Time-of-check Time-of-use (TOCTOU) Race Condition in Podman - CVE-2023-0778

 

Time-of-check Time-of-use (TOCTOU) Race Condition in Podman - CVE-2023-0778

Published: April 11, 2023


Vulnerability identifier: #VU74843
CSH Severity: Medium
CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-0778
CWE-ID: CWE-367
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to gain compromise the affected system.

The vulnerability exists due to a race condition. A remote attacker can replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system.


Affected software

Podman
Gentoo Linux
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
SUSE Enterprise Storage
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for x86_64
SUSE Linux Enterprise Server 15 SP3 LTSS
openEuler
Fedora
python-tox-current-env (Red Hat package)
python-testrepository (Red Hat package)
python-nose-cover3 (Red Hat package)
toolbox (Red Hat package)
python-requests-unixsocket (Red Hat package)
python-ifaddr (Red Hat package)
python-wcwidth (Red Hat package)
python-iso8601 (Red Hat package)
python-m2r (Red Hat package)
python-zake (Red Hat package)
python-sqlparse (Red Hat package)
python-oslo-metrics (Red Hat package)
python-smi (Red Hat package)
python-logutils (Red Hat package)
python-entrypoints (Red Hat package)
python-colorama (Red Hat package)
python-zipp (Red Hat package)
conmon-rs (Red Hat package)
python-tempita (Red Hat package)
python-pyroute2 (Red Hat package)
python-msgpack (Red Hat package)
python-trustme (Red Hat package)
python-defusedxml (Red Hat package)
python-prometheus_client (Red Hat package)
python-repoze-lru (Red Hat package)
python-simplegeneric (Red Hat package)
python-dataclasses (Red Hat package)
python-mistune (Red Hat package)
crudini (Red Hat package)
python-pint (Red Hat package)
python-wsme (Red Hat package)
python-lockfile (Red Hat package)
python-voluptuous (Red Hat package)
python-scciclient (Red Hat package)
python-migrate (Red Hat package)
python-pyrsistent (Red Hat package)
tini (Red Hat package)
coreos-installer (Red Hat package)
python-fasteners (Red Hat package)
python-pytest-xprocess (Red Hat package)
python-zeroconf (Red Hat package)
python-hardware (Red Hat package)
python-eventlet (Red Hat package)
python-binary-memcached (Red Hat package)
python-openstacksdk (Red Hat package)
ansible-runner-http (Red Hat package)
python-linecache2 (Red Hat package)
python-hacking (Red Hat package)
python-werkzeug (Red Hat package)
containernetworking-plugins (Red Hat package)
python-funcsigs (Red Hat package)
python-editor (Red Hat package)
python-pretend (Red Hat package)
python-mox3 (Red Hat package)
python-kiwisolver (Red Hat package)
python-unittest2 (Red Hat package)
python-flask (Red Hat package)
python-greenlet (Red Hat package)
python-dogpile-cache (Red Hat package)
runc (Red Hat package)
python-rfc3986 (Red Hat package)
python-jsonpath-rw (Red Hat package)
python-yappi (Red Hat package)
python-pecan (Red Hat package)
python-warlock (Red Hat package)
python-requestsexceptions (Red Hat package)
python-cmd2 (Red Hat package)
python-traceback2 (Red Hat package)
python-ddt (Red Hat package)
python-alembic (Red Hat package)
python-kafka (Red Hat package)
ansible-runner (Red Hat package)
python-sqlalchemy (Red Hat package)
python-case (Red Hat package)
python-pyghmi (Red Hat package)
python-pyperclip (Red Hat package)
python-os-service-types (Red Hat package)
python-importlib-metadata (Red Hat package)
crun (Red Hat package)
python-webob (Red Hat package)
skopeo (Red Hat package)
fuse-overlayfs (Red Hat package)
python-pycdlib (Red Hat package)
python-wrapt (Red Hat package)
grpc (Red Hat package)
cri-tools (Red Hat package)
cri-o (Red Hat package)
buildah (Red Hat package)
containers-common (Red Hat package)
python-memcached (Red Hat package)
python-oslo-upgradecheck (Red Hat package)
python-waitress (Red Hat package)
python-markupsafe (Red Hat package)
python-testresources (Red Hat package)
