Search for packages
| purl | pkg:rpm/redhat/atomic-openshift@3.11.374-1.git.0.ebd3ee9?arch=el7 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-3tpx-rnju-w3dw
Aliases: CVE-2019-11840 GHSA-r5c5-pr8j-pfp7 |
golang.org/x/crypto/salsa20/salsa uses insufficiently random values An issue was discovered in supplementary Go cryptography libraries, aka golang-googlecode-go-crypto, before 2019-03-20. A flaw was found in the amd64 implementation of golang.org/x/crypto/salsa20 and golang.org/x/crypto/salsa20/salsa. If more than 256 GiB of keystream is generated, or if the counter otherwise grows greater than 32 bits, the amd64 implementation will first generate incorrect output, and then cycle back to previously generated keystream. Repeated keystream bytes can lead to loss of confidentiality in encryption applications, or to predictability in CSPRNG applications. ### Specific Go Packages Affected golang.org/x/crypto/salsa20/salsa | There are no reported fixed by versions. |
|
VCID-vctf-a4t5-q7a2
Aliases: CVE-2020-8554 GHSA-j9wf-vvm6-4r9w |
Unverified Ownership in Kubernetes Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Additionally, an attacker who is able to patch the status (which is considered a privileged operation and should not typically be granted to users) of a LoadBalancer service can set the status.loadBalancer.ingress.ip to similar effect. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:20:45.569965+00:00 | RedHat Importer | Affected by | VCID-3tpx-rnju-w3dw | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11840.json | 38.0.0 |
| 2026-04-01T14:03:46.405080+00:00 | RedHat Importer | Affected by | VCID-vctf-a4t5-q7a2 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-8554.json | 38.0.0 |