus make some headers disappear after being parsed and processed for HTTP/1.0 and HTTP/1.1

Successful exploitation of vulnerability may allow an attacker to poison HTTP cache and perform phishing attacks.


Affected software

HAProxy
Oracle Linux
Debian Linux
openSUSE Leap Micro
SUSE Linux Enterprise Micro
Red Hat Enterprise Linux for x86_64
Anolis OS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64 - Extended Update Support
SUSE Linux Enterprise High Availability
openSUSE Leap
Ubuntu
openEuler
Fedora
Multicluster Engine for Kubernetes
Red Hat OpenShift Container Platform
Red Hat Ceph Storage
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
haproxy (Ubuntu package)
python-tox-current-env (Red Hat package)
python-testrepository (Red Hat package)
python-nose-cover3 (Red Hat package)
toolbox (Red Hat package)
python-requests-unixsocket (Red Hat package)
python-ifaddr (Red Hat package)
python-wcwidth (Red Hat package)
python-iso8601 (Red Hat package)
python-m2r (Red Hat package)
python-zake (Red Hat package)
python-sqlparse (Red Hat package)
python-oslo-metrics (Red Hat package)
python-smi (Red Hat package)
python-logutils (Red Hat package)
python-entrypoints (Red Hat package)
python-colorama (Red Hat package)
python-zipp (Red Hat package)
conmon-rs (Red Hat package)
python-tempita (Red Hat package)
python-pyroute2 (Red Hat package)
python-msgpack (Red Hat package)
python-trustme (Red Hat package)
python-defusedxml (Red Hat package)
python-prometheus_client (Red Hat package)
python-repoze-lru (Red Hat package)
python-simplegeneric (Red Hat package)
python-dataclasses (Red Hat package)
python-mistune (Red Hat package)
crudini (Red Hat package)
python-pint (Red Hat package)
python-wsme (Red Hat package)
python-lockfile (Red Hat package)
python-voluptuous (Red Hat package)
python-scciclient (Red Hat package)
python-migrate (Red Hat package)
python-pyrsistent (Red Hat package)
tini (Red Hat package)
coreos-installer (Red Hat package)
python-fasteners (Red Hat package)
python-pytest-xprocess (Red Hat package)
python-zeroconf (Red Hat package)
python-hardware (Red Hat package)
python-eventlet (Red Hat package)
python-binary-memcached (Red Hat package)
python-openstacksdk (Red Hat package)
ansible-runner-http (Red Hat package)
python-linecache2 (Red Hat package)
python-hacking (Red Hat package)
python-werkzeug (Red Hat package)
containernetworking-plugins (Red Hat package)
python-funcsigs (Red Hat package)
python-editor (Red Hat package)
python-pretend (Red Hat package)
python-mox3 (Red Hat package)
python-kiwisolver (Red Hat package)
python-unittest2 (Red Hat package)
python-flask (Red Hat package)
python-greenlet (Red Hat package)
python-dogpile-cache (Red Hat package)
runc (Red Hat package)
python-rfc3986 (Red Hat package)
python-jsonpath-rw (Red Hat package)
python-yappi (Red Hat package)
python-pecan (Red Hat package)
python-warlock (Red Hat package)
python-requestsexceptions (Red Hat package)
python-cmd2 (Red Hat package)
python-traceback2 (Red Hat package)
python-ddt (Red Hat package)
python-alembic (Red Hat package)
python-kafka (Red Hat package)
ansible-runner (Red Hat package)
python-sqlalchemy (Red Hat package)
python-case (Red Hat package)
python-pyghmi (Red Hat package)
python-pyperclip (Red Hat package)
python-os-service-types (Red Hat package)
python-importlib-metadata (Red Hat package)
crun (Red Hat package)
python-webob (Red Hat package)
skopeo (Red Hat package)
fuse-overlayfs (Red Hat package)
python-pycdlib (Red Hat package)
python-wrapt (Red Hat package)
grpc (Red Hat package)
cri-o (Red Hat package)
cri-tools (Red Hat package)
buildah (Red Hat package)
containers-common (Red Hat package)
python-memcached (Red Hat package)
python-oslo-upgradecheck (Red Hat package)
python-markupsafe (Red Hat package)
python-waitress (Red Hat package)
python-testresources (Red Hat package)
