What is RHSA-2022:5525?

RHSA-2022:5525 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: Service Binding Operator security update

Which CVE IDs does RHSA-2022:5525 cover?

RHSA-2022:5525 covers the following CVE IDs: CVE-2021-38561. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2022:5525?

RHSA-2022:5525 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

Which products are affected by RHSA-2022:5525?

RHSA-2022:5525 affects 6 products, including: OpenShift Developer Tools and Services for OCP 4.7 for RHEL 8; ocp-tools-4/service-binding-operator-bundle@sha256:44d2aa8f1f54834eae6500b04fc7d29c6082657fcb90467635483c934b23b8d8_amd64 as a component of OpenShift Developer Tools and Services for OCP 4.7 for RHEL 8; ocp-tools-4/service-binding-rhel8-operator@sha256:07d3b3260a410508168c6be3daf4409829734320c7a5c3532d8bff20f12bf457_s390x as a component of OpenShift Developer Tools and Services for OCP 4.7 for RHEL 8; ocp-tools-4/service-binding-rhel8-operator@sha256:784d686cc3c2cec8b08204df52ff19693aea77513adeca186341ffecf90e2cb0_arm64 as a component of OpenShift Developer Tools and Services for OCP 4.7 for RHEL 8; ocp-tools-4/service-binding-rhel8-operator@sha256:7b0b4560ee8056a748fe2f0520fc37fc3061c978fff418cd1ad0544b512afae3_amd64 as a component of OpenShift Developer Tools and Services for OCP 4.7 for RHEL 8; and others — see the full list on the advisory page.

RHSA-2022:5525MediumCVSS 7.5

Red Hat Security Advisory: Service Binding Operator security update

Vendor

Red Hat Product Security

Published

July 7, 2022

Last Modified

August 7, 2026

🔗 CVE IDs covered (1)

CVE-2021-38561 →

📋 Description

CVE-2021-38561 — golang: out-of-bounds read in golang.org/x/text/language leads to DoS

🎯 Affected products6

OpenShift Developer Tools and Services for OCP 4.7 for RHEL 8
ocp-tools-4/service-binding-operator-bundle@sha256:44d2aa8f1f54834eae6500b04fc7d29c6082657fcb90467635483c934b23b8d8_amd64 as a component of OpenShift Developer Tools and Services for OCP 4.7 for RHEL 8
ocp-tools-4/service-binding-rhel8-operator@sha256:07d3b3260a410508168c6be3daf4409829734320c7a5c3532d8bff20f12bf457_s390x as a component of OpenShift Developer Tools and Services for OCP 4.7 for RHEL 8
ocp-tools-4/service-binding-rhel8-operator@sha256:784d686cc3c2cec8b08204df52ff19693aea77513adeca186341ffecf90e2cb0_arm64 as a component of OpenShift Developer Tools and Services for OCP 4.7 for RHEL 8
ocp-tools-4/service-binding-rhel8-operator@sha256:7b0b4560ee8056a748fe2f0520fc37fc3061c978fff418cd1ad0544b512afae3_amd64 as a component of OpenShift Developer Tools and Services for OCP 4.7 for RHEL 8
ocp-tools-4/service-binding-rhel8-operator@sha256:cd9e796396a18c4b0e39d7412aa7367d0fc371fab6144b7ac981db2235a403d5_ppc64le as a component of OpenShift Developer Tools and Services for OCP 4.7 for RHEL 8

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products6

✅ Remediation

🔗 References (7)