Red Hat Security AdvisoryRHSA-2021:3733
OpenShift Virtualization 2.6.7 Images security and bug fix update
Released 2021-10-06 · Red Hat rating Low · View on Red Hat →
Fixed in
- CNV 2.6 for RHEL 8 container-native-virtualization/kubevirt-cpu-model-nfd-plugin, container-native-virtualization/kubevirt-cpu-node-labeller, container-native-virtualization/kubevirt-kvm-info-nfd-plugin +2
Fixes 2 records
Priority LOW 39
The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to c…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.06975 · Published 2021-07-15 · Partial fix CWE-295
Priority LOW 33
net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.03692 · Published 2021-05-27 · Partial fix · 0.0.0-20210428140749-89ef3d95e781 CWE-674
