Red Hat Security Advisory

RHSA-2024:0207

OpenShift Container Platform 4.14.9 packages and security update

Released 2024-01-17 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.14 cri-o-1.27.2-7.rhaos4.14.git1cc7a64.el8, cri-o-1.27.2-7.rhaos4.14.git1cc7a64.el9

Fixes 2 records

TI-2023-25448 CVE-2023-47108 · GHSA-8pgv-569h-w5rw

DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics

HIGH 72

OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02026 Published 2023-11-10 Partial fix · 0.46.0 CWE-770

TI-2023-05936 CVE-2023-6476 · GHSA-p4rx-7wvg-fwrc

Cri-o: pods are able to break out of resource confinement on cgroupv2

LOW 34

A flaw was found in CRI-O that involves an experimental annotation leading to a container being unconfined.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00859 Published 2024-01-09 Partial fix · 1.26.4-6.1.rhaos4.13.git9eb9cf3.el9, 1.27.2-7.rhaos4.14.git1cc7a64.el9 +3 CWE-770