Red Hat Security Advisory

RHSA-2024:7174

OpenShift Container Platform 4.16.15 bug fix and security update

Released 2024-10-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.16 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/cloud-network-config-controller-rhel9 +47

Fixes 4 records

TI-2024-16307 CVE-2024-24790 · GHSA-49gw-vxvf-fc2g

Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip

MEDIUM 53

The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01952 Published 2024-06-05 Partial fix · 1.21.11, 1.22.4

TI-2024-03473 CVE-2024-3727 · GHSA-6wvf-f2vw-3425

Containers/image: digest type does not guarantee valid type

LOW 39

A flaw was found in the github.com/containers/image library.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.01279 Published 2024-05-09 Partial fix · 5.29.3, 5.30.1 +66 CWE-354

TI-2023-24280 CVE-2023-45290 · GHSA-rr6r-cfgf-gc6h

Memory exhaustion in multipart form parsing in net/textproto and net/http

LOW 31

When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not app…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01165 Published 2024-03-05 Partial fix · 1.21.8, 1.22.1 CWE-770

TI-2024-29664 CVE-2024-44082

In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a…

LOW 21

In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, in which a crafted image could be used by an authenticated user to exploit undesired behaviors in qem…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00545 Published 2024-09-06 Partial fix CWE-862