Red Hat Security AdvisoryRHSA-2025:3959
VolSync 0.11.2 security fixes and enhancements for RHEL 9
Released 2025-04-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9 rhacm2/volsync-operator-bundle, rhacm2/volsync-rhel9
Fixes 2 records
Priority MEDIUM 41
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but nev…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00939 · Published 2025-02-26 · Partial fix · 0.35.0 CWE-770
Priority MEDIUM 40
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0087 · Published 2025-02-26 · Partial fix · 0.27.0 CWE-1286
