Redhat Coreos-installer vulnerabilities

• redhat coreos-installer coreos-installer < 0.10.0 writes world-readable Ignition config to installed system CVE-2021-3917 Fix available 5.5 MediumNovember 8, 2021
• redhat coreos-installer coreos-installer improperly verifies GPG signature when decompressing gzipped artifact CVE-2021-20319 Fix available 7.8 HighOctober 12, 2021