logo
DATABASE RESOURCES PRICING ABOUT US

Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak

2022-10-24T20:10:11

Description

## Summary Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak Linux kernel is used by IBM Robotic Process Automation for Cloud Pak as part of base container images. (CVE-2022-1012, CVE-2022-32250). OpenSSL is used by IBM Robotic Process Automation for Cloud Pak for handling certificates in the API Server image. (CVE-2022-1292, CVE-2022-2068, CVE-2022-2097). PCRE2 is used by IBM Robotic Process Automation for Cloud Pak as part of the base container images. (CVE-2022-1586). Golang Go is used by IBM Robotic Process Automation for Cloud Pak as part of the operators. (CVE-2022-1705, CVE-2022-1962, CVE-2022-28131, CVE-2022-30580, CVE-2022-30629, CVE-2022-30630, CVE-2022-30631, CVE-2022-30632, CVE-2022-30633, CVE-2022-30635, CVE-2022-32148, CVE-2022-32189). systemd is used by IBM Robotic Process Automation for Cloud Pak as part of the base container images. (CVE-2022-2526). Java is used by IBM Robotic Process Automation for Cloud Pak as part of the <product functionality using the 3rd party software>. (CVE-2022-21540, CVE-2022-21541). rsync is used by IBM Robotic Process Automation for Cloud Pak for download, test and install anti-virus databases. (CVE-2022-29154). libcurl is used by IBM Robotic Process Automation for Cloud Pak as part of the base container images. (CVE-2022-32206, CVE-2022-32208). Apache XLAN Java XSLT is used by IBM Robotic Process Automation for Cloud Pak as part of the Java package used for NLP services. (CVE-2022-34169). ## Vulnerability Details **CVEID: **[CVE-2022-1012](<https://vulners.com/cve/CVE-2022-1012>) **DESCRIPTION: **Linux Kernel could allow a remote attacker to obtain sensitive information, caused by a memory leak flaw in the TCP source port generation algorithm in the net/ipv4/tcp.c function. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information or cause a denial of service condition. CVSS Base score: 8.2 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/230055](<https://exchange.xforce.ibmcloud.com/vulnerabilities/230055>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H) **CVEID: **[CVE-2022-1292](<https://vulners.com/cve/CVE-2022-1292>) **DESCRIPTION: **OpenSSL could allow a remote authenticated attacker to execute arbitrary commands on the system, caused by improper validation of user-supplied input by the c_rehash script. By sending a specially-crafted request using shell metacharacters, an attacker could exploit this vulnerability to execute arbitrary commands with the privileges of the script on the system. CVSS Base score: 6.3 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/225619](<https://exchange.xforce.ibmcloud.com/vulnerabilities/225619>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) **CVEID: **[CVE-2022-1586](<https://vulners.com/cve/CVE-2022-1586>) **DESCRIPTION: **PCRE2 could allow a remote attacker to execute arbitrary code on the system, caused by an out-of-bounds read in the compile_xclass_matchingpath() function in the pcre2_jit_compile.c file. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system. CVSS Base score: 7.3 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/226863](<https://exchange.xforce.ibmcloud.com/vulnerabilities/226863>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) **CVEID: **[CVE-2022-1705](<https://vulners.com/cve/CVE-2022-1705>) **DESCRIPTION: **Golang Go is vulnerable to HTTP request smuggling, caused by a flaw with accepting of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http. By sending a specially-crafted HTTP(S) transfer-encoding request header, an attacker could exploit this vulnerability to poison the web cache, bypass web application firewall protection, and conduct XSS attacks. CVSS Base score: 6.5 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/233258](<https://exchange.xforce.ibmcloud.com/vulnerabilities/233258>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) **CVEID: **[CVE-2022-1962](<https://vulners.com/cve/CVE-2022-1962>) **DESCRIPTION: **Golang Go is vulnerable to a denial of service, caused by a stack exhaustion flaw in all Parse* functions. By sending a specially-crafted request, a local attacker could exploit this vulnerability to cause a panic, and results in a denial of service condition. CVSS Base score: 6.2 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/232543](<https://exchange.xforce.ibmcloud.com/vulnerabilities/232543>) for the current score. CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) **CVEID: **[CVE-2022-2068](<https://vulners.com/cve/CVE-2022-2068>) **DESCRIPTION: **OpenSSL could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of user-supplied input by the c_rehash script. By sending a specially-crafted request using shell metacharacters, an attacker could exploit this vulnerability to execute arbitrary commands with the privileges of the script on the system. CVSS Base score: 7.3 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/226018](<https://exchange.xforce.ibmcloud.com/vulnerabilities/226018>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) **CVEID: **[CVE-2022-2097](<https://vulners.com/cve/CVE-2022-2097>) **DESCRIPTION: **OpenSSL could allow a remote attacker to obtain sensitive information, caused by improper encryption of data by the AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information, and use this information to launch further attacks against the affected system. CVSS Base score: 5.3 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/230425](<https://exchange.xforce.ibmcloud.com/vulnerabilities/230425>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) **CVEID: **[CVE-2022-2526](<https://vulners.com/cve/CVE-2022-2526>) **DESCRIPTION: **systemd could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free flaw due to the on_stream_io() function and dns_stream_complete() function in "resolved-dns-stream.c" not incrementing the reference counting for the DnsStream object. