Red Hat Security Advisory

RHSA-2023:5480

Release of OpenShift Serverless Logic 1.30.0 SP1 security update

Released 2023-10-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Serverless 1.30 openshift-serverless-1-tech-preview/logic-data-index-ephemeral-rhel8, openshift-serverless-1-tech-preview/logic-swf-builder-rhel8, openshift-serverless-1-tech-preview/logic-swf-devmode-rhel8 +7

Fixes 1 record

TI-2023-04469 CVE-2023-4853 · GHSA-4f4r-wgv2-jjvg

Quarkus: http security policy bypass

MEDIUM 40

A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02276 Published 2023-09-20 Partial fix · 1.9.2-3.el8, 2.13.8.Final-redhat-00005 +9 CWE-148