Red Hat Security AdvisoryRHSA-2022:0927
OpenShift Container Platform 4.10.5 packages and security update
Released 2022-03-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.10 containernetworking-plugins-0.9.1-2.rhaos4.10.el8, runc-3:1.1.0-2.rhaos4.10.el8
Fixes 2 records
Priority MEDIUM 40
net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04254 · Published 2022-01-01 · Partial fix · 0.0.0-20211209124913-491a49abca63 CWE-400
Priority LOW 26
Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous closing of file descriptor 0 after file-descriptor exhaustio…
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.01997 · Published 2022-01-01 · Partial fix CWE-404