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system. CVSS Base score: 8.8 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/235161](<https://exchange.xforce.ibmcloud.com/vulnerabilities/235161>) for the current score. CVSS Vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) **CVEID: **[CVE-2022-21540](<https://vulners.com/cve/CVE-2022-21540>) **DESCRIPTION: **An unspecified vulnerability in Java SE related to the VM component could allow an unauthenticated attacker to obtain sensitive information resulting in a low confidentiality impact using unknown attack vectors. CVSS Base score: 5.3 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/231567](<https://exchange.xforce.ibmcloud.com/vulnerabilities/231567>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) **CVEID: **[CVE-2022-21541](<https://vulners.com/cve/CVE-2022-21541>) **DESCRIPTION: **An unspecified vulnerability in Java SE related to the VM component could allow an unauthenticated attacker to cause no confidentiality impact, high integrity impact, and no availability impact. CVSS Base score: 5.9 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/231568](<https://exchange.xforce.ibmcloud.com/vulnerabilities/231568>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) **CVEID: **[CVE-2022-28131](<https://vulners.com/cve/CVE-2022-28131>) **DESCRIPTION: **Golang Go is vulnerable to a denial of service, caused by an uncontrolled recursion flaw in Decoder.Skip in encoding/xml due to stack exhaustion. By parsing a specially-crafted XML document, a remote attacker could exploit this vulnerability to cause a panic. CVSS Base score: 7.5 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/233141](<https://exchange.xforce.ibmcloud.com/vulnerabilities/233141>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) **CVEID: **[CVE-2022-29154](<https://vulners.com/cve/CVE-2022-29154>) **DESCRIPTION: **Rsync could allow a remote attacker to bypass security restrictions, caused by improper validation of file names. By utilize man-in-the-middle attack techniques, an attacker could exploit this vulnerability to write arbitrary files inside the directories of connecting peers. CVSS Base score: 7.5 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/232637](<https://exchange.xforce.ibmcloud.com/vulnerabilities/232637>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) **CVEID: **[CVE-2022-30580](<https://vulners.com/cve/CVE-2022-30580>) **DESCRIPTION: **Golang Go could allow a local attacker to execute arbitrary code on the system, caused by a flaw when Cmd.Run, cmd.Start, cmd.Output, or cmd.CombinedOutput are executed when Cmd.Path is unset. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system. CVSS Base score: 8.4 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/229858](<https://exchange.xforce.ibmcloud.com/vulnerabilities/229858>) for the current score. CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) **CVEID: **[CVE-2022-30629](<https://vulners.com/cve/CVE-2022-30629>) **DESCRIPTION: **Golang Go could allow a remote attacker to obtain sensitive information, caused by an issue with session tickets generated by crypto/tls did not contain a randomly generated ticket_age_add. By comparing ticket ages during session resumption, an attacker could exploit this vulnerability to observe TLS handshakes information to correlate successive connections. CVSS Base score: 7.5 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/229859](<https://exchange.xforce.ibmcloud.com/vulnerabilities/229859>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) **CVEID: **[CVE-2022-30630](<https://vulners.com/cve/CVE-2022-30630>) **DESCRIPTION: **Golang Go is vulnerable to a denial of service, caused by an uncontrolled recursion flaw in Glob in io/fs due to stack exhaustion. By sending a specially-crafted request using a path which contains a large number of path separators, a remote attacker could exploit this vulnerability to cause a panic. CVSS Base score: 7.5 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/233143](<https://exchange.xforce.ibmcloud.com/vulnerabilities/233143>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) **CVEID: **[CVE-2022-30631](<https://vulners.com/cve/CVE-2022-30631>) **DESCRIPTION: **Golang Go is vulnerable to a denial of service, caused by an uncontrolled recursion flaw in Reader.Read in compress/gzip due to stack exhaustion. By parsing a specially-crafted compressed file, a remote attacker could exploit this vulnerability to cause a panic. CVSS Base score: 7.5 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/233144](<https://exchange.xforce.ibmcloud.com/vulnerabilities/233144>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) **CVEID: **[CVE-2022-30632](<https://vulners.com/cve/CVE-2022-30632>) **DESCRIPTION: **Golang Go is vulnerable to a denial of service, caused by an uncontrolled recursion flaw in Glob in path/filepath due to stack exhaustion. By sending a specially-crafted request using a path containing a large number of path separators, a remote attacker could exploit this vulnerability to cause a panic. CVSS Base score: 