This update for openstack-heat, openstack-swift, python-Werkzeug contains the following fixes:
Security fixes included in this update:
openstack-heat: - CVE-2023-1625: Fixed an issue where parameter values marked as 'hidden' would be shown in the stack's environment (bsc#1209774).
openstack-swift: - CVE-2022-47950: Fixed a local file disclosure that could be triggered by an authenticated attacker by supplying a malicious XML (bnc#1207035).
python-Werkzeug: - CVE-2023-25577: Fixed an unbounded resource usage when parsing multipart forms with many fields (bsc#1208283).
Non security changes on this update:
Changes in openstack-heat: - Honor 'hidden' parameter in 'stack environment show' command. (bsc#1209774, CVE-2023-1625)
Changes in openstack-swift: - Prevent XXE injections in API. (bsc#1207035, CVE-2022-47950)
Changes in python-Werkzeug; - Limit maximum number of multipart form parts. (bsc#1208283, CVE-2023-25577)
{ "binaries": [ { "python-Werkzeug": "0.14.1-3.6.2", "openstack-swift-proxy": "2.19.3~dev3-3.6.3", "openstack-heat-api": "11.0.4~dev4-3.24.4", "openstack-heat-engine": "11.0.4~dev4-3.24.4", "openstack-swift-object": "2.19.3~dev3-3.6.3", "python-swift": "2.19.3~dev3-3.6.3", "venv-openstack-heat-x86_64": "11.0.4~dev4-3.43.2", "venv-openstack-magnum-x86_64": "7.2.1~dev1-4.41.3", "openstack-swift-container": "2.19.3~dev3-3.6.3", "openstack-swift": "2.19.3~dev3-3.6.3", "openstack-heat-plugin-heat_docker": "11.0.4~dev4-3.24.4", "openstack-heat": "11.0.4~dev4-3.24.4", "venv-openstack-swift-x86_64": "2.19.3~dev3-2.36.3", "openstack-swift-account": "2.19.3~dev3-3.6.3", "venv-openstack-octavia-x86_64": "3.2.3~dev7-4.41.2", "venv-openstack-sahara-x86_64": "9.0.2~dev15-3.41.2", "openstack-heat-api-cfn": "11.0.4~dev4-3.24.4", "venv-openstack-keystone-x86_64": "14.2.1~dev9-3.42.2", "venv-openstack-designate-x86_64": "7.0.2~dev2-3.41.2", "python-heat": "11.0.4~dev4-3.24.4" } ] }
{ "binaries": [ { "python-Werkzeug": "0.14.1-3.6.2", "openstack-swift-proxy": "2.19.3~dev3-3.6.3", "openstack-heat-api": "11.0.4~dev4-3.24.4", "openstack-heat-engine": "11.0.4~dev4-3.24.4", "openstack-swift-object": "2.19.3~dev3-3.6.3", "python-swift": "2.19.3~dev3-3.6.3", "venv-openstack-heat-x86_64": "11.0.4~dev4-3.43.2", "venv-openstack-magnum-x86_64": "7.2.1~dev1-4.41.3", "openstack-swift-container": "2.19.3~dev3-3.6.3", "openstack-swift": "2.19.3~dev3-3.6.3", "openstack-heat-plugin-heat_docker": "11.0.4~dev4-3.24.4", "openstack-heat": "11.0.4~dev4-3.24.4", "venv-openstack-swift-x86_64": "2.19.3~dev3-2.36.3", "openstack-swift-account": "2.19.3~dev3-3.6.3", "venv-openstack-octavia-x86_64": "3.2.3~dev7-4.41.2", "venv-openstack-sahara-x86_64": "9.0.2~dev15-3.41.2", "openstack-heat-api-cfn": "11.0.4~dev4-3.24.4", "venv-openstack-keystone-x86_64": "14.2.1~dev9-3.42.2", "venv-openstack-designate-x86_64": "7.0.2~dev2-3.41.2", "python-heat": "11.0.4~dev4-3.24.4" } ] }
