RLSA-2022:7548
See a problem?- Import Source
- https://storage.googleapis.com/resf-osv-data/RLSA-2022:7548.json
- JSON Data
- https://api.osv.dev/v1/vulns/RLSA-2022:7548
- Related
- Published
- 2022-11-08T06:22:29Z
- Modified
- 2023-02-02T13:51:14.113817Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- Low: Image Builder security, bug fix, and enhancement update
- Details
-
Image Builder is a service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood.
Security Fix(es):
- golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service (CVE-2022-32189)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.
- References
-
- https://errata.rockylinux.org/RLSA-2022:7548
- https://bugzilla.redhat.com/show_bug.cgi?id=2059867
- https://bugzilla.redhat.com/show_bug.cgi?id=2059868
- https://bugzilla.redhat.com/show_bug.cgi?id=2060063
- https://bugzilla.redhat.com/show_bug.cgi?id=2062694
- https://bugzilla.redhat.com/show_bug.cgi?id=2065734
- https://bugzilla.redhat.com/show_bug.cgi?id=2104464
- https://bugzilla.redhat.com/show_bug.cgi?id=2113814
- https://bugzilla.redhat.com/show_bug.cgi?id=2118829
- Credits
-
-
- Rocky Enterprise Software Foundation
-
- Red Hat
-
Affected packages
Rocky Linux:8 / cockpit-composer
Package
- Name
- cockpit-composer
- Purl
- pkg:rpm/rocky-linux/cockpit-composer?distro=rocky-linux-8&epoch=0
Rocky Linux:8 / weldr-client
Package
- Name
- weldr-client
- Purl
- pkg:rpm/rocky-linux/weldr-client?distro=rocky-linux-8&epoch=0
Rocky Linux:8 / osbuild
Package
- Name
- osbuild
- Purl
- pkg:rpm/rocky-linux/osbuild?distro=rocky-linux-8&epoch=0