Red Hat Security Advisory

RHSA-2024:1566

Red Hat build of MicroShift 4.14.19 security update

Released 2024-04-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.14 microshift-4.14.19-202403280926.p0.gc1f8861.assembly.4.14.19.el9, microshift-greenboot-4.14.19-202403280926.p0.gc1f8861.assembly.4.14.19.el9, microshift-networking-4.14.19-202403280926.p0.gc1f8861.assembly.4.14.19.el9 +2

Fixes 1 record

TI-2024-01301 CVE-2024-1394 · GHSA-78hx-gp6g-7mj6

Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads

LOW 36

A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01533 Published 2024-03-21 Partial fix · 1.4.5-1.el8ap, 1.4.5-1.el9ap +91 CWE-401