Red Hat Security AdvisoryRHSA-2024:0040
OpenShift Container Platform 4.16.0 security and extras update
Released 2024-06-27 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.16 openshift4/ose-ansible-operator, openshift4/ose-aws-efs-csi-driver-container-rhel9, openshift4/ose-cloud-event-proxy-rhel9 +11
Fixes 4 records
Priority HIGH 70
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.93547 · Published 2023-12-18 · Partial fix · 0.40.2, 0.17.0 +2 CWE-354
Priority MEDIUM 52
A path traversal vulnerability was discovered in go-git versions prior to v5.11.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0151 · Published 2024-01-12 · Partial fix · 5.11.0 CWE-22
Priority MEDIUM 41
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01262 · Published 2024-03-05 · Partial fix · 1.33.0 CWE-835
Priority MEDIUM 40
Go SDK for CloudEvents is the official CloudEvents SDK to integrate applications with CloudEvents.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00661 · Published 2024-03-06 · Fixed in 2.15.2 CWE-522
