Loading...

XML

Word

Printable

Type: Bug
Resolution: Done-Errata
Priority: Undefined
Fix Version/s: 4.19.z
Affects Version/s: 4.19.0
Component/s: oauth-proxy
Labels:
None

Activity Type:
Quality / Stability / Reliability
Blocked:
False
Blocked Reason:

Hide

None

Show
None
Story Points:
None
Severity:
None
Regression:
None

Target Backport Versions:
None
Target Version:

4.19.0
Release Blocker:
None
Sprint:
None

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

PX Impact Score:

Release Note Status:
Done
Release Note Type:
Release Note Not Required
Release Note Text:
N/A

Escape Reason:
None
Escape Impact:
None
Corrective Measures:
None
SDLC stage when should've been found:
None

Description of problem:

    There are high severity CVEs in x/net and x/crypto libraries.

Version-Release number of selected component (if applicable):

    4.19.0

How reproducible:

    always

Steps to Reproduce:

    1.  trivy fs . # or any other security scanner

Actual results:

Expected results:

Additional info:

depends on

OCPBUGS-58344 [placeholder that makes bot happy] oauth-proxy - release-4.20: bump x/net and x/crypto due to CVE

Closed

is cloned by

OCPBUGS-58344 [placeholder that makes bot happy] oauth-proxy - release-4.20: bump x/net and x/crypto due to CVE

Closed

links to

openshift/oauth-proxy#326: OCPBUGS-58343: release 4.19 CVE fixes

RHBA-2025:10771 OpenShift Container Platform 4.19.4 bug fix update

Assignee:: Krzysztof Ostrowski

Reporter:: Krzysztof Ostrowski

Need Info From:: None

Contributors:: None

QA Contact:: Xingxing Xia

Doc Contact:: None

Votes:: 0 Vote for this issue

Watchers:: 4 Start watching this issue

Created:: 2025/07/03 8:46 AM

Updated:: 2025/09/24 2:22 PM

Resolved:: 2025/08/26 1:32 PM