Red Hat Security Advisory

RHSA-2021:5035

RHV-H security update (redhat-virtualization-host) 4.3.20

Released 2021-12-08 · Red Hat rating Critical · View on Red Hat →

Fixed in

RHEL 7-based RHEV-H for RHEV 4 (build requirements) redhat-virtualization-host-4.3.20-20211202.1.el7_9, redhat-virtualization-host-image-update-4.3.20-20211202.1.el7_9
Red Hat Virtualization 4 Hypervisor for RHEL 7 redhat-virtualization-host-4.3.20-20211202.1.el7_9, redhat-virtualization-host-image-update-4.3.20-20211202.1.el7_9

Fixes 2 records

TI-2021-19417 CVE-2021-43527 · GHSA-7hfm-39v6-v3p5

Out-of-bounds write in Mozilla NSS

MEDIUM 59

NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.17563 Published 2021-12-08 Fixed in 3.73, 3.68.1 CWE-787

TI-2020-18640 CVE-2020-36385 · GHSA-hpxg-r4xf-hphw

An issue was discovered in the Linux kernel before 5.10.

LOW 37

An issue was discovered in the Linux kernel before 5.10.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01476 Published 2021-06-07 Partial fix CWE-416