Red Hat Security Advisory

RHSA-2022:6155

Red Hat OpenShift Data Foundation 4.11.0 security, enhancement & bugfix update

Released 2022-08-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2022-08493 CVE-2022-24675 · GHSA-q42m-q8hq-53rj

MEDIUM 45

encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0995 Published 2022-04-20 Partial fix CWE-674

TI-2022-11099 CVE-2022-28327 · GHSA-v5qw-m6mv-3q79

MEDIUM 40

The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0416 Published 2022-04-20 Partial fix

TI-2022-07808 CVE-2022-23772 · GHSA-q99m-p7hq-5v4f

LOW 38

Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02807 Published 2022-02-11 Partial fix CWE-190