RHSA-2023:0709MediumCVSS 7.5

Red Hat Security Advisory: Release of OpenShift Serverless 1.27.0

Published
February 9, 2023
Last Modified
September 30, 2026

🔗 CVE IDs covered (4)

CVE-2022-2879 →CVE-2022-2880 →CVE-2022-27664 →CVE-2022-41715 →

📋 Description

CVE-2022-2879 — golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers CVE-2022-2880 — golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters CVE-2022-27664 — golang: net/http: handle server errors after sending GOAWAY CVE-2022-41715 — golang: regexp/syntax: limit memory used by parsing regexps

🎯 Affected products109

  • Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8@sha256:1d80145cc5c44617c00a10a2e66a3eed56bf862a5841c7d87c654bc200cd70f0_s390x as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8@sha256:43a06e21864744fe452ea86fdceca8216692ff5cbd91dd8123b503afc42def51_amd64 as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8@sha256:98b0827851c1329692d29b6e6377bd19ce89e6eedfc489b1e87922cda3ffc360_ppc64le as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1-tech-preview/logic-data-index-ephemeral-rhel8@sha256:074a9bb36fb09b267340dffa59bf5838c9a7eada1ea994a4f289a4a3954b754a_amd64 as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1-tech-preview/logic-data-index-ephemeral-rhel8@sha256:d5f4f238fa6f0748a2bf82bd986074b00e3a16cdb37c17a34e65243388c77ab6_ppc64le as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1/client-kn-rhel8@sha256:066762ef76b5230de2ad59882b4958dec857f7f310945a80b9bd7b39e456d52e_ppc64le as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1/client-kn-rhel8@sha256:21506ae01dfe3b135ab38f4ebde8a0e856ece5f54842325a08014c438482a17f_amd64 as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1/client-kn-rhel8@sha256:34a540c62a016688fef7d9e8f91ee5c31e4238dae6e5c39c96bc0d3e4247156c_s390x as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:36c1d0d041175b37053e3fad8ed9be9ef52c8c723f3fbc0cb64f643b79c4d9ac_ppc64le as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:39be49f6bc90f995a276b5c4e90ee74421a7523e670e3a9f2a9a02e246a41629_s390x as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:53cbb881ca949b962c90255713cc49c5f4d0ef0e502000c1ea658f68b57c4f0c_amd64 as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1/eventing-controller-rhel8@sha256:8ccf5d1ac96da964635684bac099d4c15089992d21dff95484331d0b5e9db364_amd64 as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1/eventing-controller-rhel8@sha256:a32a233b579bdcbbdc7d94e38330072ae630ccd72e03c861e8b73ef1813c34e0_s390x as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1/eventing-controller-rhel8@sha256:fc4105db88a098f5fdca01535e59b630fe35c11ed3789b67cf3c3bcd4dc631f8_ppc64le as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:366b0a392505019b00ec2a7fe08483a7b9562396b2d3c82761d5e207f893088e_ppc64le as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:c11d810c92d89f0aee192bedf769f515bf016402f22b5c70c4fe24a53e5d8e15_s390x as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:c538ed13529d64c7fa5c9f6773013b6570eff14d07365929090028a32c4cbe60_amd64 as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:251114b498327f05b20d4125c328855e8b020b82ff0b4895b187ad63dc40f095_s390x as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:53da51f3aae7f380b7a76fc074c1fa1f4c81ee627a7cb469713ef17764073ba2_ppc64le as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:c2d0cc84bba9bf9778beee88fd7c9a328d9fe1e1aec9e79aaf210368c0472658_amd64 as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1/eventing-kafka-broker-controller-rhel8@sha256:99b84d833c6cfd4a4b55dfcadf566ee28cc71bf731876c5f8395f2aba17e16ff_ppc64le as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1/eventing-kafka-broker-controller-rhel8@sha256:b9bbff46db019c26734b3e4b49099fe917d9c0fad321bd96d930959b22813152_s390x as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1/eventing-kafka-broker-controller-rhel8@sha256:e8cdbbcbda2199dcf24aaf564ec016cf2b2f3cc4cb4049cb25695bc9fa8fce3c_amd64 as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1/eventing-kafka-broker-dispatcher-rhel8@sha256:37b9ea2bb66eea728d280de5813a68ffc13b9852e589b96533326c5254780186_s390x as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1/eventing-kafka-broker-dispatcher-rhel8@sha256:bb4344614b79c81dae4aaa2538a4eddd499d85888f729a199563990aa8a274bf_ppc64le as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1/eventing-kafka-broker-dispatcher-rhel8@sha256:da7db1665161cae1111c06766bf0725e8d27f12a29f7bfe3bd293c4026456cb2_amd64 as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1/eventing-kafka-broker-post-install-rhel8@sha256:667a6f234fec6914cf9aa18781e803cb63ee65c5802d9aec948e5c6532e2951b_s390x as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1/eventing-kafka-broker-post-install-rhel8@sha256:7616e78fd9d6aec51b9efc0cc6c97f395cfd6fc70ff99d98f3436f017cf81bf0_amd64 as a component of Red Hat OpenShift Serverless 1.27
  • openshift-serverless-1/eventing-kafka-broker-post-install-rhel8@sha256:8c36e77eb3eb1eaa38572659c694648f1de30b96dfd52ef779e636cf61b1a5e7_ppc64le as a component of Red Hat OpenShift Serverless 1.27
  • +79 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (14)