Red Hat Security Advisory

RHSA-2019:3131

OpenShift Container Platform 4.1.20 golang security update

Released 2019-10-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.1 cri-o-1.13.11-0.10.dev.rhaos4.1.gitbdeb2ca.el7, cri-o-1.13.11-0.13.dev.rhaos4.1.gitbdeb2ca.el8, cri-tools-1.13.0-2.rhaos4.1.gitc06001f.el7 +12

TI-2019-06949 CVE-2019-9514 · GHSA-39qc-96h7-956f

HIGH 74

Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.82813 Published 2019-08-13 Partial fix · 0.0.0-20190813141303-74dc4d7220e7 CWE-400

TI-2019-06947 CVE-2019-9512 · GHSA-hgr8-6h9x-f7q9

HIGH 74

Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.83433 Published 2019-08-13 Partial fix · 0.0.0-20190813141303-74dc4d7220e7 CWE-400