RHSA-2022:9047MediumCVSS 7.5

Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.7.6 security and bug fix update

Published
December 15, 2022
Last Modified
October 15, 2026

🔗 CVE IDs covered (10)

CVE-2022-30635 →CVE-2022-32148 →CVE-2022-1705 →CVE-2022-30632 →CVE-2022-30633 →CVE-2022-1962 →CVE-2022-3517 →CVE-2022-28131 →CVE-2022-30629 →CVE-2022-30630 →

📋 Description

CVE-2022-1705 — golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-1962 — golang: go/parser: stack exhaustion in all Parse* functions CVE-2022-3517 — nodejs-minimatch: ReDoS via the braceExpand function CVE-2022-28131 — golang: encoding/xml: stack exhaustion in Decoder.Skip CVE-2022-30629 — golang: crypto/tls: session tickets lack random ticket_age_add CVE-2022-30630 — golang: io/fs: stack exhaustion in Glob CVE-2022-30632 — golang: path/filepath: stack exhaustion in Glob CVE-2022-30633 — golang: encoding/xml: stack exhaustion in Unmarshal CVE-2022-30635 — golang: encoding/gob: stack exhaustion in Decoder.Decode CVE-2022-32148 — golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working

🎯 Affected products18

  • 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-controller-rhel8@sha256:11ea9e0cd77425db46a682a146a841d8127129048db98bbb7bc456d55e1c0d6c_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-hook-runner-rhel8@sha256:d1f78e4f37b414d5007c8e5711de3e95179612722a1c0dba5ab70d7a57b171b9_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-legacy-rhel8-operator@sha256:dd304118410ab622dab252504a18245012155894c3f89fd74af1aeffce0d4b5b_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-log-reader-rhel8@sha256:fa36a6123064aefa646293b919c58660905a5f05b61ef35c7c767b6f88e4949f_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-must-gather-rhel8@sha256:fcbfc67d121d1d88f3ba16912f0920999c424ceab823cc9642a2f146ed103744_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-openvpn-rhel8@sha256:7b6879e9e14e5e7622635f3755aa002e438da06969fdcae7bc8b9f90ab3bb4fe_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-operator-bundle@sha256:b46a79a60ef37106d34c5b54a65af27cf3953d367586718e80df6d4468238a2d_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-registry-rhel8@sha256:0b36e9ff32de1e801ddd34ccad1ea0a17029e17d2b93d0ea512c08b5b8a7f012_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-rhel8-operator@sha256:7b02b5182ff57b9bfa5857aa9e4da5ce5218198228044765047a4e41df6702c1_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:2d5ca15f95a1c45e40e983328eb28584164499f70af901ad23fcd29fd3b6d800_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-ui-rhel8@sha256:951c384edd74377add1acd4590d9eceb30d147cb5f3042679e4c19d43b94e6c0_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-velero-plugin-for-aws-rhel8@sha256:c0685deaac37756a5f61923596086d9165199f7cf774a9a8719e15504ae2caee_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8@sha256:dc8c6f17710f9757b98411f7f3e5e45452878a69498b0efc6b6fac17a7521c32_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8@sha256:441c6e0854078633d2ff13315db18965a96aa48dfe3cb843f74463a69f725f46_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-velero-restic-restore-helper-rhel8@sha256:297eeba673e224cad38b069f2e63be1b863d148710f53ce605d062088c150a9d_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-migration-velero-rhel8@sha256:1f4bad1258ebb47d8faec192a61af8926b4b46b0208fad1317c6d4434733c42e_amd64 as a component of 8Base-RHMTC-1.7
  • rhmtc/openshift-velero-plugin-rhel8@sha256:b736ee68818e6e5193c8da383a7a2243dad4c8c198c4fb7370e856eaf0cf6714_amd64 as a component of 8Base-RHMTC-1.7

✅ Remediation

For details on how to install and use MTC, refer to: https://docs.openshift.com/container-platform/latest/migration_toolkit_for_containers/installing-mtc.html

🔗 References (19)