Issued:

2023-08-16

Updated:

2023-08-16

RHSA-2023:4582 - Moderate: Release of containers for Red Hat OpenStack Platform 17.1 director Operator

Synopsis

Moderate: Release of containers for Red Hat OpenStack Platform 17.1 director Operator

Type/Severity

Security Advisory Moderate

Topic

Red Hat OpenStack Platform 17.1 (Wallaby) director Operator containers are now available.

Description

Release of Red Hat OpenStack Platform 17.1 (Wallaby) director Operator containers provides these changes:

Security Fix(es):

• github.com/Masterminds/vcs: Command Injection via argument injection (CVE-2022-21235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

Fixes

• This content is not included.BZ - 2215019
• This content is not included.BZ - 2215317
• This content is not included.BZ - 2218299
• This content is not included.BZ - 2221326
• This content is not included.OSPK8-701

CVEs

• CVE-2022-21235

References

• https://access.redhat.com/security/updates/classification/#moderate
• https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/17.1/html/release_notes

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.