Home / mailings [RHSA-2023:0481-01] Moderate: Submariner 0.12.3 - security update and bug fix
Posted on 26 January 2023
RedHat===================================================================== Red Hat Security Advisory
Synopsis: Moderate: Submariner 0.12.3 - security update and bug fix
Advisory ID: RHSA-2023:0481-01
Product: Red Hat ACM
Advisory URL: https://access.redhat.com/errata/RHSA-2023:0481
Issue date: 2023-01-26
CVE Names: CVE-2022-32149
=====================================================================
1. Summary:
Submariner 0.12.3 packages that fix various bugs and add various
enhancements that are now available for Red Hat Advanced Cluster Management
for Kubernetes version 2.5.
Red Hat Product Security has rated this update as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
2. Description:
Submariner enables direct networking between pods and services on different
Kubernetes clusters that are either on-premises or in the cloud.
For more information about Submariner, see the Submariner open source
community website at: https://submariner.io/.
This advisory contains bug fixes and enhancements to the Submariner
container images.
Major bug addressed:
ACM-2318: Submariner gateway node: Error updating load balancer with new
hosts map
Security fix:
* CVE-2022-32149 golang: golang.org/x/text/language: ParseAcceptLanguage
takes a long time to parse complex tags
3. Solution:
For details on how to install Submariner, refer to:
https://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.5/html/add-ons/add-ons-overview#submariner-deploy-console
and
https://submariner.io/getting-started/
4. Bugs fixed (https://bugzilla.redhat.com/):
2134010 - CVE-2022-32149 golang: golang.org/x/text/language: ParseAcceptLanguage takes a long time to parse complex tags
5. JIRA issues fixed (https://issues.jboss.org/):
ACM-2318 - Submariner gateway node: Error updating load balancer with new hosts map
6. References:
https://access.redhat.com/security/cve/CVE-2022-32149
https://access.redhat.com/security/updates/classification/#moderate
7. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/
Copyright 2023 Red Hat, Inc.
