Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.21.1
Release of OpenShift Serverless Client kn 1.21.1 Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-22963US | critical9.8OT critical | KEV | ||
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a r… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/indexexternal
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/indexexternal
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/indexexternal
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/indexexternal
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/indexexternal
- https://access.redhat.com/errata/RHSA-2022:1291self
- https://access.redhat.com/security/updates/classification/#lowexternal
- https://access.redhat.com/security/vulnerabilities/RHSB-2022-003external
remediations (8)
- Fixedopenshift-serverless-clients-0:1.0.1-2.el8.ppc64le as a component of Red Hat OpenShift Serverless 1.0
See the Red Hat OpenShift Container Platform 4.6 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index See the Red Hat OpenShift Container Platform 4.7 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index See the Red Hat OpenShift Container Platform 4.8 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index See the Red Hat OpenShift Container Platform 4.9 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index See the Red Hat OpenShift Container Platform 4.10 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index
https://access.redhat.com/errata/RHSA-2022:1291 - Fixedopenshift-serverless-clients-0:1.0.1-2.el8.s390x as a component of Red Hat OpenShift Serverless 1.0
See the Red Hat OpenShift Container Platform 4.6 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index See the Red Hat OpenShift Container Platform 4.7 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index See the Red Hat OpenShift Container Platform 4.8 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index See the Red Hat OpenShift Container Platform 4.9 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index See the Red Hat OpenShift Container Platform 4.10 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index
https://access.redhat.com/errata/RHSA-2022:1291 - Fixedopenshift-serverless-clients-0:1.0.1-2.el8.src as a component of Red Hat OpenShift Serverless 1.0
See the Red Hat OpenShift Container Platform 4.6 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index See the Red Hat OpenShift Container Platform 4.7 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index See the Red Hat OpenShift Container Platform 4.8 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index See the Red Hat OpenShift Container Platform 4.9 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index See the Red Hat OpenShift Container Platform 4.10 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index
https://access.redhat.com/errata/RHSA-2022:1291 - Fixedopenshift-serverless-clients-0:1.0.1-2.el8.x86_64 as a component of Red Hat OpenShift Serverless 1.0
See the Red Hat OpenShift Container Platform 4.6 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index See the Red Hat OpenShift Container Platform 4.7 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index See the Red Hat OpenShift Container Platform 4.8 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index See the Red Hat OpenShift Container Platform 4.9 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index See the Red Hat OpenShift Container Platform 4.10 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index
https://access.redhat.com/errata/RHSA-2022:1291 - Workaroundopenshift-serverless-clients-0:1.0.1-2.el8.ppc64le as a component of Red Hat OpenShift Serverless 1.0
Affected customers should update immediately as soon as patched software is available. There are no other mitigations available at this time.
- Workaroundopenshift-serverless-clients-0:1.0.1-2.el8.s390x as a component of Red Hat OpenShift Serverless 1.0
Affected customers should update immediately as soon as patched software is available. There are no other mitigations available at this time.
- Workaroundopenshift-serverless-clients-0:1.0.1-2.el8.src as a component of Red Hat OpenShift Serverless 1.0
Affected customers should update immediately as soon as patched software is available. There are no other mitigations available at this time.
- Workaroundopenshift-serverless-clients-0:1.0.1-2.el8.x86_64 as a component of Red Hat OpenShift Serverless 1.0
Affected customers should update immediately as soon as patched software is available. There are no other mitigations available at this time.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan