Uploaded image for project: 'Red Hat Internal Developer Platform'
  1. Red Hat Internal Developer Platform
  2. RHIDP-4290

Include more fixed CVEs in the 1.3 release notes?

Prepare for Y ReleasePrepare for Z ReleaseRemove QuarterXMLWordPrintable

    • 2
    • False
    • Hide

      None

      Show
      None
    • False
    • Moderate

      The errata for 1.3.0 included mention of these issues:

       CVE-2023-52439CVE-2023-52884CVE-2024-6119CVE-2024-26739CVE-2024-26929CVE-2024-26930CVE-2024-26931CVE-2024-26947CVE-2024-26991CVE-2024-27022CVE-2024-35895CVE-2024-36016CVE-2024-36899CVE-2024-38562CVE-2024-38570CVE-2024-38573CVE-2024-38601CVE-2024-38615CVE-2024-39331CVE-2024-40984CVE-2024-41071CVE-2024-42225CVE-2024-42246CVE-2024-45490CVE-2024-45491CVE-2024-45492

       Need to validate if these are actually fixed in 1.3, and if so, add them to the RN for 1.3.0.

      Chances are these are all RPM updates for RHEL9, so they're perhaps not necessary to be included in the RN.

            ffloreth@redhat.com Fabrice Flore-Thébault
            nickboldt Nick Boldt
            RHIDP - Documentation
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: