TI-2023-24278 CVE-2023-45288 · GHSA-4v7x-pqxf-cx7m
HTTP/2 CONTINUATION flood in net/http
Priority HIGH 81
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.
RHSA-2024:3889
OpenShift Container Platform 4.15.18 security update
Released 2024-06-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.15 openshift4/ose-aws-cloud-controller-manager-rhel9, openshift4/ose-cluster-image-registry-rhel9-operator, openshift4/ose-operator-marketplace-rhel9 +1
Fixes 3 records
TI-2023-27069 CVE-2023-49568 · GHSA-mw99-9chc-xw7r
Maliciously crafted Git server replies can cause DoS on go-git clients
Priority LOW 34
A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11.
TI-2024-04071 CVE-2024-4369 · GHSA-cc73-99rj-c7fh
Cluster-image-registry-operator: exposes a secret via env variable in pod definition on azure
Priority LOW 31
An information disclosure flaw was found in OpenShift's internal image registry operator.