Read the docs
Red Hat Security Advisory

RHSA-2024:4484

OpenShift Container Platform 4.13.45 bug fix and security update

Released 2024-07-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 5 records

Priority HIGH 82

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.99506 Published 2024-07-01 Partial fix · 8.7p1-38.el9_4.1, 8.7p1-12.el9_0.1 +5 CWE-364
TI-2023-24278 CVE-2023-45288 · GHSA-4v7x-pqxf-cx7m

HTTP/2 CONTINUATION flood in net/http

Priority HIGH 81

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.89455 Published 2024-04-04 Partial fix · 1.21.9, 1.22.2 +1 CWE-400
Priority HIGH 70

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.93547 Published 2023-12-18 Partial fix · 0.40.2, 0.17.0 +2 CWE-354