Red Hat Security Advisory

RHSA-2024:2869

OpenShift Container Platform 4.14.26 security update

Released 2024-05-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.14 openshift4/ose-aws-pod-identity-webhook-rhel8, openshift4/ose-azure-workload-identity-webhook-rhel8, openshift4/ose-cloud-credential-operator

TI-2024-18756 CVE-2024-28180 · GHSA-c5q2-7r4c-mv6g

LOW 26

Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01956 Published 2024-03-09 Partial fix · 4.0.1, 3.0.3 +1 CWE-409