Red Hat Security Advisory

RHSA-2024:2054

OpenShift Container Platform 4.14.23 security update

Released 2024-05-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.14 openshift-4.14.0-202404231437.p0.g401bb48.assembly.stream.el8, openshift-4.14.0-202404231437.p0.g401bb48.assembly.stream.el9, openshift-hyperkube-4.14.0-202404231437.p0.g401bb48.assembly.stream.el8 +5

Fixes 2 records

TI-2024-18756 CVE-2024-28180 · GHSA-c5q2-7r4c-mv6g

Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)

LOW 26

Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01956 Published 2024-03-09 Partial fix · 4.0.1, 3.0.3 +1 CWE-409

TI-2024-02977 CVE-2024-3177 · GHSA-pxhw-596r-rwq5

Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin

LOW 18

A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers,…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.02224 Published 2024-04-22 Partial fix · 1.27.13, 1.29.4 +1 CWE-20