Bug 1745629

Summary:	[operator-regsitry] Address grpc-go CVEs
Product:	OpenShift Container Platform	Reporter:	Evan Cordell <ecordell>
Component:	OLM	Assignee:	Evan Cordell <ecordell>
OLM sub component:	OLM	QA Contact:	Jian Zhang <jiazha>
Status:	CLOSED DUPLICATE	Docs Contact:
Severity:	high
Priority:	high	CC:	jiazha, nstielau
Version:	4.1.z
Target Milestone:	---
Target Release:	4.1.z
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:	1745627	Environment:
Last Closed:	2019-09-03 17:40:22 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1745627
Bug Blocks:

Description Evan Cordell 2019-08-26 14:15:24 UTC

+++ This bug was initially created as a clone of Bug #1745627 +++

Description of problem:

There are three CVEs in grpc-go:

CVE-2019-9512 (Ping Flood)
CVE-2019-9514 (Reset Flood)
CVE-2019-9515 (Settings Flood)

These are fixed in https://github.com/grpc/grpc-go/pull/2970

Version-Release number of selected component (if applicable):
operator-registry v1.3.0

Comment 1 Nick Stielau 2019-09-03 17:40:22 UTC


*** This bug has been marked as a duplicate of bug 1746654 ***