Red Hat Security Advisory

RHSA-2024:10818

OpenShift Container Platform 4.17.8 security update

Released 2024-12-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.17 rhcos

Fixes 3 records

TI-2024-05670 CVE-2024-6119 · GHSA-7m4m-pwhv-49c5

Possible denial of service in X.509 name checks

HIGH 75

Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.66582 Published 2024-09-03 Partial fix · 3.3.2, 3.2.3 +2 CWE-843

TI-2024-04785 CVE-2024-5154 · GHSA-j9hf-98c3-wrm8

Cri-o: malicious container can create symlink on host

MEDIUM 40

A flaw was found in cri-o.

CVSS 3.1HIGH 8.1 Network High privileges User interaction EPSS 0.01237 Published 2024-06-12 Partial fix · 1.30.1, 1.29.5 +9 CWE-22

TI-2024-08665 CVE-2024-9341 · GHSA-mc76-5925-c5p6

Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library

LOW 38

A flaw was found in Go.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.01028 Published 2024-10-01 Fixed in 0.60.4, 8100020241023085649.afee755d +340 CWE-59