An update for python-scciclient is now available for Red Hat OpenStack Platform 17.0 (Wallaby). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: Red Hat OpenStack Platform 17.0 (python-scciclient) security update Advisory ID: RHSA-2023:0276-01 Product: Red Hat OpenStack Platform Advisory URL: https://access.redhat.com/errata/RHSA-2023:0276 Issue date: 2023-01-25 CVE Names: CVE-2022-2996 ==================================================================== 1. Summary: An update for python-scciclient is now available for Red Hat OpenStack Platform 17.0 (Wallaby). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat OpenStack Platform 17.0 - noarch 3. Description: Python ServerView Common Command Interface (SCCI) Client Library Security Fix(es): * missing server certificate verification (CVE-2022-2996) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2115122 - CVE-2022-2996 python-scciclient: missing server certificate verification 6. Package List: Red Hat OpenStack Platform17.0: Source: python-scciclient-0.10.2-0.20220830130628.b8e6e34.el9ost.src.rpm noarch: python3-scciclient-0.10.2-0.20220830130628.b8e6e34.el9ost.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2022-2996 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBY9FaJtzjgjWX9erEAQhufA//bWy0OyM6jUJ3nj4S9QWL0ASzN30fhQEI uUzP1z0ENI+gjeuRGR8Rn3ybLUPxvPnUTsIowVmDoYW3nFsWnqtPYOrMp6ge0kWX UIGTQcS3GFVOW7rc9u3DP0yuuZS5e/UbDuFqsiF/tQSi1Ra3t5rPmNnhLzB/AZax e0NYQOJMaODRmBO1dRYXz2HfRhxoHazbwCK67CB2upbeWO9Vyt3K42oVhaQJWEsM uVcRuvKkIvL4IypiJDP9dpu3j59LSVAh0e2q0Y77hFGnoa1UI/wV4F6Satbq6QZW ClT05TqxajjEeNxye8dlWtW4GCXs5RsyJTnKOKce8toEtz4wqjxfcQNEl5JMXUjj 5xpTGJ3ItPWRpu75eLXR6onUnwE4y+spQTMJVc+NfoHgdiCjIHsq7AbSoCJzYD0q yg9yrHmjWHGVqbg2iOZu521ZpYVV4ZaxAKcPJVBIhEMNEWBfJ4UJbIV1tFcO/dUb ARRBnLVC7pBsujaJkGIFuGC9PPBmqqX5usbrxsHMfSjLN3lzVAikPVEQKTQLrmXp NVAjd0cHbD0LH8VY3xvX1HjZD7lDTlybEKnKCC3sHEGBVNhk+V/cwrbTMxl5F1VC idVUvhbSx6DmRNGQImg4i+Q8A29QLm+T4r4TFlJoyrKxhIJn0UsjAw5zOS/kyRJz 7kWpDHK2bQg=D7Oe -----END PGP SIGNATURE----- -- RHSA-announce mailing list
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for tigervnc ______________________________________________________________________________ Announcement ID: SUSE-SU-2020:2882-1 Rating: critical References: #1176733 Cross-References: CVE-2020-26117 Affected Products: SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise High Performance Computing 15-ESPOS ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for tigervnc fixes the following issues: - CVE-2020-26117: Server certificates were stored as certiticate authorities, allowing malicious owners of these certificates to impersonate any server after a client had added an exception (bsc#1176733) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2020-2882=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2020-2882=1 - SUSE Linux Enterprise High Performance Computing 15-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-2020-2882=1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-2020-2882=1 Package List: - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64): libXvnc1-1.8.0-13.14.1 libXvnc1-debuginfo-1.8.0-13.14.1 tigervnc-1.8.0-13.14.1 tigervnc-debuginfo-1.8.0-13.14.1 tigervnc-debugsource-1.8.0-13.14.1 xorg-x11-Xvnc-1.8.0-13.14.1 xorg-x11-Xvnc-debuginfo-1.8.0-13.14.1 - SUSE Linux Enterprise Server for SAP 15 (noarch): xorg-x11-Xvnc-novnc-1.8.0-13.14.1 - SUSE Linux Enterprise Server 15-LTSS (aarch64 s390x): libXvnc1-1.8.0-13.14.1 libXvnc1-debuginfo-1.8.0-13.14.1 tigervnc-1.8.0-13.14.1 tigervnc-debuginfo-1.8.0-13.14.1 tigervnc-debugsource-1.8.0-13.14.1 xorg-x11-Xvnc-1.8.0-13.14.1 xorg-x11-Xvnc-debuginfo-1.8.0-13.14.1 - SUSE Linux Enterprise Server 15-LTSS (noarch): xorg-x11-Xvnc-novnc-1.8.0-13.14.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (aarch64 x86_64): libXvnc1-1.8.0-13.14.1 libXvnc1-debuginfo-1.8.0-13.14.1 tigervnc-1.8.0-13.14.1 tigervnc-debuginfo-1.8.0-13.14.1 tigervnc-debugsource-1.8.0-13.14.1 xorg-x11-Xvnc-1.8.0-13.14.1 xorg-x11-Xvnc-debuginfo-1.8.0-13.14.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (noarch): xorg-x11-Xvnc-novnc-1.8.0-13.14.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (aarch64 x86_64): libXvnc1-1.8.0-13.14.1 libXvnc1-debuginfo-1.8.0-13.14.1 tigervnc-1.8.0-13.14.1 tigervnc-debuginfo-1.8.0-13.14.1 tigervnc-debugsource-1.8.0-13.14.1 xorg-x11-Xvnc-1.8.0-13.14.1 xorg-x11-Xvnc-debuginfo-1.8.0-13.14.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (noarch): xorg-x11-Xvnc-novnc-1.8.0-13.14.1 References: https://www.suse.com/security/cve/CVE-2020-26117.html https://bugzilla.suse.com/1176733 _______________________________________________ sle-security-updates mailing list
Get the latest Linux and open source security news straight to your inbox.