Red Hat Security Advisory

RHSA-2024:2865

OpenShift Container Platform 4.15.14 bug fix and security update

Released 2024-05-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.15 openshift4/ose-aws-pod-identity-webhook-rhel9, openshift4/ose-azure-cloud-node-manager-rhel9, openshift4/ose-azure-cluster-api-controllers-rhel9 +3

TI-2023-24278 CVE-2023-45288 · GHSA-4v7x-pqxf-cx7m

HIGH 81

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.89455 Published 2024-04-04 Partial fix · 1.21.9, 1.22.2 +1 CWE-400

TI-2023-25448 CVE-2023-47108 · GHSA-8pgv-569h-w5rw

HIGH 72

OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02026 Published 2023-11-10 Partial fix · 0.46.0 CWE-770

TI-2024-16848 CVE-2024-25620 · GHSA-v53g-5gjp-272r

MEDIUM 62

Helm is a tool for managing Charts.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00567 Published 2024-02-14 Partial fix · 3.14.1 CWE-22

TI-2024-17237 CVE-2024-26147 · GHSA-r53h-jv2g-vpx6

MEDIUM 41

Helm is a package manager for Charts for Kubernetes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00926 Published 2024-02-21 Partial fix · 3.14.2 CWE-457

TI-2024-18756 CVE-2024-28180 · GHSA-c5q2-7r4c-mv6g

LOW 26

Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01956 Published 2024-03-09 Partial fix · 4.0.1, 3.0.3 +1 CWE-409