Loading...

XML

Word

Printable

Type: Bug
Resolution: Done-Errata
Priority: Major
Fix Version/s: 4.18.0
Affects Version/s: 4.13, 4.12, 4.14, 4.15, 4.16, 4.17, 4.18
Component/s: Cloud Credential Operator
Labels:

Activity Type:
Quality / Stability / Reliability
Blocked:
False
Blocked Reason:

Hide

None

Show
None
Story Points:
None
Severity:
None
Regression:
None

Target Backport Versions:

4.13.z, 4.12.z, 4.14.z, 4.15.z, 4.17.z, 4.16.z
Target Version:

4.18.z
Release Blocker:
None
Sprint:
None

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

Release Note Status:
Done
Release Note Type:
Release Note Not Required
Release Note Text:
N/A

Escape Reason:
None
Escape Impact:
None
Corrective Measures:
None
SDLC stage when should've been found:
None

✗ Medium severity vulnerability found in github.com/golang/glog
Description: Symlink Attack
Info: https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGOLANGGLOG-8663465
Introduced through: github.com/golang/glog@1.2.1
From: github.com/golang/glog@1.2.1
Fixed in: 1.2.4

blocks

OCPBUGS-53415 SNYK: Medium severity vulnerability found in github.com/golang/glog

Closed

depends on

OCPBUGS-53413 SNYK: Medium severity vulnerability found in github.com/golang/glog

Closed

is cloned by

OCPBUGS-53413 SNYK: Medium severity vulnerability found in github.com/golang/glog

Closed

OCPBUGS-53415 SNYK: Medium severity vulnerability found in github.com/golang/glog

Closed

links to

openshift/cloud-credential-operator#835: OCPBUGS-53345: github.com/golang/glog v1.2.4

RHBA-2025:3577 OpenShift Container Platform 4.18.z bug fix update

(1 links to)

Assignee:: Jeremiah Stuever

Reporter:: Jeremiah Stuever

Need Info From:: None

Contributors:: None

QA Contact:: Jianping Shu

Doc Contact:: None

Votes:: 0 Vote for this issue

Watchers:: 4 Start watching this issue

Created:: 2025/03/19 5:27 PM

Updated:: 2025/07/14 1:36 PM

Resolved:: 2025/04/10 11:37 AM