Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Service Mesh 2 service_mesh:2.1::el8 | servicemesh | 0:2.1.6-1.el8 |
| Red Hat · Service Mesh 2 service_mesh:2.1::el8 | servicemesh-cni | 0:2.1.6-1.el8 |
| Red Hat · Service Mesh 2 service_mesh:2.1::el8 | servicemesh-operator | 0:2.1.6-1.el8 |
| Red Hat · Service Mesh 2 service_mesh:2.1::el8 | servicemesh-pilot-agent | 0:2.1.6-1.el8 |
| Red Hat · Service Mesh 2 service_mesh:2.1::el8 | servicemesh-pilot-discovery | 0:2.1.6-1.el8 |
Vulnerabilities 1
-
Critical 9.1
Insufficient randomness in github.com/Masterminds/goutils
Randomly-generated alphanumeric strings contain significantly less entropy than expected. The RandomAlphaNumeric and CryptoRandomAlphaNumeric functions always return strings containing at least one digit from 0 to 9. This significantly reduces the amount of e…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2156729
-
article
https://issues.redhat.com/browse/OSSM-2440
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0540.json
-
report
https://access.redhat.com/security/cve/CVE-2021-4238
-
advisory
https://www.cve.org/CVERecord?id=CVE-2021-4238
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-4238
-
article
https://github.com/Masterminds/goutils/commit/869801f20f9f1e7ecdbdb6422049d8241270d5e1
-
advisory
https://github.com/advisories/GHSA-3839-6r69-m497
-
advisory
https://pkg.go.dev/vuln/GO-2022-0411