Red Hat Security AdvisoryRHSA-2023:0692
OpenShift API for Data Protection (OADP) 1.0.7 security and bug fix update
Released 2023-02-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- 8Base-OADP-1.0 oadp/oadp-registry-rhel8, oadp/oadp-velero-rhel8
Fixes 2 records
Priority MEDIUM 43
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01841 · Published 2022-10-14 · Partial fix · 0.3.8 CWE-772
Priority LOW 33
An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.06077 · Published 2022-12-08 · Partial fix · 1.18.9, 1.19.4 +1 CWE-770
