Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Serverless 1 serverless:1.0::el8 | openshift-serverless-clients | 0:1.1.0-2.el8 |
Vulnerabilities 2
-
Unscored —
Panic on invalid symbol tables in debug/macho
ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation.
-
Unscored —
Panic when opening certain archives in archive/zip
Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP archive containing an invalid name or an empty filename field.
References
-
article
https://access.redhat.com/security/updates/classification/#low
-
article
https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index
-
article
https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index
-
article
https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index
-
article
https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index
-
article
https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2020725
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2020736
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1745.json
-
report
https://access.redhat.com/security/cve/CVE-2021-41771
-
advisory
https://www.cve.org/CVERecord?id=CVE-2021-41771
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-41771
-
article
https://groups.google.com/g/golang-announce/c/0fM21h43arc
-
report
https://access.redhat.com/security/cve/CVE-2021-41772
-
advisory
https://www.cve.org/CVERecord?id=CVE-2021-41772
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-41772