Red Hat Product Errata RHSA-2023:2222 - Security Advisory
Issued:
2023-05-09
Updated:
2023-05-09

RHSA-2023:2222 - Security Advisory

Synopsis

Moderate: conmon security and bug fix update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for conmon is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Conmon is an OCI container runtime monitor.

Security Fix(es):

  • golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.2 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.2 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.4 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.2 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.2 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.2 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.2 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x

Fixes

  • BZ - 2129080 - conmon bug fix and enhancement update [rhel-9.2.0]
  • BZ - 2154417 - podman gating test issues in RHEL9.0 (bump conmon-2.1.4)
  • BZ - 2161274 - CVE-2022-41717 golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests
  • BZ - 2173697 - Fails to run containers with kernel-rt and cgroups v1

Red Hat Enterprise Linux for x86_64 9

SRPM
conmon-2.1.7-1.el9_2.src.rpm SHA-256: c0e3fa21c27cd6041b694ac4567fbeb639d94dfdc045a5a68bd7af6da24d803b
x86_64
conmon-2.1.7-1.el9_2.x86_64.rpm SHA-256: b5ffbceafd2bd87e50fcc0268f822bb399e3db4bed0478e0f6776458a066fd74
conmon-debuginfo-2.1.7-1.el9_2.x86_64.rpm SHA-256: c422118e29b0da3b02b195caba613322cba06b2629ae77c2f1cec60968e0ea85
conmon-debugsource-2.1.7-1.el9_2.x86_64.rpm SHA-256: 9a697f5eaf90925e71cb9149854b64e24377cf09f587e6b1664b1d8d8bb4dd4b

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4

SRPM
conmon-2.1.7-1.el9_2.src.rpm SHA-256: c0e3fa21c27cd6041b694ac4567fbeb639d94dfdc045a5a68bd7af6da24d803b
x86_64
conmon-2.1.7-1.el9_2.x86_64.rpm SHA-256: b5ffbceafd2bd87e50fcc0268f822bb399e3db4bed0478e0f6776458a066fd74
conmon-debuginfo-2.1.7-1.el9_2.x86_64.rpm SHA-256: c422118e29b0da3b02b195caba613322cba06b2629ae77c2f1cec60968e0ea85
conmon-debugsource-2.1.7-1.el9_2.x86_64.rpm SHA-256: 9a697f5eaf90925e71cb9149854b64e24377cf09f587e6b1664b1d8d8bb4dd4b

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.2

SRPM
conmon-2.1.7-1.el9_2.src.rpm SHA-256: c0e3fa21c27cd6041b694ac4567fbeb639d94dfdc045a5a68bd7af6da24d803b
x86_64
conmon-2.1.7-1.el9_2.x86_64.rpm SHA-256: b5ffbceafd2bd87e50fcc0268f822bb399e3db4bed0478e0f6776458a066fd74
conmon-debuginfo-2.1.7-1.el9_2.x86_64.rpm SHA-256: c422118e29b0da3b02b195caba613322cba06b2629ae77c2f1cec60968e0ea85
conmon-debugsource-2.1.7-1.el9_2.x86_64.rpm SHA-256: 9a697f5eaf90925e71cb9149854b64e24377cf09f587e6b1664b1d8d8bb4dd4b

Red Hat Enterprise Linux Server - AUS 9.4

SRPM
conmon-2.1.7-1.el9_2.src.rpm SHA-256: c0e3fa21c27cd6041b694ac4567fbeb639d94dfdc045a5a68bd7af6da24d803b
x86_64
conmon-2.1.7-1.el9_2.x86_64.rpm SHA-256: b5ffbceafd2bd87e50fcc0268f822bb399e3db4bed0478e0f6776458a066fd74
conmon-debuginfo-2.1.7-1.el9_2.x86_64.rpm SHA-256: c422118e29b0da3b02b195caba613322cba06b2629ae77c2f1cec60968e0ea85
conmon-debugsource-2.1.7-1.el9_2.x86_64.rpm SHA-256: 9a697f5eaf90925e71cb9149854b64e24377cf09f587e6b1664b1d8d8bb4dd4b

Red Hat Enterprise Linux Server - AUS 9.2

SRPM
conmon-2.1.7-1.el9_2.src.rpm SHA-256: c0e3fa21c27cd6041b694ac4567fbeb639d94dfdc045a5a68bd7af6da24d803b
x86_64
conmon-2.1.7-1.el9_2.x86_64.rpm SHA-256: b5ffbceafd2bd87e50fcc0268f822bb399e3db4bed0478e0f6776458a066fd74
conmon-debuginfo-2.1.7-1.el9_2.x86_64.rpm SHA-256: c422118e29b0da3b02b195caba613322cba06b2629ae77c2f1cec60968e0ea85
conmon-debugsource-2.1.7-1.el9_2.x86_64.rpm SHA-256: 9a697f5eaf90925e71cb9149854b64e24377cf09f587e6b1664b1d8d8bb4dd4b

