RHSA-2022:6188HighCVSS 7.5

Red Hat Security Advisory: Node Maintenance Operator 4.11.1 security update

Published
August 25, 2022
Last Modified
September 30, 2026

🔗 CVE IDs covered (8)

CVE-2022-30630 →CVE-2022-30631 →CVE-2022-30632 →CVE-2022-30633 →CVE-2022-32148 →CVE-2022-1705 →CVE-2022-1962 →CVE-2022-28131 →

📋 Description

CVE-2022-1705 — golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-1962 — golang: go/parser: stack exhaustion in all Parse* functions CVE-2022-28131 — golang: encoding/xml: stack exhaustion in Decoder.Skip CVE-2022-30630 — golang: io/fs: stack exhaustion in Glob CVE-2022-30631 — golang: compress/gzip: stack exhaustion in Reader.Read CVE-2022-30632 — golang: path/filepath: stack exhaustion in Glob CVE-2022-30633 — golang: encoding/xml: stack exhaustion in Unmarshal CVE-2022-32148 — golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working

🎯 Affected products4

  • Node Maintenance Operator 4.11 for RHEL 8
  • workload-availability/node-maintenance-must-gather-rhel8@sha256:ac27a268a9860dbd5a5bc72e1d4c8be08107be76cbbcfc83b77db67c10fb2a15_amd64 as a component of Node Maintenance Operator 4.11 for RHEL 8
  • workload-availability/node-maintenance-operator-bundle@sha256:fffb33c8f94a53a1b55bc23be12d8469e280ecbf5fa43057c5618d0f9dfb2d45_amd64 as a component of Node Maintenance Operator 4.11 for RHEL 8
  • workload-availability/node-maintenance-rhel8-operator@sha256:f7bd1a3a87b0524660b0107b495e66fe8697833a7d7a9b2b03e94f4f8a164d90_amd64 as a component of Node Maintenance Operator 4.11 for RHEL 8

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, see: https://access.redhat.com/articles/11258

🔗 References (11)