OpenShift Virtualization is Red Hat’s virtualization solution designed for Red Hat OpenShift Container Platform.

This advisory contains the following OpenShift Virtualization 2.6.7 images:

RHEL-8-CNV-2.6

kubevirt-cpu-node-labeller-container-v2.6.7-1
virtio-win-container-v2.6.7-1
kubevirt-kvm-info-nfd-plugin-container-v2.6.7-1
hyperconverged-cluster-webhook-container-v2.6.7-1
hyperconverged-cluster-operator-container-v2.6.7-1
kubevirt-cpu-model-nfd-plugin-container-v2.6.7-1
hostpath-provisioner-container-v2.6.7-1
hostpath-provisioner-operator-container-v2.6.7-1
kubevirt-vmware-container-v2.6.7-1
node-maintenance-operator-container-v2.6.7-1
bridge-marker-container-v2.6.7-2
cnv-containernetworking-plugins-container-v2.6.7-2
kubevirt-template-validator-container-v2.6.7-2
ovs-cni-marker-container-v2.6.7-2
kubernetes-nmstate-handler-container-v2.6.7-3
kubemacpool-container-v2.6.7-2
cluster-network-addons-operator-container-v2.6.7-3
ovs-cni-plugin-container-v2.6.7-2
kubevirt-ssp-operator-container-v2.6.7-1
vm-import-operator-container-v2.6.7-5
vm-import-controller-container-v2.6.7-5
vm-import-virtv2v-container-v2.6.7-5
virt-cdi-apiserver-container-v2.6.7-2
virt-cdi-uploadproxy-container-v2.6.7-2
virt-cdi-operator-container-v2.6.7-2
virt-cdi-cloner-container-v2.6.7-2
kubevirt-v2v-conversion-container-v2.6.7-2
virt-cdi-controller-container-v2.6.7-2
virt-cdi-importer-container-v2.6.7-2
virt-cdi-uploadserver-container-v2.6.7-2
virt-controller-container-v2.6.7-6
virt-api-container-v2.6.7-6
virt-operator-container-v2.6.7-6
virt-handler-container-v2.6.7-6
virt-launcher-container-v2.6.7-6
cnv-must-gather-container-v2.6.7-7
hco-bundle-registry-container-v2.6.7-41

Security Fix(es):

• golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header (CVE-2021-31525)

• golang: crypto/tls: certificate of wrong type is causing TLS client to panic (CVE-2021-34558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.