Red Hat Security Advisory

RHSA-2023:1639

OpenShift API for Data Protection (OADP) 1.1.3 security and bug fix update

Released 2023-04-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2022-20116 CVE-2022-41725 · GHSA-w4h2-22wh-m6jx

MEDIUM 41

A denial of service is possible from excessive resource consumption in net/http and mime/multipart.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01241 Published 2023-02-28 Partial fix · 1.19.6, 1.20.1 CWE-770

TI-2022-20115 CVE-2022-41724 · GHSA-89mw-w342-mqrr

MEDIUM 41

Large handshake records may cause panics in crypto/tls.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01111 Published 2023-02-28 Partial fix · 1.19.6, 1.20.1 CWE-400