Red Hat Security AdvisoryRHSA-2024:4119
Updated rhceph-5.3 container image and security update
Released 2024-06-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ceph Storage 5.3 Tools rhceph/keepalived-rhel8, rhceph/rhceph-5-dashboard-rhel8, rhceph/rhceph-5-rhel8 +2
Fixes 5 records
Priority CRITICAL 90KEV
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.99999 · Published 2023-10-10 · Partial fix · 1.28.0, 0.17.0 +9 CWE-400
Priority MEDIUM 52
The go command may execute arbitrary code at build time when using cgo.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01714 · Published 2023-06-08 · Partial fix · 1.19.10, 1.20.5 CWE-74
Priority MEDIUM 52
The go command may execute arbitrary code at build time when using cgo.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01822 · Published 2023-06-08 · Partial fix · 1.19.10, 1.20.5 CWE-94
Priority MEDIUM 52
The go command may generate unexpected code at build time when using cgo.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01694 · Published 2023-06-08 · Partial fix · 1.19.10, 1.20.5 CWE-94
Priority MEDIUM 52
Not all valid JavaScript whitespace characters are considered to be whitespace.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0156 · Published 2023-05-11 · Partial fix · 1.19.9, 1.20.4 CWE-77
