High ELSA-2022-0001 1 CVE

Important: grafana security update (Oracle Linux 8)

Published Jan 4, 2022 · Updated Jan 4, 2022

Ecosystem: Oracle Linux

Summary

[7.5.9-5]
- resolve CVE-2021-44716 golang: net/http: limit growth of header canonicalization cache

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	grafana	0:7.5.9-5.el8_5

Vulnerabilities 1

High 7.5

CVE-2021-44716

golang.org/x/net/http2 allows uncontrolled memory consumption

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

golang go stdlib golang-1.8 Debian Ubuntu Azure Linux Alpine Go

Jan 1, 2022