Red Hat Security AdvisoryRHSA-2022:6905
OpenShift Container Platform 4.9.50 bug fix and security update
Released 2022-10-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.9 openshift4/ose-cluster-baremetal-operator-rhel8
Fixes 4 records
Priority MEDIUM 46
go-getter up to 1.5.11 and 2.0.2 allowed protocol switching, endless redirect, and configuration bypass via abuse of custom HTTP response header processing.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01743 · Published 2022-05-25 · Partial fix · 1.6.1, 2.1.0 CWE-77
Priority MEDIUM 43
go-getter up to 1.5.11 and 2.0.2 allowed arbitrary host access via go-getter path traversal, symlink processing, and command injection flaws.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.03114 · Published 2022-05-25 · Partial fix · 1.6.1, 2.1.0 CWE-22
Priority MEDIUM 40
go-getter up to 1.5.11 and 2.0.2 panicked when processing password-protected ZIP files.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01462 · Published 2022-05-25 · Partial fix · 1.6.1, 2.1.0
Priority MEDIUM 40
go-getter up to 1.5.11 and 2.0.2 allowed asymmetric resource exhaustion when go-getter processed malicious HTTP responses.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01462 · Published 2022-05-25 · Partial fix · 1.6.1, 2.1.0
THREATIST.IORead the docs