Red Hat Security AdvisoryRHSA-2022:4863
Release of OpenShift Serverless Version 1.22.1
Released 2022-06-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Serverless 1.22 openshift-serverless-1-tech-preview/eventing-kafka-broker-controller-rhel8, openshift-serverless-1-tech-preview/eventing-kafka-broker-dispatcher-rhel8, openshift-serverless-1-tech-preview/eventing-kafka-broker-receiver-rhel8 +35
Fixes 3 records
Priority MEDIUM 45
Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.03073 · Published 2022-02-11 · Partial fix CWE-252
Priority LOW 38
cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02676 · Published 2022-02-11 · Partial fix CWE-436
Priority LOW 38
Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02807 · Published 2022-02-11 · Partial fix CWE-190
