Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Client tkn for 1.15.0 release

02 / AFFECTED SOFTWARE

Affected packages

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

05 / REFERENCES

Further evidence

• https://access.redhat.com/errata/RHEA-2024:4022
• https://access.redhat.com/security/cve/CVE-2023-45288
• https://access.redhat.com/security/cve/CVE-2024-28110
• https://access.redhat.com/security/cve/CVE-2024-28180
• https://access.redhat.com/security/cve/CVE-2024-29902
• https://access.redhat.com/security/cve/CVE-2024-29903
• https://bugzilla.redhat.com/show_bug.cgi?id=2268273
• https://bugzilla.redhat.com/show_bug.cgi?id=2268372
• https://bugzilla.redhat.com/show_bug.cgi?id=2268854
• https://bugzilla.redhat.com/show_bug.cgi?id=2274504
• https://bugzilla.redhat.com/show_bug.cgi?id=2274508
• https://docs.openshift.com/container-platform/4.14/cli_reference/tkn_cli/installing-tkn.html
• https://github.com/cloudevents/sdk-go/security/advisories/GHSA-5pf6-2qwx-pxm2
• https://github.com/go-jose/go-jose/security/advisories/GHSA-c5q2-7r4c-mv6g
• https://github.com/sigstore/cosign/security/advisories/GHSA-88jx-383q-w4qc
• https://github.com/sigstore/cosign/security/advisories/GHSA-95pr-fxf5-86gv
• https://issues.redhat.com/browse/SRVKP-3124
• https://nowotarski.info/http2-continuation-flood/
• https://nvd.nist.gov/vuln/detail/CVE-2023-45288
• https://nvd.nist.gov/vuln/detail/CVE-2024-28110
• https://nvd.nist.gov/vuln/detail/CVE-2024-28180
• https://nvd.nist.gov/vuln/detail/CVE-2024-29902
• https://nvd.nist.gov/vuln/detail/CVE-2024-29903
• https://pkg.go.dev/vuln/GO-2024-2687
• https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhea-2024_4022.json
• https://www.cve.org/CVERecord?id=CVE-2023-45288
• https://www.cve.org/CVERecord?id=CVE-2024-28110
• https://www.cve.org/CVERecord?id=CVE-2024-28180
• https://www.cve.org/CVERecord?id=CVE-2024-29902
• https://www.cve.org/CVERecord?id=CVE-2024-29903
• https://www.kb.cert.org/vuls/id/421644