RHSA-2021:0516MediumCVSS 7.5

Red Hat Security Advisory: Release of OpenShift Serverless 1.13.0 security update

Published
February 18, 2021
Last Modified
August 15, 2026

🔗 CVE IDs covered (1)

CVE-2020-26160 →

📋 Description

CVE-2020-26160 — jwt-go: access restriction bypass vulnerability

🎯 Affected products29

  • Openshift Serverless 1.13
  • openshift-serverless-1/client-kn-rhel8@sha256:5757f011df96a72d84afaf4175242ce5dc8e5e7361475f52a99aef7fdd579257_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:dc0c27988dd416813d451cc55dd824c9edb6d9c5f9b996d6389cadbc8a29352f_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/eventing-controller-rhel8@sha256:cd531fe1dcfa49aaa5724ed3236715e47affc3e1b39a29ec5766380371e99bb6_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:641966e98b79e86810ea93068324951cc1802918d1e19f17f51290fd7227475e_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:52c42f00cf55d04f88d8d7ad38850963ca5d936d9f7e613d5227529263a97058_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/eventing-mtbroker-filter-rhel8@sha256:d73eb166b47d7f558f1c2ba2807bde61a19821eb293224c8dc57c2ae738478e2_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/eventing-mtbroker-ingress-rhel8@sha256:b9f1f6bbea679d1a1bff74f872412a10fe576d7f619418a7688be3d78ac36f16_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/eventing-mtchannel-broker-rhel8@sha256:ceae3dc5b4798c903d342a8aadf45cbfd13cab61588567bb03edda6b65094e21_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/eventing-mtping-rhel8@sha256:5ce41b08515c0818d649e374eb59ad314686fe85f0235b38a9cc9164197a456b_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/eventing-storage-version-migration-rhel8@sha256:36f7040bcf9ef94274e79a1623772d1caaa4bebf79dd53ecb87018eb871ea09b_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/eventing-sugar-controller-rhel8@sha256:01cabe0adf0fd2c010f6103d861d5e71985de76fdaa021759265f117327013b8_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/eventing-webhook-rhel8@sha256:d3c4c0e45d6c4389791aa0a426da1136002c2e521e274c40cfd68b38803c611b_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/ingress-rhel8-operator@sha256:c0d62212795b331deecb08eb5d7b7bb423b00a47729e91732ebdfffc60b087d6_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/kn-cli-artifacts-rhel8@sha256:5be1792a2e8a31f851a869a3244dc2de0494af366f9ad44b44183aad09d50463_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/knative-rhel8-operator@sha256:e56c32f5ada972006466fb3fd15038634edb5b3f4e63af497c4e1eb0645aec65_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/kourier-control-rhel8@sha256:7c9e4434bb6bb12674617afde70b6324bb24279a34122316c21c23b0fd7aacb0_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/serverless-operator-bundle@sha256:f51bf79d93c571064a8038cd7ab40ced67ab87d5e0063afe3dda47935cb1eda6_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/serverless-rhel8-operator@sha256:c4fa82ff905612b7c771bc3b274db91f9ec33f3fb3899d3e39cb77d4403fea55_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/serving-activator-rhel8@sha256:282d41e5163cc0682295d73aecafef36c23bedb0d436446e3acce936a8b0f8c6_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/serving-autoscaler-hpa-rhel8@sha256:1b99069921f432115c1bb85b5776bf57044a1b7a06a7d943ac8800482f7469ea_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/serving-autoscaler-rhel8@sha256:c37136608b097737386b718612888a251802724920e3bf9a7479134e42d700d3_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/serving-controller-rhel8@sha256:467cec1508213c7f4a55ab15633af0870deca1bea076a075157c7869dbc3e5b0_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/serving-domain-mapping-rhel8@sha256:aaa8123d6e866b2d61bcd30fafdef592127cd136641695ea611085701df70e84_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/serving-domain-mapping-webhook-rhel8@sha256:8767e3b4d07298246b6d8b705c3c9e63142773de0135e032ce0b8b3ee2fde64b_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/serving-queue-rhel8@sha256:93c15efc07b7600f2c2f5fe97f92797bcbe07c12f6377124a6172899e9ec6c3e_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/serving-storage-version-migration-rhel8@sha256:59eebf739c6047e991cbf8dfbf80db5430adc4390c477ef848293bbed00e7620_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/serving-webhook-rhel8@sha256:c2b79facda8ba1e3a64ca15778be000565753bfffe3664b19015142de8bb06a5_amd64 as a component of Openshift Serverless 1.13
  • openshift-serverless-1/svls-must-gather-rhel8@sha256:ee874a46331e87a13c3cb3ec6fafde50bf3ccd228484c27e00a817ba9ba7f213_amd64 as a component of Openshift Serverless 1.13

✅ Remediation

See the documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless_applications/index

🔗 References (7)