TI-2023-10635 CVE-2023-25173 · GHSA-hmfx-3pcx-653p
containerd supplementary groups are not set up properly
Priority HIGH 67
containerd is an open source container runtime.
RHSA-2023:4226
OpenShift Container Platform 4.13.6 bug fix and security update
Released 2023-07-27 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.13 openshift4/ose-aws-ebs-csi-driver-rhel8, openshift4/ose-azure-disk-csi-driver-rhel8, openshift4/ose-azure-file-csi-driver-rhel8 +2
Fixes 2 records
TI-2022-20114 CVE-2022-41723 · GHSA-vvpx-j8f3-3w6h
Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net
Priority MEDIUM 46
A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.