python-itsdangerous (Red Hat package)
python-paste-deploy (Red Hat package)
python-webtest (Red Hat package)
python-os-client-config (Red Hat package)
python-uhashring (Red Hat package)
conmon (Red Hat package)
python-pytest-xdist (Red Hat package)
nmstate (Red Hat package)
haproxy (Red Hat package)
python-oslo-reports (Red Hat package)
python-SecretStorage (Red Hat package)
python-munch (Red Hat package)
python-futurist (Red Hat package)
python-routes (Red Hat package)
python-debtcollector (Red Hat package)
python-stestr (Red Hat package)
python-osc-lib (Red Hat package)
python-kazoo (Red Hat package)
python-os-traits (Red Hat package)
python-typeguard (Red Hat package)
python-construct (Red Hat package)
python-proliantutils (Red Hat package)
container-selinux (Red Hat package)
python-oslo-service (Red Hat package)
openvswitch3.0 (Red Hat package)
python-automaton (Red Hat package)
python-oslo-versionedobjects (Red Hat package)
kata-containers (Red Hat package)
python-oslo-cache (Red Hat package)
python-cachetools (Red Hat package)
openvswitch3.1 (Red Hat package)
python-pycadf (Red Hat package)
python-ironic-prometheus-exporter (Red Hat package)
python-bcrypt (Red Hat package)
python-tooz (Red Hat package)
python-jsonschema (Red Hat package)
python-statsd (Red Hat package)
python-paste (Red Hat package)
python-oslo-context (Red Hat package)
python-redis (Red Hat package)
python-singledispatch (Red Hat package)
python-osprofiler (Red Hat package)
podman-docker
podman-remote
podman-help
podman
podman-debuginfo
podman-plugins
podman-gvproxy
podman-debugsource
python-pymemcache (Red Hat package)
python-oslo-policy (Red Hat package)
criu (Red Hat package)
python-simplejson (Red Hat package)
python-cliff (Red Hat package)
python-swiftclient (Red Hat package)
python-glanceclient (Red Hat package)
python-stevedore (Red Hat package)
python-oslo-serialization (Red Hat package)
libslirp (Red Hat package)
python-pyfakefs (Red Hat package)
python-decorator (Red Hat package)
python-oslotest (Red Hat package)
podman (Red Hat package)
python-sushy (Red Hat package)
podman-cni-config
pysnmp (Red Hat package)
python-oslo-log (Red Hat package)
python-pexpect (Red Hat package)
python-rsa (Red Hat package)
python-ironicclient (Red Hat package)
app-containers/podman
atomic-openshift-service-idler (Red Hat package)
openshift-clients (Red Hat package)
openshift4-aws-iso (Red Hat package)
openshift-ansible (Red Hat package)
openshift-kuryr (Red Hat package)
openshift (Red Hat package)
python-oslo-middleware (Red Hat package)
python-keystoneauth1 (Red Hat package)
python-sushy-oem-idrac (Red Hat package)
python-vine (Red Hat package)
python-keystoneclient (Red Hat package)
python-oslo-concurrency (Red Hat package)
python-amqp (Red Hat package)
python-oslo-i18n (Red Hat package)
python-ironic-lib (Red Hat package)
python-zope-interface (Red Hat package)
python-coverage (Red Hat package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
python-oslo-utils (Red Hat package)
python-tenacity (Red Hat package)
python-oslo-rootwrap (Red Hat package)
python-more-itertools (Red Hat package)
python-neutronclient (Red Hat package)
python-dracclient (Red Hat package)
python-oslo-config (Red Hat package)
python-oslo-db (Red Hat package)
python-cinderclient (Red Hat package)
openstack-ironic-python-agent (Red Hat package)
python-keystonemiddleware (Red Hat package)
openstack-ironic-inspector (Red Hat package)
python-oslo-messaging (Red Hat package)
python-service-identity (Red Hat package)
python-gunicorn (Red Hat package)
python-packaging (Red Hat package)
python-virtualenv (Red Hat package)
python-keyring (Red Hat package)
python-gevent (Red Hat package)
openstack-ironic (Red Hat package)
ovn22.12 (Red Hat package)
ovn23.03 (Red Hat package)
python-kubernetes (Red Hat package)
openstack-macros (Red Hat package)
Red Hat OpenShift Container Platform

How to mitigate CVE-2023-0778

Install updates from vendor's website.

