Lucene search

K
redhatRedHatRHSA-2022:6051
HistoryAug 18, 2022 - 4:00 p.m.

(RHSA-2022:6051) Important: Logging Subsystem 5.5.0 - Red Hat OpenShift security update

2022-08-1816:00:25
access.redhat.com
85

0.106 Low

EPSS

Percentile

95.1%

Logging Subsystem 5.5.0 - Red Hat OpenShift

Security Fix(es):

  • kubeclient: kubeconfig parsing error can lead to MITM attacks (CVE-2022-0759)

  • golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)

  • golang: out-of-bounds read in golang.org/x/text/language leads to DoS (CVE-2021-38561)

  • prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.