Red Hat Security Advisory

RHSA-2019:3245

OpenShift Container Platform 4.2 security update

Released 2019-10-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.2 apb-2.0.3-2.el7, apb-container-scripts-2.0.3-2.el7, apb-devel-2.0.3-2.el7 +3

TI-2019-06949 CVE-2019-9514 · GHSA-39qc-96h7-956f

HIGH 74

Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.82813 Published 2019-08-13 Partial fix · 0.0.0-20190813141303-74dc4d7220e7 CWE-400

TI-2019-06947 CVE-2019-9512 · GHSA-hgr8-6h9x-f7q9

HIGH 74

Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.83433 Published 2019-08-13 Partial fix · 0.0.0-20190813141303-74dc4d7220e7 CWE-400