Alerts This Week
Warning Icon 1 659
Alerts This Week
Warning Icon 1 659

Fedora 35: Security Update for python-virtualbmc Enhances Remote Access

fedora
Calendar Grey November 28, 2022
Dist Fedora Esm H88
Tackling CVE-2022-44020, Fedora's python-virtualbmc enhancement bolsters security for virtual environments overseeing machines.
Security fix for CVE-2022-44020

Summary

A virtual BMC for controlling virtual machines using IPMI commands.

Security fix for CVE-2022-44020

* Wed Oct 26 2022 Juan Orti Alcaine - 3.0.0-1

- Version 3.0.0 (#2137838)

* Fri Jul 22 2022 Fedora Release Engineering - 2.2.2-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

* Wed Jul 6 2022 Python Maint - 2.2.2-2

- Rebuilt for Python 3.11

* Sat Jun 18 2022 Juan Orti Alcaine - 2.2.2-1

- Version 2.2.2 (#2098114)

* Wed Mar 9 2022 Juan Orti Alcaine - 2.2.1-5

- Move polkit rule to /usr/share/polkit-1/rules.d

* Thu Jan 27 2022 Juan Orti Alcaine - 2.2.1-4

- BR: python3-autopage

* Fri Jan 21 2022 Fedora Release Engineering - 2.2.1-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

* Tue Oct 26 2021 Juan Orti Alcaine - 2.2.1-2

- Create vbmcd user with systemd sysusers

* Fri Oct 22 2021 Juan Orti Alcaine - 2.2.1-1

- Version 2.2.1 (#1968102)

[ 1 ] Bug #2142678 - CVE-2022-44020 Sushy-Tools & VirtualBMC: removes password protection from the managed libvirt XML domain

https://bugzilla.redhat.com/show_bug.cgi?id=2142678

su -c 'dnf upgrade --advisory FEDORA-2022-42723b43fe' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam, report it:

Change Log

References

Update Instructions

Severity
important
Lowest
Low
Medium
High
Critical

Product: Fedora 35
Version: 3.0.0
Release: 1.fc35
URL:
Summary: A virtual BMC for controlling virtual machines using IPMI commands

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here