Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2022:0040-1

Опубликовано: 10 янв. 2022
Источник: suse-cvrf

Описание

Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-operator-container

This update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-operator-container fixes the following issues:

  • CVE-2021-43565: Fixes a vulnerability in the golang.org/x/crypto/ssh package which allowed unauthenticated clients to cause a panic in SSH servers. (bsc#1193930)

Список пакетов

SUSE Package Hub 15 SP2
kafka-kit-2.1.0-bp152.2.3.1
kafka-source-2.1.0-bp152.2.3.1
openSUSE Leap 15.3
kubevirt-container-disk-0.45.0-8.7.1
kubevirt-manifests-0.45.0-8.7.1
kubevirt-tests-0.45.0-8.7.1
kubevirt-virt-api-0.45.0-8.7.1
kubevirt-virt-controller-0.45.0-8.7.1
kubevirt-virt-handler-0.45.0-8.7.1
kubevirt-virt-launcher-0.45.0-8.7.1
kubevirt-virt-operator-0.45.0-8.7.1
kubevirt-virtctl-0.45.0-8.7.1
obs-service-kubevirt_containers_meta-0.45.0-8.7.1

Ссылки

Описание

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.

Затронутые продукты
SUSE Package Hub 15 SP2:kafka-kit-2.1.0-bp152.2.3.1
SUSE Package Hub 15 SP2:kafka-source-2.1.0-bp152.2.3.1
openSUSE Leap 15.3:kubevirt-container-disk-0.45.0-8.7.1
openSUSE Leap 15.3:kubevirt-manifests-0.45.0-8.7.1
Ссылки