Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.21.1
Release of OpenShift Serverless Client kn 1.21.1 Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-22963US | critical9.8OT kritisch | KEV | ||
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a r… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/indexexternal
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/indexexternal
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/indexexternal
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/indexexternal
- https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/indexexternal
- https://access.redhat.com/errata/RHSA-2022:1291self
- https://access.redhat.com/security/updates/classification/#lowexternal
- https://access.redhat.com/security/vulnerabilities/RHSB-2022-003external
Behebungen (8)
- Behobenopenshift-serverless-clients-0:1.0.1-2.el8.ppc64le as a component of Red Hat OpenShift Serverless 1.0
See the Red Hat OpenShift Container Platform 4.6 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index See the Red Hat OpenShift Container Platform 4.7 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index See the Red Hat OpenShift Container Platform 4.8 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index See the Red Hat OpenShift Container Platform 4.9 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index See the Red Hat OpenShift Container Platform 4.10 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index
https://access.redhat.com/errata/RHSA-2022:1291 - Behobenopenshift-serverless-clients-0:1.0.1-2.el8.s390x as a component of Red Hat OpenShift Serverless 1.0
See the Red Hat OpenShift Container Platform 4.6 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index See the Red Hat OpenShift Container Platform 4.7 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index See the Red Hat OpenShift Container Platform 4.8 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index See the Red Hat OpenShift Container Platform 4.9 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index See the Red Hat OpenShift Container Platform 4.10 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index
https://access.redhat.com/errata/RHSA-2022:1291 - Behobenopenshift-serverless-clients-0:1.0.1-2.el8.src as a component of Red Hat OpenShift Serverless 1.0
See the Red Hat OpenShift Container Platform 4.6 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index See the Red Hat OpenShift Container Platform 4.7 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index See the Red Hat OpenShift Container Platform 4.8 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index See the Red Hat OpenShift Container Platform 4.9 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index See the Red Hat OpenShift Container Platform 4.10 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index
https://access.redhat.com/errata/RHSA-2022:1291 - Behobenopenshift-serverless-clients-0:1.0.1-2.el8.x86_64 as a component of Red Hat OpenShift Serverless 1.0
See the Red Hat OpenShift Container Platform 4.6 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index See the Red Hat OpenShift Container Platform 4.7 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index See the Red Hat OpenShift Container Platform 4.8 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index See the Red Hat OpenShift Container Platform 4.9 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index See the Red Hat OpenShift Container Platform 4.10 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index
https://access.redhat.com/errata/RHSA-2022:1291 - Workaroundopenshift-serverless-clients-0:1.0.1-2.el8.ppc64le as a component of Red Hat OpenShift Serverless 1.0
Affected customers should update immediately as soon as patched software is available. There are no other mitigations available at this time.
- Workaroundopenshift-serverless-clients-0:1.0.1-2.el8.s390x as a component of Red Hat OpenShift Serverless 1.0
Affected customers should update immediately as soon as patched software is available. There are no other mitigations available at this time.
- Workaroundopenshift-serverless-clients-0:1.0.1-2.el8.src as a component of Red Hat OpenShift Serverless 1.0
Affected customers should update immediately as soon as patched software is available. There are no other mitigations available at this time.
- Workaroundopenshift-serverless-clients-0:1.0.1-2.el8.x86_64 as a component of Red Hat OpenShift Serverless 1.0
Affected customers should update immediately as soon as patched software is available. There are no other mitigations available at this time.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan