Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-33638

Triage CVE-2023-45288 - openshift/ibm-powervs-block-csi-driver: bump x/net [openshift-4.13]

XMLWordPrintable

    • No
    • Multi-Arch Sprint 254, Multi-Arch Sprint 255, Multi-Arch Sprint 256, Multi-Arch Sprint 257
    • 4
    • False
    • Hide

      None

      Show
      None
    • Release Note Not Required
    • In Progress

      Description of problem:

      openshift/ibm-powervs-block-csi-driver: bump x/net to mitigate the denial of service attacks over HTTP/2 protocol

      Version-Release number of selected component (if applicable):

      v4.13.0    

      This security tracking issue was filed based on manifesting data available to Product Security in https://deptopia.prodsec.redhat.com/ui/home. This data indicates that the component noted in the "pscomponent" label was found to be affected by this vulnerability. If you believe this issue is not actionable and was created erroneously, please fill out the following form and close this issue as Closed with a resolution of Obsolete. This will prompt Product Security to review what type of error caused this Jira issue to be created, and prevent further mistakes of this type in the future.

      https://forms.gle/LnXaf5aCAHaV6g8T8

      To better understand the distinction between a component being Affected vs Not Affected, please read the following article:
      https://docs.engineering.redhat.com/pages/viewpage.action?spaceKey=PRODSEC&title=Understanding+Affected+and+Not+Affected

              kviswana Kishen V
              kviswana Kishen V
              Doug Slavens Doug Slavens
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: