RHSA-2023:1079MediumCVSS 6.5
Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (osp-director-downloader-container, osp-director-agent-container and osp-director-operator-container) security update
🔗 CVE IDs covered (3)
📋 Description
CVE-2022-2879 — golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers CVE-2022-41715 — golang: regexp/syntax: limit memory used by parsing regexps CVE-2022-41717 — golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests
🎯 Affected products5
- Red Hat OpenStack Platform 16.2
- rhosp-rhel8/osp-director-agent@sha256:ebd4fcfacd4c31baee7498562d219ad6e7210a41b6b8cc05b6fc941b4c5d325f_amd64 as a component of Red Hat OpenStack Platform 16.2
- rhosp-rhel8/osp-director-downloader@sha256:967c3a522c29c2d4cc5e7cb5753d835d8cf6f81100c5c2f04fe8582de33e88e3_amd64 as a component of Red Hat OpenStack Platform 16.2
- rhosp-rhel8/osp-director-operator-bundle@sha256:10b0abbec12aecb237e4b25b059c1187bdbd63273ab8313bd9d51c9730caca99_amd64 as a component of Red Hat OpenStack Platform 16.2
- rhosp-rhel8/osp-director-operator@sha256:c49a0a5b2f1ff5068a4e6494ba3a1ccbebd9e2dfb6fd99364b9190d1225e19df_amd64 as a component of Red Hat OpenStack Platform 16.2
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2023:1079
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2132867
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2132872
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2161274
- externalhttps://issues.redhat.com/browse/OSPK8-664
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1079.json