Issued:

2022-09-14

Updated:

2022-09-14

RHSA-2022:6517 - Important: Release of containers for OSP 16.2.z director operator tech preview

Synopsis

Important: Release of containers for OSP 16.2.z director operator tech preview

Type/Severity

Security Advisory Important

Topic

Red Hat OpenStack Platform 16.2 (Train) director operator containers, with several Important security fixes, are available for technology preview.

Description

Release osp-director-operator images

Security Fix(es):

• CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read [important]
• CVE-2021-41103 golang: containerd: insufficiently restricted permissions on container root and plugin directories [medium]

Solution

OSP 16.2.z Release - OSP Director Operator Containers

Affected Products

Fixes

• This content is not included.BZ - 2011007
• This content is not included.BZ - 2107342

CVEs

• CVE-2021-41103
• CVE-2022-1292
• CVE-2022-1586
• CVE-2022-2068
• CVE-2022-2097
• CVE-2022-30631

References

• https://access.redhat.com/security/updates/classification/#important

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.