Medium ELSA-2023-2222 1 CVE

Moderate: conmon security and bug fix update (Oracle Linux 9)

Published May 15, 2023 · Updated May 15, 2023

Ecosystem: Oracle Linux

Summary

[2:2.1.7-1]
- update to https://github.com/containers/conmon/releases/tag/v2.1.7
- Resolves: #2173697

[2:2.1.6-1]
- update to https://github.com/containers/conmon/releases/tag/v2.1.6
- Related: #2124478

[2:2.1.5-1]
- update to https://github.com/containers/conmon/releases/tag/v2.1.5
- Related: #2124478

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 9	conmon	2:2.1.7-1.el9_2

Vulnerabilities 1

Medium 5.3

CVE-2022-41717 Public exploit

Excessive memory growth in net/http and golang.org/x/net/http2

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large…

Go standard library golang.org/x/net net/http golang.org/x/net/http2 Debian Ubuntu Azure Linux Alpine Wolfi Go

Dec 8, 2022