Skip to content
OpenAdvisories
High RHSA-2022:6527 1 CVE

Red Hat Security Advisory: OpenShift Virtualization 4.11.0 RPMs security and bug fix update

Published Sep 30, 2024 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · Container Native Virtualization 4 container_native_virtualization:4.11::el7 kubevirt 0:4.11.0-643.el7
Red Hat · Container Native Virtualization 4 container_native_virtualization:4.11::el7 kubevirt-virtctl 0:4.11.0-643.el7
Red Hat · Container Native Virtualization 4 container_native_virtualization:4.11::el7 kubevirt-virtctl-redistributable 0:4.11.0-643.el7
Red Hat · Container Native Virtualization 4 container_native_virtualization:4.11::el8 kubevirt 0:4.11.0-643.el8
Red Hat · Container Native Virtualization 4 container_native_virtualization:4.11::el8 kubevirt-virtctl 0:4.11.0-643.el8
Red Hat · Container Native Virtualization 4 container_native_virtualization:4.11::el8 kubevirt-virtctl-redistributable 0:4.11.0-643.el8

Vulnerabilities 1

  • High 7.5
    CVE-2022-27191

    golang.org/x/crypto/ssh Denial of service via crafted Signer

    The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.

    go k3d k3d-proxy k3d-tools Debian Ubuntu Alpine Wolfi Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2051902
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2064702
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6527.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-27191
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-27191
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-27191
  • article
    https://groups.google.com/g/golang-announce/c/-cp44ypCT5s/m/wmegxkLiAQAJ