Red Hat Security Advisory

RHSA-2023:4472

Release of OpenShift Serverless 1.29.1

Released 2023-08-03 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Serverless 1.29 openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8, openshift-serverless-1/client-kn-rhel8, openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8 +33

TI-2023-13780 CVE-2023-29400 · GHSA-c9hr-fvm9-7c49

LOW 34

Templates containing actions in unquoted HTML attributes (e.g.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.01037 Published 2023-05-11 Partial fix · 1.19.9, 1.20.4 CWE-94

TI-2023-10160 CVE-2023-24539 · GHSA-3q6h-q44p-xw88

LOW 34

Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.01037 Published 2023-05-11 Partial fix · 1.19.9, 1.20.4 CWE-94

TI-2023-02895 CVE-2023-3089 · GHSA-wj5p-x3cr-46w8

LOW 33

A compliance problem was found in the Red Hat OpenShift Container Platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0052 Published 2023-07-05 Partial fix · 4.12.0 CWE-693