Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Container Native Virtualization 4 container_native_virtualization:4.10::el7 | kubevirt | 0:4.10.1-489.el7 |
| Red Hat · Container Native Virtualization 4 container_native_virtualization:4.10::el7 | kubevirt-virtctl | 0:4.10.1-489.el7 |
| Red Hat · Container Native Virtualization 4 container_native_virtualization:4.10::el7 | kubevirt-virtctl-redistributable | 0:4.10.1-489.el7 |
| Red Hat · Container Native Virtualization 4 container_native_virtualization:4.10::el8 | kubevirt | 0:4.10.1-489.el8 |
| Red Hat · Container Native Virtualization 4 container_native_virtualization:4.10::el8 | kubevirt-virtctl | 0:4.10.1-489.el8 |
| Red Hat · Container Native Virtualization 4 container_native_virtualization:4.10::el8 | kubevirt-virtctl-redistributable | 0:4.10.1-489.el8 |
Vulnerabilities 1
-
High 7.5
Uncontrolled Resource Consumption in promhttp
client_golang is the instrumentation library for Go applications in Prometheus, and the promhttp package in client_golang provides tooling around HTTP servers and clients. In client_golang prior to version 1.11.1, HTTP server is susceptible to a Denial of Ser…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2045880
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2065755
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_4667.json
-
report
https://access.redhat.com/security/cve/CVE-2022-21698
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-21698
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-21698
-
article
https://github.com/prometheus/client_golang/security/advisories/GHSA-cg3q-j54f-5p7p