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
conmon-2.1.7-1.el9_2.src.rpm SHA-256: c0e3fa21c27cd6041b694ac4567fbeb639d94dfdc045a5a68bd7af6da24d803b
s390x
conmon-2.1.7-1.el9_2.s390x.rpm SHA-256: 0ff51261f41f033f0781dae9045b0212b61c974afe65596b2ff0788147b6a6db
conmon-debuginfo-2.1.7-1.el9_2.s390x.rpm SHA-256: df0574a31929b28396998089f97a352b79e8a47403e121bf304ed387a5cea603
conmon-debugsource-2.1.7-1.el9_2.s390x.rpm SHA-256: d7e70ce070e5815810770336a0d77618e2ada6c1921eac1f0a6dcce5575e06ce

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4

SRPM
conmon-2.1.7-1.el9_2.src.rpm SHA-256: c0e3fa21c27cd6041b694ac4567fbeb639d94dfdc045a5a68bd7af6da24d803b
s390x
conmon-2.1.7-1.el9_2.s390x.rpm SHA-256: 0ff51261f41f033f0781dae9045b0212b61c974afe65596b2ff0788147b6a6db
conmon-debuginfo-2.1.7-1.el9_2.s390x.rpm SHA-256: df0574a31929b28396998089f97a352b79e8a47403e121bf304ed387a5cea603
conmon-debugsource-2.1.7-1.el9_2.s390x.rpm SHA-256: d7e70ce070e5815810770336a0d77618e2ada6c1921eac1f0a6dcce5575e06ce

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.2

SRPM
conmon-2.1.7-1.el9_2.src.rpm SHA-256: c0e3fa21c27cd6041b694ac4567fbeb639d94dfdc045a5a68bd7af6da24d803b
s390x
conmon-2.1.7-1.el9_2.s390x.rpm SHA-256: 0ff51261f41f033f0781dae9045b0212b61c974afe65596b2ff0788147b6a6db
conmon-debuginfo-2.1.7-1.el9_2.s390x.rpm SHA-256: df0574a31929b28396998089f97a352b79e8a47403e121bf304ed387a5cea603
conmon-debugsource-2.1.7-1.el9_2.s390x.rpm SHA-256: d7e70ce070e5815810770336a0d77618e2ada6c1921eac1f0a6dcce5575e06ce

Red Hat Enterprise Linux for Power, little endian 9

SRPM
conmon-2.1.7-1.el9_2.src.rpm SHA-256: c0e3fa21c27cd6041b694ac4567fbeb639d94dfdc045a5a68bd7af6da24d803b
ppc64le
conmon-2.1.7-1.el9_2.ppc64le.rpm SHA-256: 759d67f143c2c2c987e319b1fb38231c3aa57bd114a5fd66b3276f813520b6bb
conmon-debuginfo-2.1.7-1.el9_2.ppc64le.rpm SHA-256: c773868ff9d03afc617e4004b29f7dd80ed3154cdcb5090944371ff7934f0fce
conmon-debugsource-2.1.7-1.el9_2.ppc64le.rpm SHA-256: 04f237b5228dafd79fdc64110f69579500f126c72fee5f750ce1ace939dad40c

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4

SRPM
conmon-2.1.7-1.el9_2.src.rpm SHA-256: c0e3fa21c27cd6041b694ac4567fbeb639d94dfdc045a5a68bd7af6da24d803b
ppc64le
conmon-2.1.7-1.el9_2.ppc64le.rpm SHA-256: 759d67f143c2c2c987e319b1fb38231c3aa57bd114a5fd66b3276f813520b6bb
conmon-debuginfo-2.1.7-1.el9_2.ppc64le.rpm SHA-256: c773868ff9d03afc617e4004b29f7dd80ed3154cdcb5090944371ff7934f0fce
conmon-debugsource-2.1.7-1.el9_2.ppc64le.rpm SHA-256: 04f237b5228dafd79fdc64110f69579500f126c72fee5f750ce1ace939dad40c

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.2

SRPM
conmon-2.1.7-1.el9_2.src.rpm SHA-256: c0e3fa21c27cd6041b694ac4567fbeb639d94dfdc045a5a68bd7af6da24d803b
ppc64le
conmon-2.1.7-1.el9_2.ppc64le.rpm SHA-256: 759d67f143c2c2c987e319b1fb38231c3aa57bd114a5fd66b3276f813520b6bb
conmon-debuginfo-2.1.7-1.el9_2.ppc64le.rpm SHA-256: c773868ff9d03afc617e4004b29f7dd80ed3154cdcb5090944371ff7934f0fce
conmon-debugsource-2.1.7-1.el9_2.ppc64le.rpm SHA-256: 04f237b5228dafd79fdc64110f69579500f126c72fee5f750ce1ace939dad40c

