Skip to content
OpenAdvisories
Unscored RHSA-2021:0958 1 CVE

Red Hat Security Advisory: OpenShift Container Platform 4.7.4 security update

Published Sep 18, 2024 · Updated Aug 8, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · OpenShift 4 openshift:4.7::el7 openshift 0:4.7.0-202103181538.p0.git.97109.7576cdc.el7
Red Hat · OpenShift 4 openshift:4.7::el7 openshift-clients 0:4.7.0-202103191426.p0.git.3953.f3a7513.el7
Red Hat · OpenShift 4 openshift:4.7::el7 openshift-clients-redistributable 0:4.7.0-202103191426.p0.git.3953.f3a7513.el7
Red Hat · OpenShift 4 openshift:4.7::el7 openshift-hyperkube 0:4.7.0-202103181538.p0.git.97109.7576cdc.el7
Red Hat · OpenShift 4 openshift:4.7::el8 openshift 0:4.7.0-202103181538.p0.git.97109.7576cdc.el8
Red Hat · OpenShift 4 openshift:4.7::el8 openshift-clients 0:4.7.0-202103191426.p0.git.3953.f3a7513.el8
Red Hat · OpenShift 4 openshift:4.7::el8 openshift-clients-redistributable 0:4.7.0-202103191426.p0.git.3953.f3a7513.el8
Red Hat · OpenShift 4 openshift:4.7::el8 openshift-hyperkube 0:4.7.0-202103181538.p0.git.97109.7576cdc.el8

Vulnerabilities 1

  • Unscored —
    CVE-2021-3114

    Incorrect operations on the P-224 curve in crypto/elliptic

    In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.

    golang go stdlib golang-1.8 Debian Ubuntu Azure Linux Alpine Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1918750
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1941566
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0958.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-3114
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-3114
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-3114
  • article
    https://groups.google.com/g/golang-announce/c/mperVMGa98w