Red Hat Security AdvisoryRHSA-2023:4459
OpenShift Container Platform 4.13.8 packages and security update
Released 2023-08-08 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.13 cri-tools-1.26.0-3.el9
Fixes 3 records
Priority LOW 37
HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading to a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01888 · Published 2023-04-06 · Partial fix · 1.19.8, 1.20.3 CWE-400
Priority LOW 34
Templates containing actions in unquoted HTML attributes (e.g.
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.01037 · Published 2023-05-11 · Partial fix · 1.19.9, 1.20.4 CWE-94
Priority LOW 34
Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts.
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.01037 · Published 2023-05-11 · Partial fix · 1.19.9, 1.20.4 CWE-94