Improper access control in OpenShift apiserver-library-go - CVE-2023-0229

 

Improper access control in OpenShift apiserver-library-go - CVE-2023-0229

Published: April 5, 2023


Vulnerability identifier: #VU74481
CSH Severity: Low
CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-0229
CWE-ID: CWE-284
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote user to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions. A remote user can set the seccomp profile for pods they control to "unconfined." By default, the seccomp profile used in the restricted-v2 Security Context Constraint (SCC) is "runtime/default," allowing users to disable seccomp for pods they can create and modify.


Affected software

OpenShift apiserver-library-go
python-tox-current-env (Red Hat package)
python-testrepository (Red Hat package)
python-nose-cover3 (Red Hat package)
toolbox (Red Hat package)
python-requests-unixsocket (Red Hat package)
python-ifaddr (Red Hat package)
python-wcwidth (Red Hat package)
python-iso8601 (Red Hat package)
python-m2r (Red Hat package)
python-zake (Red Hat package)
python-sqlparse (Red Hat package)
python-oslo-metrics (Red Hat package)
python-smi (Red Hat package)
python-logutils (Red Hat package)
python-entrypoints (Red Hat package)
python-colorama (Red Hat package)
python-zipp (Red Hat package)
conmon-rs (Red Hat package)
python-tempita (Red Hat package)
python-pyroute2 (Red Hat package)
python-msgpack (Red Hat package)
python-trustme (Red Hat package)
python-defusedxml (Red Hat package)
python-prometheus_client (Red Hat package)
python-repoze-lru (Red Hat package)
python-simplegeneric (Red Hat package)
python-dataclasses (Red Hat package)
python-mistune (Red Hat package)
crudini (Red Hat package)
python-pint (Red Hat package)
python-wsme (Red Hat package)
python-lockfile (Red Hat package)
python-voluptuous (Red Hat package)
python-scciclient (Red Hat package)
python-migrate (Red Hat package)
python-pyrsistent (Red Hat package)
tini (Red Hat package)
coreos-installer (Red Hat package)
python-fasteners (Red Hat package)
python-pytest-xprocess (Red Hat package)
python-zeroconf (Red Hat package)
python-hardware (Red Hat package)
python-eventlet (Red Hat package)
python-binary-memcached (Red Hat package)
python-openstacksdk (Red Hat package)
ansible-runner-http (Red Hat package)
python-linecache2 (Red Hat package)
python-hacking (Red Hat package)
python-werkzeug (Red Hat package)
containernetworking-plugins (Red Hat package)
python-funcsigs (Red Hat package)
python-editor (Red Hat package)
python-pretend (Red Hat package)
python-mox3 (Red Hat package)
python-kiwisolver (Red Hat package)
python-unittest2 (Red Hat package)
python-flask (Red Hat package)
python-greenlet (Red Hat package)
python-dogpile-cache (Red Hat package)
runc (Red Hat package)
python-rfc3986 (Red Hat package)
python-jsonpath-rw (Red Hat package)
python-yappi (Red Hat package)
python-pecan (Red Hat package)
python-warlock (Red Hat package)
python-requestsexceptions (Red Hat package)
python-cmd2 (Red Hat package)
python-traceback2 (Red Hat package)
python-ddt (Red Hat package)
python-alembic (Red Hat package)
python-kafka (Red Hat package)
ansible-runner (Red Hat package)
python-sqlalchemy (Red Hat package)
python-case (Red Hat package)
python-pyghmi (Red Hat package)
python-pyperclip (Red Hat package)
python-os-service-types (Red Hat package)
python-importlib-metadata (Red Hat package)
crun (Red Hat package)
python-webob (Red Hat package)
skopeo (Red Hat package)
fuse-overlayfs (Red Hat package)
python-pycdlib (Red Hat package)
python-wrapt (Red Hat package)
grpc (Red Hat package)
cri-tools (Red Hat package)
cri-o (Red Hat package)
buildah (Red Hat package)
containers-common (Red Hat package)
python-memcached (Red Hat package)
python-oslo-upgradecheck (Red Hat package)
python-waitress (Red Hat package)
python-markupsafe (Red Hat package)
