RHSA-2022:4863MediumCVSS 7.5

Red Hat Security Advisory: Release of OpenShift Serverless Version 1.22.1

Published
June 1, 2022
Last Modified
August 4, 2026

🔗 CVE IDs covered (3)

CVE-2022-23772 →CVE-2022-23773 →CVE-2022-23806 →

📋 Description

CVE-2022-23772 — golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString CVE-2022-23773 — golang: cmd/go: misinterpretation of branch names can lead to incorrect access control CVE-2022-23806 — golang: crypto/elliptic: IsOnCurve returns true for invalid field elements

🎯 Affected products113

  • Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1-tech-preview/eventing-kafka-broker-controller-rhel8@sha256:48fa8d3f9b2b512fa1981f4ed1fe0defa9dd357bddb17beb644d3b6fa6e7dd0a_s390x as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1-tech-preview/eventing-kafka-broker-controller-rhel8@sha256:9ad693375f5277101bd626b3da55c53c714f17292c8a76a4baf2c41d44415fea_amd64 as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1-tech-preview/eventing-kafka-broker-controller-rhel8@sha256:d98899b78b4e843edb181bcde84eb31771fa6355da6e4e86c49ba3bac7bc0f80_ppc64le as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1-tech-preview/eventing-kafka-broker-dispatcher-rhel8@sha256:3ccb7d8b127afc7ff905e04e375bfcbe1552688a89d98683e94f4fc7b40d504d_s390x as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1-tech-preview/eventing-kafka-broker-dispatcher-rhel8@sha256:ae117fe48585501f1d7388f5f4d1fb336a01ef347cd2e34beb6cc6bf9d9c4e8a_ppc64le as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1-tech-preview/eventing-kafka-broker-dispatcher-rhel8@sha256:e2dbfdca184ee7c24b1ab781c79d50196365509ccf29e75a8bdae172c25cb89c_amd64 as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1-tech-preview/eventing-kafka-broker-receiver-rhel8@sha256:6931a0c133bb0bcde98ab70345368b9376a34e49972a7588aa8971f804471e81_s390x as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1-tech-preview/eventing-kafka-broker-receiver-rhel8@sha256:c310dce6404a7d9f173baa44ee5330d861577ac361b92331f75945bed7d7afdb_ppc64le as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1-tech-preview/eventing-kafka-broker-receiver-rhel8@sha256:d65f16f84c58c26365569bf91e747e3e6979b5fe98999d275110f2c4d4616214_amd64 as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1-tech-preview/eventing-kafka-broker-webhook-rhel8@sha256:686894fe2b19b19c3027dbfdaf51ada3ddf1ee22a83d1826ccbd507a53302672_s390x as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1-tech-preview/eventing-kafka-broker-webhook-rhel8@sha256:a6350f212bd4259fe68597d5bddc8ea75493d25d24c17a0f8c25c3e967a33d48_ppc64le as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1-tech-preview/eventing-kafka-broker-webhook-rhel8@sha256:a8965c225ef41b90d62218b244f9227a220b0c6e988c38850ec71fc3c3b923e8_amd64 as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1/client-kn-rhel8@sha256:2ffb3b6cbdc052a375a4572ca8ee9c5c057dd4b018bca854a0fae6ea6283984a_s390x as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1/client-kn-rhel8@sha256:ab0658027324f6acef61ba466000970a75e07d81694ccac0f8fef82cd02b119c_ppc64le as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1/client-kn-rhel8@sha256:c74684f2a2ba7f5a0588f6ebcfd738ec01f39867e7a843f8765dc92a00dc48ed_amd64 as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:a04086a50fcd1833a2e9315375cd16d885f70e4e921fa04cf39f5f528915299e_s390x as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:dbe9b3b94f4b2e04242c49d9836cb5aa06b75d12e832b78914e0d9d1c982e938_amd64 as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:fd13e11fb3ba7f6be0cec7a68ab8a6c4d758ee8ac16d2201fa649eaa930623fe_ppc64le as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1/eventing-controller-rhel8@sha256:233e6aea601b3e9bb1df324881780fdc4e8a69549658a3de8c92a07684cdd84a_ppc64le as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1/eventing-controller-rhel8@sha256:288ea352a6c4ce22f09e8a84c83547753d0d792a4921d4199c7fa68617678ec9_s390x as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1/eventing-controller-rhel8@sha256:f415437077502b9b0c2fa46895d719e5c3b1590b2f08ab5778bf4d2d321df4c1_amd64 as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:95e5608442b3039ebda30c29674b7c1621f5c2844e77784acf9262524e6fd305_amd64 as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:dd01af6842305d9ef18638767c405a01e31c2e6145b9b7411d61e18d5d1bfd6d_s390x as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:fbb5ba073dabdd713823f2e50b39a1d467dfb9c208c2b3242e8ff2793226944b_ppc64le as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:31b377f1b6b3b14c6163d3af3c5794ad6a6cc37471c118f43c2443c264fcccd4_s390x as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:ae18f40cd882daed9127f64240f423050b1ed85e23831cbff4bcd7956db80cf4_amd64 as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:c58d3623ca8f43aba522994fbe6a71740995e82b092b72e716e90bcd447014e9_ppc64le as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1/eventing-kafka-broker-controller-rhel8@sha256:48fa8d3f9b2b512fa1981f4ed1fe0defa9dd357bddb17beb644d3b6fa6e7dd0a_s390x as a component of Red Hat OpenShift Serverless 1.22
  • openshift-serverless-1/eventing-kafka-broker-controller-rhel8@sha256:9ad693375f5277101bd626b3da55c53c714f17292c8a76a4baf2c41d44415fea_amd64 as a component of Red Hat OpenShift Serverless 1.22
  • +83 more not shown

✅ Remediation

See the Red Hat OpenShift Container Platform 4.6 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index See the Red Hat OpenShift Container Platform 4.7 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index See the Red Hat OpenShift Container Platform 4.8 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index See the Red Hat OpenShift Container Platform 4.9 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index See the Red Hat OpenShift Container Platform 4.10 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index

🔗 References (12)