Skip to content
OpenAdvisories
High RHSA-2024:10761 4 CVEs

Red Hat Security Advisory: rhc-worker-playbook security update

Published Dec 4, 2024 · Updated Oct 9, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream rhc-worker-playbook 0:0.1.10-1.el9_5
Red Hat · RHEL 9 enterprise_linux:9::appstream rhc-worker-playbook-debuginfo 0:0.1.10-1.el9_5

Vulnerabilities 4

  • High 7.5
    CVE-2022-40898

    pypa/wheel vulnerable to Regular Expression denial of service (ReDoS)

    An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.

    python-pip python-wheel wheel wheel Debian Ubuntu Azure Linux PyPI
  • High 7.5
    CVE-2023-1428

    Denial-of-Service in gRPC

    There exists an vulnerability causing an abort() to be called in gRPC.  The following headers cause gRPC's C++ implementation to abort() when called via http2: te: x (x != trailers) :scheme: x (x != http, https) grpclb_client_stats: x (x == anything) On top o…

    Google gRPC wavefront-proxy grpc Ubuntu Wolfi Maven PyPI RubyGems
  • High 7.5
    CVE-2023-33953

    Denial-of-Service in gRPC

    gRPC contains a vulnerability that allows hpack table accounting errors could lead to unwanted disconnects between clients and servers in exceptional cases/ Three vectors were found that allow the following DOS attacks: - Unbounded memory buffering in the HPA…

    Google gRPC python-tensorboard grpc Debian Ubuntu Azure Linux PyPI RubyGems
  • High 7.4
    CVE-2023-32731

    Information leak in gRPC

    When gRPC HTTP2 stack raised a header size exceeded error, it skipped parsing the rest of the HPACK frame. This caused any HPACK table mutations to also be skipped, resulting in a desynchronization of HPACK tables between sender and receiver. If leveraged, sa…

    Google gRPC wavefront-proxy grpc Ubuntu Wolfi Maven PyPI RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2165864
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2214463
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2214473
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2230890
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10761.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-40898
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-40898
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-40898
  • advisory
    https://github.com/advisories/GHSA-qwmp-2cf2-g9g6
  • report
    https://access.redhat.com/security/cve/CVE-2023-1428
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-1428
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-1428
  • report
    https://access.redhat.com/security/cve/CVE-2023-32731
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-32731
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-32731
  • advisory
    https://github.com/advisories/GHSA-cfgp-2977-2fmm
  • report
    https://access.redhat.com/security/cve/CVE-2023-33953
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-33953
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-33953
  • article
    https://cloud.google.com/support/bulletins#gcp-2023-022
  • advisory
    https://github.com/advisories/GHSA-496j-2rq6-j6cc