python-itsdangerous (Red Hat package)
python-paste-deploy (Red Hat package)
haproxy-debugsource
haproxy-debuginfo
haproxy
python-webtest (Red Hat package)
python-os-client-config (Red Hat package)
python-uhashring (Red Hat package)
conmon (Red Hat package)
python-pytest-xdist (Red Hat package)
haproxy (Debian package)
nmstate (Red Hat package)
haproxy-help
haproxy (Red Hat package)
python-oslo-reports (Red Hat package)
python-SecretStorage (Red Hat package)
python-munch (Red Hat package)
python-futurist (Red Hat package)
python-routes (Red Hat package)
python-debtcollector (Red Hat package)
python-stestr (Red Hat package)
python-osc-lib (Red Hat package)
python-kazoo (Red Hat package)
python-os-traits (Red Hat package)
python-typeguard (Red Hat package)
python-construct (Red Hat package)
python-proliantutils (Red Hat package)
container-selinux (Red Hat package)
python-oslo-service (Red Hat package)
openvswitch3.0 (Red Hat package)
python-automaton (Red Hat package)
python-oslo-versionedobjects (Red Hat package)
kata-containers (Red Hat package)
python-oslo-cache (Red Hat package)
python-cachetools (Red Hat package)
openvswitch3.1 (Red Hat package)
python-pycadf (Red Hat package)
python-ironic-prometheus-exporter (Red Hat package)
python-bcrypt (Red Hat package)
python-tooz (Red Hat package)
python-jsonschema (Red Hat package)
python-statsd (Red Hat package)
python-paste (Red Hat package)
python-oslo-context (Red Hat package)
python-redis (Red Hat package)
python-singledispatch (Red Hat package)
python-osprofiler (Red Hat package)
python-pymemcache (Red Hat package)
python-oslo-policy (Red Hat package)
criu (Red Hat package)
python-simplejson (Red Hat package)
python-cliff (Red Hat package)
python-swiftclient (Red Hat package)
python-glanceclient (Red Hat package)
python-stevedore (Red Hat package)
python-oslo-serialization (Red Hat package)
libslirp (Red Hat package)
python-pyfakefs (Red Hat package)
python-decorator (Red Hat package)
python-oslotest (Red Hat package)
podman (Red Hat package)
python-sushy (Red Hat package)
pysnmp (Red Hat package)
python-oslo-log (Red Hat package)
python-pexpect (Red Hat package)
python-rsa (Red Hat package)
python-ironicclient (Red Hat package)
openshift (Red Hat package)
atomic-openshift-service-idler (Red Hat package)
openshift-clients (Red Hat package)
openshift4-aws-iso (Red Hat package)
openshift-ansible (Red Hat package)
openshift-kuryr (Red Hat package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
python-oslo-middleware (Red Hat package)
python-keystoneauth1 (Red Hat package)
python-sushy-oem-idrac (Red Hat package)
python-vine (Red Hat package)
python-keystoneclient (Red Hat package)
python-oslo-concurrency (Red Hat package)
python-amqp (Red Hat package)
python-oslo-i18n (Red Hat package)
python-ironic-lib (Red Hat package)
python-zope-interface (Red Hat package)
python-coverage (Red Hat package)
python-oslo-utils (Red Hat package)
python-tenacity (Red Hat package)
python-oslo-rootwrap (Red Hat package)
python-more-itertools (Red Hat package)
python-neutronclient (Red Hat package)
python-dracclient (Red Hat package)
python-oslo-config (Red Hat package)
python-oslo-db (Red Hat package)
python-cinderclient (Red Hat package)
openstack-ironic-python-agent (Red Hat package)
python-keystonemiddleware (Red Hat package)
openstack-ironic-inspector (Red Hat package)
python-oslo-messaging (Red Hat package)
python-service-identity (Red Hat package)
python-gunicorn (Red Hat package)
python-packaging (Red Hat package)
python-virtualenv (Red Hat package)
python-keyring (Red Hat package)
python-gevent (Red Hat package)
openstack-ironic (Red Hat package)
ovn22.12 (Red Hat package)
ovn23.03 (Red Hat package)
python-kubernetes (Red Hat package)
openstack-macros (Red Hat package)
IBM Security Verify Access

How to mitigate CVE-2023-25725

Install updates from vendor's website.

