RHSA-2022:7238 Red Hat Security Advisory: Red Hat OpenStack Platform (puppet-mysql) security update

Bulletin has no description...

Code Injection

puppet-mysql is vulnerable to code injection. The vulnerability exists because the unsanitized input in the library which allows an attacker to inject and execute malicious code...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform (puppet-mysql) security update

An update for puppet-mysql is now available for Red Hat OpenStack Platform 13.0 Queens, 16.1 Train, 16.2 Train and 17.0 Wallaby. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2022-3276

Command injection is possible in the puppetlabs-mysql module prior to version 13.0.0. A malicious actor is able to exploit this vulnerability only if they are able to provide unsanitized input to the module. This condition is rare in most deployments of Puppet and Puppet Enterprise...