Lucene search

K
redhatRedHatRHSA-2023:7342
HistoryNov 16, 2023 - 8:46 p.m.

(RHSA-2023:7342) Important: OpenShift Container Platform 4.11 low-latency extras update

2023-11-1620:46:22
access.redhat.com
20
red hat
openshift container platform
golang security fix
low-latency extras
kubernetes
cve-2023-39325 defense

7.4 High

AI Score

Confidence

Low

0.732 High

EPSS

Percentile

98.1%

Red Hat OpenShift Container Platform is Red Hat’s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

Security Fix(es):

  • golang: net/http, x/net/http2: rapid stream resets can cause excessive work (Rapid Reset Attack) (CVE-2023-39325)

A Red Hat Security Bulletin which addresses further details about the Rapid Reset flaw is available in the References section.

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This advisory contains the extra low-latency container images for Red Hat OpenShift Container Platform 4.11. See the following advisory for the container images for this release:

https://access.redhat.com/errata/RHSA-2023:5697

All OpenShift Container Platform users are advised to upgrade to these updated packages and images.