Red Hat Security Advisory

RHSA-2022:6187

Node Health Check Operator 0.3.1 security update

Released 2022-08-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Node Healthcheck Operator 0.3 for RHEL 8 workload-availability/node-healthcheck-rhel8-operator

Fixes 3 records

TI-2022-11099 CVE-2022-28327 · GHSA-v5qw-m6mv-3q79

The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1…

MEDIUM 40

The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0416 Published 2022-04-20 Partial fix

TI-2022-12767 CVE-2022-30631 · GHSA-r654-8j96-crqx

Stack exhaustion when reading certain archives in compress/gzip

LOW 37

Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via an archive containing a large number of concatenated 0-length compres…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02186 Published 2022-08-09 Partial fix · 1.17.12, 1.18.4 CWE-674

TI-2022-01571 CVE-2022-1705 · GHSA-5hv8-7f46-fxf6

Improper sanitization of Transfer-Encoding headers in net/http

LOW 32

Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP request smuggling if combined with an intermediate server that also improperly fails to re…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01531 Published 2022-08-09 Partial fix · 1.17.12, 1.18.4 CWE-444