Skip to content
OpenAdvisories
Unscored RHSA-2021:1339 2 CVEs

Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.14.0 and security update

Published Sep 18, 2024 · Updated Aug 8, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Serverless 1 serverless:1.0::el8 openshift-serverless-clients 0:0.20.0-6.el8

Vulnerabilities 2

  • Unscored —
    CVE-2021-3114

    Incorrect operations on the P-224 curve in crypto/elliptic

    In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.

    golang go stdlib golang-1.8 Debian Ubuntu Azure Linux Alpine Go
  • Unscored —
    CVE-2021-3115

    Arbitrary code injection via the go command with cgo on Windows in cmd/go

    Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when using the "go get" command to fetch modules that make use of cgo (for example, cgo can execute a gcc program from an untrusted download).

    go python-tensorboard toolchain golang-1.15 Debian Azure Linux Alpine Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless_applications/index
  • article
    https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1918750
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1918761
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1941695
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1339.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-3114
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-3114
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-3114
  • article
    https://groups.google.com/g/golang-announce/c/mperVMGa98w
  • report
    https://access.redhat.com/security/cve/CVE-2021-3115
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-3115
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-3115