Red Hat Security Advisory

RHSA-2024:3722

OpenShift Container Platform 4.17.0 packages and security update

Released 2024-10-01 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.17 openshift-4.17.0-202409121706.p0.gd3adea4.assembly.stream.el8, openshift-4.17.0-202409121706.p0.gd3adea4.assembly.stream.el9, openshift-clients-4.17.0-202409111134.p0.gbc58b3a.assembly.stream.el8 +21

TI-2024-16306 CVE-2024-24789 · GHSA-236w-p7wf-5ph8

MEDIUM 58

The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00443 Published 2024-06-05 Partial fix · 1.21.11, 1.22.4

TI-2024-05657 CVE-2024-6104 · GHSA-v6v8-xj6m-xwqh

LOW 27

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00358 Published 2024-06-24 Partial fix · 0.7.7 CWE-532