Red Hat Security Advisory: Release of OpenShift Serverless 1.21.1
Release of OpenShift Serverless 1.21.1 Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-22963US | critical9.8OT critical | KEV | ||
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a r… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/indexexternal
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/indexexternal
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/indexexternal
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/indexexternal
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/indexexternal
- https://access.redhat.com/errata/RHSA-2022:1292self
- https://access.redhat.com/security/updates/classification/#lowexternal
- https://access.redhat.com/security/vulnerabilities/RHSB-2022-003external
remediations (22)
- Fixedopenshift-serverless-1/client-kn-rhel8@sha256:2199a60cb46225b1551c0882fa0694fa846df5d6e3246f7cfbf6ddf5b55f6b5f_ppc64le as a component of Red Hat OpenShift Serverless 1.21
See the Red Hat OpenShift Container Platform 4.6 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index See the Red Hat OpenShift Container Platform 4.7 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index See the Red Hat OpenShift Container Platform 4.8 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index See the Red Hat OpenShift Container Platform 4.9 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index See the Red Hat OpenShift Container Platform 4.10 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index
https://access.redhat.com/errata/RHSA-2022:1292 - Fixedopenshift-serverless-1/client-kn-rhel8@sha256:737695f1eb8e271530c86b3cf0bb9abec7075d318785179a4a2bb0fe36676f49_s390x as a component of Red Hat OpenShift Serverless 1.21
See the Red Hat OpenShift Container Platform 4.6 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index See the Red Hat OpenShift Container Platform 4.7 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index See the Red Hat OpenShift Container Platform 4.8 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index See the Red Hat OpenShift Container Platform 4.9 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index See the Red Hat OpenShift Container Platform 4.10 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index
https://access.redhat.com/errata/RHSA-2022:1292 - Fixedopenshift-serverless-1/client-kn-rhel8@sha256:947bd1823da2b8952018f44e5004cb30ef38e389d6838ab58786528cc93dd53d_amd64 as a component of Red Hat OpenShift Serverless 1.21
See the Red Hat OpenShift Container Platform 4.6 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index See the Red Hat OpenShift Container Platform 4.7 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index See the Red Hat OpenShift Container Platform 4.8 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index See the Red Hat OpenShift Container Platform 4.9 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index See the Red Hat OpenShift Container Platform 4.10 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index
https://access.redhat.com/errata/RHSA-2022:1292 - Fixedopenshift-serverless-1/kn-cli-artifacts-rhel8@sha256:407687c6aefdada457416e99c0a60520f2bb999ee558d493679fce2173a130c4_ppc64le as a component of Red Hat OpenShift Serverless 1.21
See the Red Hat OpenShift Container Platform 4.6 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index See the Red Hat OpenShift Container Platform 4.7 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index See the Red Hat OpenShift Container Platform 4.8 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index See the Red Hat OpenShift Container Platform 4.9 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index See the Red Hat OpenShift Container Platform 4.10 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index
https://access.redhat.com/errata/RHSA-2022:1292 - Fixedopenshift-serverless-1/kn-cli-artifacts-rhel8@sha256:7de6ebb9090b24d23bc3dea51b341f65abcb0660650c9969eebfb42fe9df0397_s390x as a component of Red Hat OpenShift Serverless 1.21
See the Red Hat OpenShift Container Platform 4.6 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index See the Red Hat OpenShift Container Platform 4.7 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index See the Red Hat OpenShift Container Platform 4.8 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index See the Red Hat OpenShift Container Platform 4.9 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index See the Red Hat OpenShift Container Platform 4.10 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index
https://access.redhat.com/errata/RHSA-2022:1292 - Fixedopenshift-serverless-1/kn-cli-artifacts-rhel8@sha256:b322575e7d8978f54f2534553636410e2b4bd792c2c7c292bc79eaf0ac635bd0_amd64 as a component of Red Hat OpenShift Serverless 1.21
See the Red Hat OpenShift Container Platform 4.6 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index See the Red Hat OpenShift Container Platform 4.7 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index See the Red Hat OpenShift Container Platform 4.8 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index See the Red Hat OpenShift Container Platform 4.9 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index See the Red Hat OpenShift Container Platform 4.10 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index
https://access.redhat.com/errata/RHSA-2022:1292 - Workaroundopenshift-serverless-1/client-kn-rhel8@sha256:2199a60cb46225b1551c0882fa0694fa846df5d6e3246f7cfbf6ddf5b55f6b5f_ppc64le as a component of Red Hat OpenShift Serverless 1.21
Affected customers should update immediately as soon as patched software is available. There are no other mitigations available at this time.
- Workaroundopenshift-serverless-1/client-kn-rhel8@sha256:737695f1eb8e271530c86b3cf0bb9abec7075d318785179a4a2bb0fe36676f49_s390x as a component of Red Hat OpenShift Serverless 1.21
Affected customers should update immediately as soon as patched software is available. There are no other mitigations available at this time.
