https://bugzilla.redhat.com/show_bug.cgi?id=1934032
--- Comment #12 from Mauro Matteo Cascella <mcascell(a)redhat.com> ---
Statement:
Red Hat OpenStack Platform's OpenDaylight will not be updated for this flaw
because it was deprecated as of OpenStack Platform 14 and is only receiving
security fixes for Important and Critical flaws. Red Hat Enterprise Linux 8 is
using a vulnerable version of Tomcat that is bundled into the
`pki-servlet-engine` component. However, HTTP/2 is not enabled in such a
configuration, and it is not possible to trigger the flaw in a supported setup.
A future update may fix the code.
--
You are receiving this mail because:
You are on the CC list for the bug.