Red Hat Security Advisory

RHSA-2023:5390

OpenShift Container Platform 4.12.36 bug fix and security update

Released 2023-10-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.12 openshift4/ose-docker-registry

Fixes 1 record

TI-2023-02112 CVE-2023-2253 · GHSA-hqxw-f8mx-cpmw

Resource allocation without limits in distribution/distribution

LOW 31

A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: `n`).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00938 Published 2023-06-06 Partial fix · 2.8.2-beta.1 CWE-475