Red Hat Security Advisory

RHSA-2023:3545

OpenShift Container Platform 4.12.21 packages and security update

Released 2023-06-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Ironic content for Red Hat OpenShift Container Platform 4.12 python-flask-1:2.0.1-3.el9, python-flask-doc-1:2.0.1-3.el9, python3-flask-1:2.0.1-3.el9
Red Hat OpenShift Container Platform 4.12 podman-3:4.2.0-4.1.rhaos4.12.el8, podman-catatonit-3:4.2.0-4.1.rhaos4.12.el8, podman-docker-3:4.2.0-4.1.rhaos4.12.el8 +4

TI-2023-10161 CVE-2023-24540 · GHSA-7qhm-5mxq-x7vp

MEDIUM 52

Not all valid JavaScript whitespace characters are considered to be whitespace.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0156 Published 2023-05-11 Partial fix · 1.19.9, 1.20.4 CWE-77

TI-2023-14640 CVE-2023-30861 · GHSA-m2qf-hxjv-5gpq

LOW 35

Flask is a lightweight WSGI web application framework.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0125 Published 2023-05-02 Partial fix · 2.3.2, 2.2.5 CWE-539