Red Hat Security Advisory

RHSA-2022:6535

OpenShift Container Platform 4.11.5 packages and security update

Released 2022-09-20 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.11 cri-tools-1.24.2-6.el8

Fixes 1 record

TI-2022-12765 CVE-2022-30629 · GHSA-j55j-52j7-vq87

Session tickets lack random ticket_age_add in crypto/tls

LOW 18

Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during…

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.0121 Published 2022-08-09 Partial fix · 1.17.11, 1.18.3 CWE-330