{ "binaries": [ { "python-Werkzeug": "0.14.1-3.6.2", "openstack-swift-proxy": "2.19.3~dev3-3.6.3", "openstack-heat-api": "11.0.4~dev4-3.24.4", "openstack-heat-engine": "11.0.4~dev4-3.24.4", "openstack-swift-object": "2.19.3~dev3-3.6.3", "python-swift": "2.19.3~dev3-3.6.3", "venv-openstack-heat-x86_64": "11.0.4~dev4-3.43.2", "venv-openstack-magnum-x86_64": "7.2.1~dev1-4.41.3", "openstack-swift-container": "2.19.3~dev3-3.6.3", "openstack-swift": "2.19.3~dev3-3.6.3", "openstack-heat-plugin-heat_docker": "11.0.4~dev4-3.24.4", "openstack-heat": "11.0.4~dev4-3.24.4", "venv-openstack-swift-x86_64": "2.19.3~dev3-2.36.3", "openstack-swift-account": "2.19.3~dev3-3.6.3", "venv-openstack-octavia-x86_64": "3.2.3~dev7-4.41.2", "venv-openstack-sahara-x86_64": "9.0.2~dev15-3.41.2", "openstack-heat-api-cfn": "11.0.4~dev4-3.24.4", "venv-openstack-keystone-x86_64": "14.2.1~dev9-3.42.2", "venv-openstack-designate-x86_64": "7.0.2~dev2-3.41.2", "python-heat": "11.0.4~dev4-3.24.4" } ] }
{ "binaries": [ { "python-Werkzeug": "0.14.1-3.6.2", "openstack-swift-proxy": "2.19.3~dev3-3.6.3", "openstack-heat-api": "11.0.4~dev4-3.24.4", "openstack-heat-engine": "11.0.4~dev4-3.24.4", "openstack-swift-object": "2.19.3~dev3-3.6.3", "python-swift": "2.19.3~dev3-3.6.3", "venv-openstack-heat-x86_64": "11.0.4~dev4-3.43.2", "venv-openstack-magnum-x86_64": "7.2.1~dev1-4.41.3", "openstack-swift-container": "2.19.3~dev3-3.6.3", "openstack-swift": "2.19.3~dev3-3.6.3", "openstack-heat-plugin-heat_docker": "11.0.4~dev4-3.24.4", "openstack-heat": "11.0.4~dev4-3.24.4", "venv-openstack-swift-x86_64": "2.19.3~dev3-2.36.3", "openstack-swift-account": "2.19.3~dev3-3.6.3", "venv-openstack-octavia-x86_64": "3.2.3~dev7-4.41.2", "venv-openstack-sahara-x86_64": "9.0.2~dev15-3.41.2", "openstack-heat-api-cfn": "11.0.4~dev4-3.24.4", "venv-openstack-keystone-x86_64": "14.2.1~dev9-3.42.2", "venv-openstack-designate-x86_64": "7.0.2~dev2-3.41.2", "python-heat": "11.0.4~dev4-3.24.4" } ] }
{ "binaries": [ { "python-Werkzeug": "0.14.1-3.6.2", "openstack-swift-proxy": "2.19.3~dev3-3.6.3", "openstack-heat-api": "11.0.4~dev4-3.24.4", "openstack-heat-engine": "11.0.4~dev4-3.24.4", "openstack-swift-object": "2.19.3~dev3-3.6.3", "python-swift": "2.19.3~dev3-3.6.3", "venv-openstack-heat-x86_64": "11.0.4~dev4-3.43.2", "venv-openstack-magnum-x86_64": "7.2.1~dev1-4.41.3", "openstack-swift-container": "2.19.3~dev3-3.6.3", "openstack-swift": "2.19.3~dev3-3.6.3", "openstack-heat-plugin-heat_docker": "11.0.4~dev4-3.24.4", "openstack-heat": "11.0.4~dev4-3.24.4", "venv-openstack-swift-x86_64": "2.19.3~dev3-2.36.3", "openstack-swift-account": "2.19.3~dev3-3.6.3", "venv-openstack-octavia-x86_64": "3.2.3~dev7-4.41.2", "venv-openstack-sahara-x86_64": "9.0.2~dev15-3.41.2", "openstack-heat-api-cfn": "11.0.4~dev4-3.24.4", "venv-openstack-keystone-x86_64": "14.2.1~dev9-3.42.2", "venv-openstack-designate-x86_64": "7.0.2~dev2-3.41.2", "python-heat": "11.0.4~dev4-3.24.4" } ] }