python-itsdangerous (Red Hat package)
python-testresources (Red Hat package)
python-paste-deploy (Red Hat package)
python-webtest (Red Hat package)
python-os-client-config (Red Hat package)
python-uhashring (Red Hat package)
conmon (Red Hat package)
python-pytest-xdist (Red Hat package)
nmstate (Red Hat package)
haproxy (Red Hat package)
python-oslo-reports (Red Hat package)
python-SecretStorage (Red Hat package)
python-munch (Red Hat package)
python-futurist (Red Hat package)
python-routes (Red Hat package)
python-debtcollector (Red Hat package)
python-stestr (Red Hat package)
python-osc-lib (Red Hat package)
python-kazoo (Red Hat package)
python-os-traits (Red Hat package)
python-typeguard (Red Hat package)
python-construct (Red Hat package)
python-proliantutils (Red Hat package)
container-selinux (Red Hat package)
python-oslo-service (Red Hat package)
openvswitch3.0 (Red Hat package)
python-automaton (Red Hat package)
python-oslo-versionedobjects (Red Hat package)
kata-containers (Red Hat package)
python-oslo-cache (Red Hat package)
python-cachetools (Red Hat package)
openvswitch3.1 (Red Hat package)
python-pycadf (Red Hat package)
python-ironic-prometheus-exporter (Red Hat package)
python-bcrypt (Red Hat package)
python-tooz (Red Hat package)
python-jsonschema (Red Hat package)
python-statsd (Red Hat package)
python-paste (Red Hat package)
python-oslo-context (Red Hat package)
python-redis (Red Hat package)
python-singledispatch (Red Hat package)
python-osprofiler (Red Hat package)
python-pymemcache (Red Hat package)
python-oslo-policy (Red Hat package)
criu (Red Hat package)
python-simplejson (Red Hat package)
python-cliff (Red Hat package)
python-swiftclient (Red Hat package)
python-glanceclient (Red Hat package)
python-stevedore (Red Hat package)
python-oslo-serialization (Red Hat package)
libslirp (Red Hat package)
python-pyfakefs (Red Hat package)
python-decorator (Red Hat package)
python-oslotest (Red Hat package)
podman (Red Hat package)
python-sushy (Red Hat package)
pysnmp (Red Hat package)
python-oslo-log (Red Hat package)
python-pexpect (Red Hat package)
python-rsa (Red Hat package)
python-ironicclient (Red Hat package)
microshift (Red Hat package)
atomic-openshift-service-idler (Red Hat package)
openshift-clients (Red Hat package)
openshift4-aws-iso (Red Hat package)
openshift-ansible (Red Hat package)
openshift-kuryr (Red Hat package)
openshift (Red Hat package)
python-oslo-middleware (Red Hat package)
python-keystoneauth1 (Red Hat package)
python-sushy-oem-idrac (Red Hat package)
python-vine (Red Hat package)
python-keystoneclient (Red Hat package)
python-oslo-concurrency (Red Hat package)
python-amqp (Red Hat package)
python-oslo-i18n (Red Hat package)
python-ironic-lib (Red Hat package)
python-zope-interface (Red Hat package)
python-coverage (Red Hat package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
python-oslo-utils (Red Hat package)
python-tenacity (Red Hat package)
python-oslo-rootwrap (Red Hat package)
python-more-itertools (Red Hat package)
python-neutronclient (Red Hat package)
python-dracclient (Red Hat package)
python-oslo-config (Red Hat package)
python-oslo-db (Red Hat package)
python-cinderclient (Red Hat package)
openstack-ironic-python-agent (Red Hat package)
python-keystonemiddleware (Red Hat package)
openstack-ironic-inspector (Red Hat package)
python-oslo-messaging (Red Hat package)
python-service-identity (Red Hat package)
python-gunicorn (Red Hat package)
python-packaging (Red Hat package)
python-virtualenv (Red Hat package)
python-keyring (Red Hat package)
python-gevent (Red Hat package)
openstack-ironic (Red Hat package)
ovn22.12 (Red Hat package)
ovn23.03 (Red Hat package)
python-kubernetes (Red Hat package)
openstack-macros (Red Hat package)
Red Hat OpenShift Container Platform

How to mitigate CVE-2023-0229

Install updates from vendor's website.

