Red Hat Security AdvisoryRHSA-2023:7473
OpenShift Container Platform 4.14.4 packages and security update
Released 2023-11-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Ironic content for Red Hat OpenShift Container Platform 4.14 python-werkzeug-2.2.3-2.el9, python3-werkzeug-2.2.3-2.el9
- Red Hat OpenShift Container Platform 4.14 haproxy-2.6.13-2.rhaos4.14.el8, haproxy26-2.6.13-2.rhaos4.14.el8
Fixes 3 records
Priority HIGH 71
HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x before 2.8.2 forwards empty Content-Length headers, violating RFC 9110…
CVSS 3.1HIGH 7.2· Network · No auth · No interaction · EPSS 0.02147 · Published 2023-08-10 · Partial fix CWE-444
Priority MEDIUM 42
Werkzeug is a comprehensive WSGI web application library.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0142 · Published 2023-02-14 · Partial fix · 2.2.3 CWE-770
Priority LOW 37
Werkzeug is a comprehensive WSGI web application library.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.01288 · Published 2023-10-24 · Partial fix · 3.0.1, 2.3.8 CWE-400
