TI-2021-02215 CVE-2021-3121 · GHSA-c3h9-896r-86jm
An issue was discovered in GoGo Protobuf before 1.3.2.
Priority MEDIUM 43
An issue was discovered in GoGo Protobuf before 1.3.2.
RHSA-2020:5634
OpenShift Container Platform 4.7.0 packages security update
Released 2021-02-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.7 cri-o-1.20.0-0.rhaos4.7.git8921e00.el7.51, cri-o-1.20.0-0.rhaos4.7.git8921e00.el8.51, cri-tools-1.18.0-3.el7 +9
Fixes 6 records
TI-2020-17201 CVE-2020-28362 · GHSA-gff4-9rfx-4pcw
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
Priority LOW 39
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
TI-2020-15675 CVE-2020-25658 · GHSA-xrx6-fmxq-rjj2
Broken or risky cryptographic algorithm in Sybren A. Stüvel python-rsa
Priority LOW 36
It was found that python-rsa is vulnerable to Bleichenbacher timing attacks.
TI-2020-11929 CVE-2020-15157 · GHSA-742w-89gc-8m9c
containerd can be coerced into leaking credentials during image pull
Priority LOW 32
In containerd (an industry-standard container runtime) before version 1.2.14 there is a credential leaking vulnerability.
TI-2020-06864 CVE-2020-8566 · GHSA-5x96-j797-5qqw
Ceph RBD adminSecrets exposed in logs when loglevel >= 4
Priority LOW 25
In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs.
TI-2019-02894 CVE-2019-3884 · GHSA-fpgq-qv2c-6787
Authentication bypass by spoofing in Red Hat atomic-openshift
Priority LOW 25
A vulnerability exists in the garbage collection mechanism of atomic-openshift.