HAProxy - addressed in versions 2.0.31, 2.2.29, 2.4.22, 2.5.12, 2.6.9, 2.7.3
Multicluster Engine for Kubernetes - update to 2.2.4
Red Hat OpenShift Container Platform - addressed in versions 4.11.32, 4.11.35, 4.12.8, 4.13.0
haproxy (Ubuntu package) - addressed in versions Ubuntu Pro, 1.8.8-1ubuntu0.13, 2.0.29-0ubuntu1.3, 2.4.18-0ubuntu1.2, 2.4.18-1ubuntu1.2
python-tox-current-env (Red Hat package) - update to 0.0.6-1.el9
python-testrepository (Red Hat package) - update to 0.0.20-20.el9
python-nose-cover3 (Red Hat package) - update to 0.1.0-31.el9
toolbox (Red Hat package) - update to 0.1.2-1.rhaos4.13.el9
python-requests-unixsocket (Red Hat package) - addressed in versions 0.1.5-5.el8ar, 0.2.0-2.el9
python-ifaddr (Red Hat package) - addressed in versions 0.1.6-5.el8ost, 0.1.6-6.el9
python-wcwidth (Red Hat package) - update to 0.1.7-14.el8ost
python-iso8601 (Red Hat package) - update to 0.1.12-9.el9
python-m2r (Red Hat package) - update to 0.2.1-3.1.20190604git66f4a5a.el9
python-zake (Red Hat package) - update to 0.2.2-19.el9
python-sqlparse (Red Hat package) - update to 0.2.4-10.el9
python-oslo-metrics (Red Hat package) - addressed in versions 0.3.0-0.20211020174122.43eee50.el8, 0.5.0-0.20221128141719.fc22d0d.el9
python-smi (Red Hat package) - update to 0.3.4-10.el9
python-logutils (Red Hat package) - update to 0.3.5-7.1.el9
python-entrypoints (Red Hat package) - update to 0.3-8.el9
python-colorama (Red Hat package) - update to 0.4.1-2.el9
python-zipp (Red Hat package) - addressed in versions 0.5.1-2.el8ost, 0.5.1-3.el9
conmon-rs (Red Hat package) - update to 0.5.1-5.rhaos4.13.git.el9
python-tempita (Red Hat package) - update to 0.5.1-25.el9
python-pyroute2 (Red Hat package) - update to 0.5.13-1.el8ost
python-msgpack (Red Hat package) - addressed in versions 0.6.2-1.el8ost, 0.6.2-2.el9
python-trustme (Red Hat package) - update to 0.7.0-1.el9
python-defusedxml (Red Hat package) - update to 0.7.1-1.el9
python-prometheus_client (Red Hat package) - update to 0.7.1-3.el9
python-repoze-lru (Red Hat package) - update to 0.7-7.el9
python-simplegeneric (Red Hat package) - update to 0.8.1-18.el9
python-dataclasses (Red Hat package) - update to 0.8-2.el9
python-mistune (Red Hat package) - update to 0.8.3-15.1.el9
crudini (Red Hat package) - update to 0.9.3-4.el9
python-pint (Red Hat package) - addressed in versions 0.10.1-1.el8ost, 0.10.1-3.el9
python-wsme (Red Hat package) - update to 0.11.0-0.20221128135154.80bda90.el9
python-lockfile (Red Hat package) - update to 0.11.0-8.el8ar
python-voluptuous (Red Hat package) - update to 0.11.7-3.el9
python-scciclient (Red Hat package) - update to 0.12.3-0.20221128150506.0940a71.el9
python-migrate (Red Hat package) - update to 0.13.0-2.el9
python-pyrsistent (Red Hat package) - update to 0.16.0-3.el8ost
tini (Red Hat package) - update to 0.16.1-1.el8ar
coreos-installer (Red Hat package) - update to 0.17.0-1.rhaos4.13.el9
python-fasteners (Red Hat package) - update to 0.18-1.el9
python-pytest-xprocess (Red Hat package) - update to 0.18.1-4.el9
python-zeroconf (Red Hat package) - addressed in versions 0.24.4-1.el8ost, 0.24.4-2.el9
python-hardware (Red Hat package) - update to 0.30.0-0.20221128155150.f6ff0ed.el9
python-eventlet (Red Hat package) - addressed in versions 0.30.2-1.el8, 0.33.1-4.el9
