Red Hat Security Advisory

RHSA-2024:0293

OpenShift Container Platform 4.14.10 packages and security update

Released 2024-01-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.14 openshift-4.14.0-202401121302.p0.ge36e183.assembly.stream.el8, openshift-4.14.0-202401121302.p0.ge36e183.assembly.stream.el9, openshift-hyperkube-4.14.0-202401121302.p0.ge36e183.assembly.stream.el8 +1

TI-2023-13786 CVE-2023-29406 · GHSA-f8f7-69v5-w4vx

LOW 32

The HTTP/1 client does not fully validate the contents of the Host header.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01453 Published 2023-07-11 Partial fix · 1.19.11, 1.20.6 CWE-436

TI-2023-13789 CVE-2023-29409 · GHSA-xc82-5m89-g4jv

LOW 27

Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01601 Published 2023-08-02 Partial fix · 1.19.12, 1.20.7 +1 CWE-400