Red Hat Security Advisory

RHSA-2022:7238

Red Hat OpenStack Platform (puppet-mysql) security update

Released 2022-10-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 13.0 - ELS puppet-mysql-5.2.2-0.20180216012143.a5497b2.el7ost
Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server puppet-mysql-5.2.2-0.20180216012143.a5497b2.el7ost
Red Hat OpenStack Platform 16.1 puppet-mysql-10.4.1-2.20221019195006.95f9b98.el8ost
Red Hat OpenStack Platform 16.2 puppet-mysql-10.4.1-2.20221019195006.95f9b98.el8ost
Red Hat OpenStack Platform 17.0 puppet-mysql-10.6.1-0.20220614215045.937d044.el9ost

TI-2022-03026 CVE-2022-3276 · GHSA-6wx8-c453-jp55

MEDIUM 41

Command injection is possible in the puppetlabs-mysql module prior to version 13.0.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01686 Published 2022-10-07 Fixed in 13.0.0 CWE-78