python-binary-memcached (Red Hat package) - update to 0.31.1-1.el9
python-openstacksdk (Red Hat package) - update to 0.102.0-0.20221128160622.9a17781.el9
ansible-runner-http (Red Hat package) - update to 1.0.0-2.el8ar
python-linecache2 (Red Hat package) - update to 1.0.0-25.el9
python-hacking (Red Hat package) - update to 1.0.1-0.20210812104123.865398f.el9
python-werkzeug (Red Hat package) - addressed in versions 1.0.1-3.el8ost, 2.0.3-4.el9
containernetworking-plugins (Red Hat package) - update to 1.0.1-6.rhaos4.13.el8
python-funcsigs (Red Hat package) - update to 1.0.2-17.el9
python-editor (Red Hat package) - update to 1.0.4-5.el9
python-pretend (Red Hat package) - update to 1.0.8-19.el9
python-mox3 (Red Hat package) - update to 1.1.0-0.20210812114029.99a302f.el9
python-kiwisolver (Red Hat package) - update to 1.1.0-4.el9
python-unittest2 (Red Hat package) - update to 1.1.0-24.el9
python-flask (Red Hat package) - update to 1.1.1-1.el8ost
python-greenlet (Red Hat package) - update to 1.1.3-1.el9
python-dogpile-cache (Red Hat package) - update to 1.1.5-3.el9
runc (Red Hat package) - addressed in versions 1.1.6-3.rhaos4.13.el8, 1.1.6-3.rhaos4.13.el9
python-rfc3986 (Red Hat package) - update to 1.2.0-6.el9
python-jsonpath-rw (Red Hat package) - update to 1.2.3-23.el9
python-yappi (Red Hat package) - update to 1.3.1-2.el9
python-pecan (Red Hat package) - update to 1.3.2-10.el9
python-warlock (Red Hat package) - update to 1.3.3-2.el9
python-requestsexceptions (Red Hat package) - update to 1.4.0-0.20221128134625.d7ac0ff.el9
python-cmd2 (Red Hat package) - update to 1.4.0-1.1.el8
python-traceback2 (Red Hat package) - update to 1.4.0-25.el9
python-ddt (Red Hat package) - update to 1.4.2-1.el9
python-alembic (Red Hat package) - addressed in versions 1.4.2-5.el8ost, 1.6.0-1.el9
python-kafka (Red Hat package) - update to 1.4.3-3.el9
ansible-runner (Red Hat package) - update to 1.4.6-2.el8ar
python-sqlalchemy (Red Hat package) - update to 1.4.39-2.el9
python-case (Red Hat package) - update to 1.5.3-5.el9
python-pyghmi (Red Hat package) - update to 1.5.14-2.1.el8ost
python-pyperclip (Red Hat package) - update to 1.6.4-6.el8ost
python-os-service-types (Red Hat package) - update to 1.7.0-0.20221128134625.0b2f473.el9
python-importlib-metadata (Red Hat package) - addressed in versions 1.7.0-1.el8ost, 4.12.0-2.el9
crun (Red Hat package) - update to 1.8.4-1.rhaos4.13.el9
python-webob (Red Hat package) - update to 1.8.5-5.el9
skopeo (Red Hat package) - update to 1.10.0-1.rhaos4.13.el9
fuse-overlayfs (Red Hat package) - update to 1.10-2.rhaos4.13.el8
python-pycdlib (Red Hat package) - update to 1.11.0-3.el8
python-wrapt (Red Hat package) - update to 1.11.2-4.el9
grpc (Red Hat package) - update to 1.18.0-4.el8ost
cri-o (Red Hat package) - addressed in versions 1.24.5-2.rhaos4.11.gitb007cb6.el8, 1.26.3-3.rhaos4.13.git641290e.el9
cri-tools (Red Hat package) - update to 1.26.0-1.el9
buildah (Red Hat package) - update to 1.29.1-1.rhaos4.13.el9
containers-common (Red Hat package) - update to 1-35.rhaos4.13.el9
python-memcached (Red Hat package) - update to 1.58-12.el9
python-oslo-upgradecheck (Red Hat package) - update to 2.0.0-0.20221128142932.b3a2b19.el9
