title: Red Hat Security Advisory: OpenShift Container Platform 3.11 security update
description: cri-o: infra container reparented to systemd following OOM Killer killing it's conmon nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload kubernetes: Use of unbounded 'client' label in apiserver_request_total allows for memory exhaustion kubernetes: node localhost services reachable via martian packets proglottis/gpgme: Use-after-free in GPGME bindings during container image pull openshift/console: text injection on error page via crafted url
cpes: cpe:/a:redhat:openshift:3.11::el7