BZ#2161274 CVE-2022-41717 golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests
0
0
BZ#2163073 CVE-2022-41717 cri-o:1.21/cri-tools: golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests [fedora-all]
0
0
BZ#2163094 CVE-2022-41717 gmailctl: golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests [fedora-all]
0
0
BZ#2163544 CVE-2022-3064 gmailctl: go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents [fedora-all]
0
0
BZ#2178358 CVE-2022-41723 golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding
This update has been submitted for testing by fuller.
This update's test gating status has been changed to 'ignored'.
CVE Bugs were not opened specifically against this version, but rebuilding just in case
fuller edited this update.
This update has been pushed to testing.
This update has been submitted for stable by bodhi.
This update has been pushed to stable.