python-markupsafe (Red Hat package) - update to 2.0.0-2.el9
python-waitress (Red Hat package) - update to 2.0.0-2.el9
python-testresources (Red Hat package) - update to 2.0.1-2.el9
python-itsdangerous (Red Hat package) - update to 2.0.1-2.el9
python-paste-deploy (Red Hat package) - addressed in versions 2.0.1-4.el8ost, 2.0.1-5.el9
haproxy-debugsource - addressed in versions 2.0.14-150100.8.27.1, 2.0.14-150200.11.15.1, 2.4.8+git0.d1f8d41e0-150400.3.10.1
haproxy-debuginfo - addressed in versions 2.0.14-150100.8.27.1, 2.0.14-150200.11.15.1, 2.4.8+git0.d1f8d41e0-150400.3.10.1
haproxy - addressed in versions 2.0.14-150100.8.27.1, 2.0.14-150200.11.15.1, 2.4.8+git0.d1f8d41e0-150400.3.10.1
python-webtest (Red Hat package) - update to 2.0.33-5.el9
python-os-client-config (Red Hat package) - update to 2.1.0-0.20210722194729.bc96c23.el9
python-uhashring (Red Hat package) - update to 2.1-2.el9
conmon (Red Hat package) - addressed in versions 2.1.7-1.rhaos4.13.el8, 2.1.7-1.rhaos4.13.el9
python-pytest-xdist (Red Hat package) - update to 2.2.1-1.el9
haproxy (Debian package) - update to 2.2.9-2+deb11u4
nmstate (Red Hat package) - update to 2.2.9-6.rhaos4.13.el8
haproxy-help - update to 2.2.16-4
haproxy-debugsource - update to 2.2.16-4
haproxy-debuginfo - update to 2.2.16-4
haproxy - update to 2.2.16-4
haproxy (Red Hat package) - addressed in versions 2.2.24-3.rhaos4.11.el8, 2.2.24-3.rhaos4.12.el8, 2.2.24-3.rhaos4.13.el8, 2.4.7-2.el9_0.2, 2.4.17-3.el9_1.2
python-oslo-reports (Red Hat package) - update to 2.3.0-0.20211012151507.f2799dc.el9
python-SecretStorage (Red Hat package) - update to 2.3.1-9.el9
python-munch (Red Hat package) - update to 2.3.2-7.el9
python-futurist (Red Hat package) - update to 2.4.1-0.20221128140910.159d752.el9
python-routes (Red Hat package) - update to 2.4.1-12.el9
haproxy - update to 2.4.17-3
haproxy - addressed in versions 2.4.22-2.fc36, 2.6.9-1.fc37
python-debtcollector (Red Hat package) - update to 2.5.0-0.20221128140303.a6b46c5.el9
python-stestr (Red Hat package) - update to 2.6.0-8.el9
python-osc-lib (Red Hat package) - update to 2.6.2-0.20221128150506.d438afa.el9
python-kazoo (Red Hat package) - update to 2.7.0-2.el9
python-os-traits (Red Hat package) - update to 2.9.0-0.20221128153153.fc91a78.el9
python-typeguard (Red Hat package) - update to 2.9.1-1.el9
python-construct (Red Hat package) - addressed in versions 2.10.56-1.el8ost, 2.10.56-2.el9
python-proliantutils (Red Hat package) - update to 2.14.0-0.20221128154535.de9759c.el9
container-selinux (Red Hat package) - addressed in versions 2.208.0-2.rhaos4.13.el8, 2.208.0-2.rhaos4.13.el9
python-oslo-service (Red Hat package) - update to 3.0.0-0.20221128144658.a27acfe.el9
openvswitch3.0 (Red Hat package) - update to 3.0.0-28.el9fdp
python-automaton (Red Hat package) - update to 3.0.1-0.20221128143847.0ea747e.el9
python-oslo-versionedobjects (Red Hat package) - update to 3.0.1-0.20221128145846.2b12029.el9
kata-containers (Red Hat package) - update to 3.0.2-5.el9
python-oslo-cache (Red Hat package) - update to 3.1.0-0.20221129203427.7fb06bc.el9
python-cachetools (Red Hat package) - update to 3.1.0-4.el9
openvswitch3.1 (Red Hat package) - update to 3.1.0-10.el9fdp
python-pycadf (Red Hat package) - update to 3.1.1-0.20221128135153.4179996.el9
