Red Hat OpenStack: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 4

• High 8.6
  CVE-2022-26945

  HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion

  go-getter up to 1.5.11 and 2.0.2 allowed protocol switching, endless redirect, and configuration bypass via abuse of custom HTTP response header processing. Fixed in 1.6.1 and 2.1.0.

  golang-github-hashicorp-go-getter golang-github-hashicorp-go-getter golang-github-jesseduffield-go-getter github.com/hashicorp/go-getter Debian Ubuntu Go
  May 25, 2022
• Unscored —
  CVE-2022-30321

  go-getter up to 1.5.11 and 2.0.2 allowed arbitrary host access via go-getter path traversal, symlink processing, and co…

  golang-github-hashicorp-go-getter golang-github-hashicorp-go-getter golang-github-jesseduffield-go-getter Debian Ubuntu
  May 25, 2022
• Unscored —
  CVE-2022-30322

  go-getter up to 1.5.11 and 2.0.2 allowed asymmetric resource exhaustion when go-getter processed malicious HTTP respons…

  golang-github-hashicorp-go-getter golang-github-hashicorp-go-getter golang-github-jesseduffield-go-getter Debian Ubuntu
  May 25, 2022
• Unscored —
  CVE-2022-30323

  go-getter up to 1.5.11 and 2.0.2 panicked when processing password-protected ZIP files. Fixed in 1.6.1 and 2.1.0.

  golang-github-hashicorp-go-getter golang-github-hashicorp-go-getter golang-github-jesseduffield-go-getter Debian Ubuntu
  May 25, 2022

Revision history

1. 2023-01-05 #11

   Neue Updates von Red Hat aufgenommen

2. 2022-11-17 #10

   Neue Updates von Red Hat aufgenommen

3. 2022-11-03 #9

   Neue Updates von Red Hat aufgenommen

4. 2022-11-02 #8

   Neue Updates von Red Hat aufgenommen

5. 2022-10-19 #7

   Neue Updates von Red Hat aufgenommen

6. 2022-10-12 #6

   Neue Updates von Red Hat aufgenommen

7. 2022-09-14 #5

   Neue Updates von Red Hat aufgenommen

8. 2022-09-07 #4

   Neue Updates von Red Hat aufgenommen

9. 2022-08-31 #3

   Neue Updates von Red Hat aufgenommen

10. 2022-08-10 #2

    Neue Updates von Red Hat aufgenommen

11. 2022-07-20 #1

    Initiale Fassung

References

• Red Hat Security Advisory RHSA-2022:9111 vom 2023-01-06
  https://access.redhat.com/errata/RHSA-2022:9111
• Red Hat Security Advisory RHSA-2022:7874 vom 2022-11-18
  https://access.redhat.com/errata/RHSA-2022:7874
• Red Hat Security Advisory RHSA-2022:5673 vom 2022-07-20
  https://access.redhat.com/errata/RHSA-2022:5673
• Red Hat Security Advisory RHSA-2022:5069 vom 2022-08-10
  https://access.redhat.com/errata/RHSA-2022:5069
• Red Hat Security Advisory RHSA-2022:6133 vom 2022-08-31
  https://access.redhat.com/errata/RHSA-2022:6133
• Red Hat Security Advisory RHSA-2022:6147 vom 2022-09-01
  https://access.redhat.com/errata/RHSA-2022:6147
• Red Hat Security Advisory RHSA-2022:6258 vom 2022-09-08
  https://access.redhat.com/errata/RHSA-2022:6258
• Red Hat Security Advisory RHSA-2022:6308 vom 2022-09-15
  https://access.redhat.com/errata/RHSA-2022:6308
• Red Hat Security Advisory RHSA-2022:6805 vom 2022-10-12
  https://access.redhat.com/errata/RHSA-2022:6805
• Red Hat Security Advisory RHSA-2022:6801 vom 2022-10-13
  https://access.redhat.com/errata/RHSA-2022:6801
• Red Hat Security Advisory RHSA-2022:6905 vom 2022-10-19
  https://access.redhat.com/errata/RHSA-2022:6905
• Red Hat Security Advisory RHSA-2022:7201 vom 2022-11-02
  https://access.redhat.com/errata/RHSA-2022:7201
• Red Hat Security Advisory RHSA-2022:7211 vom 2022-11-02
  https://access.redhat.com/errata/RHSA-2022:7211
• Red Hat Security Advisory RHSA-2022:7216 vom 2022-11-03
  https://access.redhat.com/errata/RHSA-2022:7216