Lucene search
RedHatRHSA-2021:3851HistoryOct 14, 2021 - 5:55 a.m.
(RHSA-2021:3851) Important: Red Hat 3scale API Management 2.11.0 Release - Container Images
2021-10-1405:55:21
access.redhat.com
47
0.517 Medium
EPSS
Percentile
97.6%
Red Hat 3scale API Management delivers centralized API management features through a distributed, cloud-hosted layer. It includes built-in features to help in building a more successful API program, including access control, rate limits, payment gateway integration, and developer experience tools.
This advisory is intended to use with Container Images, for Red Hat 3scale API Management 2.11.0.
Security Fixes:
-
PT RHOAM: XSS in 3scale at various places (CVE-2021-3442)
-
aws/aws-sdk-go: CBC padding oracle issue in AWS S3 Crypto SDK for golang (CVE-2020-8911)
-
aws-sdk-go: In-band key negotiation issue in AWS S3 Crypto SDK for golang (CVE-2020-8912)
For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages listed in the References section.
Related
redhat
redhat
(RHSA-2021:3582) Moderate: curl security update
2021-09-21 07:12:18
osv
osv
Moderate: curl security update
2021-09-21 07:12:18
Use of risky cryptographic algorithm in github.com/aws/aws-sdk-go
2022-02-11 23:26:26
In-band key negotiation issue in AWS S3 Crypto SDK for golang
2022-02-11 23:23:13
almalinux
almalinux
Moderate: curl security update
2021-09-21 07:12:18
Important: kernel security and bug fix update
2021-09-07 17:24:27
Moderate: krb5 security update
2021-09-21 07:09:33
oraclelinux
oraclelinux
curl security update
2021-09-21 00:00:00
kernel security and bug fix update
2021-09-08 00:00:00
krb5 security update
2021-09-23 00:00:00
nessus
nessus
Oracle Linux 8 : curl (ELSA-2021-3582)
2021-09-22 00:00:00
Rocky Linux 8 : curl (RLSA-2021:3582)
2023-11-07 00:00:00
RHEL 8 : curl (RHSA-2021:3582)
2021-09-21 00:00:00
rocky
rocky
curl security update
2021-09-21 07:12:18
kernel security and bug fix update
2021-09-07 17:24:27
krb5 security update
2021-09-21 07:09:33
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:2440-1)
2021-07-22 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:2439-1)
2021-07-22 00:00:00
openSUSE: Security Advisory for curl (openSUSE-SU-2021:1088-1)
2021-07-25 00:00:00
suse
suse
Security update for curl (moderate)
2021-07-24 00:00:00
Security update for curl (moderate)
2021-07-21 00:00:00
Security update for krb5 (moderate)
2021-10-31 00:00:00
photon
photon
Moderate Photon OS Security Update - PHSA-2021-0273
2021-07-24 00:00:00
Moderate Photon OS Security Update - PHSA-2021-0069
2021-07-25 00:00:00
Moderate Photon OS Security Update - PHSA-2021-3.0-0273
2021-07-24 00:00:00
mageia
mageia
Updated curl packages fix security vulnerabilities
2021-07-27 23:21:53
github
github
CBC padding oracle issue in AWS S3 Crypto SDK for golang
2022-02-11 23:26:26
Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library
2022-07-13 00:00:39
In-band key negotiation issue in AWS S3 Crypto SDK for golang
2022-02-11 23:23:13
ubuntu
ubuntu
Kerberos vulnerabilities
2023-03-16 00:00:00
cloudfoundry
cloudfoundry
USN-5959-1: Kerberos vulnerabilities Severity | Cloud Foundry
2023-04-29 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: curl-7.76.1-7.fc34
2021-07-23 01:06:01
[SECURITY] Fedora 33 Update: curl-7.71.1-10.fc33
2021-08-07 01:14:48
[SECURITY] Fedora 34 Update: curl-7.76.1-12.fc34
2021-09-21 15:33:29
slackware
slackware
[slackware-security] curl
2021-07-21 18:22:03
amazon
amazon
Medium: curl
2021-09-08 23:35:00
Medium: curl
2021-09-02 22:54:00
archlinux
archlinux
[ASA-202107-59] curl: multiple issues
2021-07-21 00:00:00
freebsd
freebsd
cURL -- Multiple vulnerabilities
2021-07-21 00:00:00
nvd
nvd
cgr
cgr
CVE-2020-8911 vulnerabilities
2024-05-19 03:07:16
cve
cve
veracode
veracode
Information Disclosure
2022-02-14 06:45:00
Wrong Content
2021-07-22 05:50:53
Information Disclosure
2021-07-22 05:01:40
ibm
ibm
centos
centos
bpftool, kernel, perf, python security update
2021-11-17 15:22:13
cbl_mariner
cbl_mariner
CVE-2021-38201 affecting package kernel for versions less than 5.10.78.1-1
2022-04-09 06:52:47
CVE-2021-38201 affecting package kernel 5.10.189.1-1
2021-09-09 15:03:26
CVE-2021-22924 affecting package curl 7.76.0-9
2021-08-11 06:39:26
cvelist
cvelist
CVE-2020-8911 CBC padding oracle in AWS S3 Crypto SDK for GoLang
2020-08-11 19:20:14
CVE-2021-38201
2021-08-08 19:26:54
CVE-2020-8912 In-band key negotiation issue in AWS S3 Crypto SDK for GoLang
2020-08-11 19:20:14
prion
prion
Design/Logic Flaw
2020-08-11 20:15:00
Design/Logic Flaw
2021-08-08 20:15:00
Null pointer dereference
2021-08-23 05:15:00
redhatcve
redhatcve
gitlab
gitlab
Use of a Broken or Risky Cryptographic Algorithm
2022-02-11 00:00:00
wolfi
wolfi
CVE-2020-8911 vulnerabilities
2024-07-03 09:08:38
CVE-2020-8912 vulnerabilities
2024-07-03 09:08:38
altlinux
altlinux
Security fix for the ALT Linux 9 package krb5 version 1.17.2-alt3
2022-03-21 00:00:00
cnvd
cnvd
Linux kernel denial-of-service vulnerability (CNVD-2021-60517)
2021-08-10 00:00:00
f5
f5
K91326803 : Linux kernel vulnerability CVE-2021-38201
2022-08-11 00:00:00
githubexploit
githubexploit
Exploit for Use of Incorrectly-Resolved Name or Reference in Haxx Libcurl
2022-04-30 03:40:15
debiancve
debiancve
ubuntucve
ubuntucve
CVE-2021-38201
2021-08-08 00:00:00
CVE-2021-22922
2021-07-21 00:00:00
hackerone
hackerone
curl: CVE-2021-22922: Wrong content via metalink not discarded
2021-05-30 20:49:36
redos
redos
ROS-20220207-01
2022-02-07 00:00:00
alpinelinux
alpinelinux
CVE-2021-22924
2021-08-05 21:15:11