Red Hat Enterprise Linux for ARM 64 9

SRPM
conmon-2.1.7-1.el9_2.src.rpm SHA-256: c0e3fa21c27cd6041b694ac4567fbeb639d94dfdc045a5a68bd7af6da24d803b
aarch64
conmon-2.1.7-1.el9_2.aarch64.rpm SHA-256: 3b81d5cae5ebe8dd601d16789f275456c0b6f214d0cf62b644945cb02275b47c
conmon-debuginfo-2.1.7-1.el9_2.aarch64.rpm SHA-256: 41d0b39b5f03ced993a94aa316b1bd6933170c543372c6a8e4c1d47b38ee4074
conmon-debugsource-2.1.7-1.el9_2.aarch64.rpm SHA-256: 0e78a9312a88fc37fc751cd7c7b0b0b8d23117c6ec70ee761386c5edc5f946c5

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4

SRPM
conmon-2.1.7-1.el9_2.src.rpm SHA-256: c0e3fa21c27cd6041b694ac4567fbeb639d94dfdc045a5a68bd7af6da24d803b
aarch64
conmon-2.1.7-1.el9_2.aarch64.rpm SHA-256: 3b81d5cae5ebe8dd601d16789f275456c0b6f214d0cf62b644945cb02275b47c
conmon-debuginfo-2.1.7-1.el9_2.aarch64.rpm SHA-256: 41d0b39b5f03ced993a94aa316b1bd6933170c543372c6a8e4c1d47b38ee4074
conmon-debugsource-2.1.7-1.el9_2.aarch64.rpm SHA-256: 0e78a9312a88fc37fc751cd7c7b0b0b8d23117c6ec70ee761386c5edc5f946c5

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.2

SRPM
conmon-2.1.7-1.el9_2.src.rpm SHA-256: c0e3fa21c27cd6041b694ac4567fbeb639d94dfdc045a5a68bd7af6da24d803b
aarch64
conmon-2.1.7-1.el9_2.aarch64.rpm SHA-256: 3b81d5cae5ebe8dd601d16789f275456c0b6f214d0cf62b644945cb02275b47c
conmon-debuginfo-2.1.7-1.el9_2.aarch64.rpm SHA-256: 41d0b39b5f03ced993a94aa316b1bd6933170c543372c6a8e4c1d47b38ee4074
conmon-debugsource-2.1.7-1.el9_2.aarch64.rpm SHA-256: 0e78a9312a88fc37fc751cd7c7b0b0b8d23117c6ec70ee761386c5edc5f946c5

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4

SRPM
conmon-2.1.7-1.el9_2.src.rpm SHA-256: c0e3fa21c27cd6041b694ac4567fbeb639d94dfdc045a5a68bd7af6da24d803b
ppc64le
conmon-2.1.7-1.el9_2.ppc64le.rpm SHA-256: 759d67f143c2c2c987e319b1fb38231c3aa57bd114a5fd66b3276f813520b6bb
conmon-debuginfo-2.1.7-1.el9_2.ppc64le.rpm SHA-256: c773868ff9d03afc617e4004b29f7dd80ed3154cdcb5090944371ff7934f0fce
conmon-debugsource-2.1.7-1.el9_2.ppc64le.rpm SHA-256: 04f237b5228dafd79fdc64110f69579500f126c72fee5f750ce1ace939dad40c

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2

SRPM
conmon-2.1.7-1.el9_2.src.rpm SHA-256: c0e3fa21c27cd6041b694ac4567fbeb639d94dfdc045a5a68bd7af6da24d803b
ppc64le
conmon-2.1.7-1.el9_2.ppc64le.rpm SHA-256: 759d67f143c2c2c987e319b1fb38231c3aa57bd114a5fd66b3276f813520b6bb
conmon-debuginfo-2.1.7-1.el9_2.ppc64le.rpm SHA-256: c773868ff9d03afc617e4004b29f7dd80ed3154cdcb5090944371ff7934f0fce
conmon-debugsource-2.1.7-1.el9_2.ppc64le.rpm SHA-256: 04f237b5228dafd79fdc64110f69579500f126c72fee5f750ce1ace939dad40c

