Uploaded image for project: 'Red Hat Internal Developer Platform'
  1. Red Hat Internal Developer Platform
  2. RHIDP-4290

Include more fixed CVEs in the 1.3 release notes?

Prepare for Y ReleasePrepare for Z ReleaseRemove QuarterXMLWordPrintable

    • 2
    • False
    • Hide

      None

      Show
      None
    • False
    • Moderate

      The errata for 1.3.0 included mention of these issues:

       CVE-2023-52439CVE-2023-52884CVE-2024-6119CVE-2024-26739CVE-2024-26929CVE-2024-26930CVE-2024-26931CVE-2024-26947CVE-2024-26991CVE-2024-27022CVE-2024-35895CVE-2024-36016CVE-2024-36899CVE-2024-38562CVE-2024-38570CVE-2024-38573CVE-2024-38601CVE-2024-38615CVE-2024-39331CVE-2024-40984CVE-2024-41071CVE-2024-42225CVE-2024-42246CVE-2024-45490CVE-2024-45491CVE-2024-45492

       Need to validate if these are actually fixed in 1.3, and if so, add them to the RN for 1.3.0.

      Chances are these are all RPM updates for RHEL9, so they're perhaps not necessary to be included in the RN.

              ffloreth@redhat.com Fabrice Flore-Thébault
              nickboldt Nick Boldt
              RHIDP - Documentation
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: