Red Hat Security Advisory: OpenShift Virtualization 2.6.7 Images security and bug fix update
Red Hat OpenShift Virtualization release 2.6.7 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-34558US | medium6.5 | Exploit | ||
The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchan… | ||||
| CVE-2021-31525US | medium5.9 | — | ||
net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse. Server, Trans… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/errata/RHSA-2021:3733self
- https://access.redhat.com/security/updates/classification/#lowexternal
- 1958341external
- 1983596external
- 1987262external
- 1990560external
- 1991906external
- 1995132external
Behebungen (15)
- Behobencontainer-native-virtualization/kubevirt-cpu-model-nfd-plugin@sha256:59070d43607b341ecaa9a65f999fed06ef03885035fa3deef0f2f3a7b9287d13_amd64 as a component of CNV 2.6 for RHEL 8
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3733 - Behobencontainer-native-virtualization/kubevirt-cpu-model-nfd-plugin@sha256:59070d43607b341ecaa9a65f999fed06ef03885035fa3deef0f2f3a7b9287d13_amd64 as a component of CNV 2.6 for RHEL 8
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3733 - Behobencontainer-native-virtualization/kubevirt-cpu-node-labeller@sha256:11940ade61478e72b11faa3806967583c00779718206953e606025dd8a094c57_amd64 as a component of CNV 2.6 for RHEL 8
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3733 - Behobencontainer-native-virtualization/kubevirt-cpu-node-labeller@sha256:11940ade61478e72b11faa3806967583c00779718206953e606025dd8a094c57_amd64 as a component of CNV 2.6 for RHEL 8
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3733 - Behobencontainer-native-virtualization/kubevirt-kvm-info-nfd-plugin@sha256:6a4d596992e1b1a028756ed9d8c4b3acc6ef61bd510a890ab61d8ab35cbe3331_amd64 as a component of CNV 2.6 for RHEL 8
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3733 - Behobencontainer-native-virtualization/kubevirt-kvm-info-nfd-plugin@sha256:6a4d596992e1b1a028756ed9d8c4b3acc6ef61bd510a890ab61d8ab35cbe3331_amd64 as a component of CNV 2.6 for RHEL 8
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3733 - Behobencontainer-native-virtualization/vm-import-controller-rhel8@sha256:b0cdc6f7ce1e48a77fa1e1b683e386828dd9973872a03ac9f2a7c21efa0eef40_amd64 as a component of CNV 2.6 for RHEL 8
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3733 - Behobencontainer-native-virtualization/vm-import-controller-rhel8@sha256:b0cdc6f7ce1e48a77fa1e1b683e386828dd9973872a03ac9f2a7c21efa0eef40_amd64 as a component of CNV 2.6 for RHEL 8
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3733 - Behobencontainer-native-virtualization/vm-import-controller@sha256:b0cdc6f7ce1e48a77fa1e1b683e386828dd9973872a03ac9f2a7c21efa0eef40_amd64 as a component of CNV 2.6 for RHEL 8
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3733 - Behobencontainer-native-virtualization/vm-import-controller@sha256:b0cdc6f7ce1e48a77fa1e1b683e386828dd9973872a03ac9f2a7c21efa0eef40_amd64 as a component of CNV 2.6 for RHEL 8
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:3733 - Workaroundcontainer-native-virtualization/kubevirt-cpu-model-nfd-plugin@sha256:59070d43607b341ecaa9a65f999fed06ef03885035fa3deef0f2f3a7b9287d13_amd64 as a component of CNV 2.6 for RHEL 8
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundcontainer-native-virtualization/kubevirt-cpu-node-labeller@sha256:11940ade61478e72b11faa3806967583c00779718206953e606025dd8a094c57_amd64 as a component of CNV 2.6 for RHEL 8
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundcontainer-native-virtualization/kubevirt-kvm-info-nfd-plugin@sha256:6a4d596992e1b1a028756ed9d8c4b3acc6ef61bd510a890ab61d8ab35cbe3331_amd64 as a component of CNV 2.6 for RHEL 8
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundcontainer-native-virtualization/vm-import-controller-rhel8@sha256:b0cdc6f7ce1e48a77fa1e1b683e386828dd9973872a03ac9f2a7c21efa0eef40_amd64 as a component of CNV 2.6 for RHEL 8
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundcontainer-native-virtualization/vm-import-controller@sha256:b0cdc6f7ce1e48a77fa1e1b683e386828dd9973872a03ac9f2a7c21efa0eef40_amd64 as a component of CNV 2.6 for RHEL 8
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan