Red Hat Security AdvisoryRHSA-2024:5200
OpenShift Container Platform 4.12.63 bug fix and security update
Released 2024-08-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.12 openshift4/ose-cloud-credential-operator, openshift4/ose-cluster-image-registry-operator, openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8 +4
Fixes 4 records
Priority CRITICAL 93KEV
In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.02701 · Published 2024-06-10 · Partial fix · 4.19.316, 5.4.278 +6 CWE-416
Priority HIGH 70
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.93547 · Published 2023-12-18 · Partial fix · 0.40.2, 0.17.0 +2 CWE-354
Priority MEDIUM 40
A flaw was found in OpenShift's Telemeter.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00807 · Published 2024-06-05 · Partial fix · 4.17, v4.12.0-202408071159.p0.gc9592de.assembly.stream.el8 +4 CWE-290
Priority LOW 27
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00358 · Published 2024-06-24 · Partial fix · 0.7.7 CWE-532
THREATIST.IORead the docs