Red Hat Security Advisory

RHSA-2022:6103

OpenShift Container Platform 4.11.1 bug fix and security update

Released 2022-08-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.11 openshift4/cloud-network-config-controller-rhel8, openshift4/egress-router-cni-rhel8, openshift4/network-tools-rhel8 +47

Fixes 2 records

TI-2022-12767 CVE-2022-30631 · GHSA-r654-8j96-crqx

Stack exhaustion when reading certain archives in compress/gzip

LOW 37

Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via an archive containing a large number of concatenated 0-length compres…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02186 Published 2022-08-09 Partial fix · 1.17.12, 1.18.4 CWE-674

TI-2022-12765 CVE-2022-30629 · GHSA-j55j-52j7-vq87

Session tickets lack random ticket_age_add in crypto/tls

LOW 18

Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during…

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.0121 Published 2022-08-09 Partial fix · 1.17.11, 1.18.3 CWE-330