Red Hat Security Advisory

RHSA-2022:0587

Service Telemetry Framework 1.3 (sg-core-container) security update

Released 2022-02-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Service Telemetry Framework 1.3 for RHEL 8 stf/sg-core-rhel8

Fixes 1 record

TI-2021-20237 CVE-2021-44716 · GHSA-vc3p-29h2-gpcp

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory…

MEDIUM 40

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04254 Published 2022-01-01 Partial fix · 0.0.0-20211209124913-491a49abca63 CWE-400