Red Hat Bug Fix Advisory: OpenShift Container Platform 4.12.2 packages update

Fixed packages 94

Vulnerabilities 1

• Unscored —
  CVE-2022-32190

  Failure to strip relative path components in net/url

  JoinPath and URL.JoinPath do not remove ../ path elements appended to a relative path. For example, JoinPath("https://go.dev", "../go") returns the URL "https://go.dev/../go", despite the JoinPath documentation stating that ../ path elements are removed from …

  Go standard library net/url katib-suggestion-hyperopt katib-earlystopping Debian Alpine Wolfi Go
  Sep 13, 2022

References

• article
  https://issues.redhat.com/browse/OCPBUGS-6900
• article
  https://issues.redhat.com/browse/OCPBUGS-6981
• article
  https://issues.redhat.com/browse/OCPBUGS-6986
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhba-2023_0568.json
• report
  https://access.redhat.com/security/cve/CVE-2022-32190
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2124668
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-32190
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-32190
• article
  https://go.dev/issue/54385
• article
  https://groups.google.com/g/golang-announce/c/x49AQzIVX-s/m/0tgO0pjiBQAJ