Red Hat Security Advisory

RHSA-2022:5840

Migration Toolkit for Containers (MTC) 1.7.3 security and bug fix update

Released 2022-08-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

8Base-RHMTC-1.7 rhmtc/openshift-migration-controller-rhel8, rhmtc/openshift-migration-must-gather-rhel8, rhmtc/openshift-migration-registry-rhel8 +7

TI-2022-08493 CVE-2022-24675 · GHSA-q42m-q8hq-53rj

MEDIUM 45

encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0995 Published 2022-04-20 Partial fix CWE-674

TI-2022-11099 CVE-2022-28327 · GHSA-v5qw-m6mv-3q79

MEDIUM 40

The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0416 Published 2022-04-20 Partial fix

TI-2022-01246 CVE-2022-1365

LOW 31

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository lquixada/cross-fetch prior to 3.1.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01172 Published 2022-04-15 Partial fix · 3.1.5 CWE-359

TI-2022-11985 CVE-2022-29526 · GHSA-p782-xgp4-8hr8

LOW 29

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02951 Published 2022-06-22 Partial fix · 0.0.0-20220412211240-33da011f77ad CWE-269