Podman - update to 4.4.2
python-tox-current-env (Red Hat package) - update to 0.0.6-1.el9
python-testrepository (Red Hat package) - update to 0.0.20-20.el9
python-nose-cover3 (Red Hat package) - update to 0.1.0-31.el9
toolbox (Red Hat package) - update to 0.1.2-1.rhaos4.13.el9
python-requests-unixsocket (Red Hat package) - addressed in versions 0.1.5-5.el8ar, 0.2.0-2.el9
python-ifaddr (Red Hat package) - addressed in versions 0.1.6-5.el8ost, 0.1.6-6.el9
python-wcwidth (Red Hat package) - update to 0.1.7-14.el8ost
python-iso8601 (Red Hat package) - update to 0.1.12-9.el9
python-m2r (Red Hat package) - update to 0.2.1-3.1.20190604git66f4a5a.el9
python-zake (Red Hat package) - update to 0.2.2-19.el9
python-sqlparse (Red Hat package) - update to 0.2.4-10.el9
python-oslo-metrics (Red Hat package) - addressed in versions 0.3.0-0.20211020174122.43eee50.el8, 0.5.0-0.20221128141719.fc22d0d.el9
python-smi (Red Hat package) - update to 0.3.4-10.el9
python-logutils (Red Hat package) - update to 0.3.5-7.1.el9
python-entrypoints (Red Hat package) - update to 0.3-8.el9
python-colorama (Red Hat package) - update to 0.4.1-2.el9
python-zipp (Red Hat package) - addressed in versions 0.5.1-2.el8ost, 0.5.1-3.el9
conmon-rs (Red Hat package) - update to 0.5.1-5.rhaos4.13.git.el9
python-tempita (Red Hat package) - update to 0.5.1-25.el9
python-pyroute2 (Red Hat package) - update to 0.5.13-1.el8ost
python-msgpack (Red Hat package) - addressed in versions 0.6.2-1.el8ost, 0.6.2-2.el9
python-trustme (Red Hat package) - update to 0.7.0-1.el9
python-defusedxml (Red Hat package) - update to 0.7.1-1.el9
python-prometheus_client (Red Hat package) - update to 0.7.1-3.el9
python-repoze-lru (Red Hat package) - update to 0.7-7.el9
python-simplegeneric (Red Hat package) - update to 0.8.1-18.el9
python-dataclasses (Red Hat package) - update to 0.8-2.el9
python-mistune (Red Hat package) - update to 0.8.3-15.1.el9
crudini (Red Hat package) - update to 0.9.3-4.el9
python-pint (Red Hat package) - addressed in versions 0.10.1-1.el8ost, 0.10.1-3.el9
python-wsme (Red Hat package) - update to 0.11.0-0.20221128135154.80bda90.el9
python-lockfile (Red Hat package) - update to 0.11.0-8.el8ar
python-voluptuous (Red Hat package) - update to 0.11.7-3.el9
python-scciclient (Red Hat package) - update to 0.12.3-0.20221128150506.0940a71.el9
python-migrate (Red Hat package) - update to 0.13.0-2.el9
python-pyrsistent (Red Hat package) - update to 0.16.0-3.el8ost
tini (Red Hat package) - update to 0.16.1-1.el8ar
coreos-installer (Red Hat package) - update to 0.17.0-1.rhaos4.13.el9
python-fasteners (Red Hat package) - update to 0.18-1.el9
python-pytest-xprocess (Red Hat package) - update to 0.18.1-4.el9
python-zeroconf (Red Hat package) - addressed in versions 0.24.4-1.el8ost, 0.24.4-2.el9
python-hardware (Red Hat package) - update to 0.30.0-0.20221128155150.f6ff0ed.el9
python-eventlet (Red Hat package) - addressed in versions 0.30.2-1.el8, 0.33.1-4.el9
python-binary-memcached (Red Hat package) - update to 0.31.1-1.el9
python-openstacksdk (Red Hat package) - update to 0.102.0-0.20221128160622.9a17781.el9
