Red Hat Security AdvisoryRHSA-2020:3372
Red Hat OpenShift Service Mesh 3scale-istio-adapter-rhel8-container security update
Released 2020-08-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- OpenShift Service Mesh 1.0 openshift-service-mesh/3scale-istio-adapter-rhel8
Fixes 2 records
Priority MEDIUM 52
golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.21052 · Published 2020-02-20 · Partial fix · 0.0.0-20200220183623-bac4c82f6975 CWE-347
Priority LOW 37
The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01886 · Published 2020-06-17 · Partial fix · 0.3.3 CWE-835
