Red Hat Security Advisory

RHSA-2023:0899

OpenShift Container Platform 4.10.53 bug fix and security update

Released 2023-03-01 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.10 openshift4/ose-csi-driver-manila-rhel8, openshift4/ose-installer, openshift4/ose-openstack-machine-controllers +1

TI-2021-03097 CVE-2021-4238 · GHSA-xg2h-wx96-xgxr

MEDIUM 50

Randomly-generated alphanumeric strings contain significantly less entropy than expected.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01408 Published 2022-12-27 Partial fix · 1.1.1 CWE-331

TI-2022-02826 CVE-2022-3064 · GHSA-6q6q-88xp-6f2r

LOW 37

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01871 Published 2022-12-27 Partial fix · 2.2.4 CWE-400

TI-2022-20109 CVE-2022-41717 · GHSA-xrjj-mj9h-534m

LOW 33

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.06077 Published 2022-12-08 Partial fix · 1.18.9, 1.19.4 +1 CWE-770