Read the docs
Red Hat Security Advisory

RHSA-2024:5439

OpenShift Container Platform 4.15.28 bug fix and security update

Released 2024-08-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2024-24518 CVE-2024-36971 · GHSA-3rf3-8wmx-cm8q

net: fix __dst_negative_advice() race

Priority CRITICAL 93KEV

In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02701 Published 2024-06-10 Partial fix · 4.19.316, 5.4.278 +6 CWE-416
TI-2024-16307 CVE-2024-24790 · GHSA-49gw-vxvf-fc2g

Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip

Priority MEDIUM 53

The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01952 Published 2024-06-05 Partial fix · 1.21.11, 1.22.4
TI-2023-24280 CVE-2023-45290 · GHSA-rr6r-cfgf-gc6h

Memory exhaustion in multipart form parsing in net/textproto and net/http

Priority LOW 31

When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not app…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01165 Published 2024-03-05 Partial fix · 1.21.8, 1.22.1 CWE-770