ansible-runner-http (Red Hat package) - update to 1.0.0-2.el8ar
python-linecache2 (Red Hat package) - update to 1.0.0-25.el9
python-hacking (Red Hat package) - update to 1.0.1-0.20210812104123.865398f.el9
python-werkzeug (Red Hat package) - addressed in versions 1.0.1-3.el8ost, 2.0.3-4.el9
containernetworking-plugins (Red Hat package) - update to 1.0.1-6.rhaos4.13.el8
python-funcsigs (Red Hat package) - update to 1.0.2-17.el9
python-editor (Red Hat package) - update to 1.0.4-5.el9
python-pretend (Red Hat package) - update to 1.0.8-19.el9
python-mox3 (Red Hat package) - update to 1.1.0-0.20210812114029.99a302f.el9
python-kiwisolver (Red Hat package) - update to 1.1.0-4.el9
python-unittest2 (Red Hat package) - update to 1.1.0-24.el9
python-flask (Red Hat package) - update to 1.1.1-1.el8ost
python-greenlet (Red Hat package) - update to 1.1.3-1.el9
python-dogpile-cache (Red Hat package) - update to 1.1.5-3.el9
runc (Red Hat package) - addressed in versions 1.1.6-3.rhaos4.13.el8, 1.1.6-3.rhaos4.13.el9
python-rfc3986 (Red Hat package) - update to 1.2.0-6.el9
python-jsonpath-rw (Red Hat package) - update to 1.2.3-23.el9
python-yappi (Red Hat package) - update to 1.3.1-2.el9
python-pecan (Red Hat package) - update to 1.3.2-10.el9
python-warlock (Red Hat package) - update to 1.3.3-2.el9
python-requestsexceptions (Red Hat package) - update to 1.4.0-0.20221128134625.d7ac0ff.el9
python-cmd2 (Red Hat package) - update to 1.4.0-1.1.el8
python-traceback2 (Red Hat package) - update to 1.4.0-25.el9
python-ddt (Red Hat package) - update to 1.4.2-1.el9
python-alembic (Red Hat package) - addressed in versions 1.4.2-5.el8ost, 1.6.0-1.el9
python-kafka (Red Hat package) - update to 1.4.3-3.el9
ansible-runner (Red Hat package) - update to 1.4.6-2.el8ar
python-sqlalchemy (Red Hat package) - update to 1.4.39-2.el9
python-case (Red Hat package) - update to 1.5.3-5.el9
python-pyghmi (Red Hat package) - update to 1.5.14-2.1.el8ost
python-pyperclip (Red Hat package) - update to 1.6.4-6.el8ost
python-os-service-types (Red Hat package) - update to 1.7.0-0.20221128134625.0b2f473.el9
python-importlib-metadata (Red Hat package) - addressed in versions 1.7.0-1.el8ost, 4.12.0-2.el9
crun (Red Hat package) - update to 1.8.4-1.rhaos4.13.el9
python-webob (Red Hat package) - update to 1.8.5-5.el9
skopeo (Red Hat package) - update to 1.10.0-1.rhaos4.13.el9
fuse-overlayfs (Red Hat package) - update to 1.10-2.rhaos4.13.el8
python-pycdlib (Red Hat package) - update to 1.11.0-3.el8
python-wrapt (Red Hat package) - update to 1.11.2-4.el9
grpc (Red Hat package) - update to 1.18.0-4.el8ost
cri-tools (Red Hat package) - update to 1.26.0-1.el9
cri-o (Red Hat package) - update to 1.26.3-3.rhaos4.13.git641290e.el9
buildah (Red Hat package) - update to 1.29.1-1.rhaos4.13.el9
containers-common (Red Hat package) - update to 1-35.rhaos4.13.el9
python-memcached (Red Hat package) - update to 1.58-12.el9
python-oslo-upgradecheck (Red Hat package) - update to 2.0.0-0.20221128142932.b3a2b19.el9
python-waitress (Red Hat package) - update to 2.0.0-2.el9
