Red Hat Security AdvisoryRHSA-2022:2183
Release of containers for OSP 16.2.z director operator tech preview
Released 2022-05-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenStack Platform 16.2 rhosp-rhel8-tech-preview/osp-director-operator
Fixes 5 records
Priority MEDIUM 54
Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.25939 · Published 2019-10-17 · Partial fix · 1.13.12, 1.14.8 +2 CWE-20
Priority LOW 36
xz is a compression and decompression library focusing on the xz format completely written in Go.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01438 · Published 2021-04-28 · Partial fix · 0.5.8 CWE-835
Priority LOW 31
containerd is a container runtime.
CVSS 3.1MEDIUM 6.3· Network · No auth · User interaction · EPSS 0.01595 · Published 2021-07-19 · Partial fix · 1.4.8, 1.5.4 CWE-668
Priority LOW 30
The miekg Go DNS package before 1.1.25, as used in CoreDNS before 1.6.6 and other products, improperly generates random numbers because math/rand is used.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02066 · Published 2019-12-13 · Partial fix · 1.1.25 CWE-338
Priority LOW 29
containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows.
CVSS 3.1MEDIUM 5.2· Local · Low privileges · No interaction · EPSS 0.03125 · Published 2020-12-01 · Partial fix · 1.3.9, 1.4.3 CWE-669
THREATIST.IORead the docs