Red Hat Security Advisory

RHSA-2022:7058

OpenShift sandboxed containers 1.3.1 security fix and bug fix update

Released 2022-10-19 · Red Hat rating Moderate · View on Red Hat →

Fixed in

OpenShift Sandboxed Containers 1.3 openshift-sandboxed-containers/osc-monitor-rhel8, openshift-sandboxed-containers/osc-must-gather-rhel8, openshift-sandboxed-containers/osc-operator-bundle +1

Fixes 3 records

TI-2022-08493 CVE-2022-24675 · GHSA-q42m-q8hq-53rj

encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.

MEDIUM 45

encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0995 Published 2022-04-20 Partial fix CWE-674

TI-2022-12768 CVE-2022-30632 · GHSA-hc24-7m29-5vj7

Stack exhaustion on crafted paths in path/filepath

LOW 37

Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path containing a large number of path separators.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0219 Published 2022-08-09 Partial fix · 1.17.12, 1.18.4 CWE-674

TI-2022-02626 CVE-2022-2832 · GHSA-jw85-mc7h-c36v

NULL pointer dereference in Blender

LOW 36

A flaw was found in Blender 3.3.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01786 Published 2022-08-16 Fixed CWE-395