7.5 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/233145](<https://exchange.xforce.ibmcloud.com/vulnerabilities/233145>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) **CVEID: **[CVE-2022-30633](<https://vulners.com/cve/CVE-2022-30633>) **DESCRIPTION: **Golang Go is vulnerable to a denial of service, caused by an uncontrolled recursion flaw in Unmarshal in encoding/xml due to stack exhaustion. By parsing a specially-crafted XML document, a remote attacker could exploit this vulnerability to cause a panic. CVSS Base score: 7.5 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/233146](<https://exchange.xforce.ibmcloud.com/vulnerabilities/233146>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) **CVEID: **[CVE-2022-30635](<https://vulners.com/cve/CVE-2022-30635>) **DESCRIPTION: **Golang Go is vulnerable to a denial of service, caused by an uncontrolled recursion flaw in Decoder.Decode in encoding/gob due to stack exhaustion. By sending a specially-crafted message containing deeply nested structures, a remote attacker could exploit this vulnerability to cause a panic. CVSS Base score: 7.5 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/233147](<https://exchange.xforce.ibmcloud.com/vulnerabilities/233147>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) **CVEID: **[CVE-2022-32148](<https://vulners.com/cve/CVE-2022-32148>) **DESCRIPTION: **Golang Go could allow a remote attacker to obtain sensitive information, caused by improper exposure of client IP addresses in net/http. By calling httputil.ReverseProxy.ServeHTTP with a Request.Header map containing a nil value for the X-Forwarded-For header, an attacker could exploit this vulnerability to obtain the client IP address information, and use this information to launch further attacks against the affected system. CVSS Base score: 7.5 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/233148](<https://exchange.xforce.ibmcloud.com/vulnerabilities/233148>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) **CVEID: **[CVE-2022-32189](<https://vulners.com/cve/CVE-2022-32189>) **DESCRIPTION: **Golang Go is vulnerable to a denial of service, caused by a flaw in Float.GobDecode and Rat GobDecode in math/big. By sending a specially-crafted message, a remote attacker could exploit this vulnerability to cause a panic. CVSS Base score: 7.5 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/233149](<https://exchange.xforce.ibmcloud.com/vulnerabilities/233149>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) **CVEID: **[CVE-2022-32206](<https://vulners.com/cve/CVE-2022-32206>) **DESCRIPTION: **cURL libcurl is vulnerable to a denial of service, caused by a flaw in the number of acceptable "links" in the "chained" HTTP compression algorithms. By persuading a victim to connect a specially-crafted server, a remote attacker could exploit this vulnerability to insert a virtually unlimited number of compression steps, and results in a denial of service condition. CVSS Base score: 4.3 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/229740](<https://exchange.xforce.ibmcloud.com/vulnerabilities/229740>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) **CVEID: **[CVE-2022-32208](<https://vulners.com/cve/CVE-2022-32208>) **DESCRIPTION: **cURL libcurl is vulnerable to a man-in-the-middle attack, caused by a flaw in the handling of message verification failures. An attacker could exploit this vulnerability to launch a man-in-the-middle attack and gain access to the communication channel between endpoints to inject data to the client.. CVSS Base score: 3.5 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/229742](<https://exchange.xforce.ibmcloud.com/vulnerabilities/229742>) for the current score. CVSS Vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) **CVEID: **[CVE-2022-32250](<https://vulners.com/cve/CVE-2022-32250>) **DESCRIPTION: **Linux Kernel could allow a local authenticated attacker to gain elevated privileges on the system, caused by a use-after-free write flaw in the netfilter subsystem. By executing a specially-crafted program, an authenticated attacker could exploit this vulnerability to gain elevated privileges. CVSS Base score: 7.8 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/228676](<https://exchange.xforce.ibmcloud.com/vulnerabilities/228676>) for the current score. CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) **CVEID: **[CVE-2022-34169](<https://vulners.com/cve/CVE-2022-34169>) **DESCRIPTION: **The Apache Xalan Java XSLT library could allow a remote attacker to execute arbitrary code on the system, caused by an integer truncation issue when processing malicious XSLT stylesheets. By using specially crafted XSLT stylesheets, an attacker could exploit this vulnerability to execute arbitrary code on the system. CVSS Base score: 7.3 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/231489](<https://exchange.xforce.ibmcloud.com/vulnerabilities/231489>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) ## Affected Products and Versions Affected Product(s) | Version(s) ---|--- IBM Robotic Process Automation for Cloud Pak | < 21.0.5 ## Remediation/Fixes **IBM strongly recommends addressing the vulnerability now.** **Product(s)** | **Version(s) number and/or range ** | **Remediation/Fix/Instructions** ---|---|--- IBM Robotic Process Automation for Cloud Pak | < 21.0.5 | Follow [instructions](<https://www.ibm.com/docs/en/rpa/21.0?topic=platform-preparing-applying-upgraded-custom-resource> "" ) to update to 21.0.5 or higher. ## Workarounds and Mitigations None. ##


