Red Hat Security AdvisoryRHSA-2021:3748
OpenShift Container Storage 3.11.z Container Images Security and Bug Fix Update
Released 2021-10-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Gluster Storage Server 3.5 on RHEL-7 rhgs3/rhgs-gluster-block-prov-rhel7
Fixes 2 records
Priority LOW 34
In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.02699 · Published 2021-01-26 · Partial fix CWE-682
Priority LOW 33
net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.03692 · Published 2021-05-27 · Partial fix · 0.0.0-20210428140749-89ef3d95e781 CWE-674
