First published: Thu Apr 22 2021(Updated: )
Red Hat OpenShift Serverless Client kn 1.14.0 provides a CLI to interact with Red Hat OpenShift Serverless 1.14.0. The kn CLI is delivered as an RPM package for installation on RHEL platforms, and as binaries for non-Linux platforms.<br>Security Fix(es):<br><li> golang: crypto/elliptic: incorrect operations on the P-224 curve (CVE-2021-3114)</li> <li> golang: cmd/go: packages using cgo can cause arbitrary code execution at build time (CVE-2021-3115)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/openshift-serverless-clients | <0.20.0-6.el8 | 0.20.0-6.el8 |
redhat/openshift-serverless-clients | <0.20.0-6.el8 | 0.20.0-6.el8 |
redhat/openshift-serverless-clients | <0.20.0-6.el8 | 0.20.0-6.el8 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2021:1339 is considered important due to specific vulnerabilities addressed in the fix.
To fix RHSA-2021:1339, update the OpenShift Serverless Clients to version 0.20.0-6.el8 or later.
RHSA-2021:1339 affects the OpenShift Serverless Clients package version up to 0.20.0-6.el8.
While not classified as critical, RHSA-2021:1339 addresses important security issues that should be rectified.
RHSA-2021:1339 was published as an advisory addressing vulnerabilities in Red Hat's OpenShift Serverless Clients.