Red Hat Security Advisory

RHSA-2024:3885

OpenShift Container Platform 4.13.44 bug fix and security update

Released 2024-06-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.13 openshift4/ose-cluster-autoscaler-operator, openshift4/ose-console, openshift4/ose-machine-api-operator

TI-2023-24278 CVE-2023-45288 · GHSA-4v7x-pqxf-cx7m

HIGH 81

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.89455 Published 2024-04-04 Partial fix · 1.21.9, 1.22.2 +1 CWE-400

TI-2022-06084 CVE-2022-21708 · GHSA-mh3m-8c74-74xh

LOW 31

graphql-go is a GraphQL server with a focus on ease of use.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01243 Published 2022-01-21 Partial fix · 1.3.0 CWE-400