Red Hat Security AdvisoryRHSA-2020:5635
OpenShift Container Platform 4.7.0 extras and security update
Released 2021-02-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.7 openshift4/ose-cluster-capacity, openshift4/ose-cluster-nfd-operator, openshift4/ose-metering-helm-container-rhel8 +2
Fixes 3 records
Priority MEDIUM 53
FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfiguration.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.07327 · Published 2020-09-17 · Partial fix · 2.6.7.5, 2.9.10.6 CWE-502
Priority MEDIUM 43
An issue was discovered in GoGo Protobuf before 1.3.2.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.03425 · Published 2021-01-11 · Partial fix · 1.3.2 CWE-129
Priority LOW 37
The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01886 · Published 2020-06-17 · Partial fix · 0.3.3 CWE-835
