RHSA-2023:3455MediumCVSS 9.8

Red Hat Security Advisory: Release of OpenShift Serverless 1.29.0

Published
June 5, 2023
Last Modified
September 22, 2026

🔗 CVE IDs covered (8)

CVE-2023-24538 →CVE-2023-25173 →CVE-2022-41723 →CVE-2022-41724 →CVE-2022-41725 →CVE-2023-24534 →CVE-2023-24536 →CVE-2023-24537 →

📋 Description

CVE-2022-41723 — golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding CVE-2022-41724 — golang: crypto/tls: large handshake records may cause panics CVE-2022-41725 — golang: net/http, mime/multipart: denial of service from excessive resource consumption CVE-2023-24534 — golang: net/http, net/textproto: denial of service from excessive memory allocation CVE-2023-24536 — golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption CVE-2023-24537 — golang: go/parser: Infinite loop in parsing CVE-2023-24538 — golang: html/template: backticks not treated as string delimiters CVE-2023-25173 — containerd: Supplementary groups are not set up properly

🎯 Affected products109

  • Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8@sha256:2d70c6b6320ba66ff8fda1662f2e83441e73aafcaf56e70ba6fb3c0d2c8d4e80_amd64 as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8@sha256:9ce4c06789903d0b14fdb95b92b021f1a6bd37e0572639297cdf38c546e9085c_s390x as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8@sha256:f966dad57c447679c733737de54808aa4ba2fa0f274a94ed6779d6e16b8d39f1_ppc64le as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1-tech-preview/logic-data-index-ephemeral-rhel8@sha256:09838c771be11fe7cb72d789ad87ca6c8ad7f2e5b33ee5a0208e9f0222334aea_amd64 as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1-tech-preview/logic-data-index-ephemeral-rhel8@sha256:4dcfd50432a5124d315fff9355ca9b2add081a0ece3d572f85c571b007f026c8_ppc64le as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1/client-kn-rhel8@sha256:3a817fd0ca3e1b09452eeee0b0d558a135d1df60eb37c1422651da5a33fdf741_ppc64le as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1/client-kn-rhel8@sha256:475d3183ff0c315cc587631049355aec6e0d9cdbec546b9ea265f6f8814b34ba_s390x as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1/client-kn-rhel8@sha256:95604b77787df961e589bf93fb7e565140ca985cc02ff9d6c90fc7f15a0eaab3_amd64 as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:20b559d9a8c41993f0d02d5348893eebb02f3d174a59a1bd017e2975822ff619_amd64 as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:5e4a8bb46db7d8b948b1604fe933e97cda0bd00ea3b8f899c315b9ba9fa34092_s390x as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:e5f76ed2888d97df2a964d3116bb16ae217ca45bb735ecd265a979681a9c5264_ppc64le as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1/eventing-controller-rhel8@sha256:aa45563b2ac89e6b8180cfa2119a34023dd139c7c4a94d581576ad474db1469d_ppc64le as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1/eventing-controller-rhel8@sha256:da4513526b2c3bf689bfdae0c65f7c493a8ddf4dc6ef5d8f6ced723af931c938_amd64 as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1/eventing-controller-rhel8@sha256:e68372fb2107f5bb22c639616261fcde679f8870ca12eb1100dd1c2190de75cb_s390x as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:1222ecb0e6622666cd22a456160b83861e12a0f2edeee9385c1aa2edc761f1de_amd64 as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:34a970593de5b112683f720ae15513b8e6e1f63e3d751c72a83c7a45287ddeaf_s390x as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:c35482e886ecfedf85be13d66bf4d78dde85c32a6463cb7d5496f17432834d0c_ppc64le as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:82cb08a20f724143ee09c634776317e16a0d7863200f75bc6bb900447c3feb18_amd64 as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:b5ec6a25956dea49bce58f688d806a3071860f31bd1f0bff427917d9c6b20f4b_s390x as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:ba494328e98f5724333c1368c2438bd1cf81bbaa58beefd913a71ce67084332c_ppc64le as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1/eventing-kafka-broker-controller-rhel8@sha256:2b085ff2bf8763b611398579d12fc55adbec304dd6c2b4bf6a584aedf76c2e9d_ppc64le as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1/eventing-kafka-broker-controller-rhel8@sha256:86d11f76f0c83c037b7cc0fc519d1c25af3357653bfcee1678e960b99300b476_amd64 as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1/eventing-kafka-broker-controller-rhel8@sha256:e7e9ab86f0fbb2950a5f63f288c7e9274683b69e6691e906b98718908b0cebc8_s390x as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1/eventing-kafka-broker-dispatcher-rhel8@sha256:021b8b11162a10473dfa6494e40566d5c18c6666de1f75f47621e118d207b371_amd64 as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1/eventing-kafka-broker-dispatcher-rhel8@sha256:408359f26a8c04a55c6abb4f755859381620d167d318103e9d43f91d4f69dd97_s390x as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1/eventing-kafka-broker-dispatcher-rhel8@sha256:a73d775ef66925fe2f605b13667bf7dad0d806f813a6141cca2a57fc1e05f7a6_ppc64le as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1/eventing-kafka-broker-post-install-rhel8@sha256:125025ff839149248cc51c34359f0bcd3d18137bcf8adcd66b4dacfe0547de92_amd64 as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1/eventing-kafka-broker-post-install-rhel8@sha256:38ede979b0aa76cbef2dcc0493b40a28caf077175c6aeb65f2f4c19aebf7606a_ppc64le as a component of Red Hat OpenShift Serverless 1.29
  • openshift-serverless-1/eventing-kafka-broker-post-install-rhel8@sha256:f5cb79b51df9b5d04cdc5b1c32bcc574bb04c54b5f3a69b476d669e4cade3f59_s390x as a component of Red Hat OpenShift Serverless 1.29
  • +79 more not shown

✅ Remediation

For instructions on how to install and use OpenShift Serverless, see documentation linked from the References section. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: To mitigate this issue, upgrade Go to version 1.19.8, 1.20.3, or later, where the vulnerability has been addressed. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (17)