Skip to content
OpenAdvisories
High RHSA-2022:8932 1 CVE

Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.26.0

Published Sep 30, 2024 · Updated Oct 9, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Serverless 1 serverless:1.0::el8 openshift-serverless-clients 0:1.5.0-3.el8

Vulnerabilities 1

  • High 7.5
    CVE-2022-27191

    golang.org/x/crypto/ssh Denial of service via crafted Signer

    The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.

    go k3d k3d-proxy k3d-tools Debian Ubuntu Alpine Wolfi Go

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • article
    https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index
  • article
    https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index
  • article
    https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index
  • article
    https://access.redhat.com/documentation/en-us/openshift_container_platform/4.11/html/serverless/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2064702
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2142802
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8932.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-27191
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-27191
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-27191
  • article
    https://groups.google.com/g/golang-announce/c/-cp44ypCT5s/m/wmegxkLiAQAJ