Red Hat Security Advisory

RHSA-2024:4151

OpenShift Container Platform 4.15.20 security update

Released 2024-07-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.15 openshift4/ose-baremetal-installer-rhel8, openshift4/ose-installer, openshift4/ose-installer-artifacts +1

Fixes 2 records

TI-2023-26623 CVE-2023-48795 · GHSA-45x7-px36-x8w8

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6…

HIGH 70

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.93547 Published 2023-12-18 Partial fix · 0.40.2, 0.17.0 +2 CWE-354

TI-2024-04678 CVE-2024-5037 · GHSA-gc8r-pxj9-hhx3

Openshift/telemeter: iss check during jwt authentication can be bypassed

MEDIUM 40

A flaw was found in OpenShift's Telemeter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00807 Published 2024-06-05 Partial fix · 4.17, v4.12.0-202408071159.p0.gc9592de.assembly.stream.el8 +4 CWE-290