Lucene search

K
redhatRedHatRHSA-2023:6040
HistoryOct 23, 2023 - 6:29 p.m.

(RHSA-2023:6040) Important: Node Maintenance Operator 5.2.1 security update

2023-10-2318:29:23
access.redhat.com
24
node maintenance operator
security update
rapid stream resets
cve-2023-44487
cve-2023-39325
cvss score
references
unix

0.72 High

EPSS

Percentile

98.0%

The Node Maintenance Operator cordons off nodes from the rest of the cluster and drains all the pods from the nodes. By placing nodes under maintenance, you can investigate problems with a machine, or perform operations on the underlying machine, that might result in a node failure.

Security Fix(es):

  • golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) (CVE-2023-39325)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.