python-tox-current-env (Red Hat package) - update to 0.0.6-1.el9
python-testrepository (Red Hat package) - update to 0.0.20-20.el9
python-nose-cover3 (Red Hat package) - update to 0.1.0-31.el9
toolbox (Red Hat package) - update to 0.1.2-1.rhaos4.13.el9
python-requests-unixsocket (Red Hat package) - addressed in versions 0.1.5-5.el8ar, 0.2.0-2.el9
python-ifaddr (Red Hat package) - addressed in versions 0.1.6-5.el8ost, 0.1.6-6.el9
python-wcwidth (Red Hat package) - update to 0.1.7-14.el8ost
python-iso8601 (Red Hat package) - update to 0.1.12-9.el9
python-m2r (Red Hat package) - update to 0.2.1-3.1.20190604git66f4a5a.el9
python-zake (Red Hat package) - update to 0.2.2-19.el9
python-sqlparse (Red Hat package) - update to 0.2.4-10.el9
python-oslo-metrics (Red Hat package) - addressed in versions 0.3.0-0.20211020174122.43eee50.el8, 0.5.0-0.20221128141719.fc22d0d.el9
python-smi (Red Hat package) - update to 0.3.4-10.el9
python-logutils (Red Hat package) - update to 0.3.5-7.1.el9
python-entrypoints (Red Hat package) - update to 0.3-8.el9
python-colorama (Red Hat package) - update to 0.4.1-2.el9
python-zipp (Red Hat package) - addressed in versions 0.5.1-2.el8ost, 0.5.1-3.el9
conmon-rs (Red Hat package) - update to 0.5.1-5.rhaos4.13.git.el9
python-tempita (Red Hat package) - update to 0.5.1-25.el9
python-pyroute2 (Red Hat package) - update to 0.5.13-1.el8ost
python-msgpack (Red Hat package) - addressed in versions 0.6.2-1.el8ost, 0.6.2-2.el9
python-trustme (Red Hat package) - update to 0.7.0-1.el9
python-defusedxml (Red Hat package) - update to 0.7.1-1.el9
python-prometheus_client (Red Hat package) - update to 0.7.1-3.el9
python-repoze-lru (Red Hat package) - update to 0.7-7.el9
python-simplegeneric (Red Hat package) - update to 0.8.1-18.el9
python-dataclasses (Red Hat package) - update to 0.8-2.el9
python-mistune (Red Hat package) - update to 0.8.3-15.1.el9
crudini (Red Hat package) - update to 0.9.3-4.el9
python-pint (Red Hat package) - addressed in versions 0.10.1-1.el8ost, 0.10.1-3.el9
python-wsme (Red Hat package) - update to 0.11.0-0.20221128135154.80bda90.el9
python-lockfile (Red Hat package) - update to 0.11.0-8.el8ar
python-voluptuous (Red Hat package) - update to 0.11.7-3.el9
python-scciclient (Red Hat package) - update to 0.12.3-0.20221128150506.0940a71.el9
python-migrate (Red Hat package) - update to 0.13.0-2.el9
python-pyrsistent (Red Hat package) - update to 0.16.0-3.el8ost
tini (Red Hat package) - update to 0.16.1-1.el8ar
coreos-installer (Red Hat package) - update to 0.17.0-1.rhaos4.13.el9
python-fasteners (Red Hat package) - update to 0.18-1.el9
python-pytest-xprocess (Red Hat package) - update to 0.18.1-4.el9
python-zeroconf (Red Hat package) - addressed in versions 0.24.4-1.el8ost, 0.24.4-2.el9
python-hardware (Red Hat package) - update to 0.30.0-0.20221128155150.f6ff0ed.el9
python-eventlet (Red Hat package) - addressed in versions 0.30.2-1.el8, 0.33.1-4.el9
python-binary-memcached (Red Hat package) - update to 0.31.1-1.el9