Affected Software


CPE Name Name Version
ibm robotic process automation 21.0.1
ibm robotic process automation 21.0.2
ibm robotic process automation 21.0.3
ibm robotic process automation 21.0.4

Related


redhat
unix

(RHSA-2022:6345) Moderate: Multicluster Engine for Kubernetes 2.1 security updates and bug fixes

2022-09-06T12:02:07
redhat
unix

(RHSA-2022:6188) Important: Node Maintenance Operator 4.11.1 security update

2022-08-25T11:19:13
redhat
unix

(RHSA-2022:6348) Moderate: Gatekeeper Operator v0.2 security and container updates

2022-09-06T12:02:43
redhat
unix

(RHSA-2022:5866) Important: go-toolset-1.17 and go-toolset-1.17-golang security and bug fix update

2022-08-02T08:55:32
redhat
unix

(RHSA-2022:5775) Important: go-toolset:rhel8 security and bug fix update

2022-08-01T08:57:38
redhat
unix

(RHSA-2022:6370) Moderate: Red Hat Advanced Cluster Management 2.6.0 security updates and bug fixes

2022-09-06T21:05:46
redhat
unix

(RHSA-2022:6113) Important: Red Hat Application Interconnect 1.0 Release (rpms)

2022-08-18T14:51:43
redhat
unix

(RHSA-2022:6347) Moderate: VolSync 0.5 security fixes and updates

2022-09-06T12:02:31
redhat
unix

(RHSA-2022:6346) Moderate: RHSA: Submariner 0.13 - security and enhancement update

2022-09-06T12:02:19
redhat
unix

(RHSA-2022:6344) Moderate: Logging Subsystem 5.5.1 Security and Bug Fix Update

2022-09-06T16:58:48
redhat
unix

(RHSA-2022:6152) Important: Secondary Scheduler Operator for Red Hat OpenShift 1.1.0 security update

2022-09-01T05:38:54
redhat
unix

(RHSA-2022:7648) Moderate: grafana-pcp security update

2022-11-08T06:25:29
redhat
unix

(RHSA-2022:8250) Moderate: grafana-pcp security update

2022-11-15T06:19:30
redhat
unix

(RHSA-2022:6183) Moderate: Logging Subsystem 5.4.5 Security and Bug Fix Update

2022-09-06T13:30:30
redhat
unix

(RHSA-2022:6283) Moderate: Red Hat OpenShift Service Mesh 2.2.2 Containers security update

2022-08-31T18:47:41
redhat
unix

(RHSA-2022:7529) Moderate: container-tools:3.0 security update

2022-11-08T06:22:08
redhat
unix

(RHSA-2022:6422) Critical: Multicluster Engine for Kubernetes 2.0.2 security and bug fixes

2022-09-12T19:32:29
redhat
unix

(RHSA-2022:6182) Moderate: Openshift Logging Security and Bug Fix update (5.3.11)

2022-09-06T12:05:37
redhat
unix

(RHSA-2022:5799) Important: go-toolset and golang security and bug fix update

2022-08-01T15:29:25
redhat
unix

(RHSA-2023:0407) Moderate: OpenShift Virtualization 4.12.0 RPMs security update

2023-01-24T12:45:04
redhat
unix

(RHSA-2022:6042) Important: Release of OpenShift Serverless Client kn 1.24.0

2022-08-10T11:16:48
redhat
unix

(RHSA-2022:6507) Critical: Red Hat Advanced Cluster Management 2.5.2 security fixes and bug fixes

2022-09-13T18:29:42
redhat
unix

(RHSA-2022:8098) Moderate: toolbox security and bug fix update

2022-11-15T06:15:31
redhat
unix

(RHSA-2022:6103) Moderate: OpenShift Container Platform 4.11.1 bug fix and security update

2022-08-23T15:00:01
redhat
unix

(RHSA-2022:6430) Moderate: OpenShift API for Data Protection (OADP) 1.0.4 security and bug fix update

2022-09-13T02:08:24
redhat
unix

(RHSA-2022:6262) Important: OpenShift Container Platform 4.6.61 bug fix and security update

2022-09-09T04:57:19
redhat
unix

(RHSA-2022:6517) Important: Release of containers for OSP 16.2.z director operator tech preview

2022-09-14T12:42:43
redhat
unix

(RHSA-2022:7519) Moderate: grafana security, bug fix, and enhancement update

2022-11-08T06:21:47
redhat
unix

(RHSA-2022:8057) Important: grafana security, bug fix, and enhancement update

2022-11-15T06:14:26
redhat
unix

(RHSA-2023:1042) Moderate: Custom Metrics Autoscaler Operator for Red Hat OpenShift (with security updates)

2023-03-06T18:37:27
redhat
unix

(RHSA-2022:7129) Moderate: git-lfs security and bug fix update

2022-10-25T07:32:51
redhat
unix

(RHSA-2022:6287) Moderate: OpenShift Container Platform 4.11.3 packages and security update

2022-09-07T20:37:32
redhat
unix

(RHSA-2022:6263) Moderate: OpenShift Container Platform 4.6.61 security and extras update

2022-09-09T04:51:06
redhat
unix

(RHSA-2022:5701) Important: java-1.8.0-openjdk security update

2022-07-25T14:54:33
redhat
unix

(RHSA-2022:5700) Important: java-1.8.0-openjdk security update

2022-07-25T14:50:55
redhat
unix

(RHSA-2022:5698) Important: java-1.8.0-openjdk security, bug fix, and enhancement update

