Red Hat Security AdvisoryRHSA-2024:5433
OpenShift Container Platform 4.14.35 security update
Released 2024-08-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.14 openshift4/cloud-network-config-controller-rhel8, openshift4/driver-toolkit-rhel9, openshift4/egress-router-cni-rhel8 +47
Fixes 8 records
Priority CRITICAL 93KEV
In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.02701 · Published 2024-06-10 · Partial fix · 4.19.316, 5.4.278 +6 CWE-416
Priority HIGH 72
OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02026 · Published 2023-11-10 · Partial fix · 0.46.0 CWE-770
Priority HIGH 70
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.93547 · Published 2023-12-18 · Partial fix · 0.40.2, 0.17.0 +2 CWE-354
Priority MEDIUM 53
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01952 · Published 2024-06-05 · Partial fix · 1.21.11, 1.22.4
Priority LOW 36
OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01614 · Published 2023-10-12 · Partial fix · 0.44.0 CWE-770
Priority LOW 31
When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not app…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01165 · Published 2024-03-05 · Partial fix · 1.21.8, 1.22.1 CWE-770
Priority LOW 27
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00358 · Published 2024-06-24 · Partial fix · 0.7.7 CWE-532
Priority LOW 26
Jinja is an extensible templating engine.
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00979 · Published 2024-05-06 · Partial fix · 3.1.4 CWE-79
THREATIST.IORead the docs