Red Hat Security Advisory

RHSA-2023:1329

OpenShift Container Platform 4.13.0 bug fix and security update

Released 2023-05-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.13 microshift-4.13.0-202305161335.p0.g17cae44.assembly.4.13.0.el9, microshift-greenboot-4.13.0-202305161335.p0.g17cae44.assembly.4.13.0.el9, microshift-networking-4.13.0-202305161335.p0.g17cae44.assembly.4.13.0.el9 +2

TI-2022-20115 CVE-2022-41724 · GHSA-89mw-w342-mqrr

MEDIUM 41

Large handshake records may cause panics in crypto/tls.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01111 Published 2023-02-28 Partial fix · 1.19.6, 1.20.1 CWE-400

TI-2022-20109 CVE-2022-41717 · GHSA-xrjj-mj9h-534m

LOW 33

An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.06077 Published 2022-12-08 Partial fix · 1.18.9, 1.19.4 +1 CWE-770