Read the docs
Red Hat Security Advisory

RHSA-2024:2672

OpenShift Container Platform 4.14.24 packages and security update

Released 2024-05-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2023-24278 CVE-2023-45288 · GHSA-4v7x-pqxf-cx7m

HTTP/2 CONTINUATION flood in net/http

Priority HIGH 81

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.89455 Published 2024-04-04 Partial fix · 1.21.9, 1.22.2 +1 CWE-400
TI-2024-01631 CVE-2024-1753 · GHSA-874v-pj72-92f3

Buildah: buildah: container escape via improper bind mount validation

Priority HIGH 72

A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00457 Published 2024-03-18 Partial fix · 8090020240413110917.d7b6f4b7, 8090020240417184044.e7857ab1 +17 CWE-59
TI-2024-02954 CVE-2024-3154 · GHSA-2cgq-h8xw-2v5j

Cri-o: arbitrary command injection via pod annotation

Priority LOW 37

A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01418 Published 2024-04-26 Fixed in 1.27.6, 1.28.6 +6 CWE-77