Skip to content
OpenAdvisories
High RHSA-2021:1189 2 CVEs

Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated Oct 9, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 redhat-virtualization-host 0:4.4.5-20210330.0.el8_3
Red Hat · Rhev Hypervisor 4 rhev_hypervisor:4.4::el8 redhat-virtualization-host-image-update 0:4.4.5-20210330.0.el8_3

Vulnerabilities 2

  • High 7.4
    CVE-2021-3450 Public exploit EPSS 18%

    CA certificate check bypass with X509_V_FLAG_X509_STRICT

    The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded e…

    OpenSSL OpenSSL openssl openssl Debian Alpine crates.io
  • Medium 5.9
    CVE-2021-3449 Public exploit EPSS 64%

    NULL pointer deref in signature_algorithms processing

    An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a si…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine crates.io

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1892573
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1895832
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1907306
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1907358
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1907746
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1918207
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1927395
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1928607
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1940845
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1941547
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1941554
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1942040
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1942498
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1189.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-3449
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-3449
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-3449
  • article
    https://www.openssl.org/news/secadv/20210325.txt
  • report
    https://access.redhat.com/security/cve/CVE-2021-3450
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-3450
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-3450