RHSA-2022:6517 - Security Advisory

标题

Red Hat OpenStack Platform 16.2 (Train) director operator containers, with several Important security fixes, are available for technology preview.

描述

Release osp-director-operator images

Security Fix(es):

• CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read [important]
• CVE-2021-41103 golang: containerd: insufficiently restricted permissions on container root and plugin directories [medium]

解决方案

OSP 16.2.z Release - OSP Director Operator Containers

受影响的产品

• Red Hat OpenStack 16.2 x86_64

修复

• BZ - 2011007 - CVE-2021-41103 containerd: insufficiently restricted permissions on container root and plugin directories
• BZ - 2107342 - CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read

CVE

• CVE-2021-41103
• CVE-2022-1292
• CVE-2022-1586
• CVE-2022-2068
• CVE-2022-2097
• CVE-2022-30631

参考

• https://access.redhat.com/security/updates/classification/#important