Red Hat Security AdvisoryRHSA-2023:1328
OpenShift Container Platform 4.13.0 security update
Released 2023-05-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.13 openshift4/dpu-network-rhel8-operator, openshift4/metallb-rhel8-operator, openshift4/ose-aws-efs-csi-driver-container-rhel8 +17
Fixes 3 records
Priority MEDIUM 42
golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01484 · Published 2022-12-26 · Partial fix · 0.3.7 CWE-125
Priority LOW 33
An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.06077 · Published 2022-12-08 · Partial fix · 1.18.9, 1.19.4 +1 CWE-770
Priority LOW 32
Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshalling Go objects into BSON.
CVSS 3.1MEDIUM 6.8· Network · Low privileges · No interaction · EPSS 0.00935 · Published 2021-06-10 · Partial fix · 1.5.1 CWE-1287