RHSA-2023:0709: Moderate: Release of OpenShift Serverless 1.27.0
Version 1.27.0 of the OpenShift Serverless Operator is supported on Red HatOpenShift Container Platform versions 4.8, 4.9, 4.10, 4.11 and 4.12. This release includes security and bug fixes, and enhancements. golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715) golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664) golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880) golang: archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879) For more details about the security issues, including the impact; a CVSS score;acknowledgments; and other related information refer to the CVE pages linked in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:0709?
The severity of RHSA-2023:0709 relates to security and bug fixes in the OpenShift Serverless Operator.
How do I fix RHSA-2023:0709?
To fix RHSA-2023:0709, you should update to version 1.27.0 of the OpenShift Serverless Operator.
Which versions of OpenShift Container Platform are affected by RHSA-2023:0709?
RHSA-2023:0709 affects Red Hat OpenShift Container Platform versions 4.8, 4.9, 4.10, 4.11, and 4.12.
What enhancements are included in RHSA-2023:0709?
RHSA-2023:0709 includes enhancements and improvements alongside the security fixes.
Is version 1.27.0 of the OpenShift Serverless Operator supported?
Yes, version 1.27.0 of the OpenShift Serverless Operator is supported on the specified OpenShift Container Platform versions.