Red Hat Bug Fix Advisory: Red Hat OpenShift Service Mesh 2.0.2 RPMs

Fixed packages 1

Vulnerabilities 1

• Unscored —
  CVE-2020-28362

  Panic during division of very large numbers in math/big

  Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.

  golang go stdlib golang-1.14 Debian Ubuntu Azure Linux Alpine Go
  Nov 18, 2020

References

• article
  https://issues.redhat.com/browse/MAISTRA-2086
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhba-2021_0482.json
• report
  https://access.redhat.com/security/cve/CVE-2020-28362
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1897635
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-28362
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-28362