Red Hat Security AdvisoryRHSA-2022:1747
Release of OpenShift Serverless Version 1.22.0
Released 2022-05-09 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat OpenShift Serverless 1.22 openshift-serverless-1-tech-preview/eventing-kafka-broker-controller-rhel8, openshift-serverless-1-tech-preview/eventing-kafka-broker-dispatcher-rhel8, openshift-serverless-1-tech-preview/eventing-kafka-broker-receiver-rhel8 +35
Fixes 2 records
Priority MEDIUM 40
ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04698 · Published 2021-11-08 · Partial fix CWE-119
Priority LOW 39
Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP archive containing an invalid name or an empty filename field.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03253 · Published 2021-11-08 · Partial fix CWE-20
