RHSA-2022:6066: Important: Red Hat OpenStack Platform 16.1 (etcd) security update
The etcd packages provide a highly available key-value store for shared configuration.<br>Security Fix(es):<br><li> golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)</li> <li> prometheus/clientgolang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:6066?
The severity of RHSA-2022:6066 is classified as important.
How do I fix RHSA-2022:6066?
To fix RHSA-2022:6066, you should upgrade to etcd version 3.3.23-10.el8.
What vulnerabilities are addressed in RHSA-2022:6066?
RHSA-2022:6066 addresses CVE-2022-30631 related to stack exhaustion in golang and Denial of Service in prometheus/client_golang.
Which packages are affected by RHSA-2022:6066?
The affected packages under RHSA-2022:6066 include etcd, etcd-debuginfo, and etcd-debugsource.
Is there a workaround for RHSA-2022:6066?
There is no official workaround provided for RHSA-2022:6066, so updating is recommended.