{ "binaries": [ { "python-Werkzeug": "0.14.1-3.6.2", "openstack-swift-proxy": "2.19.3~dev3-3.6.3", "openstack-heat-api": "11.0.4~dev4-3.24.4", "openstack-heat-engine": "11.0.4~dev4-3.24.4", "openstack-swift-object": "2.19.3~dev3-3.6.3", "python-swift": "2.19.3~dev3-3.6.3", "venv-openstack-heat-x86_64": "11.0.4~dev4-3.43.2", "venv-openstack-magnum-x86_64": "7.2.1~dev1-4.41.3", "openstack-swift-container": "2.19.3~dev3-3.6.3", "openstack-swift": "2.19.3~dev3-3.6.3", "openstack-heat-plugin-heat_docker": "11.0.4~dev4-3.24.4", "openstack-heat": "11.0.4~dev4-3.24.4", "venv-openstack-swift-x86_64": "2.19.3~dev3-2.36.3", "openstack-swift-account": "2.19.3~dev3-3.6.3", "venv-openstack-octavia-x86_64": "3.2.3~dev7-4.41.2", "venv-openstack-sahara-x86_64": "9.0.2~dev15-3.41.2", "openstack-heat-api-cfn": "11.0.4~dev4-3.24.4", "venv-openstack-keystone-x86_64": "14.2.1~dev9-3.42.2", "venv-openstack-designate-x86_64": "7.0.2~dev2-3.41.2", "python-heat": "11.0.4~dev4-3.24.4" } ] }
{ "binaries": [ { "python-Werkzeug": "0.14.1-3.6.2", "openstack-swift-proxy": "2.19.3~dev3-3.6.3", "openstack-heat-api": "11.0.4~dev4-3.24.4", "openstack-heat-engine": "11.0.4~dev4-3.24.4", "openstack-swift-object": "2.19.3~dev3-3.6.3", "python-swift": "2.19.3~dev3-3.6.3", "venv-openstack-heat-x86_64": "11.0.4~dev4-3.43.2", "venv-openstack-magnum-x86_64": "7.2.1~dev1-4.41.3", "openstack-swift-container": "2.19.3~dev3-3.6.3", "openstack-swift": "2.19.3~dev3-3.6.3", "openstack-heat-plugin-heat_docker": "11.0.4~dev4-3.24.4", "openstack-heat": "11.0.4~dev4-3.24.4", "venv-openstack-swift-x86_64": "2.19.3~dev3-2.36.3", "openstack-swift-account": "2.19.3~dev3-3.6.3", "venv-openstack-octavia-x86_64": "3.2.3~dev7-4.41.2", "venv-openstack-sahara-x86_64": "9.0.2~dev15-3.41.2", "openstack-heat-api-cfn": "11.0.4~dev4-3.24.4", "venv-openstack-keystone-x86_64": "14.2.1~dev9-3.42.2", "venv-openstack-designate-x86_64": "7.0.2~dev2-3.41.2", "python-heat": "11.0.4~dev4-3.24.4" } ] }
{ "binaries": [ { "python-Werkzeug": "0.14.1-3.6.2", "openstack-swift-proxy": "2.19.3~dev3-3.6.3", "openstack-heat-api": "11.0.4~dev4-3.24.4", "openstack-heat-engine": "11.0.4~dev4-3.24.4", "openstack-swift-object": "2.19.3~dev3-3.6.3", "python-swift": "2.19.3~dev3-3.6.3", "venv-openstack-heat-x86_64": "11.0.4~dev4-3.43.2", "venv-openstack-magnum-x86_64": "7.2.1~dev1-4.41.3", "openstack-swift-container": "2.19.3~dev3-3.6.3", "openstack-swift": "2.19.3~dev3-3.6.3", "openstack-heat-plugin-heat_docker": "11.0.4~dev4-3.24.4", "openstack-heat": "11.0.4~dev4-3.24.4", "venv-openstack-swift-x86_64": "2.19.3~dev3-2.36.3", "openstack-swift-account": "2.19.3~dev3-3.6.3", "venv-openstack-octavia-x86_64": "3.2.3~dev7-4.41.2", "venv-openstack-sahara-x86_64": "9.0.2~dev15-3.41.2", "openstack-heat-api-cfn": "11.0.4~dev4-3.24.4", "venv-openstack-keystone-x86_64": "14.2.1~dev9-3.42.2", "venv-openstack-designate-x86_64": "7.0.2~dev2-3.41.2", "python-heat": "11.0.4~dev4-3.24.4" } ] }
{ "binaries": [ { "python-Werkzeug": "0.14.1-3.6.2", "openstack-swift-proxy": "2.19.3~dev3-3.6.3", "openstack-heat-api": "11.0.4~dev4-3.24.4", "openstack-heat-engine": "11.0.4~dev4-3.24.4", "openstack-swift-object": "2.19.3~dev3-3.6.3", "python-swift": "2.19.3~dev3-3.6.3", "venv-openstack-heat-x86_64": "11.0.4~dev4-3.43.2", "venv-openstack-magnum-x86_64": "7.2.1~dev1-4.41.3", "openstack-swift-container": "2.19.3~dev3-3.6.3", "openstack-swift": "2.19.3~dev3-3.6.3", "openstack-heat-plugin-heat_docker": "11.0.4~dev4-3.24.4", "openstack-heat": "11.0.4~dev4-3.24.4", "venv-openstack-swift-x86_64": "2.19.3~dev3-2.36.3", "openstack-swift-account": "2.19.3~dev3-3.6.3", "venv-openstack-octavia-x86_64": "3.2.3~dev7-4.41.2", "venv-openstack-sahara-x86_64": "9.0.2~dev15-3.41.2", "openstack-heat-api-cfn": "11.0.4~dev4-3.24.4", "venv-openstack-keystone-x86_64": "14.2.1~dev9-3.42.2", "venv-openstack-designate-x86_64": "7.0.2~dev2-3.41.2", "python-heat": "11.0.4~dev4-3.24.4" } ] }
