RHSA-2022:7058MediumCVSS 7.5
Red Hat Security Advisory: OpenShift sandboxed containers 1.3.1 security fix and bug fix update
🔗 CVE IDs covered (3)
📋 Description
CVE-2022-2832 — blender: Null pointer reference in blender thumbnail extractor CVE-2022-24675 — golang: encoding/pem: fix stack overflow in Decode CVE-2022-30632 — golang: path/filepath: stack exhaustion in Glob
🎯 Affected products5
- OpenShift Sandboxed Containers 1.3
- openshift-sandboxed-containers/osc-monitor-rhel8@sha256:4030d96a383f9d20de9e66ee6f6beb7e400f5640d1e5913888fe4bb4a11839e7_amd64 as a component of OpenShift Sandboxed Containers 1.3
- openshift-sandboxed-containers/osc-must-gather-rhel8@sha256:b3192b8464c1aa320872ba00adcfbd6ef1f0e2e579b1d74baec771b8e21d9a5c_amd64 as a component of OpenShift Sandboxed Containers 1.3
- openshift-sandboxed-containers/osc-operator-bundle@sha256:7ca09fa0c33ec0ebec22fd83e636f9f9f5ff93ae98d449de3df6222978cfda77_amd64 as a component of OpenShift Sandboxed Containers 1.3
- openshift-sandboxed-containers/osc-rhel8-operator@sha256:ce0e4f415f165f5f65c72e3a499c6922a2d88e6c3d2960b007744e3bbbe2e78b_amd64 as a component of OpenShift Sandboxed Containers 1.3
✅ Remediation
Before applying this update, ensure all previously released errata relevant to your system have been applied. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://docs.openshift.com/container-platform/latest/sandboxed_containers/upgrade-sandboxed-containers.html
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2022:7058
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2077688
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2107386
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2118556
- externalhttps://issues.redhat.com/browse/KATA-1754
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7058.json