RHSA-2022:6430MediumCVSS 7.5

Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.0.4 security and bug fix update

Published
September 13, 2022
Last Modified
August 24, 2026

🔗 CVE IDs covered (8)

CVE-2022-30631 →CVE-2022-32148 →CVE-2022-1705 →CVE-2022-1962 →CVE-2022-21698 →CVE-2022-24675 →CVE-2022-30629 →CVE-2022-30630 →

📋 Description

CVE-2022-1705 — golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-1962 — golang: go/parser: stack exhaustion in all Parse* functions CVE-2022-21698 — prometheus/client_golang: Denial of service using InstrumentHandlerCounter CVE-2022-24675 — golang: encoding/pem: fix stack overflow in Decode CVE-2022-30629 — golang: crypto/tls: session tickets lack random ticket_age_add CVE-2022-30630 — golang: io/fs: stack exhaustion in Glob CVE-2022-30631 — golang: compress/gzip: stack exhaustion in Reader.Read CVE-2022-32148 — golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working

🎯 Affected products13

  • 8Base-OADP-1.0
  • oadp/oadp-kubevirt-velero-plugin-rhel8@sha256:d5d5e8252fd5c5fc38e0a28aef3b209302da2403381906a4fc16996201ea602d_amd64 as a component of 8Base-OADP-1.0
  • oadp/oadp-mustgather-rhel8@sha256:ce71a41a5ea7455baf6ef8b71e3212f61fba35ade50b632b91cdf53ae2cd412f_amd64 as a component of 8Base-OADP-1.0
  • oadp/oadp-operator-bundle@sha256:d803961b4c075fe513459313dea1245871413d29d3232a0a12973db7398409db_amd64 as a component of 8Base-OADP-1.0
  • oadp/oadp-registry-rhel8@sha256:10ab07c1494e47c1da64e61e5a5e5889e5e74429a10da95a9f908f5bf0c0553a_amd64 as a component of 8Base-OADP-1.0
  • oadp/oadp-rhel8-operator@sha256:8769890ce3bd07afb147fd045bdfd4dd02f7d2a83857728d60fe576c455f8a56_amd64 as a component of 8Base-OADP-1.0
  • oadp/oadp-velero-plugin-for-aws-rhel8@sha256:d8672ec946550fb12ba952f305bc9cb4d820b776a5b16b7932657837b4d242ab_amd64 as a component of 8Base-OADP-1.0
  • oadp/oadp-velero-plugin-for-csi-rhel8@sha256:58b31dd30b9bcb47a5d590ca4197ea4aebd6ba5e9e73055a5889da889d1e63e8_amd64 as a component of 8Base-OADP-1.0
  • oadp/oadp-velero-plugin-for-gcp-rhel8@sha256:dfcf22434189301007fb440c6b714a04163c931cbc3021f337b19ccf840bde70_amd64 as a component of 8Base-OADP-1.0
  • oadp/oadp-velero-plugin-for-microsoft-azure-rhel8@sha256:383434ed3aafd0b55384f84fd1204b8ae62e6743472ca9f1beb0878be8044f89_amd64 as a component of 8Base-OADP-1.0
  • oadp/oadp-velero-plugin-rhel8@sha256:bf5d6974202df79eac08dfd475fa1c2f7d21819ef5e4d5a7f761b73424429128_amd64 as a component of 8Base-OADP-1.0
  • oadp/oadp-velero-restic-restore-helper-rhel8@sha256:31dfff0d43517d4dee4c47a1d05705b30b74a180794cc6f8a2a156b91c14d5fd_amd64 as a component of 8Base-OADP-1.0
  • oadp/oadp-velero-rhel8@sha256:efb4eb48cbd2ee2276844bc6a6c0fb402c293faabd0a56b1ba3e8b41da0d99a8_amd64 as a component of 8Base-OADP-1.0

✅ Remediation

For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (11)