Red Hat Security Advisory

RHSA-2024:5442

OpenShift Container Platform 4.15.28 packages and security update

Released 2024-08-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.15 cri-o-1.28.9-5.rhaos4.15.git674ed4c.el8, cri-o-1.28.9-5.rhaos4.15.git674ed4c.el9, openshift-4.15.0-202408091502.p0.g396c881.assembly.stream.el8 +22

Fixes 2 records

TI-2024-16307 CVE-2024-24790 · GHSA-49gw-vxvf-fc2g

Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip

MEDIUM 53

The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01952 Published 2024-06-05 Partial fix · 1.21.11, 1.22.4

TI-2023-24280 CVE-2023-45290 · GHSA-rr6r-cfgf-gc6h

Memory exhaustion in multipart form parsing in net/textproto and net/http

LOW 31

When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not app…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01165 Published 2024-03-05 Partial fix · 1.21.8, 1.22.1 CWE-770