Red Hat Security Advisory

RHSA-2024:4156

OpenShift Container Platform 4.16.1 bug fix and security update

Released 2024-07-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.16 openshift4/ose-console-rhel9, openshift4/ose-telemeter-rhel9

Fixes 2 records

TI-2024-17237 CVE-2024-26147 · GHSA-r53h-jv2g-vpx6

Helm's Missing YAML Content Leads To Panic

MEDIUM 41

Helm is a package manager for Charts for Kubernetes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00926 Published 2024-02-21 Partial fix · 3.14.2 CWE-457

TI-2024-04678 CVE-2024-5037 · GHSA-gc8r-pxj9-hhx3

Openshift/telemeter: iss check during jwt authentication can be bypassed

MEDIUM 40

A flaw was found in OpenShift's Telemeter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00807 Published 2024-06-05 Partial fix · 4.17, v4.12.0-202408071159.p0.gc9592de.assembly.stream.el8 +4 CWE-290