Red Hat Security Advisory

RHSA-2023:1079

Red Hat OpenStack Platform 16.2 (osp-director-downloader-container, osp-director-agent-container and osp-director-operator-container) security update

Released 2023-03-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 16.2 rhosp-rhel8/osp-director-agent, rhosp-rhel8/osp-director-downloader, rhosp-rhel8/osp-director-operator +1

TI-2022-02669 CVE-2022-2879 · GHSA-fqpx-62jv-7r6r

LOW 37

Reader.Read does not set a limit on the maximum size of file headers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02006 Published 2022-10-14 Partial fix · 1.18.7, 1.19.2 CWE-770

TI-2022-20107 CVE-2022-41715 · GHSA-5wvm-rxcf-6cg8

LOW 36

Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01726 Published 2022-10-14 Partial fix · 1.18.7, 1.19.2

TI-2022-20109 CVE-2022-41717 · GHSA-xrjj-mj9h-534m

LOW 33

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.06077 Published 2022-12-08 Partial fix · 1.18.9, 1.19.4 +1 CWE-770