Red Hat Security Advisory

RHSA-2024:4613

OpenShift Container Platform 4.16.4 bug fix and security update

Released 2024-07-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.16 openshift4/egress-router-cni-rhel9, openshift4/network-tools-rhel9, openshift4/ose-agent-installer-api-server-rhel9 +35

Fixes 6 records

TI-2023-26623 CVE-2023-48795 · GHSA-45x7-px36-x8w8

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6…

HIGH 70

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.93547 Published 2023-12-18 Partial fix · 0.40.2, 0.17.0 +2 CWE-354

TI-2024-05949 CVE-2024-6409 · GHSA-79hg-h6r6-64mm

Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9

MEDIUM 55

A race condition vulnerability was discovered in how signals are handled by OpenSSH's server (sshd).

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.27935 Published 2024-07-08 Fixed in 8.7p1-38.el9_4.4, 8.7p1-12.el9_0.3 +5 CWE-364

TI-2024-16307 CVE-2024-24790 · GHSA-49gw-vxvf-fc2g

Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip

MEDIUM 53

The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01952 Published 2024-06-05 Partial fix · 1.21.11, 1.22.4

TI-2024-03473 CVE-2024-3727 · GHSA-6wvf-f2vw-3425

Containers/image: digest type does not guarantee valid type

LOW 39

A flaw was found in the github.com/containers/image library.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.01279 Published 2024-05-09 Partial fix · 5.29.3, 5.30.1 +66 CWE-354

TI-2024-16305 CVE-2024-24788 · GHSA-2jwv-jmq4-4j3r

Malformed DNS message can cause infinite loop in net

LOW 28

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00993 Published 2024-05-08 Partial fix · 1.22.3 CWE-835

TI-2024-05657 CVE-2024-6104 · GHSA-v6v8-xj6m-xwqh

go-retryablehttp can leak basic auth credentials to log files

LOW 27

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00358 Published 2024-06-24 Partial fix · 0.7.7 CWE-532