Red Hat Security Advisory

RHSA-2022:6517

Release of containers for OSP 16.2.z director operator tech preview

Released 2022-09-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 16.2 rhosp-rhel8-tech-preview/osp-director-operator, rhosp-rhel8-tech-preview/osp-director-operator-bundle

Fixes 2 records

TI-2022-12767 CVE-2022-30631 · GHSA-r654-8j96-crqx

Stack exhaustion when reading certain archives in compress/gzip

LOW 37

Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via an archive containing a large number of concatenated 0-length compres…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02186 Published 2022-08-09 Partial fix · 1.17.12, 1.18.4 CWE-674

TI-2021-17944 CVE-2021-41103 · GHSA-c2h3-6mxw-7mvq

Insufficiently restricted permissions on plugin directories

LOW 35

containerd is an open source container runtime with an emphasis on simplicity, robustness and portability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00518 Published 2021-10-04 Partial fix · 1.4.11, 1.5.7 CWE-22