Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Red Hat OpenShift Serverless 1.21.1 RHSA-2022:1292-01 Security Risk

red hat
Calendar Grey April 12, 2022
Dist Redhat Esm H88
Discover Red Hat Security Advisory RHSA-2022-1292 detailing OpenShift Serverless 1.21.1's remote code execution risk.
Release of OpenShift Serverless 1.21.1 Red Hat Product Security has rated this update as having a security impact of Low

Solution

See the Red Hat OpenShift Container Platform 4.6 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index See the Red Hat OpenShift Container Platform 4.7 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index See the Red Hat OpenShift Container Platform 4.8 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index See the Red Hat OpenShift Container Platform 4.9 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index See the Red Hat OpenShift Container Platform 4.10 documentation at: https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index

Summary

This version of the OpenShift Serverless Operator, which is supported on Red Hat OpenShift Container Platform versions 4.6, 4.7, 4.8, 4.9, and 4.10, includes a security fix. For more information, see the documentation listed in the References section.
Security Fix(es):
* spring-cloud-function: Remote code execution by malicious Spring Expression (CVE-2022-22963)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Topics%20covered

Topics Covered

security advisory Red Hat remote code execution low severity OpenShift Serverless

References

https://access.redhat.com/security/cve/CVE-2022-22963 https://access.redhat.com/security/updates/classification/#low https://access.redhat.com/security/vulnerabilities/RHSB-2022-003 https://access.redhat.com/documentation/en-us/openshift_container_platform/4.6/html/serverless/index https://access.redhat.com/documentation/en-us/openshift_container_platform/4.7/html/serverless/index https://access.redhat.com/documentation/en-us/openshift_container_platform/4.8/html/serverless/index https://access.redhat.com/documentation/en-us/openshift_container_platform/4.9/html/serverless/index https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html/serverless/index

Package List


Severity
low
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2022:1292-01
Product: Red Hat OpenShift Serverless
Advisory URL: https://access.redhat.com/errata/RHSA-2022:1292
Issue date: 2022-04-11

Topic

Release of OpenShift Serverless 1.21.1Red Hat Product Security has rated this update as having a security impactof Low. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.

Topics%20covered

Topics Covered

security advisory Red Hat remote code execution low severity OpenShift Serverless

Relevant Releases Architectures

Bugs Fixed

2070668 - CVE-2022-22963 spring-cloud-function: Remote code execution by malicious Spring Expression

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here