RHSA-2022:7055: Moderate: RHOSDT 2.6.0 operator/operand containers Security Update
This release of Red Hat OpenShift distributed tracing provides these changes:Security Fix(es): nodejs-json-schema: Prototype pollution vulnerability (CVE-2021-3918) eventsource: Exposure of Sensitive Information (CVE-2022-1650) moment: inefficient parsing algorithm resulting in DoS (CVE-2022-31129) follow-redirects: Exposure of Sensitive Information via Authorization Header leak (CVE-2022-0536) Moment.js: Path traversal in moment.locale (CVE-2022-24785) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:7055?
The severity of RHSA-2022:7055 includes multiple vulnerabilities, including a prototype pollution vulnerability and exposure of sensitive information.
How do I fix RHSA-2022:7055?
To fix RHSA-2022:7055, apply the recommended updates provided by Red Hat for the affected components.
What vulnerabilities are addressed in RHSA-2022:7055?
RHSA-2022:7055 addresses vulnerabilities such as CVE-2021-3918 related to prototype pollution and CVE-2022-1650 concerning sensitive information exposure.
Is RHSA-2022:7055 related to OpenShift security?
Yes, RHSA-2022:7055 is a security advisory that pertains to vulnerabilities within the Red Hat OpenShift distributed tracing component.
When was RHSA-2022:7055 released?
RHSA-2022:7055 was released in December 2022 to address specific security vulnerabilities in Red Hat OpenShift.