python-openstacksdk (Red Hat package) - update to 0.102.0-0.20221128160622.9a17781.el9
ansible-runner-http (Red Hat package) - update to 1.0.0-2.el8ar
python-linecache2 (Red Hat package) - update to 1.0.0-25.el9
python-hacking (Red Hat package) - update to 1.0.1-0.20210812104123.865398f.el9
python-werkzeug (Red Hat package) - addressed in versions 1.0.1-3.el8ost, 2.0.3-4.el9
containernetworking-plugins (Red Hat package) - update to 1.0.1-6.rhaos4.13.el8
python-funcsigs (Red Hat package) - update to 1.0.2-17.el9
python-editor (Red Hat package) - update to 1.0.4-5.el9
python-pretend (Red Hat package) - update to 1.0.8-19.el9
python-mox3 (Red Hat package) - update to 1.1.0-0.20210812114029.99a302f.el9
python-kiwisolver (Red Hat package) - update to 1.1.0-4.el9
python-unittest2 (Red Hat package) - update to 1.1.0-24.el9
python-flask (Red Hat package) - update to 1.1.1-1.el8ost
python-greenlet (Red Hat package) - update to 1.1.3-1.el9
python-dogpile-cache (Red Hat package) - update to 1.1.5-3.el9
runc (Red Hat package) - addressed in versions 1.1.6-3.rhaos4.13.el8, 1.1.6-3.rhaos4.13.el9
python-rfc3986 (Red Hat package) - update to 1.2.0-6.el9
python-jsonpath-rw (Red Hat package) - update to 1.2.3-23.el9
python-yappi (Red Hat package) - update to 1.3.1-2.el9
python-pecan (Red Hat package) - update to 1.3.2-10.el9
python-warlock (Red Hat package) - update to 1.3.3-2.el9
python-requestsexceptions (Red Hat package) - update to 1.4.0-0.20221128134625.d7ac0ff.el9
python-cmd2 (Red Hat package) - update to 1.4.0-1.1.el8
python-traceback2 (Red Hat package) - update to 1.4.0-25.el9
python-ddt (Red Hat package) - update to 1.4.2-1.el9
python-alembic (Red Hat package) - addressed in versions 1.4.2-5.el8ost, 1.6.0-1.el9
python-kafka (Red Hat package) - update to 1.4.3-3.el9
ansible-runner (Red Hat package) - update to 1.4.6-2.el8ar
python-sqlalchemy (Red Hat package) - update to 1.4.39-2.el9
python-case (Red Hat package) - update to 1.5.3-5.el9
python-pyghmi (Red Hat package) - update to 1.5.14-2.1.el8ost
python-pyperclip (Red Hat package) - update to 1.6.4-6.el8ost
python-os-service-types (Red Hat package) - update to 1.7.0-0.20221128134625.0b2f473.el9
python-importlib-metadata (Red Hat package) - addressed in versions 1.7.0-1.el8ost, 4.12.0-2.el9
crun (Red Hat package) - update to 1.8.4-1.rhaos4.13.el9
python-webob (Red Hat package) - update to 1.8.5-5.el9
skopeo (Red Hat package) - update to 1.10.0-1.rhaos4.13.el9
fuse-overlayfs (Red Hat package) - update to 1.10-2.rhaos4.13.el8
python-pycdlib (Red Hat package) - update to 1.11.0-3.el8
python-wrapt (Red Hat package) - update to 1.11.2-4.el9
grpc (Red Hat package) - update to 1.18.0-4.el8ost
cri-tools (Red Hat package) - update to 1.26.0-1.el9
cri-o (Red Hat package) - update to 1.26.3-3.rhaos4.13.git641290e.el9
buildah (Red Hat package) - update to 1.29.1-1.rhaos4.13.el9
containers-common (Red Hat package) - update to 1-35.rhaos4.13.el9
python-memcached (Red Hat package) - update to 1.58-12.el9