{ "binaries": [ { "python-Werkzeug": "0.14.1-3.6.2", "openstack-swift-proxy": "2.19.3~dev3-3.6.3", "openstack-heat-api": "11.0.4~dev4-3.24.4", "openstack-heat-engine": "11.0.4~dev4-3.24.4", "openstack-swift-object": "2.19.3~dev3-3.6.3", "python-swift": "2.19.3~dev3-3.6.3", "venv-openstack-heat-x86_64": "11.0.4~dev4-3.43.2", "venv-openstack-magnum-x86_64": "7.2.1~dev1-4.41.3", "openstack-swift-container": "2.19.3~dev3-3.6.3", "openstack-swift": "2.19.3~dev3-3.6.3", "openstack-heat-plugin-heat_docker": "11.0.4~dev4-3.24.4", "openstack-heat": "11.0.4~dev4-3.24.4", "venv-openstack-swift-x86_64": "2.19.3~dev3-2.36.3", "openstack-swift-account": "2.19.3~dev3-3.6.3", "venv-openstack-octavia-x86_64": "3.2.3~dev7-4.41.2", "venv-openstack-sahara-x86_64": "9.0.2~dev15-3.41.2", "openstack-heat-api-cfn": "11.0.4~dev4-3.24.4", "venv-openstack-keystone-x86_64": "14.2.1~dev9-3.42.2", "venv-openstack-designate-x86_64": "7.0.2~dev2-3.41.2", "python-heat": "11.0.4~dev4-3.24.4" } ] }
{ "binaries": [ { "openstack-heat-plugin-heat_docker": "11.0.4~dev4-3.24.4", "openstack-heat": "11.0.4~dev4-3.24.4", "python-Werkzeug": "0.14.1-3.6.2", "openstack-swift-account": "2.19.3~dev3-3.6.3", "openstack-heat-api": "11.0.4~dev4-3.24.4", "openstack-swift-proxy": "2.19.3~dev3-3.6.3", "openstack-heat-api-cfn": "11.0.4~dev4-3.24.4", "openstack-heat-engine": "11.0.4~dev4-3.24.4", "openstack-swift-object": "2.19.3~dev3-3.6.3", "python-swift": "2.19.3~dev3-3.6.3", "python-heat": "11.0.4~dev4-3.24.4", "openstack-swift-container": "2.19.3~dev3-3.6.3", "openstack-swift": "2.19.3~dev3-3.6.3" } ] }
{ "binaries": [ { "openstack-heat-plugin-heat_docker": "11.0.4~dev4-3.24.4", "openstack-heat": "11.0.4~dev4-3.24.4", "python-Werkzeug": "0.14.1-3.6.2", "openstack-swift-account": "2.19.3~dev3-3.6.3", "openstack-heat-api": "11.0.4~dev4-3.24.4", "openstack-swift-proxy": "2.19.3~dev3-3.6.3", "openstack-heat-api-cfn": "11.0.4~dev4-3.24.4", "openstack-heat-engine": "11.0.4~dev4-3.24.4", "openstack-swift-object": "2.19.3~dev3-3.6.3", "python-swift": "2.19.3~dev3-3.6.3", "python-heat": "11.0.4~dev4-3.24.4", "openstack-swift-container": "2.19.3~dev3-3.6.3", "openstack-swift": "2.19.3~dev3-3.6.3" } ] }
{ "binaries": [ { "openstack-heat-plugin-heat_docker": "11.0.4~dev4-3.24.4", "openstack-heat": "11.0.4~dev4-3.24.4", "python-Werkzeug": "0.14.1-3.6.2", "openstack-swift-account": "2.19.3~dev3-3.6.3", "openstack-heat-api": "11.0.4~dev4-3.24.4", "openstack-swift-proxy": "2.19.3~dev3-3.6.3", "openstack-heat-api-cfn": "11.0.4~dev4-3.24.4", "openstack-heat-engine": "11.0.4~dev4-3.24.4", "openstack-swift-object": "2.19.3~dev3-3.6.3", "python-swift": "2.19.3~dev3-3.6.3", "python-heat": "11.0.4~dev4-3.24.4", "openstack-swift-container": "2.19.3~dev3-3.6.3", "openstack-swift": "2.19.3~dev3-3.6.3" } ] }