First published: Mon Aug 15 2022(Updated: )
Collectd plugin for gathering resource usage statistics from containers<br>created with the libpod library.<br>Security Fix(es):<br><li> golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/collectd-libpod-stats | <1.0.4-2.el8 | 1.0.4-2.el8 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2022:6065 is classified as important.
To fix RHSA-2022:6065, update the collectd-libpod-stats package to version 1.0.4-2.el8 or later.
The CVE associated with RHSA-2022:6065 is CVE-2022-30631.
The package affected by RHSA-2022:6065 is collectd-libpod-stats.
RHSA-2022:6065 addresses a stack exhaustion vulnerability in the golang compress/gzip library.