Skip to content
OpenAdvisories
Unscored RHBA-2021:1522 1 CVE

Red Hat Bug Fix Advisory: OpenShift Container Platform 4.6.29 security update

Published Sep 18, 2024 · Updated Aug 8, 2026

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · OpenShift 4 openshift:4.6::el8 ignition 0:2.6.0-7.rhaos4.6.git947598e.el8
Red Hat · OpenShift 4 openshift:4.6::el8 ignition-debuginfo 0:2.6.0-7.rhaos4.6.git947598e.el8
Red Hat · OpenShift 4 openshift:4.6::el8 ignition-debugsource 0:2.6.0-7.rhaos4.6.git947598e.el8
Red Hat · OpenShift 4 openshift:4.6::el8 ignition-validate 0:2.6.0-7.rhaos4.6.git947598e.el8
Red Hat · OpenShift 4 openshift:4.6::el8 ignition-validate-debuginfo 0:2.6.0-7.rhaos4.6.git947598e.el8

Vulnerabilities 1

  • Unscored —
    CVE-2021-3114

    Incorrect operations on the P-224 curve in crypto/elliptic

    In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.

    golang go stdlib golang-1.8 Debian Ubuntu Azure Linux Alpine Go

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1958749
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhba-2021_1522.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-3114
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1918750
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-3114
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-3114
  • article
    https://groups.google.com/g/golang-announce/c/mperVMGa98w