Read the docs
Red Hat Security Advisory

RHSA-2021:2499

OpenShift Container Platform 4.6.36 security update

Released 2021-06-29 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 3 records

TI-2020-16549 CVE-2020-27223 · GHSA-m394-8rww-3jr7

Uncontrolled resource consumption in Eclipse Jetty

Priority MEDIUM 64

In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.78031 Published 2021-02-26 Partial fix · 9.4.37, 10.0.1 +1 CWE-407
TI-2020-16542 CVE-2020-27216 · GHSA-g3wg-6mcf-8jj6

In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and…

Priority LOW 38

In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory is shared between all users on that syste…

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.04352 Published 2020-10-23 Partial fix · 9.4.33.v20201020, 9.4.33 +2 CWE-378
TI-2020-16544 CVE-2020-27218 · GHSA-86wm-rrjm-8wh8

In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2…

Priority LOW 33

In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto…

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.08277 Published 2020-11-28 Partial fix · 9.4.35.v20201120 CWE-226