Red Hat Security AdvisoryRHSA-2024:10518
OpenShift Container Platform 4.17.7 bug fix and security update
Released 2024-12-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.17 openshift4/ose-ibmcloud-machine-controllers-rhel9, openshift4/ose-monitoring-plugin-rhel9, openshift4/ose-networking-console-plugin-rhel9 +1
Fixes 4 records
Priority HIGH 77
Versions of the package cross-spawn before 6.0.6, from 7.0.0 and before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00868 · Published 2024-11-08 · Partial fix · 6.0.6, 7.0.5 +1 CWE-1333
Priority MEDIUM 41
A flaw was found in the QEMU NBD Server.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01027 · Published 2024-08-05 · Partial fix · 7.2.0, 8.2.0 +12 CWE-662
Priority LOW 36
A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00781 · Published 2024-11-07 · Partial fix · 1.7.0, 1.3.1-36.el8_10 +168 CWE-287
Priority LOW 27
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00358 · Published 2024-06-24 · Partial fix · 0.7.7 CWE-532
