RHSA-2022:5673: Important: Release of containers for OSP 16.2.z director operator tech preview
First published: Wed Jul 20 2022(Updated: )
Release osp-director-operator images<br>Security Fix(es):<br><li> go-getter: unsafe download (issue 1 of 3) [Important] (CVE-2022-30321)</li> <li> go-getter: unsafe download (issue 2 of 3) [Important] (CVE-2022-30322)</li> <li> go-getter: unsafe download (issue 3 of 3) [Important] (CVE-2022-30323)</li> <li> go-getter: command injection vulnerability [Important] (CVE-2022-26945)</li> <li> golang.org/x/crypto: empty plaintext packet causes panic [Moderate] (CVE-2021-43565)</li> <li> containerd: insufficiently restricted permissions on container root and plugin directories [Moderate] (CVE-2021-41103)</li>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| >=16.2.z |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=2011007
- https://bugzilla.redhat.com/show_bug.cgi?id=2030787
- https://bugzilla.redhat.com/show_bug.cgi?id=2092918
- https://bugzilla.redhat.com/show_bug.cgi?id=2092923
- https://bugzilla.redhat.com/show_bug.cgi?id=2092925
- https://bugzilla.redhat.com/show_bug.cgi?id=2092928
- https://access.redhat.com/security/updates/classification/#important
- https://access.redhat.com/errata/RHSA-2022:4991
- https://access.redhat.com/containers
- https://access.redhat.com/errata/RHSA-2022:5673 (Advisory)
Frequently Asked Questions
What is the severity of RHSA-2022:5673?
The severity of RHSA-2022:5673 is classified as Important.
What vulnerabilities are addressed in RHSA-2022:5673?
RHSA-2022:5673 addresses three vulnerabilities related to unsafe downloads of the go-getter library.
How do I fix RHSA-2022:5673?
To fix RHSA-2022:5673, update the affected packages to the latest version provided in the security advisory.
What are the CVE identifiers associated with RHSA-2022:5673?
The CVE identifiers associated with RHSA-2022:5673 are CVE-2022-30321, CVE-2022-30322, and others.
Is there a workaround for RHSA-2022:5673?
There are currently no documented workarounds for the vulnerabilities in RHSA-2022:5673.
- agent/references
- agent/severity
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2022:5673
- agent/weakness
- agent/remedy
- agent/title
- agent/description
- agent/trending
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup