Red Hat Security Advisory

RHSA-2023:6279

cert-manager Operator for Red Hat OpenShift 1.11.5

Released 2023-11-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Cert Manager support for Red Hat OpenShift release cert-manager/cert-manager-operator-rhel9, cert-manager/jetstack-cert-manager-rhel9

TI-2023-20466 CVE-2023-39325 · GHSA-4374-p667-p6c8

LOW 39

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03796 Published 2023-10-11 Partial fix · 1.20.10, 1.21.3 +1 CWE-770

TI-2023-13789 CVE-2023-29409 · GHSA-xc82-5m89-g4jv

LOW 27

Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01601 Published 2023-08-02 Partial fix · 1.19.12, 1.20.7 +1 CWE-400