RHSA-2024:4872MediumCVSS 7.5

Red Hat Security Advisory: Release of OpenShift Serverless 1.33.1 security update

Published
July 25, 2024
Last Modified
August 31, 2026

🔗 CVE IDs covered (4)

CVE-2024-6104 →CVE-2024-24788 →CVE-2024-24789 →CVE-2024-24790 →

📋 Description

CVE-2024-6104 — go-retryablehttp: url might write sensitive information to log file CVE-2024-24788 — golang: net: malformed DNS message can cause infinite loop CVE-2024-24789 — golang: archive/zip: Incorrect handling of certain ZIP files CVE-2024-24790 — golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses

🎯 Affected products142

  • Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1-tech-preview/backstage-plugins-eventmesh-rhel8@sha256:10200e1b9a1dff76486816d8da6750feb908a7208584afe451ac74671247b229_s390x as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1-tech-preview/backstage-plugins-eventmesh-rhel8@sha256:3cae90be660d0e3c0e501ea9cf6248e8e9983929ae4d1ae1506caed4726ea07e_amd64 as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1-tech-preview/backstage-plugins-eventmesh-rhel8@sha256:a663194f67cd4574c2d653c247dd0cd7bb992fc336412f102b007209c763e0f9_ppc64le as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1-tech-preview/backstage-plugins-eventmesh-rhel8@sha256:b4acd286dc11d2f78b0302ff1f03c0a4e480e5bf87581061e942770200b554cd_arm64 as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8@sha256:2681712f6702d8b82e165971e2012cd7150be584c47b43863b84d495e63fc0f3_ppc64le as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8@sha256:3df91f6461b1fa887d6596e8dd433b48ceda8b64ef65e407fa64cfee40fadf4b_amd64 as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8@sha256:c4c53468e89d8a441d6c2a4d1c0521bcb01af11c187fce3ceef548a5d632f10d_arm64 as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8@sha256:ef5a5796e2d16d662288c01e324de8ab3f2461a7c386a4ecabf9bfb2276d771e_s390x as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1/client-kn-rhel8@sha256:0ca2b55f231a2e24f17f16cee2a33775b30cb7ca5d6fa6e834948bfed51382e5_s390x as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1/client-kn-rhel8@sha256:0dbe2b8132a964c051d5f6ec09836a801762cc04db67b6ca87d78fe10bc7e1c9_arm64 as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1/client-kn-rhel8@sha256:b39e3cd2b438d31097e13c31e0abc942142838db6aeb0031f0727ce43a5166c2_ppc64le as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1/client-kn-rhel8@sha256:c1b1313d4fbb3b8cdcf3f08d820b440a0535bce7461b61e5c6d66abeabc9b5d0_amd64 as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:1d3a768ca3325ff373c942e897cb4152ab85545c3b69f27588afaf3bcd4f1aa1_arm64 as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:54fe238d45e5d635df2ef0bbcc1c570bd3e5ab4c9b57bd9a81efc114210135c9_s390x as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:6adeba2be426966b1f89acb76765338f5893207074b22829d74025d36a1e2ef8_amd64 as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8@sha256:7c22f09a46b00fd1f0a55eaa01ee80f6468b936f8210452add57eb4e459f2e8b_ppc64le as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1/eventing-controller-rhel8@sha256:3a0a1177aed1a295d52b0384eaa9c44a533a8ff261b861076a6ca819a1fe2d19_s390x as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1/eventing-controller-rhel8@sha256:5a84691cd96a6abb3d13877469809c86999316fe4f8c8da8101468bf85d9ab4f_ppc64le as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1/eventing-controller-rhel8@sha256:64526450479d79cbdd5da3276d3b7a5ba13900916d993a4ef5235731e29e7eff_arm64 as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1/eventing-controller-rhel8@sha256:8d02a112ddfe5587b18c20528400322ae566141ce35dfcc0d2012b645da204e6_amd64 as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:0d027b40df86dc78bc4995f5b6cacae6264336f0b82f6799b9093d84047eb756_ppc64le as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:16901a4dd25c645f937b0d3616715e61ec012350e29e3c2065fa996ec422edc8_amd64 as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:6b96fab6a2d16dbed2ec557e5101e94784fe6a5b8c516246b43d7ae554f99af0_s390x as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1/eventing-in-memory-channel-controller-rhel8@sha256:a5b7e99d8aa7e310a84c5a29a63e613c4793972f21846a0fa9f6cac4a63f31e8_arm64 as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:06e7bda8b10a7551385755a7b11513f4c54eadd0db2f29cbe09ec7089f63786c_s390x as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:2e801c80a9d3bc2691dc06678f9d0d861bef57cbebe94cf5a3f64df0eb6b4fb3_arm64 as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:71d5148cf2fc6c6ea083a791975bc5723e453086f305e1b86655195065dbbd7c_ppc64le as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8@sha256:9e1908cce2d5acf521ee5b6652ecaa919fd9f9b7bf2b827e2401d6831c67afb9_amd64 as a component of Red Hat OpenShift Serverless 1.33
  • openshift-serverless-1/eventing-istio-controller-rhel8@sha256:46ee12d180230781e1fa12e21b4eba48c2ab36eb8a8aa93226f0524635e08a04_arm64 as a component of Red Hat OpenShift Serverless 1.33
  • +112 more not shown

✅ Remediation

See the Red Hat OpenShift serverless 1.33 documentation at: https://access.redhat.com/documentation/en-us/red_hat_openshift_serverless/1.33 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (13)