(RHSA-2023:6785) Important: Machine Deletion Remediation Operator 0.2.1 security update

The Machine Deletion Remediation Operator conforms to the External Remediation of NodeHealthCheck, and is designed to work with it in order to reprovision unhealthy nodes using the Machine API. It looks for the associated Machine of an unhealthy Node, and deletes it. Once the Machine CR has been deleted, the owning controller creates a replacement.

Security Fix(es):

• golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) (CVE-2023-39325)

• HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.