Red Hat Security Advisory

RHSA-2024:1477

Red Hat OpenShift for Windows Containers 8.1.2 security update

Released 2024-03-25 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.13 openshift4-wincw/windows-machine-config-operator-bundle, openshift4-wincw/windows-machine-config-rhel9-operator

Fixes 5 records

TI-2023-06499 CVE-2023-7104 · GHSA-f92h-rw3f-8j92

SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow

HIGH 65

A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.01464 Published 2023-12-25 Fixed CWE-122

TI-2023-20700 CVE-2023-39615 · GHSA-9fj4-8443-vg2m

Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the…

MEDIUM 62

Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01079 Published 2023-08-29 Partial fix CWE-119

TI-2021-14394 CVE-2021-35939 · GHSA-prgv-w33h-5m73

Link following in RPM

LOW 30

It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00508 Published 2022-08-26 Partial fix CWE-59

TI-2021-14393 CVE-2021-35938 · GHSA-83gm-5269-qr3v

Link following in RPM

LOW 30

A symbolic link issue was found in rpm.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00519 Published 2022-08-25 Partial fix CWE-59

TI-2021-14392 CVE-2021-35937 · GHSA-63x9-9q4w-j636

Link following in RPM

LOW 28

A race condition vulnerability was found in rpm.

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.00325 Published 2022-08-25 Partial fix CWE-59