Skip to content
OpenAdvisories
Medium RHSA-2022:8896 1 CVE

Red Hat Security Advisory: Red Hat OpenStack Platform 13.0 (python-virtualbmc) security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · OpenStack 13 openstack:13::el7 python-virtualbmc 0:1.2.0-2.el7ost

Vulnerabilities 1

  • Medium 5.5
    CVE-2022-44020

    OpenStack Sushy-Tools and VirtualBMC Improper Preservation of Permissions

    An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packages removes password protection from the managed libvirt XML domain. NOTE: this only affects an "unsupported, …

    virtualbmc sushy-tools PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2142678
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8896.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-44020
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-44020
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-44020
  • article
    https://review.opendev.org/c/openstack/sushy-tools/+/862625
  • article
    https://review.opendev.org/c/openstack/virtualbmc/+/862620
  • article
    https://storyboard.openstack.org/#!/story/2010382