Red Hat Security Advisory

RHSA-2024:5054

OpenShift Virtualization 4.16.1 Images security update

Released 2024-08-06 · Red Hat rating Important · View on Red Hat →

Fixed in

CNV 4.16 for RHEL 9 container-native-virtualization/hostpath-csi-driver-rhel9, container-native-virtualization/kubevirt-console-plugin-rhel9, container-native-virtualization/virt-cdi-cloner-rhel9

TI-2024-16303 CVE-2024-24786 · GHSA-8r3f-844c-mc37

MEDIUM 41

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01262 Published 2024-03-05 Partial fix · 1.33.0 CWE-835

TI-2024-27861 CVE-2024-41818 · GHSA-mpg4-rc92-vx8v

MEDIUM 40

fast-xml-parser is an open source, pure javascript xml parser.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00828 Published 2024-07-29 Partial fix · 4.4.1 CWE-400