2022-07-25T14:05:42
redhat
unix

(RHSA-2022:5755) Important: OpenJDK 11.0.16 Security Update for Portable Linux Builds

2022-07-28T15:36:15
redhat
unix

(RHSA-2022:5756) Important: OpenJDK 11.0.16 security update for Windows Builds

2022-07-28T15:36:18
redhat
unix

(RHSA-2022:5753) Important: OpenJDK 8u342 Windows builds release and security update

2022-07-28T15:28:11
redhat
unix

(RHSA-2022:5685) Important: java-11-openjdk security update

2022-07-21T13:47:36
redhat
unix

(RHSA-2022:5697) Important: java-1.8.0-openjdk security and bug fix update

2022-07-25T13:59:16
redhat
unix

(RHSA-2022:5696) Important: java-1.8.0-openjdk security, bug fix, and enhancement update

2022-07-25T13:45:21
redhat
unix

(RHSA-2022:5695) Important: java-11-openjdk security, bug fix, and enhancement update

2022-07-25T13:40:39
redhat
unix

(RHSA-2022:5709) Important: java-1.8.0-openjdk security, bug fix, and enhancement update

2022-07-25T22:43:48
suse
unix

Security update for go1.18 (important)

2022-08-04T00:00:00
suse
unix

Security update for go1.17 (important)

2022-08-04T00:00:00
suse
unix

Security update for java-1_8_0-openjdk (important)

2022-08-19T00:00:00
suse
unix

Security update for java-11-openjdk (important)

2022-08-09T00:00:00
nessus
scanner

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.17 (SUSE-SU-2022:2671-1)

2022-08-05T00:00:00
nessus
scanner

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.18 (SUSE-SU-2022:2672-1)

2022-08-05T00:00:00
nessus
scanner

Oracle Linux 8 : ol8addon (ELSA-2022-23681)

2022-11-07T00:00:00
nessus
scanner

CentOS 8 : go-toolset:rhel8 (CESA-2022:5775)

2022-08-01T00:00:00
nessus
scanner

RHEL 7 : go-toolset-1.17 and go-toolset-1.17-golang (RHSA-2022:5866)

2022-08-02T00:00:00
nessus
scanner

RHEL 8 : go-toolset:rhel8 (RHSA-2022:5775)

2022-08-01T00:00:00
nessus
scanner

Oracle Linux 8 : go-toolset:ol8 (ELSA-2022-5775)

2022-08-04T00:00:00
nessus
scanner

Oracle Linux 9 : go-toolset / and / golang (ELSA-2022-5799)

2022-08-02T00:00:00
nessus
scanner

AlmaLinux 8 : go-toolset:rhel8 (5775) (ALSA-2022:5775)

2022-08-06T00:00:00
nessus
scanner

FreeBSD : go -- multiple vulnerabilities (a4f2416c-02a0-11ed-b817-10c37b4ac2ea)

2022-07-14T00:00:00
nessus
scanner

AlmaLinux 9 : go-toolset and golang (ALSA-2022:5799)

2022-11-16T00:00:00
nessus
scanner

Rocky Linux 8 : grafana (RLSA-2022:8057)

2023-01-30T00:00:00
nessus
scanner

AlmaLinux 8 : grafana-pcp (ALSA-2022:7648)

2022-11-12T00:00:00
nessus
scanner

Oracle Linux 9 : grafana-pcp (ELSA-2022-8250)

2022-11-22T00:00:00
nessus
scanner

CentOS 8 : grafana-pcp (CESA-2022:7648)

2022-11-08T00:00:00
nessus
scanner

RHEL 8 : grafana-pcp (RHSA-2022:7648)

2022-11-09T00:00:00
nessus
scanner

RHEL 9 : grafana-pcp (RHSA-2022:8250)

2022-11-16T00:00:00
nessus
scanner

Oracle Linux 8 : grafana-pcp (ELSA-2022-7648)

2022-11-15T00:00:00
nessus
scanner

AlmaLinux 9 : grafana-pcp (ALSA-2022:8250)

2022-11-19T00:00:00
nessus
scanner

EulerOS 2.0 SP10 : golang (EulerOS-SA-2022-2651)

2022-11-02T00:00:00
nessus
scanner

EulerOS 2.0 SP10 : golang (EulerOS-SA-2022-2683)

2022-11-02T00:00:00
nessus
scanner

AlmaLinux 8 : container-tools:3.0 (ALSA-2022:7529)

2022-11-12T00:00:00
nessus
scanner

RHEL 8 : container-tools:3.0 (RHSA-2022:7529)

2022-11-09T00:00:00
nessus
scanner

CentOS 8 : container-tools:3.0 (CESA-2022:7529)

2022-11-09T00:00:00
nessus
scanner

Oracle Linux 8 : container-tools:3.0 (ELSA-2022-7529)

