Bug 2150181 - [OSP17.1] osp-rpm-py39 job unit test broken after upstream cpython vulnerability fix backport
Summary: [OSP17.1] osp-rpm-py39 job unit test broken after upstream cpython vulnerabil...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-nova
Version: 17.1 (Wallaby)
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: ---
Assignee: melanie witt
QA Contact: OSP DFG:Compute
URL:
Whiteboard:
Depends On:
Blocks: 2150182
TreeView+ depends on / blocked
 
Reported: 2022-12-02 01:43 UTC by melanie witt
Modified: 2023-08-16 01:13 UTC (History)
8 users (show)

Fixed In Version: openstack-nova-23.2.3-1.20221209191244.bbf626c.el9ost
Doc Type: No Doc Update
Doc Text:
Clone Of:
: 2150182 (view as bug list)
Environment:
Last Closed: 2023-08-16 01:12:55 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Launchpad 1986545 0 None None None 2022-12-02 01:43:43 UTC
Red Hat Issue Tracker OSP-20647 0 None None None 2022-12-02 01:44:38 UTC
Red Hat Product Errata RHEA-2023:4577 0 None None None 2023-08-16 01:13:40 UTC

Description melanie witt 2022-12-02 01:43:43 UTC 
This was reported and fixed upstream [1] and at the time, only python >= 3.10.6 was affected and fixed.

The fix has since been backported to older versions of python, so we need to backport the fix for [1].

[1] https://bugs.launchpad.net/nova/+bug/1986545
[2] https://python-security.readthedocs.io/vuln/http-server-redirection.html
Comment 12 errata-xmlrpc 2023-08-16 01:12:55 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Release of components for Red Hat OpenStack Platform 17.1 (Wallaby)), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2023:4577
Note You need to log in before you can comment on or make changes to this bug.