Red Hat Security AdvisoryRHSA-2023:3541
OpenShift Container Platform 4.11.43 packages and security update
Released 2023-06-14 · Red Hat rating Low · View on Red Hat →
Fixed in
- Ironic content for Red Hat OpenShift Container Platform 4.11 python-flask-1:1.1.2-6.el8, python-flask-doc-1:1.1.2-6.el8, python3-flask-1:1.1.2-6.el8
- Red Hat OpenShift Container Platform 4.11 cri-o-1.24.5-5.rhaos4.11.git8bf967b.el8
Fixes 2 records
Priority HIGH 66
Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where s…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00386 · Published 2022-09-19 · Partial fix · 1.25.0 CWE-284
Priority LOW 35
Flask is a lightweight WSGI web application framework.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0125 · Published 2023-05-02 · Partial fix · 2.3.2, 2.2.5 CWE-539