2022-11-15T00:00:00
nessus
scanner

EulerOS 2.0 SP9 : golang (EulerOS-SA-2022-2288)

2022-09-14T00:00:00
nessus
scanner

EulerOS 2.0 SP9 : golang (EulerOS-SA-2022-2317)

2022-09-14T00:00:00
nessus
scanner

Rocky Linux 9 : go-toolset and golang (RLSA-2022:5799)

2023-02-06T00:00:00
nessus
scanner

RHEL 9 : go-toolset and golang (RHSA-2022:5799)

2022-08-01T00:00:00
nessus
scanner

Amazon Linux 2 : golang (ALAS-2022-1846)

2022-10-10T00:00:00
nessus
scanner

Amazon Linux 2 : golist (ALAS-2022-1847)

2022-10-11T00:00:00
nessus
scanner

Amazon Linux 2022 : (ALAS2022-2022-192)

2022-11-04T00:00:00
nessus
scanner

Amazon Linux 2023 : compat-golang-github-cpuguy83-md2man-2-devel, golang-github-cpuguy83-md2man, golang-github-cpuguy83-md2man-devel (ALAS2023-2023-047)

2023-03-21T00:00:00
nessus
scanner

Amazon Linux 2 : runc (ALASDOCKER-2022-020)

2022-10-14T00:00:00
nessus
scanner

EulerOS 2.0 SP5 : golang (EulerOS-SA-2022-2710)

2022-11-04T00:00:00
nessus
scanner

Rocky Linux 9 : toolbox (RLSA-2022:8098)

2023-01-25T00:00:00
nessus
scanner

RHEL 9 : toolbox (RHSA-2022:8098)

2022-11-16T00:00:00
nessus
scanner

AlmaLinux 9 : toolbox (ALSA-2022:8098)

2022-11-19T00:00:00
nessus
scanner

Oracle Linux 8 : ol8addon (ELSA-2022-24267)

2022-11-23T00:00:00
nessus
scanner

Amazon Linux 2 : golang-github-gorilla-context (ALAS-2022-1859)

2022-10-21T00:00:00
nessus
scanner

Amazon Linux 2 : golang-googlecode-net (ALAS-2022-1861)

2022-10-21T00:00:00
nessus
scanner

Amazon Linux 2 : golang-github-godbus-dbus (ALAS-2022-1858)

2022-10-21T00:00:00
nessus
scanner

Amazon Linux 2 : go-rpm-macros (ALAS-2022-1863)

2022-10-21T00:00:00
nessus
scanner

Amazon Linux 2 : golang-github-syndtr-gocapability (ALAS-2022-1865)

2022-10-21T00:00:00
nessus
scanner

Amazon Linux 2 : golang-googlecode-sqlite (ALAS-2022-1862)

2022-10-21T00:00:00
nessus
scanner

Amazon Linux 2 : golang-github-gorilla-mux (ALAS-2022-1860)

2022-10-21T00:00:00
nessus
scanner

Amazon Linux 2 : golang-github-kr-pty (ALAS-2022-1864)

2022-10-21T00:00:00
nessus
scanner

Amazon Linux AMI : golang (ALAS-2022-1635)

2022-12-07T00:00:00
nessus
scanner

AlmaLinux 8 : grafana (ALSA-2022:7519)

2022-11-12T00:00:00
nessus
scanner

CentOS 8 : grafana (CESA-2022:7519)

2022-11-09T00:00:00
nessus
scanner

Oracle Linux 9 : grafana (ELSA-2022-8057)

2022-11-22T00:00:00
nessus
scanner

RHEL 8 : grafana (RHSA-2022:7519)

2022-11-08T00:00:00
nessus
scanner

RHEL 9 : grafana (RHSA-2022:8057)

2022-11-15T00:00:00
nessus
scanner

Oracle Linux 8 : grafana (ELSA-2022-7519)

2022-11-15T00:00:00
nessus
scanner

AlmaLinux 9 : grafana (ALSA-2022:8057)

2022-11-19T00:00:00
nessus
scanner

Oracle Linux 8 : git-lfs (ELSA-2022-7129)

2022-10-26T00:00:00
nessus
scanner

RHEL 8 : git-lfs (RHSA-2022:7129)

2022-10-25T00:00:00
nessus
scanner

AlmaLinux 8 : git-lfs (ALSA-2022:7129)

2022-10-25T00:00:00
nessus
scanner

Amazon Linux 2 : java-1.8.0-amazon-corretto (ALASCORRETTO8-2022-003)

2022-07-22T00:00:00
nessus
scanner

RHEL 8 : java-1.8.0-openjdk (RHSA-2022:5700)

2022-07-26T00:00:00
nessus
scanner

Amazon Linux 2022 : (ALAS2022-2022-119)

2022-09-06T00:00:00
nessus
scanner

RHEL 7 : java-11-openjdk (RHSA-2022:5687)

2022-07-22T00:00:00
nessus
scanner

SUSE SLES12 Security Update : java-11-openjdk (SUSE-SU-2022:2610-1)

