Red Hat Security Advisory

RHSA-2024:10147

OpenShift Container Platform 4.16.24 security update

Released 2024-11-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.16 openshift4/ose-nutanix-cloud-controller-manager-rhel9, rhcos

TI-2024-16303 CVE-2024-24786 · GHSA-8r3f-844c-mc37

MEDIUM 41

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01262 Published 2024-03-05 Partial fix · 1.33.0 CWE-835

TI-2024-08665 CVE-2024-9341 · GHSA-mc76-5925-c5p6

LOW 38

A flaw was found in Go.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.01028 Published 2024-10-01 Fixed in 0.60.4, 8100020241023085649.afee755d +340 CWE-59

TI-2024-08728 CVE-2024-9407 · GHSA-fhqq-8f65-5xfc

LOW 23

A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instruction.

CVSS 3.1MEDIUM 4.7 Local High privileges No interaction EPSS 0.00288 Published 2024-10-01 Partial fix · 5.2.4, 1.37.4 +6 CWE-20