Red Hat Security AdvisoryRHSA-2024:0741
OpenShift Container Platform 4.13.33 bug fix and security update
Released 2024-02-14 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.13 openshift4/egress-router-cni-rhel8, openshift4/ose-aws-cloud-controller-manager-rhel8, openshift4/ose-cluster-authentication-operator +3
Fixes 6 records
Priority HIGH 72
OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02026 · Published 2023-11-10 · Partial fix · 0.46.0 CWE-770
Priority MEDIUM 52
A path traversal vulnerability was discovered in go-git versions prior to v5.11.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0151 · Published 2024-01-12 · Partial fix · 5.11.0 CWE-22
Priority LOW 39
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03796 · Published 2023-10-11 · Partial fix · 1.20.10, 1.21.3 +1 CWE-770
Priority LOW 37
Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01871 · Published 2022-12-27 · Partial fix · 2.2.4 CWE-400
Priority LOW 34
A flaw was found in kube-controller-manager.
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00594 · Published 2024-11-17 · Fixed in 1.27, 4.12.0-202403042037.p0.g9946c63.assembly.stream.el9 +1 CWE-20
Priority LOW 34
A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00698 · Published 2024-01-12 · Partial fix · 5.11.0 CWE-20
THREATIST.IORead the docs