python-markupsafe (Red Hat package) - update to 2.0.0-2.el9
python-testresources (Red Hat package) - update to 2.0.1-2.el9
python-itsdangerous (Red Hat package) - update to 2.0.1-2.el9
python-paste-deploy (Red Hat package) - addressed in versions 2.0.1-4.el8ost, 2.0.1-5.el9
python-webtest (Red Hat package) - update to 2.0.33-5.el9
python-os-client-config (Red Hat package) - update to 2.1.0-0.20210722194729.bc96c23.el9
python-uhashring (Red Hat package) - update to 2.1-2.el9
conmon (Red Hat package) - addressed in versions 2.1.7-1.rhaos4.13.el8, 2.1.7-1.rhaos4.13.el9
python-pytest-xdist (Red Hat package) - update to 2.2.1-1.el9
nmstate (Red Hat package) - update to 2.2.9-6.rhaos4.13.el8
haproxy (Red Hat package) - update to 2.2.24-3.rhaos4.13.el8
python-oslo-reports (Red Hat package) - update to 2.3.0-0.20211012151507.f2799dc.el9
python-SecretStorage (Red Hat package) - update to 2.3.1-9.el9
python-munch (Red Hat package) - update to 2.3.2-7.el9
python-futurist (Red Hat package) - update to 2.4.1-0.20221128140910.159d752.el9
python-routes (Red Hat package) - update to 2.4.1-12.el9
python-debtcollector (Red Hat package) - update to 2.5.0-0.20221128140303.a6b46c5.el9
python-stestr (Red Hat package) - update to 2.6.0-8.el9
python-osc-lib (Red Hat package) - update to 2.6.2-0.20221128150506.d438afa.el9
python-kazoo (Red Hat package) - update to 2.7.0-2.el9
python-os-traits (Red Hat package) - update to 2.9.0-0.20221128153153.fc91a78.el9
python-typeguard (Red Hat package) - update to 2.9.1-1.el9
python-construct (Red Hat package) - addressed in versions 2.10.56-1.el8ost, 2.10.56-2.el9
python-proliantutils (Red Hat package) - update to 2.14.0-0.20221128154535.de9759c.el9
container-selinux (Red Hat package) - addressed in versions 2.208.0-2.rhaos4.13.el8, 2.208.0-2.rhaos4.13.el9
python-oslo-service (Red Hat package) - update to 3.0.0-0.20221128144658.a27acfe.el9
openvswitch3.0 (Red Hat package) - update to 3.0.0-28.el9fdp
python-automaton (Red Hat package) - update to 3.0.1-0.20221128143847.0ea747e.el9
python-oslo-versionedobjects (Red Hat package) - update to 3.0.1-0.20221128145846.2b12029.el9
kata-containers (Red Hat package) - update to 3.0.2-5.el9
python-oslo-cache (Red Hat package) - update to 3.1.0-0.20221129203427.7fb06bc.el9
python-cachetools (Red Hat package) - update to 3.1.0-4.el9
openvswitch3.1 (Red Hat package) - update to 3.1.0-10.el9fdp
python-pycadf (Red Hat package) - update to 3.1.1-0.20221128135153.4179996.el9
python-ironic-prometheus-exporter (Red Hat package) - update to 3.1.1-0.20221128155706.eb27243.el9
python-bcrypt (Red Hat package) - update to 3.1.6-3.el9
python-tooz (Red Hat package) - update to 3.2.0-0.20221128162335.1a76dd6.el9
python-jsonschema (Red Hat package) - update to 3.2.0-5.el8ost
python-statsd (Red Hat package) - update to 3.2.1-20.el9
python-paste (Red Hat package) - update to 3.2.4-1.el8ost
python-oslo-context (Red Hat package) - addressed in versions 3.3.1-0.20211012152439.641a1e0.el8, 5.0.0-0.20221128142633.f388eb9.el9
python-redis (Red Hat package) - update to 3.3.8-2.el9
