RHSA-2022:5673HighCVSS 9.8
Red Hat Security Advisory: Release of containers for OSP 16.2.z director operator tech preview
🔗 CVE IDs covered (6)
📋 Description
CVE-2021-41103 — containerd: insufficiently restricted permissions on container root and plugin directories CVE-2021-43565 — golang.org/x/crypto: empty plaintext packet causes panic CVE-2022-26945 — go-getter: command injection vulnerability CVE-2022-30321 — go-getter: unsafe download (issue 1 of 3) CVE-2022-30322 — go-getter: unsafe download (issue 2 of 3) CVE-2022-30323 — go-getter: unsafe download (issue 3 of 3)
🔗 References (11)
- selfhttps://access.redhat.com/errata/RHSA-2022:5673
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://access.redhat.com/errata/RHSA-2022:4991
- externalhttps://access.redhat.com/containers
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2011007
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2030787
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2092918
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2092923
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2092925
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2092928
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5673.json