python-oslo-upgradecheck (Red Hat package) - update to 2.0.0-0.20221128142932.b3a2b19.el9
python-waitress (Red Hat package) - update to 2.0.0-2.el9
python-markupsafe (Red Hat package) - update to 2.0.0-2.el9
python-itsdangerous (Red Hat package) - update to 2.0.1-2.el9
python-testresources (Red Hat package) - update to 2.0.1-2.el9
python-paste-deploy (Red Hat package) - addressed in versions 2.0.1-4.el8ost, 2.0.1-5.el9
python-webtest (Red Hat package) - update to 2.0.33-5.el9
python-os-client-config (Red Hat package) - update to 2.1.0-0.20210722194729.bc96c23.el9
python-uhashring (Red Hat package) - update to 2.1-2.el9
conmon (Red Hat package) - addressed in versions 2.1.7-1.rhaos4.13.el8, 2.1.7-1.rhaos4.13.el9
python-pytest-xdist (Red Hat package) - update to 2.2.1-1.el9
nmstate (Red Hat package) - update to 2.2.9-6.rhaos4.13.el8
haproxy (Red Hat package) - update to 2.2.24-3.rhaos4.13.el8
python-oslo-reports (Red Hat package) - update to 2.3.0-0.20211012151507.f2799dc.el9
python-SecretStorage (Red Hat package) - update to 2.3.1-9.el9
python-munch (Red Hat package) - update to 2.3.2-7.el9
python-futurist (Red Hat package) - update to 2.4.1-0.20221128140910.159d752.el9
python-routes (Red Hat package) - update to 2.4.1-12.el9
python-debtcollector (Red Hat package) - update to 2.5.0-0.20221128140303.a6b46c5.el9
python-stestr (Red Hat package) - update to 2.6.0-8.el9
python-osc-lib (Red Hat package) - update to 2.6.2-0.20221128150506.d438afa.el9
python-kazoo (Red Hat package) - update to 2.7.0-2.el9
python-os-traits (Red Hat package) - update to 2.9.0-0.20221128153153.fc91a78.el9
python-typeguard (Red Hat package) - update to 2.9.1-1.el9
python-construct (Red Hat package) - addressed in versions 2.10.56-1.el8ost, 2.10.56-2.el9
python-proliantutils (Red Hat package) - update to 2.14.0-0.20221128154535.de9759c.el9
container-selinux (Red Hat package) - addressed in versions 2.208.0-2.rhaos4.13.el8, 2.208.0-2.rhaos4.13.el9
python-oslo-service (Red Hat package) - update to 3.0.0-0.20221128144658.a27acfe.el9
openvswitch3.0 (Red Hat package) - update to 3.0.0-28.el9fdp
python-automaton (Red Hat package) - update to 3.0.1-0.20221128143847.0ea747e.el9
python-oslo-versionedobjects (Red Hat package) - update to 3.0.1-0.20221128145846.2b12029.el9
kata-containers (Red Hat package) - update to 3.0.2-5.el9
python-oslo-cache (Red Hat package) - update to 3.1.0-0.20221129203427.7fb06bc.el9
python-cachetools (Red Hat package) - update to 3.1.0-4.el9
openvswitch3.1 (Red Hat package) - update to 3.1.0-10.el9fdp
python-pycadf (Red Hat package) - update to 3.1.1-0.20221128135153.4179996.el9
python-ironic-prometheus-exporter (Red Hat package) - update to 3.1.1-0.20221128155706.eb27243.el9
python-bcrypt (Red Hat package) - update to 3.1.6-3.el9
python-tooz (Red Hat package) - update to 3.2.0-0.20221128162335.1a76dd6.el9
python-jsonschema (Red Hat package) - update to 3.2.0-5.el8ost
python-statsd (Red Hat package) - update to 3.2.1-20.el9
