Red Hat Security AdvisoryRHSA-2022:6527
OpenShift Virtualization 4.11.0 RPMs security and bug fix update
Released 2022-09-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- CNV 4.11 for RHEL 7 kubevirt-4.11.0-643.el7, kubevirt-virtctl-4.11.0-643.el7, kubevirt-virtctl-redistributable-4.11.0-643.el7
- CNV 4.11 for RHEL 8 kubevirt-4.11.0-643.el8, kubevirt-virtctl-4.11.0-643.el8, kubevirt-virtctl-redistributable-4.11.0-643.el8
Fixes 1 record
Priority MEDIUM 40
The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03963 · Published 2022-03-18 · Partial fix · 0.0.0-20220314234659-1baeb1ce4c0b CWE-327
