- Vulnerability/
- RHSA-2023:6788
RHSA-2023:6788: Important: Red Hat OpenShift GitOps security update
First published: Wed Nov 08 2023(Updated: )
Red Hat Openshift GitOps is a declarative way to implement continuous deployment for cloud native applications.<br>Security Fix(es):<br><li> golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) (CVE-2023-39325)</li> <li> HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OpenShift |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What are the security vulnerabilities addressed in RHSA-2023:6788?
RHSA-2023:6788 addresses rapid stream resets in net/http and x/net/http2, which can cause excessive work due to CVE-2023-44487 and CVE-2023-39325.
What is the impact of the vulnerabilities in RHSA-2023:6788 on Red Hat OpenShift GitOps?
The vulnerabilities can lead to increased resource consumption and performance degradation in Red Hat OpenShift GitOps deployments.
How do I fix the vulnerabilities listed in RHSA-2023:6788?
To fix the vulnerabilities in RHSA-2023:6788, you should update to the latest version of Red Hat OpenShift GitOps that includes the security patches.
What version of Red Hat OpenShift GitOps is affected by the vulnerabilities in RHSA-2023:6788?
All versions of Red Hat OpenShift GitOps that contain the vulnerable components are potentially affected as per RHSA-2023:6788.
Is there a workaround for the issues described in RHSA-2023:6788?
Currently, the recommended resolution is to apply the security updates as there are no specific workarounds listed for RHSA-2023:6788.
- agent/severity
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2023:6788
- agent/references
- agent/remedy
- agent/title
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/red hat
- canonical/openshift