RHSA-2021:3361MediumCVSS 7.5

Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.5.1 security and bug fix update

Published
August 31, 2021
Last Modified
August 4, 2026

🔗 CVE IDs covered (5)

CVE-2021-33197 →CVE-2021-33198 →CVE-2021-34558 →CVE-2021-33195 →CVE-2021-33196 →

📋 Description

CVE-2021-33195 — golang: net: lookup functions may return invalid host names CVE-2021-33196 — golang: archive/zip: malformed archive may cause panic or memory exhaustion CVE-2021-33197 — golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty CVE-2021-33198 — golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents CVE-2021-34558 — golang: crypto/tls: certificate of wrong type is causing TLS client to panic

🎯 Affected products16

  • 7Server-RHMTC-1.5
  • 8Base-RHMTC-1.5
  • rhmtc/openshift-migration-controller-rhel8@sha256:6731c74dd154dcb40ace9d4876b77dc2610bcc717898be03ea33ad85a5078256_amd64 as a component of 8Base-RHMTC-1.5
  • rhmtc/openshift-migration-legacy-rhel8-operator@sha256:a7062c6466b6f2467301de98bb78af45c4ec7fb75dfcf68b2ed0a0b354777336_amd64 as a component of 8Base-RHMTC-1.5
  • rhmtc/openshift-migration-log-reader-rhel8@sha256:3ed94a3661d0cdcf06921fd552c044f8e02d640d5fbeb240ebcd0068d7c07873_amd64 as a component of 8Base-RHMTC-1.5
  • rhmtc/openshift-migration-must-gather-rhel8@sha256:5125c461191008d42dd3e44e30910e91dab1cfb6e3862dde5d3f7eb2b9ab981a_amd64 as a component of 8Base-RHMTC-1.5
  • rhmtc/openshift-migration-operator-bundle@sha256:68ed55736af9e054b777315600f433f8ac304833f48a3765cc27d0355a3b4617_amd64 as a component of 7Server-RHMTC-1.5
  • rhmtc/openshift-migration-registry-rhel8@sha256:b98147918ef12962891c490a3050cd5851efb010481666c62916684126f36826_amd64 as a component of 8Base-RHMTC-1.5
  • rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:7ed3b473e12d7eaa759dd1de5c75ce02b7bf6df1a4c31962cfa9da5637c2614d_amd64 as a component of 8Base-RHMTC-1.5
  • rhmtc/openshift-migration-ui-rhel8@sha256:8b29a1dd23200af0f2c7676f1cbf94d19fab0a3287aa101d79a9787b1bc07e88_amd64 as a component of 8Base-RHMTC-1.5
  • rhmtc/openshift-migration-velero-plugin-for-aws-rhel8@sha256:17612015e15fbb61aaadf269cb2655a2fa080e2f0c9276ad652df2fd422e29c6_amd64 as a component of 8Base-RHMTC-1.5
  • rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8@sha256:b53c5737296e969abcd39f3bf7a7b4731681c261c6232c96f2f0576a8ea2bb0f_amd64 as a component of 8Base-RHMTC-1.5
  • rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8@sha256:1e26af4b60c8876a6557bb015b89e0770b453d8a363c2af2f6432f1ad9758463_amd64 as a component of 8Base-RHMTC-1.5
  • rhmtc/openshift-migration-velero-restic-restore-helper-rhel8@sha256:5f350b33ea12fa549b6b27e8b5ca3a9cf4f2c6d06518e5b3cf25d5ef47b0c9f8_amd64 as a component of 8Base-RHMTC-1.5
  • rhmtc/openshift-migration-velero-rhel8@sha256:0c99bbdd72f8a9896c7e104cf4fe3cf4280a5fdfe12adc3e82f23eb5b6e789c1_amd64 as a component of 8Base-RHMTC-1.5
  • rhmtc/openshift-velero-plugin-rhel8@sha256:0ff51536432d4925bf43e19bca1141391d48d26c4bf4227f6131a0b1b3781ce1_amd64 as a component of 8Base-RHMTC-1.5

✅ Remediation

For details on how to install and use MTC, refer to: https://docs.openshift.com/container-platform/4.8/migration-toolkit-for-containers/installing-mtc.html Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (9)