- Vulnerability/
- RHSA-2022:0308
RHSA-2022:0308: Moderate: OpenShift Container Storage 3.11.z security and bug fix update
First published: Thu Jan 27 2022(Updated: )
The OpenShift Container Storage solution provides persistent storage<br>service for OpenShift Containers and OpenShift Infrastructure services.<br>Security Fix(es):<br><li> golang: crypto/elliptic: incorrect operations on the P-224 curve (CVE-2021-3114)</li> <li> golang: net/<a href="http:" target="_blank">http:</a> panic in ReadRequest and ReadResponse when reading a very large header (CVE-2021-31525)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Bug Fix(es):<br><li> With this update, the Heketi packages are upgraded to upstream version 10.4.0. (BZ#2012287)</li> All users of OpenShift Container Storage 3.11 are advised to upgrade to these updated packages, which fix these bugs.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/heketi | <10.4.0-2.el7 | 10.4.0-2.el7 |
| redhat/heketi-client | <10.4.0-2.el7 | 10.4.0-2.el7 |
| redhat/python-heketi | <10.4.0-2.el7 | 10.4.0-2.el7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=1918750
- https://bugzilla.redhat.com/show_bug.cgi?id=1958341
- https://bugzilla.redhat.com/show_bug.cgi?id=1979199
- https://bugzilla.redhat.com/show_bug.cgi?id=2012287
- https://access.redhat.com/security/updates/classification/#moderate
- https://access.redhat.com/errata/RHSA-2022:0308 (Advisory)
Frequently Asked Questions
What is the severity of RHSA-2022:0308?
The severity of RHSA-2022:0308 is categorized as important.
How do I fix RHSA-2022:0308?
To resolve RHSA-2022:0308, update the affected packages to version 10.4.0-2.el7.
Which components are affected by RHSA-2022:0308?
The affected components include heketi, heketi-client, and python-heketi.
What vulnerabilities are addressed in RHSA-2022:0308?
RHSA-2022:0308 addresses vulnerabilities including CVE-2021-3114 related to incorrect operations on the P-224 curve.
Is it necessary to reboot after applying the fix for RHSA-2022:0308?
A reboot is not typically required after applying the fix for RHSA-2022:0308 unless specified in the update instructions.
- agent/references
- agent/severity
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2022:0308
- agent/software-canonical-lookup
- agent/title
- agent/remedy
- agent/description
- agent/event
- agent/trending
- agent/tags
- agent/source
- package-manager/redhat