Red Hat Security Advisory: OpenShift Serverless Client kn 1.29.0 release

02 / AFFECTED SOFTWARE

Affected packages

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

05 / REFERENCES

Further evidence

• https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index
• https://access.redhat.com/documentation/en-us/openshift_container_platform/4.11/html/serverless/index
• https://access.redhat.com/documentation/en-us/openshift_container_platform/4.12/html/serverless/index
• https://access.redhat.com/documentation/en-us/openshift_container_platform/4.13/html/serverless/index
• https://access.redhat.com/errata/RHSA-2023:3450
• https://access.redhat.com/security/cve/CVE-2022-41723
• https://access.redhat.com/security/cve/CVE-2022-41724
• https://access.redhat.com/security/cve/CVE-2022-41725
• https://access.redhat.com/security/cve/CVE-2023-24534
• https://access.redhat.com/security/cve/CVE-2023-24536
• https://access.redhat.com/security/cve/CVE-2023-24537
• https://access.redhat.com/security/cve/CVE-2023-24538
• https://access.redhat.com/security/cve/CVE-2023-25173
• https://access.redhat.com/security/updates/classification/#moderate
• https://bugzilla.redhat.com/show_bug.cgi?id=2174485
• https://bugzilla.redhat.com/show_bug.cgi?id=2178358
• https://bugzilla.redhat.com/show_bug.cgi?id=2178488
• https://bugzilla.redhat.com/show_bug.cgi?id=2178492
• https://bugzilla.redhat.com/show_bug.cgi?id=2184481
• https://bugzilla.redhat.com/show_bug.cgi?id=2184482
• https://bugzilla.redhat.com/show_bug.cgi?id=2184483
• https://bugzilla.redhat.com/show_bug.cgi?id=2184484
• https://bugzilla.redhat.com/show_bug.cgi?id=2185511
• https://github.com/advisories/GHSA-vvpx-j8f3-3w6h
• https://github.com/containerd/containerd/commit/133f6bb6cd827ce35a5fb279c1ead12b9d21460a
• https://github.com/containerd/containerd/releases/tag/v1.5.18
• https://github.com/containerd/containerd/releases/tag/v1.6.18
• https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p
• https://github.com/golang/go/issues/59180
• https://github.com/golang/go/issues/59234
• https://go.dev/cl/468124
• https://go.dev/cl/468125
• https://go.dev/cl/468135
• https://go.dev/cl/468295
• https://go.dev/issue/57855
• https://go.dev/issue/58001
• https://go.dev/issue/58006
• https://go.dev/issue/58975
• https://go.dev/issue/59153
• https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E
• https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8
• https://nvd.nist.gov/vuln/detail/CVE-2022-41723
• https://nvd.nist.gov/vuln/detail/CVE-2022-41724
• https://nvd.nist.gov/vuln/detail/CVE-2022-41725
• https://nvd.nist.gov/vuln/detail/CVE-2023-24534
• https://nvd.nist.gov/vuln/detail/CVE-2023-24536
• https://nvd.nist.gov/vuln/detail/CVE-2023-24537
• https://nvd.nist.gov/vuln/detail/CVE-2023-24538
• https://nvd.nist.gov/vuln/detail/CVE-2023-25173
• https://pkg.go.dev/vuln/GO-2023-1569
• https://pkg.go.dev/vuln/GO-2023-1570
• https://pkg.go.dev/vuln/GO-2023-1571
• https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3450.json
• https://vuln.go.dev/ID/GO-2023-1571.json
• https://www.benthamsgaze.org/2022/08/22/vulnerability-in-linux-containers-investigation-and-mitigation/
• https://www.cve.org/CVERecord?id=CVE-2022-41723
• https://www.cve.org/CVERecord?id=CVE-2022-41724
• https://www.cve.org/CVERecord?id=CVE-2022-41725
• https://www.cve.org/CVERecord?id=CVE-2023-24534
• https://www.cve.org/CVERecord?id=CVE-2023-24536
• https://www.cve.org/CVERecord?id=CVE-2023-24537
• https://www.cve.org/CVERecord?id=CVE-2023-24538
• https://www.cve.org/CVERecord?id=CVE-2023-25173