Lucene search

K
redhatRedHatRHSA-2024:2062
HistoryApr 25, 2024 - 2:24 p.m.

(RHSA-2024:2062) Important: Service Telemetry Framework 1.5.4 security update

2024-04-2514:24:52
access.redhat.com
9
service telemetry framework
stf
security update
automated collection
red hat openstack platform
third-party nodes
openshift container platform
storage
retrieval
monitoring
sg-core-container
golang
net/http
x/net/http2
dos
cve-2023-45288
unix

7.2 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.9%

Service Telemetry Framework (STF) provides automated collection of measurements and data from remote clients, such as Red Hat OpenStack Platform or third-party nodes. STF then transmits the information to a centralized, receiving Red Hat OpenShift Container Platform (OCP) deployment for storage, retrieval, and monitoring.

Security Fix(es):
sg-core-container: golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288)