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4

SRPM
conmon-2.1.7-1.el9_2.src.rpm SHA-256: c0e3fa21c27cd6041b694ac4567fbeb639d94dfdc045a5a68bd7af6da24d803b
x86_64
conmon-2.1.7-1.el9_2.x86_64.rpm SHA-256: b5ffbceafd2bd87e50fcc0268f822bb399e3db4bed0478e0f6776458a066fd74
conmon-debuginfo-2.1.7-1.el9_2.x86_64.rpm SHA-256: c422118e29b0da3b02b195caba613322cba06b2629ae77c2f1cec60968e0ea85
conmon-debugsource-2.1.7-1.el9_2.x86_64.rpm SHA-256: 9a697f5eaf90925e71cb9149854b64e24377cf09f587e6b1664b1d8d8bb4dd4b

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2

SRPM
conmon-2.1.7-1.el9_2.src.rpm SHA-256: c0e3fa21c27cd6041b694ac4567fbeb639d94dfdc045a5a68bd7af6da24d803b
x86_64
conmon-2.1.7-1.el9_2.x86_64.rpm SHA-256: b5ffbceafd2bd87e50fcc0268f822bb399e3db4bed0478e0f6776458a066fd74
conmon-debuginfo-2.1.7-1.el9_2.x86_64.rpm SHA-256: c422118e29b0da3b02b195caba613322cba06b2629ae77c2f1cec60968e0ea85
conmon-debugsource-2.1.7-1.el9_2.x86_64.rpm SHA-256: 9a697f5eaf90925e71cb9149854b64e24377cf09f587e6b1664b1d8d8bb4dd4b

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4

SRPM
conmon-2.1.7-1.el9_2.src.rpm SHA-256: c0e3fa21c27cd6041b694ac4567fbeb639d94dfdc045a5a68bd7af6da24d803b
aarch64
conmon-2.1.7-1.el9_2.aarch64.rpm SHA-256: 3b81d5cae5ebe8dd601d16789f275456c0b6f214d0cf62b644945cb02275b47c
conmon-debuginfo-2.1.7-1.el9_2.aarch64.rpm SHA-256: 41d0b39b5f03ced993a94aa316b1bd6933170c543372c6a8e4c1d47b38ee4074
conmon-debugsource-2.1.7-1.el9_2.aarch64.rpm SHA-256: 0e78a9312a88fc37fc751cd7c7b0b0b8d23117c6ec70ee761386c5edc5f946c5

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2

SRPM
conmon-2.1.7-1.el9_2.src.rpm SHA-256: c0e3fa21c27cd6041b694ac4567fbeb639d94dfdc045a5a68bd7af6da24d803b
aarch64
conmon-2.1.7-1.el9_2.aarch64.rpm SHA-256: 3b81d5cae5ebe8dd601d16789f275456c0b6f214d0cf62b644945cb02275b47c
conmon-debuginfo-2.1.7-1.el9_2.aarch64.rpm SHA-256: 41d0b39b5f03ced993a94aa316b1bd6933170c543372c6a8e4c1d47b38ee4074
conmon-debugsource-2.1.7-1.el9_2.aarch64.rpm SHA-256: 0e78a9312a88fc37fc751cd7c7b0b0b8d23117c6ec70ee761386c5edc5f946c5

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4

SRPM
conmon-2.1.7-1.el9_2.src.rpm SHA-256: c0e3fa21c27cd6041b694ac4567fbeb639d94dfdc045a5a68bd7af6da24d803b
s390x
conmon-2.1.7-1.el9_2.s390x.rpm SHA-256: 0ff51261f41f033f0781dae9045b0212b61c974afe65596b2ff0788147b6a6db
conmon-debuginfo-2.1.7-1.el9_2.s390x.rpm SHA-256: df0574a31929b28396998089f97a352b79e8a47403e121bf304ed387a5cea603
conmon-debugsource-2.1.7-1.el9_2.s390x.rpm SHA-256: d7e70ce070e5815810770336a0d77618e2ada6c1921eac1f0a6dcce5575e06ce

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2

SRPM
conmon-2.1.7-1.el9_2.src.rpm SHA-256: c0e3fa21c27cd6041b694ac4567fbeb639d94dfdc045a5a68bd7af6da24d803b
s390x
conmon-2.1.7-1.el9_2.s390x.rpm SHA-256: 0ff51261f41f033f0781dae9045b0212b61c974afe65596b2ff0788147b6a6db
conmon-debuginfo-2.1.7-1.el9_2.s390x.rpm SHA-256: df0574a31929b28396998089f97a352b79e8a47403e121bf304ed387a5cea603
conmon-debugsource-2.1.7-1.el9_2.s390x.rpm SHA-256: d7e70ce070e5815810770336a0d77618e2ada6c1921eac1f0a6dcce5575e06ce

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.