Red Hat Security AdvisoryRHSA-2022:0855
OpenShift sandboxed containers 1.2.0 security update
Released 2022-03-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- OpenShift Sandboxed Containers 1.2.0 openshift-sandboxed-containers/osc-rhel8-operator
Fixes 2 records
Priority MEDIUM 40
net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04254 · Published 2022-01-01 · Partial fix · 0.0.0-20211209124913-491a49abca63 CWE-400
Priority LOW 32
Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.03114 · Published 2021-08-08 · Partial fix CWE-362
