Red Hat Security AdvisoryRHSA-2024:2047
OpenShift Container Platform 4.13.41 bug fix and security update
Released 2024-05-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.13 openshift4/kubevirt-csi-driver-rhel8, openshift4/oc-mirror-plugin-rhel8, openshift4/ose-cluster-monitoring-operator +1
Fixes 5 records
Priority MEDIUM 52
A path traversal vulnerability was discovered in go-git versions prior to v5.11.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0151 · Published 2024-01-12 · Partial fix · 5.11.0 CWE-22
Priority LOW 35
A credentials leak vulnerability was found in the cluster monitoring operator in OCP.
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00892 · Published 2024-04-25 · Partial fix · v4.12.0-202405091536.p0.g8906207.assembly.stream.el8, v4.13.0-202404200313.p0.gb518881.assembly.stream.el8 +166 CWE-200
Priority LOW 34
A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00698 · Published 2024-01-12 · Partial fix · 5.11.0 CWE-20
Priority LOW 32
A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP).
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00631 · Published 2024-03-07 · Fixed in v4.13.0-202404200313.p0.g9d909f7.assembly.stream.el8, v4.14.0-202404161544.p0.g48fafc4.assembly.stream.el8 +2 CWE-501
Priority LOW 28
A vulnerability was found in OpenShift OSIN.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.0072 · Published 2022-12-28 · Fixed in 1.0.2-0.20210113124101-8612686d6dda CWE-208