Red Hat Security Advisory

RHSA-2024:6824

OpenShift Container Platform 4.16.14 security update

Released 2024-09-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.16 openshift4/ose-baremetal-rhel9-operator, openshift4/ose-docker-builder-rhel9, openshift4/ose-machine-config-rhel9-operator

TI-2024-16303 CVE-2024-24786 · GHSA-8r3f-844c-mc37

MEDIUM 41

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01262 Published 2024-03-05 Partial fix · 1.33.0 CWE-835

TI-2024-03473 CVE-2024-3727 · GHSA-6wvf-f2vw-3425

LOW 39

A flaw was found in the github.com/containers/image library.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.01279 Published 2024-05-09 Partial fix · 5.29.3, 5.30.1 +66 CWE-354

TI-2024-29397 CVE-2024-43803 · GHSA-pqfh-xh7w-7h3p

LOW 23

The Bare Metal Operator (BMO) implements a Kubernetes API for managing bare metal hosts in Metal3.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00574 Published 2024-09-03 Fixed in 0.8.0, 0.6.2 +1 CWE-200