RHSA-2022:6061: Important: Red Hat OpenStack Platform 16.2 (etcd) security update
The etcd packages provide a highly available key-value store for shared configuration.Security Fix(es): golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631) prometheus/clientgolang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:6061?
The severity of RHSA-2022:6061 is classified as important.
How do I fix RHSA-2022:6061?
To fix RHSA-2022:6061, you should upgrade to etcd package version 3.3.23-10.el8.
What vulnerabilities are addressed in RHSA-2022:6061?
RHSA-2022:6061 addresses vulnerabilities including CVE-2022-30631 which concerns a stack exhaustion issue in golang's compress/gzip.
Which packages are affected by RHSA-2022:6061?
The affected packages in RHSA-2022:6061 include etcd, etcd-debuginfo, and etcd-debugsource.
Is there a risk of denial of service with RHSA-2022:6061?
Yes, RHSA-2022:6061 includes a denial of service vulnerability related to the prometheus/client_golang InstrumentHandlerCounter.