RHSA-2023:0899HighCVSS 7.5
Red Hat Security Advisory: OpenShift Container Platform 4.10.53 bug fix and security update
🔗 CVE IDs covered (3)
📋 Description
CVE-2021-4238 — goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be CVE-2022-3064 — go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents CVE-2022-41717 — golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests
🔗 References (19)
- selfhttps://access.redhat.com/errata/RHSA-2023:0899
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2092895
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2156729
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2161274
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2163037
- externalhttps://issues.redhat.com/browse/OCPBUGS-2013
- externalhttps://issues.redhat.com/browse/OCPBUGS-2731
- externalhttps://issues.redhat.com/browse/OCPBUGS-3656
- externalhttps://issues.redhat.com/browse/OCPBUGS-3943
- externalhttps://issues.redhat.com/browse/OCPBUGS-6697
- externalhttps://issues.redhat.com/browse/OCPBUGS-6911
- externalhttps://issues.redhat.com/browse/OCPBUGS-6933
- externalhttps://issues.redhat.com/browse/OCPBUGS-6972
- externalhttps://issues.redhat.com/browse/OCPBUGS-7012
- externalhttps://issues.redhat.com/browse/OCPBUGS-7315
- externalhttps://issues.redhat.com/browse/OCPBUGS-7533
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0899.json