2022-08-02T00:00:00
nessus
scanner

Oracle Linux 9 : java-1.8.0-openjdk (ELSA-2022-5709)

2022-07-27T00:00:00
nessus
scanner

Rocky Linux 8 : java-11-openjdk (RLSA-2022:5683)

2022-07-27T00:00:00
nessus
scanner

Rocky Linux 8 : java-1.8.0-openjdk (RLSA-2022:5696)

2022-07-27T00:00:00
nessus
scanner

Amazon Linux 2022 : (ALAS2022-2022-120)

2022-09-06T00:00:00
nessus
scanner

Amazon Linux 2 : java-1.8.0-openjdk (ALAS-2022-1836)

2022-09-15T00:00:00
nessus
scanner

Amazon Linux 2022 : (ALAS2022-2022-111)

2022-09-06T00:00:00
nessus
scanner

Amazon Linux 2022 : (ALAS2022-2022-112)

2022-09-07T00:00:00
nessus
scanner

SUSE SLES15 / openSUSE 15 Security Update : java-1_8_0-openjdk (SUSE-SU-2022:2856-1)

2022-08-20T00:00:00
nessus
scanner

Scientific Linux Security Update : java-11-openjdk on SL7.x i686/x86_64 (2022:5687)

2022-08-02T00:00:00
nessus
scanner

Scientific Linux Security Update : java-1.8.0-openjdk on SL7.x i686/x86_64 (2022:5698)

2022-08-02T00:00:00
nessus
scanner

CentOS 7 : java-1.8.0-openjdk (CESA-2022:5698)

2022-08-02T00:00:00
nessus
scanner

CentOS 7 : java-11-openjdk (CESA-2022:5687)

2022-08-02T00:00:00
nessus
scanner

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : java-11-openjdk (SUSE-SU-2022:2707-1)

2022-08-10T00:00:00
nessus
scanner

AlmaLinux 8 : java-1.8.0-openjdk (5696) (ALSA-2022:5696)

2022-07-28T00:00:00
nessus
scanner

SUSE SLES12 Security Update : java-1_8_0-openjdk (SUSE-SU-2022:2819-1)

2022-08-17T00:00:00
nessus
scanner

Amazon Linux 2 : java-11-amazon-corretto (ALAS-2022-1823)

2022-07-21T00:00:00
nessus
scanner

RHEL 8 : java-1.8.0-openjdk (RHSA-2022:5701)

2022-07-25T00:00:00
nessus
scanner

RHEL 8 : java-1.8.0-openjdk (RHSA-2022:5696)

2022-07-26T00:00:00
nessus
scanner

Oracle Linux 9 : java-11-openjdk (ELSA-2022-5695)

2022-07-26T00:00:00
nessus
scanner

RHEL 9 : java-11-openjdk (RHSA-2022:5695)

2022-07-25T00:00:00
nessus
scanner

AlmaLinux 8 : java-11-openjdk (5683) (ALSA-2022:5683)

2022-07-25T00:00:00
nessus
scanner

Oracle Linux 8 : java-1.8.0-openjdk (ELSA-2022-5696)

2022-07-25T00:00:00
nessus
scanner

Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2022-5698)

2022-07-25T00:00:00
nessus
scanner

RHEL 7 : java-1.8.0-openjdk (RHSA-2022:5698)

2022-07-26T00:00:00
oraclelinux
unix

ol8addon security update

2022-11-07T00:00:00
oraclelinux
unix

go-toolset:ol8 security and bug fix update

2022-08-03T00:00:00
oraclelinux
unix

go-toolset and golang security and bug fix update

2022-08-02T00:00:00
oraclelinux
unix

grafana-pcp security update

2022-11-22T00:00:00
oraclelinux
unix

grafana-pcp security update

2022-11-15T00:00:00
oraclelinux
unix

container-tools:3.0 security update

2022-11-15T00:00:00
oraclelinux
unix

ol8addon security update

2022-11-23T00:00:00
oraclelinux
unix

grafana security, bug fix, and enhancement update

2022-11-22T00:00:00
oraclelinux
unix

grafana security, bug fix, and enhancement update

2022-11-15T00:00:00
oraclelinux
unix

git-lfs security and bug fix update

2022-10-26T00:00:00
oraclelinux
unix

java-1.8.0-openjdk security, bug fix, and enhancement update

2022-07-26T00:00:00
oraclelinux
unix

java-11-openjdk security, bug fix, and enhancement update

2022-07-26T00:00:00
oraclelinux
unix

java-1.8.0-openjdk security, bug fix, and enhancement update

2022-07-25T00:00:00
oraclelinux
unix

java-1.8.0-openjdk security, bug fix, and enhancement update

2022-07-25T00:00:00
ibm
software

Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Go

2023-01-30T16:52:23
ibm
software

Security Bulletin: Operations Dashboard is vulnerable to multiple Golang Go vulnerabilities

2022-09-20T15:18:46
ibm
software

Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from curl, systemd, and Golang Go