python-ironic-prometheus-exporter (Red Hat package) - update to 3.1.1-0.20221128155706.eb27243.el9
python-bcrypt (Red Hat package) - update to 3.1.6-3.el9
python-tooz (Red Hat package) - update to 3.2.0-0.20221128162335.1a76dd6.el9
python-jsonschema (Red Hat package) - update to 3.2.0-5.el8ost
python-statsd (Red Hat package) - update to 3.2.1-20.el9
python-paste (Red Hat package) - update to 3.2.4-1.el8ost
python-oslo-context (Red Hat package) - addressed in versions 3.3.1-0.20211012152439.641a1e0.el8, 5.0.0-0.20221128142633.f388eb9.el9
python-redis (Red Hat package) - update to 3.3.8-2.el9
python-singledispatch (Red Hat package) - update to 3.4.0.3-19.el9
python-osprofiler (Red Hat package) - update to 3.4.3-0.20221128140710.3286301.el9
python-pymemcache (Red Hat package) - update to 3.5.0-1.el9
python-oslo-policy (Red Hat package) - addressed in versions 3.8.2-0.20211012161944.c7fd9f4.el8, 4.0.0-0.20221128143837.5bd767b.el9
criu (Red Hat package) - update to 3.15-4.rhaos4.11.el8
python-simplejson (Red Hat package) - update to 3.17.0-2.el9
python-cliff (Red Hat package) - update to 4.0.0-0.20221128185800.58c853d.el9
python-swiftclient (Red Hat package) - update to 4.1.0-0.20221128153149.662e530.el9
python-glanceclient (Red Hat package) - update to 4.1.0-0.20221128153803.f2999ce.el9
python-stevedore (Red Hat package) - update to 4.1.0-0.20221128161654.9eb8094.el9
python-oslo-serialization (Red Hat package) - addressed in versions 4.2.0-0.20211012151454.2b94a4f.el8, 5.0.0-0.20221128142424.dd2a819.el9
libslirp (Red Hat package) - update to 4.4.0-2.rhaos4.11.el8
python-pyfakefs (Red Hat package) - update to 4.4.0-4.el9
python-decorator (Red Hat package) - update to 4.4.0-6.el9
python-oslotest (Red Hat package) - update to 4.4.1-0.20210812115053.aaf3a72.el9
podman (Red Hat package) - addressed in versions 4.4.1-3.rhaos4.13.el8, 4.4.1-3.rhaos4.13.el9
python-sushy (Red Hat package) - update to 4.4.3-0.20230425095526.9f708cf.el9
pysnmp (Red Hat package) - update to 4.4.12-6.el9
python-oslo-log (Red Hat package) - addressed in versions 4.6.0-0.20211012154701.41c8807.el8, 5.0.0-0.20221128143137.6401da7.el9
python-pexpect (Red Hat package) - addressed in versions 4.6-2.el8ar, 4.6-3.el9
python-rsa (Red Hat package) - update to 4.7-1.el8
python-ironicclient (Red Hat package) - update to 4.9.0-0.20211209154934.6f1be06.el9
openshift (Red Hat package) - addressed in versions 4.11.0-202304042055.p0.g8f6c8a6.assembly.stream.el8, 4.12.0-202303132316.p0.geab9cc9.assembly.stream.el8, 4.12.0-202303132316.p0.geab9cc9.assembly.stream.el9, 4.13.0-202304211155.p0.gb404935.assembly.stream.el8, 4.13.0-202304211155.p0.gb404935.assembly.stream.el9
atomic-openshift-service-idler (Red Hat package) - update to 4.13.0-202303172327.p0.ga0f9090.assembly.stream.el8
openshift-clients (Red Hat package) - addressed in versions 4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el8, 4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el9
openshift4-aws-iso (Red Hat package) - update to 4.13.0-202304052215.p0.gd2acdd5.assembly.stream.el8
openshift-ansible (Red Hat package) - addressed in versions 4.13.0-202304171417.p0.gb4280f6.assembly.stream.el8, 4.13.0-202304171417.p0.gb4280f6.assembly.stream.el9
