RHSA-2022:6040HighCVSS 9.1

Red Hat Security Advisory: Release of OpenShift Serverless 1.24.0

Published
August 10, 2022
Last Modified
August 24, 2026

🔗 CVE IDs covered (15)

CVE-2022-30635 →CVE-2022-1705 →CVE-2022-1962 →CVE-2022-1996 →CVE-2022-28131 →CVE-2022-30630 →CVE-2022-28327 →CVE-2022-30631 →CVE-2022-32148 →CVE-2022-30633 →CVE-2022-21698 →CVE-2022-24675 →CVE-2022-24921 →CVE-2022-30629 →CVE-2022-30632 →

📋 Description

CVE-2022-1705 — golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-1962 — golang: go/parser: stack exhaustion in all Parse* functions CVE-2022-1996 — go-restful: Authorization Bypass Through User-Controlled Key CVE-2022-21698 — prometheus/client_golang: Denial of service using InstrumentHandlerCounter CVE-2022-24675 — golang: encoding/pem: fix stack overflow in Decode CVE-2022-24921 — golang: regexp: stack exhaustion via a deeply nested expression CVE-2022-28131 — golang: encoding/xml: stack exhaustion in Decoder.Skip CVE-2022-28327 — golang: crypto/elliptic: panic caused by oversized scalar CVE-2022-30629 — golang: crypto/tls: session tickets lack random ticket_age_add CVE-2022-30630 — golang: io/fs: stack exhaustion in Glob CVE-2022-30631 — golang: compress/gzip: stack exhaustion in Reader.Read CVE-2022-30632 — golang: path/filepath: stack exhaustion in Glob CVE-2022-30633 — golang: encoding/xml: stack exhaustion in Unmarshal CVE-2022-30635 — golang: encoding/gob: stack exhaustion in Decoder.Decode CVE-2022-32148 — golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working

🎯 Affected products113

  • Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1-tech-preview/eventing-kafka-broker-controller-rhel8@sha256:2a4b30bcff1377073202362dfd521bd7ac3e3e3960fdb33a6cf9fa39fc89de6b_s390x as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1-tech-preview/eventing-kafka-broker-controller-rhel8@sha256:be290e6d950e8af6162c1dece8472788b66459e8cb91df319f50ccf66f27b5c7_ppc64le as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1-tech-preview/eventing-kafka-broker-controller-rhel8@sha256:f8b5d9c9c0182f5cc1f76422759bf8925d2f29292390ada83a6b7c7986f1462c_amd64 as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1-tech-preview/eventing-kafka-broker-dispatcher-rhel8@sha256:08c6d6908a2e58a18e908223daf152802106b00a67905e94e075fca827af87c9_s390x as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1-tech-preview/eventing-kafka-broker-dispatcher-rhel8@sha256:8ac0796f3585a406facba98766688ae6777b5673a4515418db8d1d92c4d65494_amd64 as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1-tech-preview/eventing-kafka-broker-dispatcher-rhel8@sha256:9af6b8413acbf59adc88e9b88a51105f3b0a4913499c3026f64e7fda91e43384_ppc64le as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1-tech-preview/eventing-kafka-broker-receiver-rhel8@sha256:4dc0783cf92da5b5aa4cd1b9e9d55aa55a69b94eef0d29f261d3d51bd2260b68_ppc64le as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1-tech-preview/eventing-kafka-broker-receiver-rhel8@sha256:80fd78ad61caab0b20e39d4c6103ed9b074d3efa1dc67ab7bf415ea7db912dc3_s390x as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1-tech-preview/eventing-kafka-broker-receiver-rhel8@sha256:aeaaf1d541b5756df65f0700bcd82d085077ae3b1ce99c6d8728997c23e31ef9_amd64 as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1-tech-preview/eventing-kafka-broker-webhook-rhel8@sha256:0dad9dc28babb21622f90c83647c9cc48bfa66faad257c88e7adf1d50ad0f80c_ppc64le as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1-tech-preview/eventing-kafka-broker-webhook-rhel8@sha256:10ba81e103ed6b7dff7b02394b20f44b46acd6b09d72f16667c068eb9989dc77_s390x as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1-tech-preview/eventing-kafka-broker-webhook-rhel8@sha256:f94aef78ce0870fdceac5b3467220540127a73415e81baa4b48bf986bc181c4d_amd64 as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1/client-kn-rhel8@sha256:09644d1c149970cd7c06635806a0ffc077a6340d68c357cd7f2bb5a6f57e46f3_amd64 as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1/client-kn-rhel8@sha256:46510d8b5dfba62d0a3da64ba90d1b8f88ad3b909c3e6ed14bcd96017d766829_ppc64le as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1/client-kn-rhel8@sha256:f9bf2892123c3d981d2d5f158e643e6ba6f59a441b47c4055dc542f8cf8330c0_s390x as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:834e37f8ddfbe157ad357fcef49f5213053d1295bb31361c5dd14a213ff2755c_ppc64le as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:d13848369ca942d13548ab9b73a2d60b67f9412e535ed647342acaa8cef36c37_s390x as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:eef2145e61234d37713ef8fda1f82d7cbe6502c5e6386117230d66ab7e1dd21a_amd64 as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1/eventing-controller-rhel8@sha256:52ef0c51b53ede0344f58174e624db08e6dcac04a0cba1668915f217949fc868_s390x as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1/eventing-controller-rhel8@sha256:72c5fcaa44e3da56b297eb718d8a2b7eeb44069d6f3ce71b0eca30070b18bd9d_ppc64le as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1/eventing-controller-rhel8@sha256:ad2df12dd77e8a3092431ca8d1b5eae42240c8ebb8766e436009bd6df7ee51f3_amd64 as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:070f2c819506853dee230f37e00b27a05ba01c6f7cbbffc9a04b59a65d0c45e9_ppc64le as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:111da99563ea799e6b54933f12dc8f8a3828e36f650900e02da3be5afbdeefd9_amd64 as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:69871b8d6e72713fe2eaf5f1e0aac1282fb8659d2895836994f10c847fe320d1_s390x as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:4b5ee83ccace988c6eaf456e82dea83d160ae7e6aaad1ab8f48410f90da8f1c1_amd64 as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:52247eff5dc9a89244e6697ae9ce61cc1b42265171c956d4d50984179daced89_s390x as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:68b61474089703d0685a952062401303206ba11bc108b8504f6f6390933d83cb_ppc64le as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1/eventing-kafka-broker-controller-rhel8@sha256:2a4b30bcff1377073202362dfd521bd7ac3e3e3960fdb33a6cf9fa39fc89de6b_s390x as a component of Red Hat OpenShift Serverless 1.24
  • openshift-serverless-1/eventing-kafka-broker-controller-rhel8@sha256:be290e6d950e8af6162c1dece8472788b66459e8cb91df319f50ccf66f27b5c7_ppc64le as a component of Red Hat OpenShift Serverless 1.24
  • +83 more not shown

✅ Remediation

See the Red Hat OpenShift Container Platform 4.6 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index See the Red Hat OpenShift Container Platform 4.7 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index See the Red Hat OpenShift Container Platform 4.8 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index See the Red Hat OpenShift Container Platform 4.9 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index See the Red Hat OpenShift Container Platform 4.10 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index

🔗 References (23)