Headline

RHSA-2023:1278: Red Hat Security Advisory: Red Hat OpenStack Platform (openstack-nova) security update

An update for openstack-nova is now available for Red Hat OpenStack Platform. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2022-47951: A flaw was found in OpenStack-nova, Openstack-glance, and Openstack-cinder. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file’s contents from the server, resulting in unauthorized access to potentially sensitive data.

1 year ago

Red Hat Security Data

Open in Source

#vulnerability #mac #linux #red_hat #auth #ibm

Synopsis

Important: Red Hat OpenStack Platform (openstack-nova) security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for openstack-nova is now available for Red Hat OpenStack
Platform.

Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.

Description

OpenStack Compute (codename Nova) is open source software designed
to provision and manage large networks of virtual machines, creating a
redundant and scalable cloud computing platform. It gives you the software,
control panels, and APIs required to orchestrate a cloud, including running
instances, managing networks, and controlling access through users and
projects.OpenStack Compute strives to be both hardware and hypervisor
agnostic, currently supporting a variety of standard hardware
configurations and seven major hypervisors.

Security Fix(es):

Arbitrary file access through custom VMDK flat descriptor

(CVE-2022-47951)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.

Affected Products

Red Hat OpenStack for IBM Power 16.2 ppc64le
Red Hat OpenStack for IBM Power 16.1 ppc64le
Red Hat OpenStack 16.2 x86_64
Red Hat OpenStack 16.1 x86_64
Red Hat OpenStack Director Deployment Tools 16.2 x86_64
Red Hat OpenStack Director Deployment Tools 16.1 x86_64
Red Hat OpenStack Director Deployment Tools for IBM Power LE 16.2 ppc64le
Red Hat OpenStack Director Deployment Tools for IBM Power LE 16.1 ppc64le
Red Hat Enterprise Linux for x86_64 8 x86_64
Cinderlib 16.2 x86_64
Cinderlib 16.1 x86_64
Cinderlib for IBM Power LE 16.2 ppc64le
Cinderlib for IBM Power LE 16.1 ppc64le
Red Hat OpenStack 13 - Extended Life Cycle Support 13 x86_64
Red Hat OpenStack 13 for IBM Power - Extended Life Cycle Support 13 ppc64le
Red Hat OpenStack 13 Director Deployment Tools - Extended Life Cycle Support 13 x86_64
Red Hat OpenStack 13 Director Deployment Tools for IBM Power LE - Extended Life Cycle Support 13 ppc64le

Fixes

BZ - 2161812 - CVE-2022-47951 openstack: Arbitrary file access through custom VMDK flat descriptor

