TI-2023-10161 CVE-2023-24540 · GHSA-7qhm-5mxq-x7vp
Improper handling of JavaScript whitespace in html/template
Priority MEDIUM 52
Not all valid JavaScript whitespace characters are considered to be whitespace.
RHSA-2023:3914
Red Hat OpenShift Enterprise security update
Released 2023-07-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.11 buildah-1:1.23.4-3.rhaos4.11.el8, buildah-tests-1:1.23.4-3.rhaos4.11.el8, openshift-4.11.0-202306260054.p0.g990d55b.assembly.stream.el8 +12
Fixes 7 records
TI-2022-08493 CVE-2022-24675 · GHSA-q42m-q8hq-53rj
encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.
Priority MEDIUM 45
encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.
TI-2022-11099 CVE-2022-28327 · GHSA-v5qw-m6mv-3q79
The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1…
Priority MEDIUM 40
The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.
TI-2022-07808 CVE-2022-23772 · GHSA-q99m-p7hq-5v4f
Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow…
Priority LOW 38
Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.
TI-2023-02895 CVE-2023-3089 · GHSA-wj5p-x3cr-46w8
Ocp & fips mode
Priority LOW 33
A compliance problem was found in the Red Hat OpenShift Container Platform.
TI-2022-20109 CVE-2022-41717 · GHSA-xrjj-mj9h-534m
Excessive memory growth in net/http and golang.org/x/net/http2
Priority LOW 33
An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests.
TI-2022-12765 CVE-2022-30629 · GHSA-j55j-52j7-vq87
Session tickets lack random ticket_age_add in crypto/tls
Priority LOW 18
Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket ages during…