Red Hat Security Advisory

RHSA-2023:0774

OpenShift Container Platform 4.11.28 security update

Released 2023-02-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.11 openshift4/ose-csi-driver-manila-rhel8, openshift4/ose-installer, openshift4/ose-installer-artifacts +1

TI-2021-03097 CVE-2021-4238 · GHSA-xg2h-wx96-xgxr

MEDIUM 50

Randomly-generated alphanumeric strings contain significantly less entropy than expected.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01408 Published 2022-12-27 Partial fix · 1.1.1 CWE-331

TI-2021-16156 CVE-2021-38561 · GHSA-ppp9-7jff-5vj2

MEDIUM 42

golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01484 Published 2022-12-26 Partial fix · 0.3.7 CWE-125

TI-2022-20109 CVE-2022-41717 · GHSA-xrjj-mj9h-534m

LOW 33

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.06077 Published 2022-12-08 Partial fix · 1.18.9, 1.19.4 +1 CWE-770