Red Hat Security AdvisoryRHSA-2024:4484
OpenShift Container Platform 4.13.45 bug fix and security update
Released 2024-07-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.13 openshift4/ose-aws-cloud-controller-manager-rhel8, openshift4/ose-olm-rukpak-rhel8, openshift4/ose-operator-lifecycle-manager +4
Fixes 5 records
Priority HIGH 82
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.99506 · Published 2024-07-01 · Partial fix · 8.7p1-38.el9_4.1, 8.7p1-12.el9_0.1 +5 CWE-364
Priority HIGH 81
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.89455 · Published 2024-04-04 · Partial fix · 1.21.9, 1.22.2 +1 CWE-400
Priority HIGH 70
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.93547 · Published 2023-12-18 · Partial fix · 0.40.2, 0.17.0 +2 CWE-354
Priority MEDIUM 40
A flaw was found in OpenShift's Telemeter.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00807 · Published 2024-06-05 · Partial fix · 4.17, v4.12.0-202408071159.p0.gc9592de.assembly.stream.el8 +4 CWE-290
Priority LOW 26
Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.01956 · Published 2024-03-09 · Partial fix · 4.0.1, 3.0.3 +1 CWE-409