Red Hat Security Advisory

RHSA-2022:5730

OpenShift Container Platform 4.10.25 bug fix and security update

Released 2022-08-01 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.10 openshift4/cloud-network-config-controller-rhel8, openshift4/egress-router-cni-rhel8, openshift4/network-tools-rhel8 +47

TI-2022-08493 CVE-2022-24675 · GHSA-q42m-q8hq-53rj

MEDIUM 45

encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0995 Published 2022-04-20 Partial fix CWE-674

TI-2022-08727 CVE-2022-24921 · GHSA-6685-ffxp-xm6f

LOW 39

regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03228 Published 2022-03-05 Partial fix CWE-674

TI-2022-07808 CVE-2022-23772 · GHSA-q99m-p7hq-5v4f

LOW 38

Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02807 Published 2022-02-11 Partial fix CWE-190