[RHSA-2022:7950] Image Builder security, bug fix, and enhancement update

Severity Low
Affected Packages 4
CVEs 1

Image Builder is a service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood.

Security Fix(es):

  • golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.1 Release Notes linked from the References section.

Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/redhat/weldr-client?arch=x86_64&distro=redhat-9 redhat weldr-client < 35.5-4.el9 redhat-9 x86_64
Affected pkg:rpm/redhat/weldr-client?arch=s390x&distro=redhat-9 redhat weldr-client < 35.5-4.el9 redhat-9 s390x
Affected pkg:rpm/redhat/weldr-client?arch=ppc64le&distro=redhat-9 redhat weldr-client < 35.5-4.el9 redhat-9 ppc64le
Affected pkg:rpm/redhat/weldr-client?arch=aarch64&distro=redhat-9 redhat weldr-client < 35.5-4.el9 redhat-9 aarch64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date
Loading...