Red Hat Security AdvisoryRHSA-2022:1056
Release of OpenShift Serverless Client kn 1.21.0
Released 2022-03-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Serverless 1.0 openshift-serverless-clients-1.0.0-2.el8
Fixes 2 records
Priority MEDIUM 40
net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04254 · Published 2022-01-01 · Partial fix · 0.0.0-20211209124913-491a49abca63 CWE-400
Priority LOW 26
Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous closing of file descriptor 0 after file-descriptor exhaustio…
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.01997 · Published 2022-01-01 · Partial fix CWE-404
