Red Hat Security AdvisoryRHSA-2022:0308
OpenShift Container Storage 3.11.z security and bug fix update
Released 2022-01-27 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Gluster Storage Server 3.5 on RHEL-7 heketi-10.4.0-2.el7rhgs, heketi-client-10.4.0-2.el7rhgs, python-heketi-10.4.0-2.el7rhgs
- Red Hat Storage Native Client for Red Hat Enterprise Linux 7 heketi-10.4.0-2.el7rhgs, heketi-client-10.4.0-2.el7rhgs
Fixes 2 records
Priority LOW 34
In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.02699 · Published 2021-01-26 · Partial fix CWE-682
Priority LOW 33
net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.03692 · Published 2021-05-27 · Partial fix · 0.0.0-20210428140749-89ef3d95e781 CWE-674