2022-09-28T09:47:09
ibm
software

Security Bulletin: Multiple vulnerabilities in Golang Go affect IBM Event Streams

2022-09-30T14:01:38
ibm
software

Security Bulletin: IBM Cloud Pak for Multicloud Management Monitoring has applied security fixes for its use of Golang Go

2023-02-01T11:07:08
ibm
software

Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple Go vulnerabilities

2022-10-07T17:42:10
ibm
software

Security Bulletin: Multiple vulnerabilities in Go may affect IBM CICS TX Standard

2023-02-24T10:43:25
ibm
software

Security Bulletin: Vulnerabilities in Golang Go affect IBM Spectrum Protect Plus Container Backup and Restore for Kubernetes and Red Hat OpenShift

2022-11-18T00:02:54
ibm
software

Security Bulletin:IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from openssl, pcre2 and Golang Go

2022-08-31T16:17:06
ibm
software

Security Bulletin: Vulnerabilities in Golang Go and Linux Kernel may affect IBM Spectrum Copy Data Management

2022-12-09T14:13:10
rocky
unix

go-toolset:rhel8 security and bug fix update

2022-08-01T08:57:38
rocky
unix

grafana-pcp security update

2022-11-15T06:19:30
rocky
unix

grafana-pcp security update

2022-11-08T06:25:29
rocky
unix

container-tools:3.0 security update

2022-11-08T06:22:08
rocky
unix

go-toolset and golang security and bug fix update

2022-08-01T15:29:25
rocky
unix

toolbox security and bug fix update

2022-11-15T06:15:31
rocky
unix

grafana security, bug fix, and enhancement update

2022-11-08T06:21:47
rocky
unix

grafana security, bug fix, and enhancement update

2022-11-15T06:14:26
rocky
unix

git-lfs security and bug fix update

2022-10-25T07:32:51
photon
unix

Important Photon OS Security Update - PHSA-2022-0242

2022-09-07T00:00:00
photon
unix

Important Photon OS Security Update - PHSA-2022-4.0-0242

2022-09-07T00:00:00
photon
unix

Critical Photon OS Security Update - PHSA-2022-0512

2022-09-06T00:00:00
photon
unix

Critical Photon OS Security Update - PHSA-2022-3.0-0445

2022-09-05T00:00:00
altlinux
unix

Security fix for the ALT Linux 10 package golang version 1.17.12-alt1.p10

2022-07-29T00:00:00
almalinux
unix

Important: go-toolset:rhel8 security and bug fix update

2022-08-01T00:00:00
almalinux
unix

Moderate: grafana-pcp security update

2022-11-08T00:00:00
almalinux
unix

Moderate: container-tools:3.0 security update

2022-11-08T00:00:00
almalinux
unix

Moderate: grafana security, bug fix, and enhancement update

2022-11-08T00:00:00
almalinux
unix

Moderate: git-lfs security and bug fix update

2022-10-25T00:00:00
almalinux
unix

Important: java-1.8.0-openjdk security, bug fix, and enhancement update

2022-07-25T00:00:00
almalinux
unix

Important: java-11-openjdk security, bug fix, and enhancement update

2022-07-21T00:00:00
mageia
unix

Updated golang packages fix security vulnerability

2022-07-16T19:58:20
freebsd
unix

go -- multiple vulnerabilities

2022-07-12T00:00:00
amazon
unix

Important: golang

2022-09-15T04:46:00
amazon
unix

Important: golist

2022-09-15T04:46:00
amazon
unix

Important: golang-github-syndtr-gocapability

2022-10-17T21:46:00
amazon
unix

Important: golang-github-godbus-dbus

2022-10-17T21:46:00
amazon
unix

Important: golang

2022-09-15T03:57:00
amazon
unix

Important: golang-github-kr-pty

2022-10-17T21:46:00
amazon
unix

Important: go-rpm-macros

2022-10-17T21:46:00
amazon
unix

Important: golang-googlecode-sqlite

2022-10-17T21:46:00
amazon
unix

Important: golang-github-gorilla-mux

2022-10-17T21:46:00
amazon
unix

Important: golang-github-gorilla-context

2022-10-17T21:46:00
amazon
unix

Important: golang-googlecode-net

2022-10-17T21:46:00
amazon
unix

Important: java-1.8.0-openjdk

2022-09-01T21:09:00
fedora
unix

[SECURITY] Fedora 35 Update: fzf-0.29.0-2.fc35

2022-08-17T01:36:21
fedora
unix

[SECURITY] Fedora 36 Update: java-latest-openjdk-18.0.2.0.9-1.rolling.fc36

2022-08-03T01:27:35
fedora
unix

[SECURITY] Fedora 35 Update: java-latest-openjdk-18.0.2.0.9-1.rolling.fc35

2022-08-03T01:49:31
centos
unix

java security update

2022-08-02T19:14:32
cloudlinux
unix

Fixed CVEs in java-1.8.0-openjdk: CVE-2022-21541, CVE-2022-34169, CVE-2022-21540

2022-08-04T18:46:36