Red Hat OpenStack for IBM Power 16.2

SRPM

openstack-nova-20.6.2-2.20221005185231.6786e96.el8ost.src.rpm

SHA-256: 84439bfc56613d4ea030af6956839d4a3eade9b69beeea2c44128909be5729f1

python-oslo-utils-3.41.6-2.20230130154947.f4deaad.el8ost.src.rpm

SHA-256: dfbf41e1d58308262b331f65db8411aed9c0792a93dc0b8f4b43e34b969c58bb

ppc64le

openstack-nova-20.6.2-2.20221005185231.6786e96.el8ost.noarch.rpm

SHA-256: 9f56a34cd90395c8dc82ec562803605cd01f9b542a0d6b88992444bc4b66504d

openstack-nova-api-20.6.2-2.20221005185231.6786e96.el8ost.noarch.rpm

SHA-256: ab6ae50297b25b2fb83fad50676a3232026b658fed74915de92c45c7d3f159d7

openstack-nova-common-20.6.2-2.20221005185231.6786e96.el8ost.noarch.rpm

SHA-256: 68655b5533b5f74b82328e8adbd4046e315711349615aaab05649ea0e1b1c4e0

openstack-nova-compute-20.6.2-2.20221005185231.6786e96.el8ost.noarch.rpm

SHA-256: a5bb12e633dee1266f1147832cfee88c3a2d5642ce2fe8c0a215fccee9aa2352

openstack-nova-conductor-20.6.2-2.20221005185231.6786e96.el8ost.noarch.rpm

SHA-256: 82a5bd82b4290722dc7bd07621f3bba1748c922f2c1ab3c7ab55e6421accaf5d

openstack-nova-console-20.6.2-2.20221005185231.6786e96.el8ost.noarch.rpm

SHA-256: fbfaa219420ab57fac72b22cd0eec9f5f09a3901f094b2d3df851021febbc21d

openstack-nova-migration-20.6.2-2.20221005185231.6786e96.el8ost.noarch.rpm

SHA-256: d827c7d8bf4deca10cd24b75ac85aa7e7713ce98b3c763abd9aaa2b3086bc8aa

openstack-nova-novncproxy-20.6.2-2.20221005185231.6786e96.el8ost.noarch.rpm

SHA-256: 62937c12c25be651bc8b38c0561d4dcb9781374641b51aebd1af195de4fabbe5

openstack-nova-scheduler-20.6.2-2.20221005185231.6786e96.el8ost.noarch.rpm

SHA-256: b039467d1dbdf7ca294ffa3c6c371ebad284d822d2fd7ec5a9ac79f13b67cde0

openstack-nova-serialproxy-20.6.2-2.20221005185231.6786e96.el8ost.noarch.rpm

SHA-256: 1338b04ff68bb5d59d312dcc0d2b1d8765831732828df3a2df4dbfce51807265

openstack-nova-spicehtml5proxy-20.6.2-2.20221005185231.6786e96.el8ost.noarch.rpm

SHA-256: ddd41ef8d6d3dfcd05d512b5758afa800ba5274a10516664ef7407d878f3b019

python-oslo-utils-lang-3.41.6-2.20230130154947.f4deaad.el8ost.noarch.rpm

SHA-256: 0f849a2e290a97dd78ffd4e4be07fd91dd530d0c713ccd84cc988b7544d0536b

python3-nova-20.6.2-2.20221005185231.6786e96.el8ost.noarch.rpm

SHA-256: 4c08f18883defb90bbdead7e2c53331cf9e442a6e78af6f03c0c02817e778b1e

python3-oslo-utils-3.41.6-2.20230130154947.f4deaad.el8ost.noarch.rpm

SHA-256: d0d6033cda5361d8b6948191cf0c42d3c22f1215be0353aee50dc5839c56fafb

Red Hat OpenStack for IBM Power 16.1

SRPM

openstack-nova-20.4.1-1.20221005193231.1ee93b9.el8ost.src.rpm

SHA-256: 7220124502dab369c322624048d7d0d5239436b8266ce85769f41ba88ff15113

python-oslo-utils-3.41.6-1.20230130153634.f4deaad.el8ost.src.rpm

SHA-256: 93c364e8261f740ffb3d10509a25988d1c6a577b6b3ed633d20ed44676e9a7b9

ppc64le

openstack-nova-20.4.1-1.20221005193231.1ee93b9.el8ost.noarch.rpm

SHA-256: be13caa082116c0e6b4e8a04d0dd40c6576392f60409c740636f181075d4ba0d

openstack-nova-api-20.4.1-1.20221005193231.1ee93b9.el8ost.noarch.rpm

SHA-256: 6d71087171039bd0fe9c0909e1bbae4abc4c73d70ba264ae8d46556d0b76bfe6

openstack-nova-common-20.4.1-1.20221005193231.1ee93b9.el8ost.noarch.rpm

SHA-256: c64606bc92464541b275046f15d2cadd3b9c52628b1626c38188a784ebc27a63

openstack-nova-compute-20.4.1-1.20221005193231.1ee93b9.el8ost.noarch.rpm

SHA-256: b5e6999b0dcda728b4e2f1d59ed0ca2d473794db523b0638b8a0b57247028523

openstack-nova-conductor-20.4.1-1.20221005193231.1ee93b9.el8ost.noarch.rpm

SHA-256: 94ff706fb1b46a6a7a456847f63fc7fbdf4cf53c867dd6136e272cf5a0a86017

openstack-nova-console-20.4.1-1.20221005193231.1ee93b9.el8ost.noarch.rpm

SHA-256: 249599b98112506734db2540e9aa1678c6030e00de9d34966692afd914886558

openstack-nova-migration-20.4.1-1.20221005193231.1ee93b9.el8ost.noarch.rpm

SHA-256: 1d3d3fb076513ec1479a2b1dbb74b9b91b890cbf9e7020c02ce29f58dd58d39f

openstack-nova-novncproxy-20.4.1-1.20221005193231.1ee93b9.el8ost.noarch.rpm

SHA-256: f0a40920b7cdcc72585117acc2b60b31049b8e50889c5971817f60c8f9a994ca

openstack-nova-scheduler-20.4.1-1.20221005193231.1ee93b9.el8ost.noarch.rpm

SHA-256: cf979c1000d54eaceadd4eaaf36a1cc90e919198299c17577849903f8cb4151e

openstack-nova-serialproxy-20.4.1-1.20221005193231.1ee93b9.el8ost.noarch.rpm

SHA-256: cf81b5aeb68916749b70df579dc5ad17ba17ba40938caa91f8d3cfa7dec839f5

openstack-nova-spicehtml5proxy-20.4.1-1.20221005193231.1ee93b9.el8ost.noarch.rpm

SHA-256: a16b29e6a0ae38d9311019fea1de07ac0158c033c74e74fe3b3643731746be66

python-oslo-utils-lang-3.41.6-1.20230130153634.f4deaad.el8ost.noarch.rpm

SHA-256: 554cca3b76f4655723cc338f3a30f83bcb788747e5464b63f15fc2b69595d547

python3-nova-20.4.1-1.20221005193231.1ee93b9.el8ost.noarch.rpm

SHA-256: e69acec52687dec440285a0a54f6235b434080d8d3c138028b2d458dbc75694a

python3-oslo-utils-3.41.6-1.20230130153634.f4deaad.el8ost.noarch.rpm

SHA-256: 433d72d8e741a46f6628732f306bfed5ca71d8e48550ba71f22304f16d1d07ba

Red Hat OpenStack 16.2

SRPM

openstack-nova-20.6.2-2.20221005185231.6786e96.el8ost.src.rpm

SHA-256: 84439bfc56613d4ea030af6956839d4a3eade9b69beeea2c44128909be5729f1

python-oslo-utils-3.41.6-2.20230130154947.f4deaad.el8ost.src.rpm

SHA-256: dfbf41e1d58308262b331f65db8411aed9c0792a93dc0b8f4b43e34b969c58bb

x86_64