python-singledispatch (Red Hat package) - update to 3.4.0.3-19.el9
python-osprofiler (Red Hat package) - update to 3.4.3-0.20221128140710.3286301.el9
podman-docker - update to 3.4.4-8
podman-remote - update to 3.4.4-8
podman-help - update to 3.4.4-8
podman - update to 3.4.4-8
podman-debuginfo - update to 3.4.4-8
podman-plugins - update to 3.4.4-8
podman-gvproxy - update to 3.4.4-8
podman-debugsource - update to 3.4.4-8
python-pymemcache (Red Hat package) - update to 3.5.0-1.el9
python-oslo-policy (Red Hat package) - addressed in versions 3.8.2-0.20211012161944.c7fd9f4.el8, 4.0.0-0.20221128143837.5bd767b.el9
criu (Red Hat package) - update to 3.15-4.rhaos4.11.el8
python-simplejson (Red Hat package) - update to 3.17.0-2.el9
python-cliff (Red Hat package) - update to 4.0.0-0.20221128185800.58c853d.el9
python-swiftclient (Red Hat package) - update to 4.1.0-0.20221128153149.662e530.el9
python-glanceclient (Red Hat package) - update to 4.1.0-0.20221128153803.f2999ce.el9
python-stevedore (Red Hat package) - update to 4.1.0-0.20221128161654.9eb8094.el9
python-oslo-serialization (Red Hat package) - addressed in versions 4.2.0-0.20211012151454.2b94a4f.el8, 5.0.0-0.20221128142424.dd2a819.el9
libslirp (Red Hat package) - update to 4.4.0-2.rhaos4.11.el8
python-pyfakefs (Red Hat package) - update to 4.4.0-4.el9
python-decorator (Red Hat package) - update to 4.4.0-6.el9
python-oslotest (Red Hat package) - update to 4.4.1-0.20210812115053.aaf3a72.el9
podman - addressed in versions 4.4.1-3.fc36, 4.4.1-3.fc37
podman (Red Hat package) - addressed in versions 4.4.1-3.rhaos4.13.el8, 4.4.1-3.rhaos4.13.el9
python-sushy (Red Hat package) - update to 4.4.3-0.20230425095526.9f708cf.el9
podman-cni-config - update to 4.4.4-150300.9.20.1
podman-debuginfo - update to 4.4.4-150300.9.20.1
podman - update to 4.4.4-150300.9.20.1
pysnmp (Red Hat package) - update to 4.4.12-6.el9
python-oslo-log (Red Hat package) - addressed in versions 4.6.0-0.20211012154701.41c8807.el8, 5.0.0-0.20221128143137.6401da7.el9
python-pexpect (Red Hat package) - addressed in versions 4.6-2.el8ar, 4.6-3.el9
python-rsa (Red Hat package) - update to 4.7-1.el8
python-ironicclient (Red Hat package) - update to 4.9.0-0.20211209154934.6f1be06.el9
app-containers/podman - update to 4.9.4
Red Hat OpenShift Container Platform - update to 4.13.0
atomic-openshift-service-idler (Red Hat package) - update to 4.13.0-202303172327.p0.ga0f9090.assembly.stream.el8
openshift-clients (Red Hat package) - addressed in versions 4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el8, 4.13.0-202303241616.p0.g92b1a3d.assembly.stream.el9
openshift4-aws-iso (Red Hat package) - update to 4.13.0-202304052215.p0.gd2acdd5.assembly.stream.el8
openshift-ansible (Red Hat package) - addressed in versions 4.13.0-202304171417.p0.gb4280f6.assembly.stream.el8, 4.13.0-202304171417.p0.gb4280f6.assembly.stream.el9
openshift-kuryr (Red Hat package) - update to 4.13.0-202304192042.p0.g4fe6bbc.assembly.stream.el8
openshift (Red Hat package) - addressed in versions 4.13.0-202304211155.p0.gb404935.assembly.stream.el8, 4.13.0-202304211155.p0.gb404935.assembly.stream.el9
