Red Hat Security AdvisoryRHSA-2024:5444
OpenShift Container Platform 4.13.48 bug fix and security update
Released 2024-08-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.13 openshift4/cloud-network-config-controller-rhel8, openshift4/egress-router-cni-rhel8, openshift4/kubevirt-csi-driver-rhel8 +47
Fixes 5 records
Priority CRITICAL 93KEV
In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.02701 · Published 2024-06-10 · Partial fix · 4.19.316, 5.4.278 +6 CWE-416
Priority MEDIUM 55
A race condition vulnerability was discovered in how signals are handled by OpenSSH's server (sshd).
CVSS 3.1HIGH 7.0· Network · No auth · No interaction · EPSS 0.27935 · Published 2024-07-08 · Fixed in 8.7p1-38.el9_4.4, 8.7p1-12.el9_0.3 +5 CWE-364
Priority MEDIUM 53
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01952 · Published 2024-06-05 · Partial fix · 1.21.11, 1.22.4
Priority LOW 31
When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not app…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01165 · Published 2024-03-05 · Partial fix · 1.21.8, 1.22.1 CWE-770
Priority LOW 27
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00358 · Published 2024-06-24 · Partial fix · 0.7.7 CWE-532