Red Hat Security Advisory

RHSA-2024:4846

OpenShift Container Platform 4.13.46 security update

Released 2024-07-31 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.13 openshift4/ose-cloud-credential-operator, openshift4/ose-cluster-image-registry-operator, openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8 +3

Fixes 2 records

TI-2023-13855 CVE-2023-29483 · GHSA-3rq5-2g8h-59hc

eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to…

MEDIUM 64

eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" a…

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.01857 Published 2024-04-11 Partial fix · 0.35.2, 2.6.1 CWE-292

TI-2024-05657 CVE-2024-6104 · GHSA-v6v8-xj6m-xwqh

go-retryablehttp can leak basic auth credentials to log files

LOW 27

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00358 Published 2024-06-24 Partial fix · 0.7.7 CWE-532