python-oslo-middleware (Red Hat package) - update to 5.0.0-0.20221128142027.51e1882.el9
python-keystoneauth1 (Red Hat package) - update to 5.0.0-0.20221128144522.2445a5d.el9
python-sushy-oem-idrac (Red Hat package) - update to 5.0.0-0.20221128204359.da9a0e4.el9
python-vine (Red Hat package) - update to 5.0.0-3.el9
python-keystoneclient (Red Hat package) - update to 5.0.1-0.20221128145838.bc8e9e7.el9
python-oslo-concurrency (Red Hat package) - update to 5.0.1-0.20221129205158.01cf2ff.el9
python-amqp (Red Hat package) - update to 5.0.6-1.el9
python-oslo-i18n (Red Hat package) - addressed in versions 5.1.0-0.20211012165753.b031d17.el8, 5.1.0-0.20221128135758.b031d17.el9
python-ironic-lib (Red Hat package) - update to 5.3.0-0.20221128152640.340a4b2.el9
python-zope-interface (Red Hat package) - update to 5.4.0-1.el9
python-coverage (Red Hat package) - update to 5.6-0.1b1.el9
kernel (Red Hat package) - update to 5.14.0-284.13.1.el9_2
kernel-rt (Red Hat package) - update to 5.14.0-284.13.1.rt14.298.el9_2
python-oslo-utils (Red Hat package) - update to 6.0.1-0.20221128145135.760deb9.el9
python-tenacity (Red Hat package) - addressed in versions 6.2.0-1.el8ost, 6.2.0-2.el9
python-oslo-rootwrap (Red Hat package) - update to 6.3.1-0.20221128140202.1b1b960.el9
python-more-itertools (Red Hat package) - update to 7.2.0-3.el9
python-neutronclient (Red Hat package) - update to 7.6.0-0.20211012175718.983f0ab.el9
python-dracclient (Red Hat package) - update to 8.0.0-0.20221128135758.9c7499c.el9
python-oslo-config (Red Hat package) - addressed in versions 8.7.1-0.20211012155707.1a7bd66.el8, 9.0.0-0.20221128141318.9eaae04.el9
python-oslo-db (Red Hat package) - addressed in versions 9.1.0-0.20211020204148.be2cc6a.el8, 12.2.0-0.20221128163146.a191d2e.el9
python-cinderclient (Red Hat package) - update to 9.1.0-0.20221128151726.730a8c7.el9
openstack-ironic-python-agent (Red Hat package) - update to 9.2.0-0.20221128164006.a167075.el9
python-keystonemiddleware (Red Hat package) - update to 10.1.0-0.20221128152538.f7ac6a1.el9
openstack-ironic-inspector (Red Hat package) - update to 11.2.0-0.20221128164644.d83454c.el9
python-oslo-messaging (Red Hat package) - addressed in versions 12.9.1-0.20211020204149.f9de265.el8, 14.0.0-0.20221128151928.e44f286.el9
python-service-identity (Red Hat package) - update to 18.1.0-9.1.el9
python-gunicorn (Red Hat package) - update to 20.0.4-2.el9
python-packaging (Red Hat package) - update to 20.4-1.el8ost
python-virtualenv (Red Hat package) - update to 20.4.4-1.el9
python-keyring (Red Hat package) - update to 21.0.0-2.el9
python-gevent (Red Hat package) - update to 21.1.2-1.el9
openstack-ironic (Red Hat package) - update to 21.2.0-0.20221209211422.b70b418.el9
ovn22.12 (Red Hat package) - update to 22.12.0-25.el9fdp
ovn23.03 (Red Hat package) - update to 23.03.0-7.el9fdp
python-kubernetes (Red Hat package) - update to 25.3.0-1.el8
openstack-macros (Red Hat package) - update to 2020.1.2-1.el9

External References

Related Security Bulletins