python-paste (Red Hat package) - update to 3.2.4-1.el8ost
python-oslo-context (Red Hat package) - addressed in versions 3.3.1-0.20211012152439.641a1e0.el8, 5.0.0-0.20221128142633.f388eb9.el9
python-redis (Red Hat package) - update to 3.3.8-2.el9
python-singledispatch (Red Hat package) - update to 3.4.0.3-19.el9
python-osprofiler (Red Hat package) - update to 3.4.3-0.20221128140710.3286301.el9
python-pymemcache (Red Hat package) - update to 3.5.0-1.el9
python-oslo-policy (Red Hat package) - addressed in versions 3.8.2-0.20211012161944.c7fd9f4.el8, 4.0.0-0.20221128143837.5bd767b.el9
criu (Red Hat package) - update to 3.15-4.rhaos4.11.el8
python-simplejson (Red Hat package) - update to 3.17.0-2.el9
python-cliff (Red Hat package) - update to 4.0.0-0.20221128185800.58c853d.el9
python-swiftclient (Red Hat package) - update to 4.1.0-0.20221128153149.662e530.el9
python-glanceclient (Red Hat package) - update to 4.1.0-0.20221128153803.f2999ce.el9
python-stevedore (Red Hat package) - update to 4.1.0-0.20221128161654.9eb8094.el9
python-oslo-serialization (Red Hat package) - addressed in versions 4.2.0-0.20211012151454.2b94a4f.el8, 5.0.0-0.20221128142424.dd2a819.el9
libslirp (Red Hat package) - update to 4.4.0-2.rhaos4.11.el8
python-pyfakefs (Red Hat package) - update to 4.4.0-4.el9
python-decorator (Red Hat package) - update to 4.4.0-6.el9
python-oslotest (Red Hat package) - update to 4.4.1-0.20210812115053.aaf3a72.el9
podman (Red Hat package) - addressed in versions 4.4.1-3.rhaos4.13.el8, 4.4.1-3.rhaos4.13.el9
python-sushy (Red Hat package) - update to 4.4.3-0.20230425095526.9f708cf.el9
pysnmp (Red Hat package) - update to 4.4.12-6.el9
python-oslo-log (Red Hat package) - addressed in versions 4.6.0-0.20211012154701.41c8807.el8, 5.0.0-0.20221128143137.6401da7.el9
python-pexpect (Red Hat package) - addressed in versions 4.6-2.el8ar, 4.6-3.el9
python-rsa (Red Hat package) - update to 4.7-1.el8
python-ironicclient (Red Hat package) - update to 4.9.0-0.20211209154934.6f1be06.el9
microshift (Red Hat package) - update to 4.12.6-202303012057.p0.g50997a2.assembly.4.12.6.el8
Red Hat OpenShift Container Platform - update to 4.13.0
atomic-openshift-service-idler (Red Hat package) - update to 4.13.0-202303172327.p0.ga0f9090.assembly.stream.el8
openshift-clients (Red Hat package) - addressed in versions 4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el8, 4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el9
openshift4-aws-iso (Red Hat package) - update to 4.13.0-202304052215.p0.gd2acdd5.assembly.stream.el8
openshift-ansible (Red Hat package) - addressed in versions 4.13.0-202304171417.p0.gb4280f6.assembly.stream.el8, 4.13.0-202304171417.p0.gb4280f6.assembly.stream.el9
openshift-kuryr (Red Hat package) - update to 4.13.0-202304192042.p0.g4fe6bbc.assembly.stream.el8
openshift (Red Hat package) - addressed in versions 4.13.0-202304211155.p0.gb404935.assembly.stream.el8, 4.13.0-202304211155.p0.gb404935.assembly.stream.el9
