Red Hat Security Advisory

RHSA-2025:0014

OpenShift Container Platform 4.12.71 bug fix and security update

Released 2025-01-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.12 openshift4/ose-cluster-samples-operator, openshift4/ose-console

Fixes 2 records

TI-2024-06036 CVE-2024-6508 · GHSA-4crf-28c7-v4gr

Openshift-console: oauth2 insufficient state parameter entropy

HIGH 70

An insufficient entropy vulnerability was found in the Openshift Console.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00673 Published 2024-08-21 Fixed in v4.12.0-202412201659.p0.g8910d84.assembly.stream.el8, v4.13.0-202411300029.p0.g68accd9.assembly.stream.el8 +167 CWE-331

TI-2023-20466 CVE-2023-39325 · GHSA-4374-p667-p6c8

HTTP/2 rapid reset can cause excessive work in net/http

LOW 39

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03796 Published 2023-10-11 Partial fix · 1.20.10, 1.21.3 +1 CWE-770