Skip to content
OpenAdvisories
Medium RHSA-2021:2704 3 CVEs

Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.16.0

Published Sep 30, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Serverless 1 serverless:1.0::el8 openshift-serverless-clients 0:0.22.0-3.el8

Vulnerabilities 3

  • Medium 5.9
    CVE-2021-31525

    golang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion

    net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configurations.

    go stdlib k3d golang-1.16 Debian Ubuntu Alpine Wolfi Go
  • Unscored —
    CVE-2021-27918

    Infinite loop when decoding inputs in encoding/xml

    encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader (for xml.NewTokenDecoder) returns EOF in the middle of an element. This can occur in the Decode, DecodeElement, or Skip method.

    golang go stdlib golang-1.8 Debian Ubuntu Azure Linux Alpine Go
  • Unscored —
    CVE-2021-33196

    Panic when reading certain archives in archive/zip

    In archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5, a crafted file count (in an archive's header) can cause a NewReader or OpenReader panic.

    golang go stdlib golang-1.8 Debian Ubuntu Azure Linux Alpine Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index
  • article
    https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1937901
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1958341
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1965503
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1971449
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2704.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-27918
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-27918
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-27918
  • article
    https://groups.google.com/g/golang-announce/c/MfiLYjG-RAw
  • report
    https://access.redhat.com/security/cve/CVE-2021-31525
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-31525
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-31525
  • article
    https://groups.google.com/g/golang-announce/c/cu9SP4eSXMc
  • report
    https://access.redhat.com/security/cve/CVE-2021-33196
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-33196
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-33196
  • article
    https://groups.google.com/g/golang-announce/c/RgCMkAEQjSI