openshift-kuryr (Red Hat package) - update to 4.13.0-202304192042.p0.g4fe6bbc.assembly.stream.el8
kernel (Red Hat package) - addressed in versions 4.18.0-372.49.1.el8_6, 5.14.0-284.13.1.el9_2
kernel-rt (Red Hat package) - addressed in versions 4.18.0-372.49.1.rt7.206.el8_6, 4.18.0-372.51.1.rt7.208.el8_6, 5.14.0-284.13.1.rt14.298.el9_2
python-oslo-middleware (Red Hat package) - update to 5.0.0-0.20221128142027.51e1882.el9
python-keystoneauth1 (Red Hat package) - update to 5.0.0-0.20221128144522.2445a5d.el9
python-sushy-oem-idrac (Red Hat package) - update to 5.0.0-0.20221128204359.da9a0e4.el9
python-vine (Red Hat package) - update to 5.0.0-3.el9
python-keystoneclient (Red Hat package) - update to 5.0.1-0.20221128145838.bc8e9e7.el9
python-oslo-concurrency (Red Hat package) - update to 5.0.1-0.20221129205158.01cf2ff.el9
python-amqp (Red Hat package) - update to 5.0.6-1.el9
python-oslo-i18n (Red Hat package) - addressed in versions 5.1.0-0.20211012165753.b031d17.el8, 5.1.0-0.20221128135758.b031d17.el9
python-ironic-lib (Red Hat package) - update to 5.3.0-0.20221128152640.340a4b2.el9
python-zope-interface (Red Hat package) - update to 5.4.0-1.el9
python-coverage (Red Hat package) - update to 5.6-0.1b1.el9
python-oslo-utils (Red Hat package) - update to 6.0.1-0.20221128145135.760deb9.el9
python-tenacity (Red Hat package) - addressed in versions 6.2.0-1.el8ost, 6.2.0-2.el9
python-oslo-rootwrap (Red Hat package) - update to 6.3.1-0.20221128140202.1b1b960.el9
python-more-itertools (Red Hat package) - update to 7.2.0-3.el9
python-neutronclient (Red Hat package) - update to 7.6.0-0.20211012175718.983f0ab.el9
python-dracclient (Red Hat package) - update to 8.0.0-0.20221128135758.9c7499c.el9
python-oslo-config (Red Hat package) - addressed in versions 8.7.1-0.20211012155707.1a7bd66.el8, 9.0.0-0.20221128141318.9eaae04.el9
python-oslo-db (Red Hat package) - addressed in versions 9.1.0-0.20211020204148.be2cc6a.el8, 12.2.0-0.20221128163146.a191d2e.el9
python-cinderclient (Red Hat package) - update to 9.1.0-0.20221128151726.730a8c7.el9
openstack-ironic-python-agent (Red Hat package) - update to 9.2.0-0.20221128164006.a167075.el9
IBM Security Verify Access - update to 10.0.7.0
python-keystonemiddleware (Red Hat package) - update to 10.1.0-0.20221128152538.f7ac6a1.el9
openstack-ironic-inspector (Red Hat package) - update to 11.2.0-0.20221128164644.d83454c.el9
python-oslo-messaging (Red Hat package) - addressed in versions 12.9.1-0.20211020204149.f9de265.el8, 14.0.0-0.20221128151928.e44f286.el9
python-service-identity (Red Hat package) - update to 18.1.0-9.1.el9
python-gunicorn (Red Hat package) - update to 20.0.4-2.el9
python-packaging (Red Hat package) - update to 20.4-1.el8ost
python-virtualenv (Red Hat package) - update to 20.4.4-1.el9
python-keyring (Red Hat package) - update to 21.0.0-2.el9
python-gevent (Red Hat package) - update to 21.1.2-1.el9
openstack-ironic (Red Hat package) - update to 21.2.0-0.20221209211422.b70b418.el9
ovn22.12 (Red Hat package) - update to 22.12.0-25.el9fdp
ovn23.03 (Red Hat package) - update to 23.03.0-7.el9fdp
python-kubernetes (Red Hat package) - update to 25.3.0-1.el8
openstack-macros (Red Hat package) - update to 2020.1.2-1.el9

External References

Related Security Bulletins