Red Hat Security AdvisoryRHSA-2024:4028
Release of OpenShift Serverless 1.33.0 security update & enhancements
Released 2024-06-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Serverless 1.33 openshift-serverless-1-tech-preview/backstage-plugins-eventmesh-rhel8, openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8, openshift-serverless-1/client-kn-rhel8 +33
Fixes 8 records
Priority MEDIUM 63
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0138 · Published 2024-03-25 · Partial fix · 4.1.108.Final CWE-770
Priority MEDIUM 41
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01262 · Published 2024-03-05 · Partial fix · 1.33.0 CWE-835
Priority MEDIUM 41
The ParseAddressList function incorrectly handles comments (text within parentheses) within display names.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0105 · Published 2024-03-05 · Partial fix · 1.21.8, 1.22.1
Priority LOW 31
A vulnerability was found in the quarkus-core component.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00309 · Published 2024-04-04 · Partial fix · 3.2.12.Final-redhat-00001, 3.8.4.redhat-00002 +8 CWE-526
Priority LOW 28
Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00667 · Published 2024-03-05 · Partial fix · 1.21.8, 1.22.1 CWE-476
Priority LOW 26
Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.01956 · Published 2024-03-09 · Partial fix · 4.0.1, 3.0.3 +1 CWE-409
Priority LOW 26
If errors returned from MarshalJSON methods contain user controlled data, they may be used to break the contextual auto-escaping behavior of the html/template package, allowing for subsequent actions to inject unexpected…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00795 · Published 2024-03-05 · Partial fix · 1.21.8, 1.22.1
Priority LOW 22
When following an HTTP redirect to a domain which is not a subdomain match or exact match of the initial domain, an http.Client does not forward sensitive headers such as "Authorization" or "Cookie".
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.0108 · Published 2024-03-05 · Partial fix · 1.21.8, 1.22.1
THREATIST.IORead the docs