OESA-2024-1530

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1530

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2024-1530.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2024-1530

Upstream

CVE-2022-41723

Published

2024-05-10T11:07:53Z

Modified

2025-09-03T06:18:29.997898Z

Summary

ignition security update

Details

Ignition is a utility used to manipulate systems during the initramfs. This includes partitioning disks, formatting partitions, writing files (regular files, systemd units, etc.), and configuring users. On first boot, Ignition reads its configuration from a source of truth (remote URL, network metadata service, hypervisor bridge, etc.) and applies the configuration.

Security Fix(es):

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.(CVE-2022-41723)

Database specific

{
    "severity": "High"
}

References

Affected packages

openEuler:22.03-LTS-SP2 / ignition

Package

Name: ignition
Purl: pkg:rpm/openEuler/ignition&distro=openEuler-22.03-LTS-SP2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.14.0-5.oe2203sp2

Ecosystem specific

{
    "src": [
        "ignition-2.14.0-5.oe2203sp2.src.rpm"
    ],
    "x86_64": [
        "ignition-debugsource-2.14.0-5.oe2203sp2.x86_64.rpm",
        "ignition-validate-2.14.0-5.oe2203sp2.x86_64.rpm",
        "ignition-debuginfo-2.14.0-5.oe2203sp2.x86_64.rpm",
        "ignition-2.14.0-5.oe2203sp2.x86_64.rpm"
    ],
    "aarch64": [
        "ignition-debuginfo-2.14.0-5.oe2203sp2.aarch64.rpm",
        "ignition-debugsource-2.14.0-5.oe2203sp2.aarch64.rpm",
        "ignition-validate-2.14.0-5.oe2203sp2.aarch64.rpm",
        "ignition-2.14.0-5.oe2203sp2.aarch64.rpm"
    ]
}