Red Hat Security Advisory

RHSA-2024:1557

Errata Advisory for Red Hat OpenShift Builds 1.0.1

Released 2024-03-28 · Red Hat rating Critical · View on Red Hat →

Fixed in

Builds for Red Hat OpenShift 1.0 openshift-builds/openshift-builds-controller-rhel8, openshift-builds/openshift-builds-git-cloner-rhel8, openshift-builds/openshift-builds-image-bundler-rhel8 +5

Fixes 3 records

TI-2023-26623 CVE-2023-48795 · GHSA-45x7-px36-x8w8

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6…

HIGH 70

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.93547 Published 2023-12-18 Partial fix · 0.40.2, 0.17.0 +2 CWE-354

TI-2023-27070 CVE-2023-49569 · GHSA-449p-3h89-pw88

Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients

MEDIUM 52

A path traversal vulnerability was discovered in go-git versions prior to v5.11.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0151 Published 2024-01-12 Partial fix · 5.11.0 CWE-22

TI-2023-27069 CVE-2023-49568 · GHSA-mw99-9chc-xw7r

Maliciously crafted Git server replies can cause DoS on go-git clients

LOW 34

A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00698 Published 2024-01-12 Partial fix · 5.11.0 CWE-20