Lucene search
RedHatRHSA-2021:2704HistoryJul 13, 2021 - 4:30 p.m.
(RHSA-2021:2704) Moderate: Release of OpenShift Serverless Client kn 1.16.0
2021-07-1316:30:23
access.redhat.com
52
0.009 Low
EPSS
Percentile
82.3%
Red Hat OpenShift Serverless Client kn 1.16.0 provides a CLI to interact with Red Hat OpenShift Serverless 1.16.0. The kn CLI is delivered as an RPM package for installation on RHEL platforms, and as binaries for non-Linux platforms.
Security Fix(es):
-
golang: encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader (CVE-2021-27918)
-
golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header (CVE-2021-31525)
-
golang: archive/zip: malformed archive may cause panic or memory exhaustion (CVE-2021-33196)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 8 | x86_64 | openshift-serverless-clients | < 0.22.0-3.el8 | openshift-serverless-clients-0.22.0-3.el8.x86_64.rpm |
| RedHat | 8 | s390x | openshift-serverless-clients | < 0.22.0-3.el8 | openshift-serverless-clients-0.22.0-3.el8.s390x.rpm |
| RedHat | 8 | ppc64le | openshift-serverless-clients | < 0.22.0-3.el8 | openshift-serverless-clients-0.22.0-3.el8.ppc64le.rpm |
Related
redhat
redhat
cve
cve
prion
prion
Design/Logic Flaw
2022-08-26 16:15:00
Code injection
2021-05-27 13:15:00
Code injection
2021-08-02 19:15:00
nessus
nessus
RHEL 8 : go-toolset:rhel8 (RHSA-2021:3076)
2021-08-11 00:00:00
CentOS 8 : go-toolset:rhel8 (CESA-2021:3076)
2021-08-11 00:00:00
Rocky Linux 8 : go-toolset:rhel8 (RLSA-2021:3076)
2023-11-06 00:00:00
rocky
rocky
go-toolset:rhel8 security, bug fix, and enhancement update
2021-08-10 12:00:58
cvelist
cvelist
oraclelinux
oraclelinux
go-toolset:ol8 security, bug fix, and enhancement update
2021-08-12 00:00:00
olcne security update
2021-05-29 00:00:00
olcne security update
2021-05-29 00:00:00
almalinux
almalinux
Moderate: go-toolset:rhel8 security, bug fix, and enhancement update
2021-08-10 12:00:58
nvd
nvd
redhatcve
redhatcve
osv
osv
Moderate: go-toolset:rhel8 security, bug fix, and enhancement update
2021-08-10 12:00:58
CVE-2021-31525
2021-05-27 13:15:08
BIT-golang-2021-33196
2024-03-06 11:05:05
ibm
ibm
Security Bulletin: IBM Netezza for Cloud Pak for Data is vulnerable to denial of service due to Golang net package (CVE-2021-27918, CVE-2021-44716, CVE-2021-31525)
2022-08-08 17:39:46
mageia
mageia
Updated golang packages fix security vulnerabilities
2021-07-25 11:34:17
Updated golang packages fix security vulnerability
2021-10-13 22:39:52
openvas
openvas
Mageia: Security Advisory (MGASA-2021-0369)
2022-01-28 00:00:00
Fedora: Security Advisory for golang (FEDORA-2021-ee3c072cd0)
2021-06-24 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2021-2551)
2021-09-28 00:00:00
amazon
amazon
gitlab
gitlab
Uncontrolled Recursion
2022-05-24 00:00:00
Uncontrolled Recursion
2022-05-24 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-31525 affecting package golang 1.15.11-1
2021-07-08 21:56:48
CVE-2021-27918 affecting package golang 1.15.7-1
2021-07-08 21:56:48
altlinux
altlinux
Security fix for the ALT Linux 9 package golang version 1.15.12-alt1
2021-05-11 00:00:00
Security fix for the ALT Linux 10 package golang version 1.16.4-alt1
2021-05-06 00:00:00
Security fix for the ALT Linux 9 package golang version 1.15.9-alt1
2021-03-11 00:00:00
alpinelinux
alpinelinux
debiancve
debiancve
veracode
veracode
Denial Of Service (DoS)
2021-03-11 04:13:55
Stack Overflow
2021-05-09 02:20:52
Denial Of Service (DoS)
2021-06-03 21:21:46
ubuntucve
ubuntucve
fedora
fedora
[SECURITY] Fedora 33 Update: golang-1.15.12-1.fc33
2021-05-19 01:31:16
[SECURITY] Fedora 34 Update: golang-1.16.4-1.fc34
2021-06-22 01:01:50
suse
suse
Security update for go1.15 (moderate)
2021-06-24 00:00:00
Security update for go1.15 (moderate)
2021-03-27 00:00:00
Security update for go1.15 (important)
2021-07-01 00:00:00
f5
f5
K55518036 : GO vulnerability CVE-2021-31525
2021-11-03 00:00:00
freebsd
freebsd
go -- net/http: ReadRequest can stack overflow due to recursion with very large headers
2021-04-22 00:00:00
go -- encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader; archive/zip: panic when calling Reader.Open
2021-03-05 00:00:00
go -- multiple vulnerabilities
2021-05-01 00:00:00
cgr
cgr
CVE-2021-31525 vulnerabilities
2024-05-19 03:07:16
github
github
golang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion
2022-05-24 19:03:29
wolfi
wolfi
CVE-2021-31525 vulnerabilities
2024-06-29 09:08:33
photon
photon
Moderate Photon OS Security Update - PHSA-2021-0276
2021-07-29 00:00:00
Important Photon OS Security Update - PHSA-2021-0013
2021-04-22 00:00:00
Important Photon OS Security Update - PHSA-2021-0046
2021-06-15 00:00:00
archlinux
archlinux
[ASA-202106-42] go: multiple issues
2021-06-15 00:00:00