Read the docs
Red Hat Security Advisory

RHSA-2022:0687

OpenShift API for Data Protection (OADP) 1.0.1 security and bug fix update

Released 2022-02-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 2 records

TI-2021-10195 CVE-2021-29482 · GHSA-25xm-hr59-7c27

denial of service in github.com/ulikunitz/xz

Priority LOW 36

xz is a compression and decompression library focusing on the xz format completely written in Go.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01438 Published 2021-04-28 Partial fix · 0.5.8 CWE-835
TI-2021-18029 CVE-2021-41190 · GHSA-mc8v-mgrf-8f4m

Clarify Content-Type handling in OCI spec

Priority LOW 27

The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.02223 Published 2021-11-17 Partial fix · 1.0.1 CWE-843