(RHSA-2021:2021) Moderate: Release of OpenShift Serverless 1.10.2 security update

Red Hat OpenShift Serverless 1.10.2 is a generally available release of the OpenShift Serverless Operator. This version of the OpenShift Serverless Operator is supported on Red Hat OpenShift Container Platform version 4.5.

Security Fix(es):

• golang: crypto/elliptic: incorrect operations on the P-224 curve (CVE-2021-3114)

• golang: cmd/go: packages using cgo can cause arbitrary code execution at build time (CVE-2021-3115)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.