Red Hat Security Advisory: Release of OpenShift Serverless 1.26.0
🔗 CVE IDs covered (2)
📋 Description
CVE-2021-43565 — golang.org/x/crypto: empty plaintext packet causes panic CVE-2022-27191 — golang: crash in a golang.org/x/crypto/ssh server
🎯 Affected products109
- Red Hat OpenShift Serverless 1.26
- openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8@sha256:45e6a327c26265d07ea936b45771f949c5b403d1dd792ccb9ab84f78d5c4c984_amd64 as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8@sha256:89df80b1beffb83a03a79f8a6900389c7058474769c8b12ff213365e9e7b67b9_ppc64le as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8@sha256:c52710de3db5fa6572bb7cd384f8248bd74f3ff19cde9089a393f3516b385509_s390x as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1-tech-preview/logic-data-index-ephemeral-rhel8@sha256:af8ea51bab22ce9ce25b993bc11dcf27665bbcdff548e5ccfe5976e1e06b8cf0_amd64 as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1-tech-preview/logic-data-index-ephemeral-rhel8@sha256:fa463f0d111ef5b04f3e14699a4020a0d498ed487d3f4dd8a4ffaefab7b8888f_ppc64le as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1/client-kn-rhel8@sha256:0cc8aa6c3205f871d0c99fa65d8a6d57d558f75b75c080ac6543a85b8bfc3b25_s390x as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1/client-kn-rhel8@sha256:2d788f1eb119bd562eee3573d18e0a5cfa7d9f38777f8b0dba7d016742396926_amd64 as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1/client-kn-rhel8@sha256:81501b9f6b14a2636a6af42eff6dbd6d43ee217cdae3d5d8daf54f70bb721b0c_ppc64le as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:5e2ccd7f0cc19c1a2dcce6a19453708c88be59b56a8cc5dc0342d725f248ec6a_ppc64le as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:940640f36cc0e88a1f177dbe435b91cc9bf4910855fd4a4f35b2b9bcd51b219c_s390x as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:96d2e3df95e170509b4bee8cbd9bcfef71d1f55314a5d3ba99818f9b4e193c3c_amd64 as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1/eventing-controller-rhel8@sha256:2b69de490c990dd505ddaaf2319787de1b167ec5dc89d9342bdc0026337647f7_ppc64le as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1/eventing-controller-rhel8@sha256:5dcd15ce54345be99a2f96315c3e86b618f799ff465dbfba7a2b31dfb20aa943_s390x as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1/eventing-controller-rhel8@sha256:cf8eb40fe101c20e0346c3dfbce19477bd3d5da19478c713891fcd03936f2019_amd64 as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:3563c5bee308689867409458771972469279d5c1f87f6dfcd8bf0b4b1d383ee0_ppc64le as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:744bcd1fee88537a95eedf5b0b924c4bcced50d3f0ba7056df869f6267f3fe77_s390x as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:b3b8b1375ab10d83b00045a618b2245cf98c2756803bfc7666efcc58c094bdde_amd64 as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:a2b531b1101f30bf3ced5a72d725e15e3d6b82791650e1e784a00fd6a1977d69_s390x as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:c1904ddc938ae5f69b086508dcece129de814c89179dddcb9f52337024bbbb64_ppc64le as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:c5e51c20b02f8e4b74f57d059ce6306f0a3b6f628b689dd68fb020b892fb64d5_amd64 as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1/eventing-kafka-broker-controller-rhel8@sha256:a855da027f36288d8c3493d628d61c61ad140c0ee36f65266d81a91191c0b075_ppc64le as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1/eventing-kafka-broker-controller-rhel8@sha256:c5b64a19c09bc1e17f9d3023702f560d57974f0440f7756fbeb9510c5be1bad9_amd64 as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1/eventing-kafka-broker-controller-rhel8@sha256:cbba6293f1f410d9593f5a2195fc4d053380f8deac0ece66ad5616970d3e4516_s390x as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1/eventing-kafka-broker-dispatcher-rhel8@sha256:1c3f6619ac4d6ce3a1af44e8d925409df65c9de0982535955e5546d670e9697a_amd64 as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1/eventing-kafka-broker-dispatcher-rhel8@sha256:3d4c10403a734b7279c6f3285686c3db5f3572979a6c4459f9a33609708bf242_s390x as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1/eventing-kafka-broker-dispatcher-rhel8@sha256:72c5c465bdb7f444515e084c93a1967b546313e86c6ec9b80a58c1756595aa7e_ppc64le as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1/eventing-kafka-broker-post-install-rhel8@sha256:0c93181e825ba964876ace044132764aa9bbb9642b40e883841c3dc594f17cb9_amd64 as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1/eventing-kafka-broker-post-install-rhel8@sha256:41ecdd9f3d30f6955f6fdd9f2bed5f2d5f734cb25e992d3184336421ccabd145_s390x as a component of Red Hat OpenShift Serverless 1.26
- openshift-serverless-1/eventing-kafka-broker-post-install-rhel8@sha256:82c607d15562ec9bccb1a1f39444a534bebed6140f83a82bcfc04d5f7f6fbc04_ppc64le as a component of Red Hat OpenShift Serverless 1.26
- +79 more not shown
✅ Remediation
See the Red Hat OpenShift Container Platform 4.8 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index See the Red Hat OpenShift Container Platform 4.9 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index See the Red Hat OpenShift Container Platform 4.10 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index See the Red Hat OpenShift Container Platform 4.11 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.11/html/serverless/index
🔗 References (11)
- selfhttps://access.redhat.com/errata/RHSA-2022:8938
- externalhttps://access.redhat.com/security/updates/classification/#low
- externalhttps://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index
- externalhttps://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index
- externalhttps://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index
- externalhttps://access.redhat.com/documentation/en-us/openshift_container_platform/4.11/html/serverless/index
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2030787
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2064702
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2142799
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2142801
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8938.json