RHSA-2024:3327HighCVSS 7.5
Red Hat Security Advisory: OpenShift Container Platform 4.15.15 security update
🔗 CVE IDs covered (3)
📋 Description
CVE-2023-45288 — golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS CVE-2024-1135 — python-gunicorn: HTTP Request Smuggling due to improper validation of Transfer-Encoding headers CVE-2024-28180 — jose-go: improper handling of highly compressed data
🔗 References (27)
- selfhttps://access.redhat.com/errata/RHSA-2024:3327
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2268273
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2268854
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2275280
- externalhttps://issues.redhat.com/browse/OCPBUGS-30020
- externalhttps://issues.redhat.com/browse/OCPBUGS-30650
- externalhttps://issues.redhat.com/browse/OCPBUGS-31609
- externalhttps://issues.redhat.com/browse/OCPBUGS-31863
- externalhttps://issues.redhat.com/browse/OCPBUGS-32220
- externalhttps://issues.redhat.com/browse/OCPBUGS-32744
- externalhttps://issues.redhat.com/browse/OCPBUGS-32972
- externalhttps://issues.redhat.com/browse/OCPBUGS-33117
- externalhttps://issues.redhat.com/browse/OCPBUGS-33118
- externalhttps://issues.redhat.com/browse/OCPBUGS-33166
- externalhttps://issues.redhat.com/browse/OCPBUGS-33205
- externalhttps://issues.redhat.com/browse/OCPBUGS-33210
- externalhttps://issues.redhat.com/browse/OCPBUGS-33454
- externalhttps://issues.redhat.com/browse/OCPBUGS-33506
- externalhttps://issues.redhat.com/browse/OCPBUGS-33575
- externalhttps://issues.redhat.com/browse/OCPBUGS-33604
- externalhttps://issues.redhat.com/browse/OCPBUGS-33622
- externalhttps://issues.redhat.com/browse/OCPBUGS-33641
- externalhttps://issues.redhat.com/browse/OCPBUGS-33672
- externalhttps://issues.redhat.com/browse/OCPBUGS-33697
- externalhttps://issues.redhat.com/browse/OCPBUGS-33960
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3327.json