RHSA-2022:8896: Red Hat Security Advisory: Red Hat OpenStack Platform 13.0 (python-virtualbmc) security update

Skip to navigation Skip to main content

Utilities

• Subscriptions
• Downloads
• Containers
• Support Cases

Infrastructure and Management

• Red Hat Enterprise Linux
• Red Hat Virtualization
• Red Hat Identity Management
• Red Hat Directory Server
• Red Hat Certificate System
• Red Hat Satellite
• Red Hat Subscription Management
• Red Hat Update Infrastructure
• Red Hat Insights
• Red Hat Ansible Automation Platform

Cloud Computing

• Red Hat OpenShift
• Red Hat CloudForms
• Red Hat OpenStack Platform
• Red Hat OpenShift Container Platform
• Red Hat OpenShift Data Science
• Red Hat OpenShift Online
• Red Hat OpenShift Dedicated
• Red Hat Advanced Cluster Security for Kubernetes
• Red Hat Advanced Cluster Management for Kubernetes
• Red Hat Quay
• OpenShift Dev Spaces
• Red Hat OpenShift Service on AWS

Storage

• Red Hat Gluster Storage
• Red Hat Hyperconverged Infrastructure
• Red Hat Ceph Storage
• Red Hat OpenShift Data Foundation

Runtimes

• Red Hat Runtimes
• Red Hat JBoss Enterprise Application Platform
• Red Hat Data Grid
• Red Hat JBoss Web Server
• Red Hat Single Sign On
• Red Hat support for Spring Boot
• Red Hat build of Node.js
• Red Hat build of Thorntail
• Red Hat build of Eclipse Vert.x
• Red Hat build of OpenJDK
• Red Hat build of Quarkus

Integration and Automation

• Red Hat Process Automation
• Red Hat Process Automation Manager
• Red Hat Decision Manager

All Products

Issued:

2022-12-08

Updated:

2022-12-08

RHSA-2022:8896 - Security Advisory

• Overview
• Updated Packages

Synopsis

Moderate: Red Hat OpenStack Platform 13.0 (python-virtualbmc) security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for python-virtualbmc is now available for Red Hat OpenStack
Platform 13 (Queens).

Red Hat Product Security has rated this update as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.

Description

A virtual BMC for controlling virtual machines using IPMI
commands.

Security Fix:

• VirtualBMC: Removal of password protection from the managed libvirt XML

domain (CVE-2022-44020)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.

Affected Products

• Red Hat OpenStack 13 - Extended Life Cycle Support 13 x86_64
• Red Hat OpenStack 13 for IBM Power - Extended Life Cycle Support 13 ppc64le

Fixes

• BZ - 2142678 - CVE-2022-44020 Sushy-Tools & VirtualBMC: removes password protection from the managed libvirt XML domain

Red Hat OpenStack 13 - Extended Life Cycle Support 13

SRPM

python-virtualbmc-1.2.0-2.el7ost.src.rpm

SHA-256: fa069688df3dd7b984514959683d171a62db128a0c3861caf39b13cf59ff021c

x86_64

python2-virtualbmc-1.2.0-2.el7ost.noarch.rpm

SHA-256: 07962c0cc9c10e73e3d970f372468ea965d7aafdc620f60a64870bcbbe3e383c

python2-virtualbmc-tests-1.2.0-2.el7ost.noarch.rpm

SHA-256: 882f9bdaa51528b429442c038b3e79001d4a47e9f1e34e5052b73949a335077a

Red Hat OpenStack 13 for IBM Power - Extended Life Cycle Support 13

SRPM

python-virtualbmc-1.2.0-2.el7ost.src.rpm

SHA-256: fa069688df3dd7b984514959683d171a62db128a0c3861caf39b13cf59ff021c

ppc64le

python2-virtualbmc-1.2.0-2.el7ost.noarch.rpm

SHA-256: 07962c0cc9c10e73e3d970f372468ea965d7aafdc620f60a64870bcbbe3e383c

python2-virtualbmc-tests-1.2.0-2.el7ost.noarch.rpm

SHA-256: 882f9bdaa51528b429442c038b3e79001d4a47e9f1e34e5052b73949a335077a

The Red Hat security contact is [email protected]. More contact details at https://access.redhat.com/security/team/contact/.