Red Hat Security Advisory

RHSA-2024:0641

OpenShift Container Platform 4.14.11 security and extras update

Released 2024-02-07 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.14 openshift4/ose-ansible-operator, openshift4/ose-helm-operator, openshift4/ose-kubernetes-nmstate-handler-rhel9 +1

TI-2023-27070 CVE-2023-49569 · GHSA-449p-3h89-pw88

MEDIUM 52

A path traversal vulnerability was discovered in go-git versions prior to v5.11.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0151 Published 2024-01-12 Partial fix · 5.11.0 CWE-22

TI-2023-24163 CVE-2023-45142 · GHSA-rcjv-mgp8-qvmr

LOW 36

OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01614 Published 2023-10-12 Partial fix · 0.44.0 CWE-770

TI-2023-27069 CVE-2023-49568 · GHSA-mw99-9chc-xw7r

LOW 34

A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00698 Published 2024-01-12 Partial fix · 5.11.0 CWE-20