-
Bug
-
Resolution: Done
-
Normal
-
4.13.0
-
No
-
Multi-Arch Sprint 254, Multi-Arch Sprint 255, Multi-Arch Sprint 256, Multi-Arch Sprint 257
-
4
-
False
-
-
Release Note Not Required
-
In Progress
Description of problem:
openshift/ibm-powervs-block-csi-driver: bump x/net to mitigate the denial of service attacks over HTTP/2 protocol
Version-Release number of selected component (if applicable):
v4.13.0
This security tracking issue was filed based on manifesting data available to Product Security in https://deptopia.prodsec.redhat.com/ui/home. This data indicates that the component noted in the "pscomponent" label was found to be affected by this vulnerability. If you believe this issue is not actionable and was created erroneously, please fill out the following form and close this issue as Closed with a resolution of Obsolete. This will prompt Product Security to review what type of error caused this Jira issue to be created, and prevent further mistakes of this type in the future.
https://forms.gle/LnXaf5aCAHaV6g8T8
To better understand the distinction between a component being Affected vs Not Affected, please read the following article:
https://docs.engineering.redhat.com/pages/viewpage.action?spaceKey=PRODSEC&title=Understanding+Affected+and+Not+Affected
- depends on
-
OCPBUGS-33637 CVE-2023-45288 ibm-powervs-block-csi-driver: Triage - openshift/ibm-powervs-block-csi-driver: bump x/net [openshift-4]
- Closed
- links to