Skip to content
OpenAdvisories
Medium RHBA-2021:1147 1 CVE

Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11.420 bug fix and enhancement update

Published Sep 14, 2024 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · OpenShift 3 openshift:3.11::el7 python-urllib3 1:1.24.3-2.el7
Red Hat · OpenShift 3 openshift:3.11::el7 python2-urllib3 1:1.24.3-2.el7

Vulnerabilities 1

  • Medium 6.5
    CVE-2021-28363

    Using default SSLContext for HTTPS requests in an HTTPS proxy doesn't verify certificate hostname for proxy connection

    The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy (if an SSLContext isn't given via proxy_config) doesn't verify the hostname of the c…

    urllib3 python-urllib3 py3-urllib3 Debian Alpine PyPI

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1918568
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1937991
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1939961
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhba-2021_1147.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-28363
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1945136
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-28363
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-28363