python-oslo-middleware (Red Hat package) - update to 5.0.0-0.20221128142027.51e1882.el9
python-keystoneauth1 (Red Hat package) - update to 5.0.0-0.20221128144522.2445a5d.el9
python-sushy-oem-idrac (Red Hat package) - update to 5.0.0-0.20221128204359.da9a0e4.el9
python-vine (Red Hat package) - update to 5.0.0-3.el9
python-keystoneclient (Red Hat package) - update to 5.0.1-0.20221128145838.bc8e9e7.el9
python-oslo-concurrency (Red Hat package) - update to 5.0.1-0.20221129205158.01cf2ff.el9
python-amqp (Red Hat package) - update to 5.0.6-1.el9
python-oslo-i18n (Red Hat package) - addressed in versions 5.1.0-0.20211012165753.b031d17.el8, 5.1.0-0.20221128135758.b031d17.el9
python-ironic-lib (Red Hat package) - update to 5.3.0-0.20221128152640.340a4b2.el9
python-zope-interface (Red Hat package) - update to 5.4.0-1.el9
python-coverage (Red Hat package) - update to 5.6-0.1b1.el9
kernel (Red Hat package) - update to 5.14.0-284.13.1.el9_2
kernel-rt (Red Hat package) - update to 5.14.0-284.13.1.rt14.298.el9_2
python-oslo-utils (Red Hat package) - update to 6.0.1-0.20221128145135.760deb9.el9
python-tenacity (Red Hat package) - addressed in versions 6.2.0-1.el8ost, 6.2.0-2.el9
python-oslo-rootwrap (Red Hat package) - update to 6.3.1-0.20221128140202.1b1b960.el9
python-more-itertools (Red Hat package) - update to 7.2.0-3.el9
python-neutronclient (Red Hat package) - update to 7.6.0-0.20211012175718.983f0ab.el9
python-dracclient (Red Hat package) - update to 8.0.0-0.20221128135758.9c7499c.el9
python-oslo-config (Red Hat package) - addressed in versions 8.7.1-0.20211012155707.1a7bd66.el8, 9.0.0-0.20221128141318.9eaae04.el9
python-oslo-db (Red Hat package) - addressed in versions 9.1.0-0.20211020204148.be2cc6a.el8, 12.2.0-0.20221128163146.a191d2e.el9
python-cinderclient (Red Hat package) - update to 9.1.0-0.20221128151726.730a8c7.el9
openstack-ironic-python-agent (Red Hat package) - update to 9.2.0-0.20221128164006.a167075.el9
python-keystonemiddleware (Red Hat package) - update to 10.1.0-0.20221128152538.f7ac6a1.el9
openstack-ironic-inspector (Red Hat package) - update to 11.2.0-0.20221128164644.d83454c.el9
python-oslo-messaging (Red Hat package) - addressed in versions 12.9.1-0.20211020204149.f9de265.el8, 14.0.0-0.20221128151928.e44f286.el9
python-service-identity (Red Hat package) - update to 18.1.0-9.1.el9
python-gunicorn (Red Hat package) - update to 20.0.4-2.el9
python-packaging (Red Hat package) - update to 20.4-1.el8ost
python-virtualenv (Red Hat package) - update to 20.4.4-1.el9
python-keyring (Red Hat package) - update to 21.0.0-2.el9
python-gevent (Red Hat package) - update to 21.1.2-1.el9
openstack-ironic (Red Hat package) - update to 21.2.0-0.20221209211422.b70b418.el9
ovn22.12 (Red Hat package) - update to 22.12.0-25.el9fdp
ovn23.03 (Red Hat package) - update to 23.03.0-7.el9fdp
python-kubernetes (Red Hat package) - update to 25.3.0-1.el8
openstack-macros (Red Hat package) - update to 2020.1.2-1.el9

External References

Related Security Bulletins