Red Hat Security Advisory

RHSA-2023:0569

OpenShift Container Platform 4.12.2 security update

Released 2023-02-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.12 openshift4/ose-installer, openshift4/ose-machine-config-operator

TI-2021-03095 CVE-2021-4235 · GHSA-r88r-gmrh-7j83

MEDIUM 58

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00427 Published 2022-12-27 Partial fix · 2.2.3

TI-2021-03097 CVE-2021-4238 · GHSA-xg2h-wx96-xgxr

MEDIUM 50

Randomly-generated alphanumeric strings contain significantly less entropy than expected.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01408 Published 2022-12-27 Partial fix · 1.1.1 CWE-331