- Workaroundopenshift-serverless-1/client-kn-rhel8@sha256:947bd1823da2b8952018f44e5004cb30ef38e389d6838ab58786528cc93dd53d_amd64 as a component of Red Hat OpenShift Serverless 1.21
Affected customers should update immediately as soon as patched software is available. There are no other mitigations available at this time.
- Workaroundopenshift-serverless-1/ingress-rhel8-operator@sha256:2c60dd43650c0bb2a13bc5a0ba73171dc4161df3e8fa877f87fdc77f831e2bef_s390x as a component of Red Hat OpenShift Serverless 1.21
Affected customers should update immediately as soon as patched software is available. There are no other mitigations available at this time.
- Workaroundopenshift-serverless-1/ingress-rhel8-operator@sha256:4f4b0969b9d4c9b4fa6e69e1eaa827d143f5ea8a1b05a4ea9c9808c1c50b2cb4_ppc64le as a component of Red Hat OpenShift Serverless 1.21
Affected customers should update immediately as soon as patched software is available. There are no other mitigations available at this time.
- Workaroundopenshift-serverless-1/ingress-rhel8-operator@sha256:843c88275b4730ba15d1e93d01c28ba553c523cd58a193056c6a632726ef1e17_amd64 as a component of Red Hat OpenShift Serverless 1.21
Affected customers should update immediately as soon as patched software is available. There are no other mitigations available at this time.
- Workaroundopenshift-serverless-1/kn-cli-artifacts-rhel8@sha256:407687c6aefdada457416e99c0a60520f2bb999ee558d493679fce2173a130c4_ppc64le as a component of Red Hat OpenShift Serverless 1.21
Affected customers should update immediately as soon as patched software is available. There are no other mitigations available at this time.
- Workaroundopenshift-serverless-1/kn-cli-artifacts-rhel8@sha256:7de6ebb9090b24d23bc3dea51b341f65abcb0660650c9969eebfb42fe9df0397_s390x as a component of Red Hat OpenShift Serverless 1.21
Affected customers should update immediately as soon as patched software is available. There are no other mitigations available at this time.
- Workaroundopenshift-serverless-1/kn-cli-artifacts-rhel8@sha256:b322575e7d8978f54f2534553636410e2b4bd792c2c7c292bc79eaf0ac635bd0_amd64 as a component of Red Hat OpenShift Serverless 1.21
Affected customers should update immediately as soon as patched software is available. There are no other mitigations available at this time.
- Workaroundopenshift-serverless-1/knative-rhel8-operator@sha256:2110904e4790571a74f9438353f08d41625e00d7f4808bb61f1155aef4e9d1ad_s390x as a component of Red Hat OpenShift Serverless 1.21
Affected customers should update immediately as soon as patched software is available. There are no other mitigations available at this time.
- Workaroundopenshift-serverless-1/knative-rhel8-operator@sha256:7a8dfb4b1c1e37a86759abbcc2816d1192353e9f360a30a379de7e571d9c3e11_amd64 as a component of Red Hat OpenShift Serverless 1.21
Affected customers should update immediately as soon as patched software is available. There are no other mitigations available at this time.
- Workaroundopenshift-serverless-1/knative-rhel8-operator@sha256:8c4cc7360f2746bffd5f0e1d0e7f96fc26897972a0b95370873f62f2ac98b76f_ppc64le as a component of Red Hat OpenShift Serverless 1.21
Affected customers should update immediately as soon as patched software is available. There are no other mitigations available at this time.
- Workaroundopenshift-serverless-1/serverless-operator-bundle@sha256:938f00a46804976a68a1c487499c6df14eb993ed43afd317542a7c998a3278fa_amd64 as a component of Red Hat OpenShift Serverless 1.21
Affected customers should update immediately as soon as patched software is available. There are no other mitigations available at this time.
- Workaroundopenshift-serverless-1/serverless-rhel8-operator@sha256:19f7751119b161bd523b42193fed647d657f01f17d934f402de590914f77bdd0_ppc64le as a component of Red Hat OpenShift Serverless 1.21
Affected customers should update immediately as soon as patched software is available. There are no other mitigations available at this time.
- Workaroundopenshift-serverless-1/serverless-rhel8-operator@sha256:2650be63affb9c84e7cf3f2a8e45322e92a9c59ab1a2a68c07d342a81b405500_amd64 as a component of Red Hat OpenShift Serverless 1.21
Affected customers should update immediately as soon as patched software is available. There are no other mitigations available at this time.
- Workaroundopenshift-serverless-1/serverless-rhel8-operator@sha256:8adc78590e58e317ba5b42a026a28a9d84167cf4629448981dc79b3f4fef8a80_s390x as a component of Red Hat OpenShift Serverless 1.21
Affected customers should update immediately as soon as patched software is available. There are no other mitigations available at this time.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan