RHSA-2023:6783: Important: Node Health Check Operator 0.4.1

Published Nov 8, 2023

Updated

You can use the Node Health Check Operator to deploy the Node Health Check controller. The controller identifies unhealthy nodes and uses the Self Node Remediation Operator to remediate the unhealthy nodes. Security Fix(es): golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) (CVE-2023-39325) HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

Affected Software

3 affected components

Node Health Check Operator Node Health Check Operator

Golang net/http

Golang x/net/http2

Remediation

Event History

Nov 8, 2023

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2023:6783?

The severity of RHSA-2023:6783 is classified as important.

How do I fix RHSA-2023:6783?

To fix RHSA-2023:6783, apply the latest updates provided for the affected software components.

Which software is affected by RHSA-2023:6783?

RHSA-2023:6783 affects the Node Health Check Operator, Golang net/http, and Golang x/net/http2.

What features does the Node Health Check Operator provide related to RHSA-2023:6783?

The Node Health Check Operator identifies unhealthy nodes and uses the Self Node Remediation Operator for remediation.

Are there any known exploits for RHSA-2023:6783?

There are no specific exploits publicly disclosed for RHSA-2023:6783 at this time.