Red Hat Security Advisory

RHSA-2024:10761

rhc-worker-playbook security update

Released 2024-12-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) rhc-worker-playbook-0.1.10-1.el9_5

Fixes 4 records

TI-2022-19472 CVE-2022-40898 · GHSA-qwmp-2cf2-g9g6

An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows…

HIGH 72

An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02837 Published 2022-12-22 Partial fix · 0.38.1 CWE-20

TI-2023-16822 CVE-2023-33953 · GHSA-496j-2rq6-j6cc

Denial-of-Service in gRPC

LOW 39

gRPC contains a vulnerability that allows hpack table accounting errors could lead to unwanted disconnects between clients and servers in exceptional cases/ Three vectors were found that allow the following DOS attacks:…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00479 Published 2023-08-09 Fixed in 1.56.1, 1.53.2 +3 CWE-789

TI-2023-01349 CVE-2023-1428 · GHSA-6628-q6j9-w8vg

Denial-of-Service in gRPC

LOW 39

There exists an vulnerability causing an abort() to be called in gRPC.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00406 Published 2023-06-09 Partial fix · 1.53, 1.53.0 CWE-617

TI-2023-15998 CVE-2023-32731 · GHSA-cfgp-2977-2fmm

Information leak in gRPC

LOW 33

When gRPC HTTP2 stack raised a header size exceeded error, it skipped parsing the rest of the HPACK frame.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00498 Published 2023-06-09 Partial fix · 1.53.1, 1.54.2 CWE-440