Red Hat Security Advisory

RHSA-2024:0735

OpenShift Container Platform 4.14.12 bug fix and security update

Released 2024-02-13 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.14 openshift4/ose-console, openshift4/ose-olm-rukpak-rhel8

TI-2023-27070 CVE-2023-49569 · GHSA-449p-3h89-pw88

MEDIUM 52

A path traversal vulnerability was discovered in go-git versions prior to v5.11.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0151 Published 2024-01-12 Partial fix · 5.11.0 CWE-22

TI-2023-27069 CVE-2023-49568 · GHSA-mw99-9chc-xw7r

LOW 34

A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00698 Published 2024-01-12 Partial fix · 5.11.0 CWE-20

TI-2022-06084 CVE-2022-21708 · GHSA-mh3m-8c74-74xh

LOW 31

graphql-go is a GraphQL server with a focus on ease of use.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01243 Published 2022-01-21 Partial fix · 1.3.0 CWE-400