RHSA-2022:6346MediumCVSS 7.5

Red Hat Security Advisory: RHSA: Submariner 0.13 - security and enhancement update

Published
September 6, 2022
Last Modified
September 30, 2026

🔗 CVE IDs covered (11)

CVE-2022-30633 →CVE-2022-30635 →CVE-2022-32148 →CVE-2021-38561 →CVE-2022-1962 →CVE-2022-30630 →CVE-2022-30632 →CVE-2022-1705 →CVE-2022-28131 →CVE-2022-30629 →CVE-2022-30631 →

📋 Description

CVE-2021-38561 — golang: out-of-bounds read in golang.org/x/text/language leads to DoS CVE-2022-1705 — golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-1962 — golang: go/parser: stack exhaustion in all Parse* functions CVE-2022-28131 — golang: encoding/xml: stack exhaustion in Decoder.Skip CVE-2022-30629 — golang: crypto/tls: session tickets lack random ticket_age_add CVE-2022-30630 — golang: io/fs: stack exhaustion in Glob CVE-2022-30631 — golang: compress/gzip: stack exhaustion in Reader.Read CVE-2022-30632 — golang: path/filepath: stack exhaustion in Glob CVE-2022-30633 — golang: encoding/xml: stack exhaustion in Unmarshal CVE-2022-30635 — golang: encoding/gob: stack exhaustion in Decoder.Decode CVE-2022-32148 — golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working

🎯 Affected products41

  • Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/lighthouse-agent-rhel8@sha256:1b017999b67c62f47d4026b369033de4ea9523198524324b071bde7ce8bd54dd_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/lighthouse-agent-rhel8@sha256:9165978e8f6b31c1b2c5ba1966c9ee1fa56fa9d57668b204690c792a67217de1_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/lighthouse-agent-rhel8@sha256:9716dc5a8bf1aab38472108b186bd3013fc1d5ac0f86aea9a60c721d481e3741_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/lighthouse-agent-rhel8@sha256:bb4137a931eb5b2ef530094c1d42077fba393f27c0727bb9fa9ca8ebef216d32_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/lighthouse-coredns-rhel8@sha256:5fedb3d930a6b6a035e5041dbc37f5a72e842fa671d1d1b9a1d07683b3074655_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/lighthouse-coredns-rhel8@sha256:7e35418061c0b5e670cc6315bd89b07ac26b1a657068a621c2278dee343f85a4_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/lighthouse-coredns-rhel8@sha256:923cc15bf740a7a46f53d00bc9c51f8cedcb75d5aa8a5f7f80642ce750f875a7_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/lighthouse-coredns-rhel8@sha256:a65cf2a44593713ab1bfac14a6dbf1a43d968b7ee1e5386a38c6ee0dbaa21a45_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/nettest-rhel8@sha256:2f1feeb60f201def1b766553dc67fbfd67631a5fe08f951e40acc9ecf58e53be_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/nettest-rhel8@sha256:801bf491658a7770b370b17f275385f6c405fdae8628df7591c68a2a674c8d77_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/nettest-rhel8@sha256:bc00d390fca8f6f53f41bcc9314c68a565aa9b42c74278cb9f83b5c19f82bd69_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/nettest-rhel8@sha256:d8b61063f3c9528c66e515f4f49dc10e253e0c1d7cbe0d55b5fc3d9092edd126_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/subctl-rhel8@sha256:5412b60cf39eb7c7a874e7e0e6101c098825a1de742065e212a247660576cf6e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/subctl-rhel8@sha256:5a049cc3fd785a6afd3c65a80a6c158f769a7427db7352c0e2dbf51efe6688ac_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/subctl-rhel8@sha256:69eb726de1608b83cd041c05abfe9d737d17995b00fc813bee8b032a4b108f58_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/subctl-rhel8@sha256:bb5739cea600e427dc7f042e8224c93227f2f785c46f69881a0c7ecd475d5c27_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/submariner-gateway-rhel8@sha256:29cc42136b0356c267bf8f1c599b1a85dd1a5ac175a95917ba609d8d42cf042b_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/submariner-gateway-rhel8@sha256:63d12fafbc56aff2010ed094234066b7a16f6ddf04f7aeea12b9ad75cec005e3_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/submariner-gateway-rhel8@sha256:9005919d438664eca44a75271ae1206a02fa4010ba66abae04745ccbbbeb93ee_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/submariner-gateway-rhel8@sha256:b51a6807d7443069694125d36c9acf7d1e88f1add2008a9c52bff8c51a64c16b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/submariner-globalnet-rhel8@sha256:3178568b458bf35c1cec6a8eb16abeae3d468f3e5102849680c65050586e19bb_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/submariner-globalnet-rhel8@sha256:58c0df811794ba52277feac73c046c1f78f6731c0792f28665601cac81494804_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/submariner-globalnet-rhel8@sha256:8386fc6c583ce7e56af3aa07e6089599863381d9c2b206b674d093ea6a0604b1_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/submariner-globalnet-rhel8@sha256:bc1fde61774378d347275e1500aa375570026b586390880d0d0de17cafca6343_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/submariner-networkplugin-syncer-rhel8@sha256:2251e876e51328e5061469b7b6002395c6f7486d89fe8a09227c80e134c4341d_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/submariner-networkplugin-syncer-rhel8@sha256:98bd14eceaa0fe009cf09072c2f8a08a89fca9bde79569bbd89ee17b77151fb9_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/submariner-networkplugin-syncer-rhel8@sha256:c0a892fe4f1802ca3d3c6f03dab6cd25f1ebc41dcddf08d90a6d9aefc193971d_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/submariner-networkplugin-syncer-rhel8@sha256:e829974f7d64601d7ac739bea120fe0a02dbc48e7e36d96bdc3b1ea64cbdb77d_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • rhacm2/submariner-operator-bundle@sha256:11f67392d84dcd4b1e848f365a68d558d4df4ffc2aa7c00ecb882395c21a6161_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.6 for RHEL 8
  • +11 more not shown

✅ Remediation

For details on how to install Submariner, refer to: https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.6/html/add-ons/submariner#submariner-deploy-console and https://submariner.io/getting-started/

🔗 References (14)