RHSA-2022:0947MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Virtualization 4.10.0 Images security and bug fix update

Published
March 16, 2022
Last Modified
June 30, 2026

🔗 CVE IDs covered (8)

CVE-2021-34558 →CVE-2021-36221 →CVE-2021-44716 →CVE-2021-44717 →CVE-2021-29923 →CVE-2021-33195 →CVE-2021-33197 →CVE-2021-33198 →

📋 Description

CVE-2021-29923 — golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet CVE-2021-33195 — golang: net: lookup functions may return invalid host names CVE-2021-33197 — golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty CVE-2021-33198 — golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents CVE-2021-34558 — golang: crypto/tls: certificate of wrong type is causing TLS client to panic CVE-2021-36221 — golang: net/http/httputil: panic due to racy read of persistConn after handler panic CVE-2021-44716 — golang: net/http: limit growth of header canonicalization cache CVE-2021-44717 — golang: syscall: don't close fd 0 on ForkExec error

🔗 References (119)