Red Hat Security Advisory

RHSA-2023:0728

OpenShift Container Platform 4.12.3 security update

Released 2023-02-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.12 openshift4/ose-cluster-etcd-rhel8-operator, openshift4/ose-csi-driver-manila-rhel8, openshift4/ose-installer

TI-2021-03097 CVE-2021-4238 · GHSA-xg2h-wx96-xgxr

MEDIUM 50

Randomly-generated alphanumeric strings contain significantly less entropy than expected.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01408 Published 2022-12-27 Partial fix · 1.1.1 CWE-331

TI-2022-20109 CVE-2022-41717 · GHSA-xrjj-mj9h-534m

LOW 33

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.06077 Published 2022-12-08 Partial fix · 1.18.9, 1.19.4 +1 CWE-770